DNS server tutorial on my CentOS6.4 Linux server

Ask Question Forum:

Model Library:2025-02-08 Updated:A.I. model is online for auto reply question page

Show

ASK RECENT

DNS server tutorial on my CentOS6.4 Linux server

Asked by duncanb7

at 2024-07-25 06:55:20

Point:500 Replies:9 POST_ID:828609USER_ID:11059

Topic:

Apache Web Server;Domain Name Service (DNS);Linux Networking

Recently I have been studying DNS server setup , now it seems more understanding
of DNS server function which is transfer from domain name to IP address when
we type the domain name of website on the broswer

Now I am using 8.8.8.8 Google public DNS as DNS setting on my ISP broadband connection, and I can go to any website around the world that is of course.

So I try to change the previous DNS setting on my window 7 from 8.8.8.8 to 212.1.210.209 which
is my remote VPS server and re-connection my ISP and then I only go to my website, for example, www.mysite.com(212.1.210.209) [Notic: and my nameserver IP is also same as 219.210.209(ns1.mysite.com)], of course other world wide website I can NOT go to since
the DNS setting IP is changing to my nameserver

Now I want to do a simple test, could I set www.facebook.com domain transfer to its IP on mynameserver(212.1.210.209) , So besides go to my wbesite and also able to go to www.facebook.com if DNS setting is changed to 212.1.210.209(my namserver)

I have google a lot about DNS setup on Linux such as follows
http://www.aboutdebian.com/dns.htm
http://ostechnix.wordpress.com/2013/01/25/setup-dns-server-step-by-step-in-centos-6-3-rhel-6-3-scientific-linux-6-3-3/
http://www.icann.org/en/resources/compliance/complaints/transfer
http://brennan.id.au/08-Domain_Name_System_BIND.html

but I still not understand too much

COuld you help me to do the simple test about go to www.facebook.com on my broswer if DNS setting is set at my nameserver(202.1.210.209) ?
(Notice: Host Name : www.facebook.com , IP Address : 69.171.242.27)
(Notice: My server/nameserver is at US, and my broswer and I am at HongkOng )

How to change file on /etc/named.conf to complete the test ?

Please advise (hope you understand my question easily)

Duncan

Author: duncanb7 replied at 2024-07-31 05:03:02

Thanks for all of your reply

Assisted Solution

Expert: Duncan Roe replied at 2024-07-27 05:04:34

125 points EXCELLENT

Perhaps I should expand on the above: dullstar is the gateway node. It has a direct connection to the ISP modem. It performs firewalling and NAT for the other nodes, and is a DHCP for one of the LANs. So one of its NICs does have an external IP address (sometimes it has an internal-looking address that the ISP NAT's, but you get the idea)

Expert: Duncan Roe replied at 2024-07-27 04:56:05

I am familiar with Windows TCP configuration.
212.1.210.209 BELONGS TO SOMEONE ELSE. DO NOT USE IT. Unless, of course, you really are the legitimate owner. From now on, I assume you are. telnet 212.1.210.209 53 does in fact get a connection, so there is a DNS server there. Whether it works or not is another question. If you don't have forwarding as I suggested in #a39359805, it will only work if it downloads a zone file for every new query it can't otherwise handle.
The example I posted does work in my internal network.

Assisted Solution

Expert: skullnobrains replied at 2024-07-27 03:45:25

125 points EXCELLENT

So what action I should do at the following files
/etc/named.conf , /etc/resolv.conf and zone file of facebook at /var/named/ ?

and I need to restart named.conf, Right ?
and I need to create zone file of facebook.com at /var/named/facebook.com.db, for example, Right ?

read the first part of my previous post : you need to set up your dns server as a forwarder.

named.conf : query your server remotely. if the answer is REJECTED, you have an acl that limits which client can query yuor server

resolv.conf : not related to server operations

zone file of facebook : you do not need one : your server will send the query to facebook's NS servers on your behalf and provide you the answer. if you want to hack by changing facebook's ip, let me know, but that's a different question that will not be solved wiht a zone file.

restart : "rndc reload" should be enough but a restart will not be onger in your case, and give better debug info if needed

Only both facebook.com and myite.com can go to internet, and Other websites can NOT go to
internet since only both DNS zone record file of facebook and mysite are at the server(212.1.210.209)

not sure i understand that part, but you can instruct bind to only answer to some queries and not others. facebook will require a huge bunch of domains other than facebook.com in order to work, and these domains change often. if you want to only allow facebook access from a browser, doing it through the dns in that way is going to be a pain, and any user with decent network knowlege will be able to bypass this easily

Author: duncanb7 replied at 2024-07-26 22:35:36

Dear duncan_roe,

this tutorial is try to replacing 8.8.8.8 DNS role by other DNS IP address(such as my 212.1.210.209) or do the same DNS function provided by Google's public DNS(8.8.8.8)
For example, even you(duncan_roe) also can go to set 212.1.210.209 as DNS setting for ISP connection at somewhere (or European) and
you only can go to facebook.com and mysite.com only , others website can not go to if
I setup everything for DNS at my server 212.1.210.x correctly

So internal LAN address can NOT do that since it is just used by internal users

Author: duncanb7 replied at 2024-07-26 22:25:55

I repeat what I want:
====================
-I set my DNS setting on Window 7 internet connection is
212.1.210.209 instead of using 8.8.8.8 , please read http://windows.microsoft.com/en-us/windows7/change-tcp-ip-settings

-212.1.2110.209 again is my domain and nameserver ns1 and ns2.mysite.com 's IP
so it is internet IP so that you type it in broswer and should or able to go to my website directly

So When I try www.facebook.com on my chrome browser, the broswer will
search DNS server 212.1.210.219 first to resolve its final facebook.com 's IP.

So what action I should do at the following files
/etc/named.conf , /etc/resolv.conf and zone file of facebook at /var/named/ ?

and I need to restart named.conf, Right ?
and I need to create zone file of facebook.com at /var/named/facebook.com.db, for example, Right ?

THe final target is my Linux server(212.1.210.209) will provide final IP of facebook.com to caller from my computer Window 7 and the chrome broswer can go to facebook.com website directly.

Only both facebook.com and myite.com can go to internet, and Other websites can NOT go to
internet since only both DNS zone record file of facebook and mysite are at the server(212.1.210.209)

Hope you understand my question and don't mix up with LAN internal Address such as 192 or 198.x.x.x

Please advise
Duncan

Assisted Solution

Expert: Duncan Roe replied at 2024-07-26 18:55:38

125 points EXCELLENT

This example may do what you want. It's my home DNS, which serves addresses for the 2 local LANs mshome.net 10.255.255.xxx and local.net 192.168.0.xxx. Any other query is forwarded to one of the ISP's name servers 198.142.235.14, 211.29.132.12 or 198.142.0.51

acl "locals" { 10.255.255.0/24; 192.168.0.0/24; 127.0.0.0/8; };options {  directory "/var/named";  forward only;  forwarders { 198.142.235.14; 211.29.132.12; 198.142.0.51; };  allow-transfer { none; };  allow-query { "locals"; };  allow-recursion { "locals"; };};key DHCP_UPDATER {  algorithm HMAC-MD5;  secret jO0nPMDANBr0xcXWhZCw6w==;};zone "mshome.net" IN {  type master;  file "mshome.net";  forwarders { };  allow-query { "locals"; };  allow-transfer { "locals"; };  allow-update { key DHCP_UPDATER; };};zone "0.168.192.in-addr.arpa" IN {  type master;  file "ten.emohsm";  forwarders { };  allow-query { "locals"; };  allow-transfer { "locals"; };  allow-update { key DHCP_UPDATER; };};zone "local.net" IN {  type master;  file "local.net";  forwarders { };  allow-query { "locals"; };};zone "255.255.10.in-addr.arpa" IN {  type master;  file "ten.lacol";  forwarders { };  allow-query { "locals"; };};

1:2:3:4:5:6:7:8:9:10:11:12:13:14:15:16:17:18:19:20:21:22:23:24:25:26:27:28:29:30:31:32:33:34:35:36:37:38:39:40:41:42:43:

Select All Code

Expert: Duncan Roe replied at 2024-07-26 17:44:40

202.1.210.209 resolves to sta-2-209.speedway.ne.jp. Is that you?
If you are using 202.1.210.xxx as an internal network, you should immediately change to using one of the address ranges reserved for private use e.g. 192.168.xxx.xxx or 10.xxx.xxx.xxx (there's also a 3rd range that I don't remember right now).

Accepted Solution

Expert: skullnobrains replied at 2024-07-26 08:28:41

125 points EXCELLENT

i think i understand.

if you want your dns server to answer to queries such as "facebook.com IN A", you need to set it up as a forwarder. most DNS servers can act both as a forwarder and host specific zones

then you need to understand that opening a generic DNS forwarder to the WAN is unacceptable so you'd need firewall rules in order to prevent other people to query your server. also note that using a dns server on the other side of the world is sub-optimal to say the least.

----

the proper setting would be somethig like this, assuming that your site is www.xx.yy.com

- let the folks at yy.com know that you own xx.yy.com so they will insert a record pointing to your server for "xx.yy.com IN NS"

- create a zone for xx.yy.com. on your DNS server with a record for "www IN A"

- use your usual DNS server. it will be able to resolve www.xx.yy.com if the above steps were performed successfully

it would be easier to give better advice with the real DNS name

you can determine who currently hosts the DNS servers for a domain by using an NS dns query

新聞財經娛樂♬資訊 News Economy

About Us|Service|Pricing

Stock Index全球即時指數期貨:

&nbps;

News即時新聞:↓

News即時新聞:↑

On Balance Volume (OBV):

Youtube Video♬ Sharing by members:↓

Youtube Video♬ Sharing by members:↑

Ask Question Forum:

DNS server tutorial on my CentOS6.4 Linux server

Your Information

Members/Profolio