sudo gedit /etc/bind/named.conf
//Only these servers can ask questions.
acl "home" { 192.168.0.0/24; 127.0.0.1; };
// If this file doesn't exist, I'll explain it later. It must be included.
include "/etc/rndc.key";
options {
//Where all your DNS info is stored
directory "/etc/bind-zone/";
dump-file "/var/named/data/cache_dump.db";
statistics-file "/var/named/data/named_stats.txt";
allow-query { "home"; };
//If named doesn't know, it will eithe ask one of these,
//Or shoe the client to it
forwarders { 68.87.71.226; 68.87.73.242;};
};
//This allows dhcpd to update your DNS. Change accordingly
//if you have dhcpd on a different server.
controls {
inet 127.0.0.1 port 953 allow { localhost; 127.0.0.1; 192.168.0.100; } keys { rndckey; };
};
//This is the zone where your DHCPD will do its updating.
//Change example.com to the name of your network
zone "mydomain.com" {
type master;
notify no;
//For sanity's sake, change it to something related
file "/etc/bind-zone/clients.zone";
allow-update { key rndc-key; };
};
//This is for reverse DNS lookups
zone "0.168.192.in-addr.arpa" {
type master;
notify no;
file "/etc/bind/clients.zone.rev";
allow-update {key rndc-key; };
};
// These zones came with the fedora install.
// None are required, but why fix something
// that ain't broke?
zone "localhost" IN {
type master;
file "/etc/bind-zone/localhost.zone";
allow-update { none; };
};
zone "0.0.127.in-addr.arpa" IN {
type master;
file "/etc/bind-zone/named.local";
allow-update { none; };
};
zone "0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ip6.arpa" IN {
type master;
file "/etc/bind-zone/named.ip6.local";
allow-update { none; };
};
zone "255.in-addr.arpa" IN {
type master;
file "/etc/bind-zone/named.broadcast";
allow-update { none; };
};
zone "0.in-addr.arpa" IN {
type master;
file "/etc/bind-zone/named.zero";
allow-update { none; };
};
// This is for looking up the root nameservers.
zone "." {
type hint;
file "/etc/bind-zone/named.ca";
};
--------------------------------------------------------
/etc/named.conf
//Only these servers can ask questions.
acl "home" { 192.168.0.0/24; 127.0.0.1; };
// If this file doesn't exist, I'll explain it later. It must be included.
include "/etc/rndc.key";
options {
//Where all your DNS info is stored
directory "/etc/bind-zone/";
dump-file "/var/named/data/cache_dump.db";
statistics-file "/var/named/data/named_stats.txt";
allow-query { "home"; };
//If named doesn't know, it will eithe ask one of these,
//Or shoe the client to it
forwarders { 68.87.71.226; 68.87.73.242;};
};
//This allows dhcpd to update your DNS. Change accordingly
//if you have dhcpd on a different server.
controls {
inet 127.0.0.1 port 953 allow { localhost; 127.0.0.1; 192.168.0.100; } keys { rndckey; };
};
//This is the zone where your DHCPD will do its updating.
//Change example.com to the name of your network
zone "mydomain.com" {
type master;
notify no;
//For sanity's sake, change it to something related
file "/etc/bind-zone/clients.zone";
allow-update { key rndc-key; };
};
//This is for reverse DNS lookups
zone "0.168.192.in-addr.arpa" {
type master;
notify no;
file "/etc/bind/clients.zone.rev";
allow-update {key rndc-key; };
};
// These zones came with the fedora install.
// None are required, but why fix something
// that ain't broke?
zone "localhost" IN {
type master;
file "/etc/bind-zone/localhost.zone";
allow-update { none; };
};
zone "0.0.127.in-addr.arpa" IN {
type master;
file "/etc/bind-zone/named.local";
allow-update { none; };
};
zone "0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ip6.arpa" IN {
type master;
file "/etc/bind-zone/named.ip6.local";
allow-update { none; };
};
zone "255.in-addr.arpa" IN {
type master;
file "/etc/bind-zone/named.broadcast";
allow-update { none; };
};
zone "0.in-addr.arpa" IN {
type master;
file "/etc/bind-zone/named.zero";
allow-update { none; };
};
// This is for looking up the root nameservers.
zone "." {
type hint;
file "/etc/bind-zone/named.ca";
};
-------------------------------------------------------
/etc/dhcpd.conf
# Basic stuff to name the server and switch on updating
server-identifier 192.168.0.100;
ddns-updates on;
ddns-update-style interim;
ddns-domainname "mydomain.com.";
ddns-rev-domainname "in-addr.arpa.";
ignore client-updates;
# This is the key so that DHCP can authenticate it's self to BIND9
# include "/etc/rndc.key";
key rndc-key {
algorithm hmac-md5;
secret "9lJ3Q3MrYOLkPMQfttS5Yg==";
};
# This is the communication zone
zone mydomain.com. {
primary 127.0.0.1;
key rndc-key;
}
# Normal DHCP stuff
option domain-name "mydomain.com";
option domain-name-servers 192.168.0.100;
option ntp-servers 192.168.0.100;
option ip-forwarding off;
default-lease-time 600;
max-lease-time 7200;
authoritative;
log-facility local7;
subnet 192.168.0.0 netmask 255.255.255.0 {
range 192.168.0.100 192.168.0.200;
option broadcast-address 192.168.0.255;
option routers 192.168.0.1;
allow unknown-clients;
zone 0.168.192.in-addr.arpa. {
primary 192.168.0.100;
key "rndc-key";
}
zone mydomain.com. {
primary 192.168.0.100;
key "rndc-key";
}
}
------------------------------------------------------
/etc/dhcp3/dhcpd.conf
# Basic stuff to name the server and switch on updating
server-identifier 192.168.0.100;
ddns-updates on;
ddns-update-style interim;
ddns-domainname "mydomain.com.";
ddns-rev-domainname "in-addr.arpa.";
ignore client-updates;
# This is the key so that DHCP can authenticate it's self to BIND9
# include "/etc/rndc.key";
key rndc-key {
algorithm hmac-md5;
secret "9lJ3Q3MrYOLkPMQfttS5Yg==";
};
# This is the communication zone
zone mydomain.com. {
primary 127.0.0.1;
key rndc-key;
}
# Normal DHCP stuff
option domain-name "mydomain.com";
option domain-name-servers 192.168.0.100;
option ntp-servers 192.168.0.100;
option ip-forwarding off;
default-lease-time 600;
max-lease-time 7200;
authoritative;
log-facility local7;
subnet 192.168.0.0 netmask 255.255.255.0 {
range 192.168.0.100 192.168.0.200;
option broadcast-address 192.168.0.255;
option routers 192.168.0.1;
allow unknown-clients;
zone 0.168.192.in-addr.arpa. {
primary 192.168.0.100;
key "rndc-key";
}
zone mydomain.com. {
primary 192.168.0.100;
key "rndc-key";
}
}