Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > comp.os.linux.networking > #5221
| From | Jim Jackson <jj@franjam.org.uk> |
|---|---|
| Newsgroups | comp.os.linux.networking |
| Subject | Re: local DNS server? |
| Date | 2022-12-18 15:15 +0000 |
| Organization | A noiseless patient Spider |
| Message-ID | <slrntpubl7.64c.jj@iridium.wf32df> (permalink) |
| References | <slrntpu63v.a8ql.BitTwister@wb.home.test> |
On 2022-12-18, Bit Twister <BitTwister@mouse-potato.com> wrote:
> I have an unregistered domain home.test.
>
> Anything special I should add/remove to /etc/named.conf so my DNS server
> does not send any of my local records upstream?
It would only do that if an "outside" DNS client queried your server
and asked for it. I run a local domain, and put this in my named.conf
acl our_nets { 127.0.0.0/8; 192.168.0.0/24; }
and further down ...
allow-recursion { our_nets; };
allow-query { our_nets; };
allow-transfer { our_nets; };
>
> /var/named/named.ca have all the a through m root servers.
>
> Do I need to add forwarders?
>
> Here are the changes between the original /etc/named.conf and changes
> I have made for
> $ named -v
> BIND 9.18.9 (Stable Release) <id:>
>
>
> $ dif /var/local/vorig/etc/named.conf_vinstall /etc/named.conf
> 0a1
>> // Changed by /local/bin/named_changes Sun Dec 18 07:37:56 AM CST 2022
> 12c13
>< listen-on-v6 port 53 { ::1; };
> ---
>> // listen-on-v6 port 53 { ::1; };
> 33c34,44
>< dnssec-validation yes;
> ---
>> /* Enable serving of DNSSEC related data - enable on both authoritative
>> and recursive servers DNSSEC aware servers */
>>
>> forwarders {
>> 208.67.222.222;
>> 8.8.8.8;
>> };
>>
>> // dnssec-enable no;
>> /* Enable DNSSEC validation on recursive servers */
>> dnssec-validation no;
> 58d68
>< include "/etc/named.root.key";
>
>
> snipped my zone/arpa directives.
>
Back to comp.os.linux.networking | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread
local DNS server? Bit Twister <BitTwister@mouse-potato.com> - 2022-12-18 07:41 -0600
Re: local DNS server? Jim Jackson <jj@franjam.org.uk> - 2022-12-18 15:15 +0000
Re: local DNS server? Marco Moock <mo01@posteo.de> - 2022-12-18 16:56 +0100
Re: local DNS server? Bit Twister <BitTwister@mouse-potato.com> - 2022-12-18 17:03 -0600
Re: local DNS server? "David W. Hodgins" <dwhodgins@nomail.afraid.org> - 2022-12-18 19:29 -0500
Re: local DNS server? Bit Twister <BitTwister@mouse-potato.com> - 2022-12-18 18:23 -0600
Re: local DNS server? Jim Jackson <jj@franjam.org.uk> - 2023-01-02 20:27 +0000
Re: local DNS server? Bit Twister <BitTwister@mouse-potato.com> - 2023-01-02 19:01 -0600
Re: local DNS server? Lew Pitcher <lew.pitcher@digitalfreehold.ca> - 2023-01-02 21:18 +0000
Re: local DNS server? "David W. Hodgins" <dwhodgins@nomail.afraid.org> - 2023-01-02 18:08 -0500
Re: local DNS server? Bit Twister <BitTwister@mouse-potato.com> - 2023-01-02 19:06 -0600
Re: local DNS server? Marco Moock <mo01@posteo.de> - 2022-12-18 16:57 +0100
Re: local DNS server? "David W. Hodgins" <dwhodgins@nomail.afraid.org> - 2022-12-18 15:04 -0500
Re: local DNS server? Bit Twister <BitTwister@mouse-potato.com> - 2022-12-18 17:44 -0600
Re: local DNS server? Marco Moock <nn263@uni-heidelberg.de> - 2022-12-19 13:01 +0100
Re: local DNS server? Bit Twister <BitTwister@mouse-potato.com> - 2022-12-18 16:35 -0600
Re: local DNS server? Marco Moock <nn263@uni-heidelberg.de> - 2022-12-19 13:32 +0100
csiph-web