Skip to content

DNS

Jump to bottom
Endi S. Dewata edited this page Sep 14, 2023 · 1 revision

Table of Contents

Displaying DNS Records

To display DNS records on default DNS server: 

$ nslookup -type=SRV _ldap._tcp.example.com
$ dig SRV _ldap._tcp.example.com
$ dig SRV _ldap._tcp.example.com +short

To display DNS records on local DNS server: 

$ dig _kerberos.example.com TXT @localhost
$ dig _ldap._tcp.example.com SRV @localhost

DNSMasq

To restart DNSMasq: 

$ systemctl restart dnsmasq.service

Examples

ACME 

_acme-challenge.example.com.        IN TXT "<value>"

LDAP 

_ldap._tcp.example.com.             IN SRV 0 100 389 ldap.example.com.

See also LDAP.

Kerberos 

_kerberos                           IN TXT EXAMPLE.COM

_kerberos._tcp.EXAMPLE.COM.         IN SRV 0 100  88 kdc.example.com.
_kerberos._udp.EXAMPLE.COM.         IN SRV 0 100  88 kdc.example.com.
_kerberos-master._tcp.EXAMPLE.COM.  IN SRV 0 100  88 kdc.example.com.
_kerberos-master._udp.EXAMPLE.COM.  IN SRV 0 100  88 kdc.example.com.
_kerberos-adm._tcp.EXAMPLE.COM.     IN SRV 0 100 749 kdc.example.com.
_kerberos-adm._udp.EXAMPLE.COM.     IN SRV 0 100 749 kdc.example.com.
_kpasswd._tcp.EXAMPLE.COM.          IN SRV 0 100 464 kdc.example.com.
_kpasswd._udp.EXAMPLE.COM.          IN SRV 0 100 464 kdc.example.com.

See also Kerberos.

Samba 

gc._msdcs                           IN CNAME samba.example.com.
_gc._tcp                            IN SRV 0 100 3268 samba.example.com.
_ldap._tcp.gc._msdcs                IN SRV 0 100 389 samba.example.com.

Installing Bind 

$ dnf -y install bind bind-utils

Configuring Bind Logging

Prepare the log folder: 

$ mkdir /var/log/named
$ chown named.named /var/log/named

Edit /etc/named.conf as follows: 

logging {
    channel default_file {
        file "/var/log/named/default.log" versions 3 size 5m;
        severity dynamic;
        print-time yes;
    };
    channel general_file {
        file "/var/log/named/general.log" versions 3 size 5m;
        severity dynamic;
        print-time yes;
    };
    channel database_file {
        file "/var/log/named/database.log" versions 3 size 5m;
        severity dynamic;
        print-time yes;
    };
    channel security_file {
        file "/var/log/named/security.log" versions 3 size 5m;
        severity dynamic;
        print-time yes;
    };
    channel config_file {
        file "/var/log/named/config.log" versions 3 size 5m;
        severity dynamic;
        print-time yes;
    };
    channel resolver_file {
        file "/var/log/named/resolver.log" versions 3 size 5m;
        severity dynamic;
        print-time yes;
    };
    channel xfer-in_file {
        file "/var/log/named/xfer-in.log" versions 3 size 5m;
        severity dynamic;
        print-time yes;
    };
    channel xfer-out_file {
        file "/var/log/named/xfer-out.log" versions 3 size 5m;
        severity dynamic;
        print-time yes;
    };
    channel notify_file {
        file "/var/log/named/notify.log" versions 3 size 5m;
        severity dynamic;
        print-time yes;
    };
    channel client_file {
        file "/var/log/named/client.log" versions 3 size 5m;
        severity dynamic;
        print-time yes;
    };
    channel unmatched_file {
        file "/var/log/named/unmatched.log" versions 3 size 5m;
        severity dynamic;
        print-time yes;
    };
    channel queries_file {
        file "/var/log/named/queries.log" versions 3 size 5m;
        severity dynamic;
        print-time yes;
    };
    channel network_file {
        file "/var/log/named/network.log" versions 3 size 5m;
        severity dynamic;
        print-time yes;
    };
    channel update_file {
        file "/var/log/named/update.log" versions 3 size 5m;
        severity dynamic;
        print-time yes;
    };
    channel dispatch_file {
        file "/var/log/named/dispatch.log" versions 3 size 5m;
        severity dynamic;
        print-time yes;
    };
    channel dnssec_file {
        file "/var/log/named/dnssec.log" versions 3 size 5m;
        severity dynamic;
        print-time yes;
    };
    channel lame-servers_file {
        file "/var/log/named/lame-servers.log" versions 3 size 5m;
        severity dynamic;
        print-time yes;
    };

    category default { default_file; };
    category general { general_file; };
    category database { database_file; };
    category security { security_file; };
    category config { config_file; };
    category resolver { resolver_file; };
    category xfer-in { xfer-in_file; };
    category xfer-out { xfer-out_file; };
    category notify { notify_file; };
    category client { client_file; };
    category unmatched { unmatched_file; };
    category queries { queries_file; };
    category network { network_file; };
    category update { update_file; };
    category dispatch { dispatch_file; };
    category dnssec { dnssec_file; };
    category lame-servers { lame-servers_file; };
};

Starting Bind Service

To start Bind: 

$ systemctl start named

To stop Bind: 

$ systemctl stop named

See Also

Tip
 To find a page in the Wiki, enter the keywords in search field, press Enter, then click Wikis.
Clone this wiki locally