- A Note Regarding Supplemental Files
- Preface
- 1. Background
- 2. How Does DNS Work?
- 3. Where Do I Start?
- 4. Setting Up BIND
- 4.1. Our Zone
- 4.2. Setting Up Zone Data
- 4.3. Setting Up a BIND Configuration File
- 4.4. Abbreviations
- 4.5. Hostname Checking
- 4.6. Tools
- 4.7. Running a Primary Nameserver
- 4.8. Running a Slave Nameserver
- 4.9. Adding More Zones
- 4.10. What’s Next?
- 5. DNS and Electronic Mail
- 6. Configuring Hosts
- 6.1. The Resolver
- 6.2. Resolver Configuration
- 6.3. Sample Resolver Configurations
- 6.4. Minimizing Pain and Suffering
- 6.5. Additional Configuration Files
- 6.6. The Windows XP Resolver
- 7. Maintaining BIND
- 8. Growing Your Domain
- 9. Parenting
- 10. Advanced Features
- 10.1. Address Match Lists and ACLs
- 10.2. DNS Dynamic Update
- 10.3. DNS NOTIFY (Zone Change Notification)
- 10.4. Incremental Zone Transfer (IXFR)
- 10.5. Forwarding
- 10.6. Views
- 10.7. Round-Robin Load Distribution
- 10.8. Nameserver Address Sorting
- 10.9. Preferring Nameservers on Certain Networks
- 10.10. A Nonrecursive Nameserver
- 10.11. Avoiding a Bogus Nameserver
- 10.12. System Tuning
- 10.12.1. Zone Transfers
- 10.12.1.1. Limiting transfers requested per nameserver
- 10.12.1.2. Limiting the total number of zone transfers requested
- 10.12.1.3. Limiting the total number of zone transfers served
- 10.12.1.4. Limiting the duration of a zone transfer
- 10.12.1.5. Limiting the frequency of zone transfers
- 10.12.1.6. More efficient zone transfers
- 10.12.2. Resource Limits
- 10.12.3. Maintenance Intervals
- 10.12.4. TTLs
- 10.12.1. Zone Transfers
- 10.13. Compatibility
- 10.14. The ABCs of IPv6 Addressing
- 10.15. Addresses and Ports
- 11. Security
- 11.1. TSIG
- 11.2. Securing Your Nameserver
- 11.3. DNS and Internet Firewalls
- 11.3.1. Types of Firewall Software
- 11.3.2. A Bad Example
- 11.3.3. Internet Forwarders
- 11.3.4. Internal Roots
- 11.3.4.1. Where to put internal root nameservers
- 11.3.4.2. Forward-mapping delegation
- 11.3.4.3. in-addr.arpa delegation
- 11.3.4.4. The db.root file
- 11.3.4.5. Configuring other internal nameservers
- 11.3.4.6. How internal nameservers use internal roots
- 11.3.4.7. Mail from internal hosts to the Internet
- 11.3.4.8. Mail to specific Internet domain names
- 11.3.4.9. The trouble with internal roots
- 11.3.5. A Split Namespace
- 11.4. The DNS Security Extensions
- 11.4.1. Public-Key Cryptography and Digital Signatures
- 11.4.2. The DNSKEY Record
- 11.4.3. The RRSIG Record
- 11.4.4. The NSEC Record
- 11.4.5. The DS Record and the Chain of Trust
- 11.4.6. DO, AD, and CD
- 11.4.7. How the Records Are Used
- 11.4.8. DNSSEC and Performance
- 11.4.9. Zone-Signing Keys and Key-Signing Keys
- 11.4.10. Signing a Zone
- 11.4.11. DNSSEC and Dynamic Update
- 11.4.12. Changing Keys
- 11.4.13. What Was That All About?
- 12. nslookup and dig
- 13. Reading BIND Debugging Output
- 13.1. Debugging Levels
- 13.2. Turning On Debugging
- 13.3. Reading Debugging Output
- 13.3.1. Nameserver Startup (BIND 8, Debug Level 1)
- 13.3.2. Nameserver Startup (BIND 9, Debug Level 1)
- 13.3.3. A Successful Lookup (BIND 8, Debug Level 1)
- 13.3.4. A Successful Lookup (BIND 9, Debug Level 1)
- 13.3.5. A Successful Lookup with Retransmissions (BIND 8, Debug Level 1)
- 13.3.6. A Slave Nameserver Checking Its Zone (BIND 8, Debug Level 1)
- 13.3.7. A Slave Nameserver Checking Its Zone (BIND 9 Debug Level 1)
- 13.4. The Resolver Search Algorithm and Negative Caching (BIND 8)
- 13.5. The Resolver Search Algorithm and Negative Caching (BIND 9)
- 13.6. Tools
- 14. Troubleshooting DNS and BIND
- 14.1. Is NIS Really Your Problem?
- 14.2. Troubleshooting Tools and Techniques
- 14.3. Potential Problem List
- 14.3.1. 1. Forgot to Increment Serial Number
- 14.3.2. 2. Forgot to Reload Primary Nameserver
- 14.3.3. 3. Slave Nameserver Can’t Load Zone Data
- 14.3.4. 4. Added Name to Zone Datafile but Forgot to Add PTR Record
- 14.3.5. 5. Syntax Error in Configuration File or Zone Datafile
- 14.3.6. 6. Missing Dot at the End of a Domain Name in a Zone Datafile
- 14.3.7. 7. Missing Root Hints Data
- 14.3.8. 8. Loss of Network Connectivity
- 14.3.9. 9. Missing Subdomain Delegation
- 14.3.10. 10. Incorrect Subdomain Delegation
- 14.3.11. 11. Syntax Error in resolv.conf
- 14.3.12. 12. Local Domain Name Not Set
- 14.3.13. 13. Response from Unexpected Source
- 14.4. Transition Problems
- 14.5. Interoperability and Version Problems
- 14.5.1. Zone Transfer Fails Because of Proprietary WINS Record
- 14.5.2. Nameserver Reports “no NS RR for SOA MNAME”
- 14.5.3. Nameserver Reports “Too many open files”
- 14.5.4. Resolver Reports “asked for PTR, got CNAME”
- 14.5.5. Nameserver Startup Fails Because UDP Checksums Disabled
- 14.5.6. Other Nameservers Don’t Cache Your Negative Answers
- 14.5.7. TTL Not Set
- 14.6. TSIG Errors
- 14.7. Problem Symptoms
- 15. Programming with the Resolver and Nameserver Library Routines
- 15.1. Shell Script Programming with nslookup
- 15.2. C Programming with the Resolver Library Routines
- 15.2.1. DNS Message Format
- 15.2.2. Domain Name Storage
- 15.2.3. Domain Name Compression
- 15.2.4. The Resolver Library Routines
- 15.2.5. The _res Structure
- 15.2.6. The Nameserver Library Routines
- 15.2.6.1. ns_get16 and ns_put16
- 15.2.6.2. ns_get32 and ns_put32
- 15.2.6.3. ns_initparse
- 15.2.6.4. ns_msg_base, ns_msg_end, and ns_msg_size
- 15.2.6.5. ns_msg_count
- 15.2.6.6. ns_msg_get_flag
- 15.2.6.7. ns_msg_id
- 15.2.6.8. ns_name_compress
- 15.2.6.9. ns_name_skip
- 15.2.6.10. ns_name_uncompress
- 15.2.6.11. ns_parserr
- 15.2.6.12. ns_rr routines
- 15.2.7. Parsing DNS Responses
- 15.2.8. A Sample Program: check_soa
- 15.3. Perl Programming with Net::DNS
- 16. Architecture
- 17. Miscellaneous
- A. DNS Message Format and Resource Records
- B. BIND Compatibility Matrix
- C. Compiling and Installing BIND on Linux
- D. Top-Level Domains
- E. BIND Nameserver and Resolver Configuration
- E.1. BIND Nameserver Boot File Directives and Configuration File Statements
- E.2. BIND 8 Configuration File Statements
- E.3. BIND 9 Configuration File Statements
- E.4. BIND Resolver Statements
- E.5. BIND 9 Options Statement
- E.5.1. Definition and Usage
- E.5.2. Boolean Options
- E.5.3. Forwarding
- E.5.4. Dual-Stack Servers
- E.5.5. Access Control
- E.5.6. Interfaces
- E.5.7. Query Address
- E.5.8. Zone Transfers
- E.5.9. Bad UDP Port Lists
- E.5.10. Operating System Resource Limits
- E.5.11. Server Resource Limits
- E.5.12. Periodic Task Intervals
- E.5.13. Topology
- E.5.14. The sortlist Statement
- E.5.15. RRset Ordering
- E.5.16. Tuning
- E.5.17. Built-in Server Information Zones
- Index
- About the Authors
- Colophon
- Copyright
Appendix B. BIND Compatibility Matrix
Table B-1 shows you which versions of BIND support various features.
Table B-1. BIND compatibility matrix
Feature | BIND version | |||
8.2.3 | 8.4.7 | 9.1.0 | 9.3.2 | |
Multiprocessor support | ✗ | ✗ | ||
Dynamic update | ✗ | ✗ | ✗ | ✗ |
TSIG-signed dynamic update | ✗ | ✗ | ✗ | ✗ |
TSIG-based update policy | ✗ | ✗ | ||
NOTIFY | ✗ | ✗ | ✗ | ✗ |
Incremental zone transfer | ✗ | ✗ | ✗ | ✗ |
Incremental zone transfers with manual zone editing | ✗ | |||
Forwarding | ✗ | ✗ | ✗ | ✗ |
Forward zones | ✗ | ✗ | ✗ | ✗ |
Use of RTT for forwarders | ✗ | ✗ | ✗ | |
Views | ✗ | ✗ | ||
Round robin | ✗ | ✗ | ✗ | ✗ |
Configurable RRset order | ✗ | ✗ | ||
Configurable sort list | ✗ | ✗ | ✗ | ✗ |
Disabling recursion | ✗ | ✗ | ✗ | ✗ |
Recursion access list | ✗ | ✗ | ✗ | ✗ |
Query access lists | ✗ | ✗ | ✗ | ✗ |
Zone transfer access lists | ✗ | ✗ | ✗ | ✗ |
EDNS0 | ✗ | ✗ | ✗ | |
IPv6 transport | ✗ | ✗ | ✗ | |
AAAA records | ✗ | ✗ | ✗ | ✗ |
DNSSECbis | ✗ |
-
No Comment
..................Content has been hidden....................
You can't read the all page of ebook, please click here login for view all page.