Installation de BIND

Installation d'un serveur BIND

Présentation

BIND peut etre utilisé comme DNS de 4 facons différents :

• Serveur DNS maitre,
• Serveur DNS esclave,
• Serveur de cache DNS,
• Serveur DNS de forwarding.

Installation des packages

Pour installation des packages, exécuter la commande suivante:

 $ yum install -y bind

Configuration d'un serveur DNS maitre

La configuration du serveur DNS s'effectue en renseignant le fichier de configuration /etc/named.conf.

 // named.conf
 //
 // Provided by Red Hat bind package to configure the ISC BIND named(8) DNS
 // server as a caching only nameserver (as a localhost DNS resolver only).
 //
 // See /usr/share/doc/bind*/sample/ for example named configuration files.
 //
 // See the BIND Administrator's Reference Manual (ARM) for details about the
 // configuration located in /usr/share/doc/bind-{version}/Bv9ARM.html
 options {
       // change this to 'any'

listen-on port 53 { 127.0.0.1; }; listen-on-v6 port 53 { ::1; }; directory "/var/named"; dump-file "/var/named/data/cache_dump.db"; statistics-file "/var/named/data/named_stats.txt"; memstatistics-file "/var/named/data/named_mem_stats.txt";

       // change this to 'any'

allow-query { localhost; }; /* - If you are building an AUTHORITATIVE DNS server, do NOT enable recursion. - If you are building a RECURSIVE (caching) DNS server, you need to enable recursion. - If your recursive DNS server has a public IP address, you MUST enable access control to limit queries to your legitimate users. Failing to do so will cause your server to become part of large scale DNS amplification attacks. Implementing BCP38 within your network would greatly reduce such attack surface */ recursion yes; dnssec-enable yes;

       // change this to 'no'

dnssec-validation yes; /* Path to ISC DLV key */ bindkeys-file "/etc/named.iscdlv.key"; managed-keys-directory "/var/named/dynamic"; pid-file "/run/named/named.pid"; session-keyfile "/run/named/session.key";

 };
 logging {
       channel default_debug {
               file "data/named.run";
               severity dynamic;
       };
 };
 zone "." IN {

type hint; file "named.ca";

 };
 include "/etc/named.rfc1912.zones";
 include "/etc/named.root.key"; 

Liens utiles

Codingbee : Configuration BIND en serveur de cache