Saturday, January 8, 2011

DNS Server di Slackware

  1. 1. Konfigurasi DNS Server
    1. a. Pemasangan IP Address

Cek ethernet

root@plnsbam:~# ifconfig

root@plnsbam:~# ifconfig eth0 up

Isi Ip address

root@plnsbam:~# nano /etc/rc.d/rc.inet1.conf

# Config information for eth0:

IPADDR[0]=”202.45.67.13

NETMASK[0]=”255.255.255.192

# Config information for eth1:

IPADDR[0]=”"

NETMASK[0]=”"

# Default gateway IP address:

GATEWAY=”202.45.67.13″

Restart Ethernet

root@plnsbam:~# /etc/rc.d/rc.inet1 restart
  1. b. Konfigurasi bind

Cek paket bind

root@plnsbam:/#ls /var/log/packages/ | grep bind

bind-9.4.3_P2-i486-2

kdebindings-4.2.4-i486-1

/var/named/caching-example/named.ca
/var/named/caching-example/named.local
/var/named/caching-example/localhost.zone
/etc/rc.d/rc.bind
/etc/named.conf

Pindahin file bind naik satu level directory

mv /var/named/caching-example/* /var/named/

root@bukitasam:~# ls /var/named

/var/named/named.ca
/var/named/named.local
/var/named/localhost.zone
/var/named/caching-example

Edit file named.conf tambahin baris ini

zone "plnsbam.com" IN {
type master;
file "/var/named/plnsbam.zone";
allow-update { none; };
};
zone "67.45.202.in-addr.arpa" IN {
type master;
file "/var/named/202.45.67.zone";
allow-update { none; };
};

Copykan beberapa file named menjadi zone/db dari domain dan ip

root@plnsbam:~# cd /var/named

root@plnsbam:~# cp localhost.zone plnsbam.zone

root@plnsbam:~# cp named.local 202.45.67.zone

root@plnsbam:~# ls

caching-example named.ca named.local localhost.zone plnsbam.zone 202.45.67.zone

Edit file zone dari domain ubah baris perintah seperti ini

root@plnsbam:~# nano /var/named/plnsbam.zone

$TTL 86400

$ORIGIN plnsbam.com.

@ IN SOA ns.plnsbam.com root.plnsbam.com (

42 ; serial (d. adams)

3H ; refresh

15M ; retry

1W ; expiry

1D ); minimum

@ IN NS ns.plnsbam.com.

@ IN A 202.45.67.13

ns.plnsbam.com. IN A 202.45.67.13

www.plnsbam.com. IN A 202.45.67.13

mx.plnsbam.com. IN A 202.45.67.10

mta1.plnsbam.com. IN CNAME mail.plnsbam.com.

mail.plnsbam.com. IN CNAME mx.plnsbam.com.

plnsbam.com. IN MX 10 mail.plnsbam.com.

Ctt:

mx.plnsbam.com. = mx = mail exchange

mta1.plnsbam.com. IN CNAME mail.plnsbam.com. = mengalihkan nama mta1.plnsbam.com ke mail.plnsbam.com

mail.plnsbam.com. IN CNAME mx.plnsbam.com. = mengartikan bahwa mail.plnsbam.com = mx.plnsbam.com

plnsbam.com. IN MX 10 mail.plnsbam.com. = MX-nya = 10 = lama waktu untuk akses relay ke mail.plnsbam.com.

edit file ip.zone

root@plnsbam:~# nano /var/named/202.45.67.zone

$TTL 86400

@ IN SOA ns.plnsbam.com. root.plnsbam.com. (

1997022700 ; Serial

28800 ; Refresh

14400 ; Retry

3600000 ; Expire

86400 ) ; Minimum

@ IN NS plnsbam.com.

13 IN PTR www.plnsbam.com.

10 IN PTR mx.plnsbam.com.

Copy file RNDC-CONFGEN

root@plnsbam:~# rndc-confgen

……….

key “rndc-key” {

algorithm hmac-md5;

secret “JNDHF4c7BY8xpzGsYoC3+Q==”;

};

controls {

inet 127.0.0.1 port 953

allow { 127.0.0.1; } keys { “rndc-key”; };

};

Copykan ke file ini.

root@plnsbam:~# cat rndc-confgen >> /etc/named.conf

root@plnsbam:~# nano /etc/named.conf

……….

key “rndc-key” {

algorithm hmac-md5;

secret “JNDHF4c7BY8xpzGsYoC3+Q==”;

};

controls {

inet 127.0.0.1 port 953

allow { 127.0.0.1; } keys { “rndc-key”; };

};

copy file rndc.key menjadi file rndc.conf

root@plnsbam:~# cp /etc/rndc.key /etc/rndc.conf

Copy rndc-confgen ke rndc.conf dan ambil baris ini

root@plnsbam:~# cat rndc-confgen >> /etc/rndc.conf

options {

default-key “rndc-key”;

default-server 127.0.0.1;

default-port 953;

};

Sehingga script rndc.conf

key “rndc-key” {

algorithm hmac-md5;

secret “0z5PHh0vUDdeY75ZJgbnyg==”;

};

options {

default-key “rndc-key”;

default-server 127.0.0.1;

default-port 953;

};

Ubah akses permission service bind dan jalankan

root@plnsbam:~# chmod +x /etc/rc.d/rc.bind

root@plnsbam:~# /etc/rc.d/rc.bind start

Cek menggunakan perintah nslookup

root@plnsbam:~# nslookup

> www.plnsbam.com

Server: 202.45.67.13

Address: 202.45.67.13#53

Name: www.plnsbam.com

Address: 202.45.67.13

> plnsbam.com

Server: 202.45.67.13

Address: 202.45.67.13#53

Name: plnsbam.com

Address: 202.45.67.13

> ns.plnsbam.com

Server: 202.45.67.13

Address: 202.45.67.13#53

Name: ns.plnsbam.com

Address: 202.45.67.13

> mx.plnsbam.com

Server: 202.45.67.13

Address: 202.45.67.13#53

Name: mx.plnsbam.com

Address: 202.45.67.10

> mta1.plnsbam.com

Server: 202.45.67.13

Address: 202.45.67.13#53

mta1.plnsbam.com canonical name = mail.plnsbam.com.

mail.plnsbam.com canonical name = mx.plnsbam.com.

Name: mx.plnsbam.com

Address: 202.45.67.10

> mail.plnsbam.com

Server: 202.45.67.13

Address: 202.45.67.13#53

mail.plnsbam.com canonical name = mx.plnsbam.com.

Name: mx.plnsbam.com

Address: 202.45.67.10

> 202.45.67.13

Server: 202.45.67.13

Address: 202.45.67.13#53

13.67.45.202.in-addr.arpa name = www.plnsbam.com.

> 202.45.67.10

Server: 202.45.67.13

Address: 202.45.67.13#53

10.67.45.202.in-addr.arpa name = mx.plnsbam.com.


Gunakan perintah dig untuk melihat keterangan lebih lengkap

root@plnsbam:~# dig www.plnsbam.com

; <<>> DiG 9.4.3-P3 <<>> www.plnsbam.com

;; global options: printcmd

;; Got answer:

;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 5633

;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 1, ADDITIONAL: 1

;; QUESTION SECTION:

;www.plnsbam.com. IN A

;; ANSWER SECTION:

www.plnsbam.com. 86400 IN A 202.45.67.13

;; AUTHORITY SECTION:

plnsbam.com. 86400 IN NS ns.plnsbam.com.

;; ADDITIONAL SECTION:

ns.plnsbam.com. 86400 IN A 202.45.67.13

;; Query time: 0 msec

;; SERVER: 202.45.67.13#53(202.45.67.13)

;; WHEN: Sat Oct 30 15:43:38 2010

;; MSG SIZE rcvd: 82

root@plnsbam:~# dig ns.plnsbam.com

; <<>> DiG 9.4.3-P3 <<>> ns.plnsbam.com

;; global options: printcmd

;; Got answer:

;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 57961

;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:

;ns.plnsbam.com. IN A

;; ANSWER SECTION:

ns.plnsbam.com. 86400 IN A 202.45.67.13

;; AUTHORITY SECTION:

plnsbam.com. 86400 IN NS ns.plnsbam.com.

;; Query time: 0 msec

;; SERVER: 202.45.67.13#53(202.45.67.13)

;; WHEN: Sat Oct 30 15:44:24 2010

;; MSG SIZE rcvd: 62

root@plnsbam:~# dig mx.plnsbam.com

; <<>> DiG 9.4.3-P3 <<>> mx.plnsbam.com

;; global options: printcmd

;; Got answer:

;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 2905

;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 1, ADDITIONAL: 1

;; QUESTION SECTION:

;mx.plnsbam.com. IN A

;; ANSWER SECTION:

mx.plnsbam.com. 86400 IN A 202.45.67.10

;; AUTHORITY SECTION:

plnsbam.com. 86400 IN NS ns.plnsbam.com.

;; ADDITIONAL SECTION:

ns.plnsbam.com. 86400 IN A 202.45.67.13

;; Query time: 0 msec

;; SERVER: 202.45.67.13#53(202.45.67.13)

;; WHEN: Sat Oct 30 15:45:14 2010

;; MSG SIZE rcvd: 81

root@plnsbam:~# dig mail.mta1.plnsbam.com

; <<>> DiG 9.4.3-P3 <<>> mail.mta1.plnsbam.com

;; global options: printcmd

;; Got answer:

;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 32657

;; flags: qr aa rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 1, ADDITIONAL: 1

;; QUESTION SECTION:

;mail.mta1.plnsbam.com. IN A

;; ANSWER SECTION:

mail.mta1.plnsbam.com. 86400 IN CNAME mx.plnsbam.com.

mx.plnsbam.com. 86400 IN A 202.45.67.10

;; AUTHORITY SECTION:

plnsbam.com. 86400 IN NS ns.plnsbam.com.

;; ADDITIONAL SECTION:

ns.plnsbam.com. 86400 IN A 202.45.67.13

;; Query time: 0 msec

;; SERVER: 202.45.67.13#53(202.45.67.13)

;; WHEN: Sat Oct 30 15:46:18 2010

;; MSG SIZE rcvd: 105


sumber: www.palembang-slackers.org

No comments: