Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > comp.os.linux.networking > #5221

Re: local DNS server?

From Jim Jackson <jj@franjam.org.uk>
Newsgroups comp.os.linux.networking
Subject Re: local DNS server?
Date 2022-12-18 15:15 +0000
Organization A noiseless patient Spider
Message-ID <slrntpubl7.64c.jj@iridium.wf32df> (permalink)
References <slrntpu63v.a8ql.BitTwister@wb.home.test>

Show all headers | View raw


On 2022-12-18, Bit Twister <BitTwister@mouse-potato.com> wrote:
> I have an unregistered domain home.test.
>
> Anything special I should add/remove to /etc/named.conf so my DNS server
> does not send any of my local records upstream?

It would only do that if an "outside" DNS client queried your server 
and asked for it. I run a local domain, and put this in my named.conf

acl our_nets { 127.0.0.0/8; 192.168.0.0/24; }

and further down ...

        allow-recursion { our_nets; };

        allow-query { our_nets; };

        allow-transfer { our_nets; };


>
> /var/named/named.ca  have all the a through m root servers.
>
> Do I need to add forwarders?
>
> Here are the changes between the original /etc/named.conf and changes
> I have made for
> $ named -v
> BIND 9.18.9 (Stable Release) <id:>
>
>
> $ dif /var/local/vorig/etc/named.conf_vinstall /etc/named.conf
> 0a1
>> // Changed by /local/bin/named_changes  Sun Dec 18 07:37:56 AM CST 2022
> 12c13
><       listen-on-v6 port 53 { ::1; };
> ---
>> // listen-on-v6 port 53 { ::1; };
> 33c34,44
><       dnssec-validation yes;
> ---
>> /* Enable serving of DNSSEC related data - enable on both authoritative
>> and recursive servers DNSSEC aware servers */
>>
>> forwarders {
>>   208.67.222.222;
>>   8.8.8.8;
>> };
>>
>> // dnssec-enable no;
>> /* Enable DNSSEC validation on recursive servers */
>> dnssec-validation no;
> 58d68
>< include "/etc/named.root.key";
>
>
> snipped my zone/arpa directives.
>

Back to comp.os.linux.networking | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread


Thread

local DNS server? Bit Twister <BitTwister@mouse-potato.com> - 2022-12-18 07:41 -0600
  Re: local DNS server? Jim Jackson <jj@franjam.org.uk> - 2022-12-18 15:15 +0000
    Re: local DNS server? Marco Moock <mo01@posteo.de> - 2022-12-18 16:56 +0100
    Re: local DNS server? Bit Twister <BitTwister@mouse-potato.com> - 2022-12-18 17:03 -0600
      Re: local DNS server? "David W. Hodgins" <dwhodgins@nomail.afraid.org> - 2022-12-18 19:29 -0500
    Re: local DNS server? Bit Twister <BitTwister@mouse-potato.com> - 2022-12-18 18:23 -0600
      Re: local DNS server? Jim Jackson <jj@franjam.org.uk> - 2023-01-02 20:27 +0000
        Re: local DNS server? Bit Twister <BitTwister@mouse-potato.com> - 2023-01-02 19:01 -0600
      Re: local DNS server? Lew Pitcher <lew.pitcher@digitalfreehold.ca> - 2023-01-02 21:18 +0000
        Re: local DNS server? "David W. Hodgins" <dwhodgins@nomail.afraid.org> - 2023-01-02 18:08 -0500
        Re: local DNS server? Bit Twister <BitTwister@mouse-potato.com> - 2023-01-02 19:06 -0600
  Re: local DNS server? Marco Moock <mo01@posteo.de> - 2022-12-18 16:57 +0100
    Re: local DNS server? "David W. Hodgins" <dwhodgins@nomail.afraid.org> - 2022-12-18 15:04 -0500
      Re: local DNS server? Bit Twister <BitTwister@mouse-potato.com> - 2022-12-18 17:44 -0600
      Re: local DNS server? Marco Moock <nn263@uni-heidelberg.de> - 2022-12-19 13:01 +0100
    Re: local DNS server? Bit Twister <BitTwister@mouse-potato.com> - 2022-12-18 16:35 -0600
      Re: local DNS server? Marco Moock <nn263@uni-heidelberg.de> - 2022-12-19 13:32 +0100

csiph-web