New serverw/ Bind9.1.3 to replace Bind8.2.2.P5

Kevin Darcy kcd at daimlerchrysler.com
Tue Jul 24 00:37:30 UTC 2001


1) "//" is not a valid comment sequence in a zone file.

2) Is there any particular reason for locking your query-source to port 53?

3) Why are you defining {mail,ex,www,ftp}.accenet.com as aliases to themselves?
Perhaps you meant instead to alias 2 of the {ex,www,ftp} names to the other
one, since they all ultimately resolve to the same IP address. But that doesn't
explain why "mail" -- which resolves to a different IP address -- is aliased to
itself.

4) Likewise, defining 3 different PTR records for 119.145.59.216.in-addr.arpa
is a waste of time and resources, since nothing looks beyond the first PTR
record.

5) You need to dot-terminate the owner name of the accenet.com SOA record, or
it will be misinterpreted.

6) As a matter of style, I'd use relative ("short") names and "@" wherever
possible. Fully-qualified names tend to be difficult to read/type/maintain, and
it's easy to forget to dot-terminate them (see #5 above).

7) What's up with that "localhosts" name resolving to 120.0.0.1?


- Kevin

Patrick Au wrote:

> RedHat 7.1 w/ all necessary updates, in DMZ of Firewall.
> This is what I have come up with using DNS & Bind, 4th Edition.
> Since I am a newbie, figure I get some pointers before I use them
> ----------------------------------------------------------------------------
> -----
> //named.conf
> options {
>  directory "/var/named";
>  query-source address * port 53;
> };
>
> zone "accenet.com" {
>  type master;
>  file "accenet.com";
> };
>
> zone "." {
>  type hint;
>  file "named.ca";
> };
>
> zone "0.0.127.in-addr.arpa" {
>  type master;
>  file "0.0.127.in-addr.arpa.zone";
> };
>
> zone "145.59.216.in-addr.arpa" {
>  type master;
>  file "145.59.216";
> };
> ----------------------------------------------------------------------------
> ---
> //accenet.com
> $TTL 3h
> accenet.com IN  SOA  ns2.accenet.com.  hostmaster.accenet.com. (
>   2001072301 ; Serial
>   3h    ; Refresh after 3 hours
>   1h    ; Retry after 1 hour
>   1w    ; Expire after 1 week
>   1h )    ; Negative caching TTL of 1 hour
>
> ;
> // Name & Mail Servers
> //
> accenet.com IN  NS   ns2.accenet.com.
> accenet.com IN  MX   10 mail.accenet.com.
> accenet.com IN  MX  20 ex.accenet.com.
>
> ;
> // Addresses fot the canonical names
> //
> localhosts.accenet.com. IN A 120.0.0.1
> mail.accenet.com. IN A 216.59.145.116
> ex.accenet.com.  IN A 216.59.145.119
> www.accenet.com. IN A 216.59.145.119
> ftp.accenet.com. IN A 216.59.145.119
> ns2.accenet.com. IN A 216.59.145.118
>
> ;
> // Aliases
> //
> mail  IN CNAME mail.accenet.com.
> ex  IN CNAME ex.accenet.com
> www  IN CNAME www.accenet.com
> ftp  IN CNAME ftp.accenet.com
> ----------------------------------------------------------------------------
> ---------
> //145.59.216
> $TTL 3h
> 145.59.216.in-addr.arpa.        IN  SOA  ns2.accenet.com
> hostmaster.accenet.com. (
>     2001072301 ; Serial
>     3h    ; Refresh after 3 hours
>     1h    ; Retry after 1 hour
>     1w    ; Expire after 1 week
>     1h )    ; Negative caching TTL of 1 hour
>
> ;
> // Name Server
> //
> 145.59.216.in-addr.arpa. IN  NS  ns2.accenet.com.
>
> ;
> // Addresses Point to Canonical Name
> 116.145.59.216.in-addr.arpa. IN  PTR  mail.accenet.com
> 118.145.59.216.in-addr.arpa. IN  PTR  ns2.accenet.com
> 119.145.59.216.in-addr.arpa. IN  PTR  ex.accenet.com
> 119.145.59.216.in-addr.arpa. IN  PTR  www.accenet.com
> 119.145.59.216.in-addr.arpa. IN  PTR  ftp.accenet.com
> ----------------------------------------------------------------------------
> -------------
> //0.0.127.in-addr.arpa.zone
> $TTL 3h
> 0.0.127.in-addr.arpa. IN  SOA  ns2.accenet.com.  hostmaster.accenet.com. (
>                         2001072301 ; Serial
>    3h    ; Refresh after 3 hours
>    1h    ; Retry after 1 hour
>    1w    ; Expire after 1 week
>    1h )    ; Negative caching TTL of 1 hour
>
> 0.0.127.in-addr.arpa. IN  NS  ns2.accenet.com.
> 1.0.0.127.in-addr.arpa. IN  PTR ns2.accenet.com.
> ----------------------------------------------------------------------------
> -------------
> Thanks
> Patrick Au





More information about the bind-users mailing list