CentOS - Apr 2017 - Primary DNS server with BIND on a public machine running CentOS 7

Hi,

I just installed CentOS 7 on a public server. I'd like to setup BIND as
a primary DNS server for a few domains.

Until now, all my public machines were running Slackware Linux, and
setting up BIND on a Slackware machine is relatively easy. In its out of
the box configuration, it has a bone-headed caching nameserver role,
which is quite easy to expand to a primary nameserver. Here's my
documentation. It's in French, but the *nix bits are universal.

http://blog.microlinux.fr/bind-slackware/

On my server running CentOS, I notice things are more complicated in the
default configuration. The problem here is not so much documentation,
but more like the wealth of information on the subject of BIND on
CentOS, with often contradicting information.

Is there a *reliable* more or less quick & dirty tutorial on how to get
BIND up and running as a primary public nameserver, with the default
configuration as a starting point? Think "recipe for pasta" and not
"degree in food chemistry". :o)

Cheers,

Niki

-- 
Microlinux - Solutions informatiques durables
7, place de l'?glise - 30730 Montpezat
Web  : http://www.microlinux.fr
Mail : info at microlinux.fr
T?l. : 04 66 63 10 32

On 4/11/2017 10:05 AM, Nicolas Kovacs wrote:
> I just installed CentOS 7 on a public server. I'd like to setup BIND as
> a primary DNS server for a few domains.

do you mean 'authoritative DNS server' ?


-- 
john r pierce, recycling bits in santa cruz

Le 11/04/2017 ? 19:09, John R Pierce a ?crit :
> do you mean 'authoritative DNS server' ?
Yes.

-- 
Microlinux - Solutions informatiques durables
7, place de l'?glise - 30730 Montpezat
Web  : http://www.microlinux.fr
Mail : info at microlinux.fr
T?l. : 04 66 63 10 32

On 04/11/2017 10:05 AM, Nicolas Kovacs wrote:
> Is there a*reliable*  more or less quick & dirty tutorial on how to get
> BIND up and running as a primary public nameserver, with the default
> configuration as a starting point?

1: Change the "listen-on" settings to bind to network interfaces:

-       listen-on port 53 { 127.0.0.1; };
-       listen-on-v6 port 53 { ::1; };
+       listen-on port 53 { any; };
+       listen-on-v6 port 53 { any; };

2: Allow external queries by removing the allow-query setting entirely:

-       allow-query     { localhost; };

3: Disallow recursion by removing recursion setting:

-       recursion yes;

4: Add your zones.

DNSSEC is slightly more involved, but basic setup should be basically 
the same as what you've been doing.

If you are looking for a recursive resolver, I would highly recommend 
unbound.

If you are looking for an authoritative DNS server, I would highly 
recommend NSD.

I run both and find both extremely easy to configure and maintain.

Both are available from the EPEL repositories.

I stopped using bind years ago and never looked back.

On 04/11/2017 10:05 AM, Nicolas Kovacs wrote:
> Hi,
>
> I just installed CentOS 7 on a public server. I'd like to setup BIND as
> a primary DNS server for a few domains.
>
> Until now, all my public machines were running Slackware Linux, and
> setting up BIND on a Slackware machine is relatively easy. In its out of
> the box configuration, it has a bone-headed caching nameserver role,
> which is quite easy to expand to a primary nameserver. Here's my
> documentation. It's in French, but the *nix bits are universal.
>
> http://blog.microlinux.fr/bind-slackware/
>
> On my server running CentOS, I notice things are more complicated in the
> default configuration. The problem here is not so much documentation,
> but more like the wealth of information on the subject of BIND on
> CentOS, with often contradicting information.
>
> Is there a *reliable* more or less quick & dirty tutorial on how to get
> BIND up and running as a primary public nameserver, with the default
> configuration as a starting point? Think "recipe for pasta" and
not
> "degree in food chemistry". :o)
>
> Cheers,
>
> Niki
>

Le 11/04/2017 ? 19:34, Gordon Messmer a ?crit :
> 1: Change the "listen-on" settings to bind to network interfaces:
> 
> -       listen-on port 53 { 127.0.0.1; };
> -       listen-on-v6 port 53 { ::1; };
> +       listen-on port 53 { any; };
> +       listen-on-v6 port 53 { any; };
> 
> 2: Allow external queries by removing the allow-query setting entirely:
> 
> -       allow-query     { localhost; };
> 
> 3: Disallow recursion by removing recursion setting:
> 
> -       recursion yes;
> 
> 4: Add your zones.
> 
> DNSSEC is slightly more involved, but basic setup should be basically
> the same as what you've been doing.
I'll give this a try with a clear head tomorrow. Thanks very much!

-- 
Microlinux - Solutions informatiques durables
7, place de l'?glise - 30730 Montpezat
Web  : http://www.microlinux.fr
Mail : info at microlinux.fr
T?l. : 04 66 63 10 32

Here are two articles on DNS that I wrote for Opensource.com.

Introduction to the Domain Name System (DNS) 
https://opensource.com/article/17/4/introduction-domain-name-system-dns

Build your own DNS name server on Linux 
https://opensource.com/article/17/4/build-your-own-name-server

I hope this helps.

On 04/11/2017 01:34 PM, Gordon Messmer wrote:
> On 04/11/2017 10:05 AM, Nicolas Kovacs wrote:
>> Is there a*reliable*  more or less quick & dirty tutorial on how to
get
>> BIND up and running as a primary public nameserver, with the default
>> configuration as a starting point?
>
>
> 1: Change the "listen-on" settings to bind to network interfaces:
>
> -       listen-on port 53 { 127.0.0.1; };
> -       listen-on-v6 port 53 { ::1; };
> +       listen-on port 53 { any; };
> +       listen-on-v6 port 53 { any; };
>
> 2: Allow external queries by removing the allow-query setting entirely:
>
> -       allow-query     { localhost; };
>
> 3: Disallow recursion by removing recursion setting:
>
> -       recursion yes;
>
> 4: Add your zones.
>
> DNSSEC is slightly more involved, but basic setup should be basically 
> the same as what you've been doing.
>
> _______________________________________________
> CentOS mailing list
> CentOS at centos.org
> https://lists.centos.org/mailman/listinfo/centos
-- 


*********************************************************
David P. Both, RHCE
Millennium Technology Consulting LLC
Raleigh, NC, USA
919-389-8678

dboth at millennium-technology.com

www.millennium-technology.com
www.Linux-Databook.info - Home of the DataBook for Linux
DataBook is a Registered Trademark of David Both
*********************************************************

I am writing my howto on BIND for Centos7.  Mine is running on 
Centos7-arm.  You can see some of the basics I have done at:

file:///home/rgm/data/htt/httnet/homepage/Centos7-armv7.html

I have a caveat I learned with dealing with SELinux and BIND there.

On 04/11/2017 01:05 PM, Nicolas Kovacs wrote:
> Hi,
>
> I just installed CentOS 7 on a public server. I'd like to setup BIND as
> a primary DNS server for a few domains.
>
> Until now, all my public machines were running Slackware Linux, and
> setting up BIND on a Slackware machine is relatively easy. In its out of
> the box configuration, it has a bone-headed caching nameserver role,
> which is quite easy to expand to a primary nameserver. Here's my
> documentation. It's in French, but the *nix bits are universal.
>
> http://blog.microlinux.fr/bind-slackware/
>
> On my server running CentOS, I notice things are more complicated in the
> default configuration. The problem here is not so much documentation,
> but more like the wealth of information on the subject of BIND on
> CentOS, with often contradicting information.
>
> Is there a *reliable* more or less quick & dirty tutorial on how to get
> BIND up and running as a primary public nameserver, with the default
> configuration as a starting point? Think "recipe for pasta" and
not
> "degree in food chemistry". :o)
>
> Cheers,
>
> Niki
>

On 4/12/2017 7:25 PM, Robert Moskowitz wrote:
> I am writing my howto on BIND for Centos7.  Mine is running on 
> Centos7-arm.  You can see some of the basics I have done at:
>
> file:///home/rgm/data/htt/httnet/homepage/Centos7-armv7.html

noone else can see your local file system


-- 
john r pierce, recycling bits in santa cruz

Le 13/04/2017 ? 04:25, Robert Moskowitz a ?crit :
> I am writing my howto on BIND for Centos7.  Mine is running on
> Centos7-arm.  You can see some of the basics I have done at:
> 
> file:///home/rgm/data/htt/httnet/homepage/Centos7-armv7.html
> 
> I have a caveat I learned with dealing with SELinux and BIND there.
You sent a link to a local file (file://) so unfortunately I can't
access it.

-- 
Microlinux - Solutions informatiques durables
7, place de l'?glise - 30730 Montpezat
Web  : http://www.microlinux.fr
Mail : info at microlinux.fr
T?l. : 04 66 63 10 32