Getting started with BIND

Jason jwilliams at courtesymortgage.com
Tue Mar 2 01:44:06 UTC 2004


> Those errors are all related to rndc, which you appear to have not 
> configured. See pages 145-147 of "the book" for how to configure it. If 
> you don't want to bother configuring it right now, you could suppress 
> those error messages by defining a "null" controls section, i.e. 
> "controls { };" in your /etc/named.conf.

I'll take a look at that. I appreciate it. Looks like I need to generate 
a key to fix the problem.
> 
> By the way, what are you doing about a root zone? BIND always needs 
> access to some sort of root zone, and if you're on a completely isolated 
> LAN, you'll need to define one yourself. You might be able to skip this 
> step initially, but if you do, you may find that your nameserver keeps 
> beating its head against the wall trying to contact the Internet root 
> servers, which it knows about, in the absence of any explicit definition 
> of the root zone, courtesy of a compiled-in "hints" list. Hopefully your 
> firewall(s) and/or router(s) don't mind.

Being that im still young to DNS, im still learning as I go. I would ask 
for your suggestion regarding the root zone for my instance. I would 
prefer not to have BIND bang it's head, if possible. :)

> Another thing to keep in mind is that if you are using private 
> addressing (e.g. 192.168/16 or one of the other ranges defined by RFC 
> 1918), then if and when you decide to start sending queries to Internet 
> nameservers, you should define reverse zones for those private ranges in 
> your nameserver(s), in order to prevent pollution of the Internet DNS 
> infrastructure with bogus queries.

Good point. Very good point. I'll will keep that in mind when I start 
serving queries to the internet.

> -Kevin


Thanks Kevin. I appreciate it.

Jason


More information about the bind-users mailing list