Kako konfigurirati DJBDNS na FreeBSD

Ta vadnica vam bo pokazala, kako konfigurirati storitev DNS, ki je enostavna za vzdrževanje, enostavna za konfiguriranje in ki je na splošno bolj varna kot klasična storitev BIND. Ta članek predvideva, da uporabljate VPS z nameščenim FreeBSD.

Za začetek odprite svoj terminal in namestite ta paket:

<ceph>[~]# pkg install djbdns                                              
Updating FreeBSD repository catalogue...
FreeBSD repository is up-to-date.
All repositories are up-to-date.
The following 3 packages will be affected (of 0 checked):

New packages to be INSTALLED:
djbdns: 1.05_20,1
ucspi-tcp: 0.88_2
daemontools: 0.76_17

The process will require 1 MB more space.
251 KB to be downloaded.

Proceed with this action? [y/N]: y
Fetching djbdns-1.05_20,1.txz: 100%  139 KB 142.4k/s    00:01    
Fetching ucspi-tcp-0.88_2.txz: 100%   62 KB  63.1k/s    00:01    
Fetching daemontools-0.76_17.txz: 100%   51 KB  51.7k/s    00:01    
Checking integrity... done (0 conflicting)
[1/3] Installing ucspi-tcp-0.88_2...
[1/3] Extracting ucspi-tcp-0.88_2: 100%
[2/3] Installing daemontools-0.76_17...
[2/3] Extracting daemontools-0.76_17: 100%
[3/3] Installing djbdns-1.05_20,1...
[3/3] Extracting djbdns-1.05_20,1: 100%

Namestitev bo samodejno namestila dodatne pakete ( daemontoolsin ucspi-tcp).

Ustvarite dva uporabnika gtinydnsin gdnslog. Začnite s prvim uporabnikom:

<ceph>[~]# adduser         
Username: gtinydns
Full name: gtinydns
Uid (Leave empty for default): 
Login group [gtinydns]: 
Login group is gtinydns. Invite gtinydns into other groups? []: 
Login class [default]: 
Shell (sh csh tcsh zsh rzsh nologin) [sh]: nologin
Home directory [/home/gtinydns]: 
Home directory permissions (Leave empty for default): 
Use password-based authentication? [yes]: 
Use an empty password? (yes/no) [no]: 
Use a random password? (yes/no) [no]: yes
Lock out the account after creation? [no]: 
Username   : gtinydns
Password   : <random>
Full Name  : gtinydns
Uid        : 1002
Class      : 
Groups     : gtinydns 
Home       : /home/gtinydns
Home Mode  : 
Shell      : /usr/sbin/nologin
Locked     : no
OK? (yes/no): yes
adduser: INFO: Successfully added (gtinydns) to the user database.
adduser: INFO: Password for (gtinydns) is: rTsada2131sa1Mg
Add another user? (yes/no): no
Goodbye!

Zdaj dodajte drugega uporabnika:

<ceph>[~]# adduser
Username: gdnslog
Full name: gdnslog
Uid (Leave empty for default):  
Login group [gdnslog]: 
Login group is gdnslog. Invite gdnslog into other groups? []: 
Login class [default]: 
Shell (sh csh tcsh zsh rzsh nologin) [sh]: nologin
Home directory [/home/gdnslog]: 
Home directory permissions (Leave empty for default): 
Use password-based authentication? [yes]: 
Use an empty password? (yes/no) [no]: 
Use a random password? (yes/no) [no]: yes
Lock out the account after creation? [no]: 
Username   : gdnslog
Password   : <random>
Full Name  : gdnslog
Uid        : 1003
Class      : 
Groups     : gdnslog 
Home       : /home/gdnslog
Home Mode  : 
Shell      : /usr/sbin/nologin
Locked     : no
OK? (yes/no): yes
adduser: INFO: Successfully added (gdnslog) to the user database.
adduser: INFO: Password for (gdnslog) is: jWsdad33aasdaFa0
Add another user? (yes/no): no
Goodbye!

Zaženite naslednji ukaz. Zamenjajte naslov IP z naslovom vašega strežnika Vultr.

<ceph>[~]# tinydns-conf gtinydns gdnslog /usr/local/etc/tinydns 108.61.100.100

Ta ukaz bo ustvaril imenike, datoteke in druge podimenike v /usr/local/etc/tinydns. Prav tako bo vnesel IP naslov VPS v /usr/local/etc/tinydns/env/IP.

Ustvarite imenik /service.

<ceph>[~]# mkdir /service

Uredite svojo /etc/rc.confdatoteko:

<ceph>[~]# ee /etc/rc.conf

... in in te vrstice:

svscan_enable="YES"
svscan_servicedir="/service"

Shranite konfiguracijo in zaženite svscanstoritev:

<ceph>[~]# /usr/local/etc/rc.d/svscan start
Starting svscan.

Nato pojdite v ta imenik:

 <ceph>[~]# cd /usr/local/etc/tinydns/root

Uredite datadatoteko:

 <ceph>[root]# ee data

... in dodajte nekaj podatkov DNS:

# domain1.com
Zdomain1.com:dns1.domain1.com.:ns.domain1.com.:2013101203:604800:86400:2419200:604800:3600
&domain1.com::dns1.domain1.com.:3600
&domain1.com::dns2.domain1.com.:3600

# MX
@domain1.com::mail1.domain1.com.:10:3600
@domain1.com::mail2.domain1.com.:30:3600

# IP's (A records)
=dns1.domain1.com:108.61.210.99:3600
=dns2.domain1.com:89.201.163.42:3600
=mail1.domain1.com:89.201.163.42:3600
=mail2.domain1.com:85.114.41.8:3600
=www.domain1.com:108.61.178.194:3600
=test1.domain1.com:193.198.184.100:3600
=test2.domain1.com:108.61.178.215:3600

# Aliases
+domain1.com:108.61.178.194:3600
+smtp.domain1.com:89.201.163.42:3600
+imap.domain1.com:89.201.163.42:3600

Shranite datoteko in zapustite.

teci ls:

<ceph>[root]# ls
Makefile  add-alias  add-childns  add-host  add-mx  add-ns  data

Pretvorite svoje besedilne podatke v obliko baze podatkov:

<ceph>[root]# make
/usr/local/bin/tinydns-data

lsPonovno zaženi :

<ceph>[root]# ls
Makefile  add-alias  add-childns  add-host  add-mx  add-ns  data  data.cdb

Bodite pozorni na data.cdbdatoteko. Ustvarili ste ga z makeukazom.

In še nekaj, ustvarite simbolično povezavo:

<ceph>[root]# ln -s /usr/local/etc/tinydns /service

Zdaj preizkusite svoj novi strežnik DNS. Zamenjajte 108.61.178.110z naslovom IP vašega strežnika.

<ceph>[root]# host www.domain1.com 108.61.178.110 
Using domain server:
Name: 108.61.178.110
Address: 108.61.178.110#53
Aliases: 

www.domain1.com has address 108.61.178.194

Iskanje imenskega strežnika:

<ceph>[root]# host -t ns domain1.com 108.61.178.110 
Using domain server:
Name: 108.61.178.110
Address: 108.61.178.110#53
Aliases: 

domain1.com name server dns1.domain1.com.
domain1.com name server dns2.domain1.com.

Iskanje MX poštnega strežnika:

<ceph>[root]# host -t mx domain1.com 108.61.178.110 
Using domain server:
Name: 108.61.178.110
Address: 108.61.178.110#53
Aliases: 

domain1.com mail is handled by 10 mail1.domain1.com.
domain1.com mail is handled by 30 mail2.domain1.com.

Še enkrat, da se prepričam:

<ceph>[root]# host mail1.domain1.com 108.61.178.110 
Using domain server:
Name: 108.61.178.110
Address: 108.61.178.110#53
Aliases: 

mail1.domain1.com has address 89.201.163.42

Čestitam! Imate delujoč strežnik DNS. Zamenjajte domain1.coms svojo domeno. Po vsaki spremembi zaženite makeukaz za ustvarjanje nove data.cdbdatoteke.

Razlaga podatkovne datoteke:

Zapisi "A" se začnejo z =znakom. Vzdevki ali zapisi CNAME z +znakom. Poštni strežniki se začnejo z @znakom. Imenski strežniki z &znakom.

Primer 1:

=test1.domain1.com:193.198.184.100:3600

=pomeni "A" zapis. test1.domain1.comje ime DNS, IP 193.198.184.100je naslov, v katerem se test1.domain1.comrazreši, in 3600 je TTL (čas življenja).

2. primer:

# MX
@domain1.com::mail1.domain1.com.:10:3600
@domain1.com::mail2.domain1.com.:30:3600

V tem primeru mail1in mail2sta poštni strežniki za domain1.com. mail1ima prednost 10 in mail2ima prednost 30. To pomeni, da bodo poštni strežniki najprej poskušali dostaviti pošto na mail1. Če mail1ne bo uspelo, bodo poskusili mail2.

Naslednja vrstica označuje začetek informacij o coni. To je potrebno.

Zdomain1.com:dns1.domain1.com.:ns.domain1.com.:2013101203:604800:86400:2419200:604800:3600

2013101203številka se uporablja, če imate sekundarni DNS pri drugem ponudniku. Ko spremenite številko v 2013101204, bo sekundarni DNS vedel, da je prišlo do nekaterih sprememb v DNS, in bo sprejel spremembe. To je samo v informativne namene (potrebovali bi storitev prenosa AXFR DNS). Druga možnost je, da s programom kopirate in prilepite spremembe DNS med dvema strežnikoma DJBDNS rsync.

Če imate na strežniku FreeBSD požarni zid PF, dodajte to vrstico, da omogočite poizvedbe DNS:

pass quick proto {tcp, udp} from any to $me port 53 flags S/SA keep state