How to set the Slave DNS Server ?

[Kevin Darcy]

Kevin Chan wrote:

> Hi Kevin and all,
>
> 1. Where I can find the ARM in the BIND 9 distribution ?  Can you tell me
> the web address ?
>
> 2. Now I copy all the zone IP and file from Primary DNS to Secondary DNS
> Server.  Also, I copy the named.conf from Primary DNS to Secondary DNS
> Server and change all the "type master" zone
> definitions into "type slave" zone definitions, add the "allow-transfer
> {XXX.XXX.XXX.58;};"
>  to Primary DNS Server and add the "masters {XXX.XXX.XXX.57;};" to each
> zone.  My NS1 and NS2's named.conf setting as below:
>
> p.s. NS1 IP - XXX.XXX.XXX.57 & NS2 IP - XXX.XXX.XXX.58
>
> ============================================================
> (NS1)
>
> // generated by named-bootconf.pl
>
> options {
>         directory "/var/named";
>         allow-transfer {XXX.XXX.XXX.58;};
>         /*
>          * If there is a firewall between you and nameservers you want
>          * to talk to, you might need to uncomment the query-source
>          * directive below.  Previous versions of BIND always asked
>          * questions using port 53, but BIND 8.1 uses an unprivileged
>          * port by default.
>          */
>         // query-source address * port 53;
> };
>
> //
> // a caching only nameserver config
> //
> controls {
>         inet 127.0.0.1 allow { localhost; } keys { rndckey; };
> };
> zone "." IN {
>         type hint;
>         file "named.ca";
> };
>
> zone "localhost" IN {
>         type master;
>         file "localhost.zone";
>         allow-update { none; };
> };
>
> zone "0.0.127.in-addr.arpa" IN {
>         type master;
>         file "named.local";
> };
>
> zone "XXX.XXX.XXX.in-addr.arpa" {
>         type master;
>         file "XXX.XXX.XXX";
> };
>
> zone "kevin.com" {
>         type master;
>         file "kevin.com";
> };
>
> include "/etc/rndc.key";
>
> ============================================================
>
> (NS2)
>
> // generated by named-bootconf.pl
>
> options {
>         directory "/var/named";
> /*
>          * If there is a firewall between you and nameservers you want
>          * to talk to, you might need to uncomment the query-source
>          * directive below.  Previous versions of BIND always asked
>          * questions using port 53, but BIND 8.1 uses an unprivileged
>          * port by default.
>          */
>         // query-source address * port 53;
> };
>
> //
> // a caching only nameserver config
> //
> controls {
>         inet 127.0.0.1 allow { localhost; } keys { rndckey; };
> };
> zone "." IN {
>         type hint;
>         file "named.ca";
> };
>
> zone "localhost" IN {
>         type master;
>         file "localhost.zone";
>         allow-update { none; };
> };
>
> zone "0.0.127.in-addr.arpa" IN {
>         type master;
>         file "named.local";
> };
>
> zone "XXX.XXX.XXX.in-addr.arpa" {
>         type slave;
>         file "XXX.XXX.XXX";
>         masters {XXX.XXX.XXX.57;};
> };
>
> zone "kevin.com" {
>         type master;
>         file "kevin.com";
>         masters {XXX.XXX.XXX.57;};
> };
>
> include "/etc/rndc.key";
> ============================================================
>
> Does my setting on the named.conf is correct ?  Do I need to add  the
> "masters {XXX.XXX.XXX.57;};" for each zone ?
>
> Thanks again !
>
> Best regards,
> Kevin Chan
>
> > Kevin Darcy Wrote:
> >
> > > 1. I would like to ask how I can add a "masters" clause to each of
> those,
> > > specifying the master's IP address on Slave DNS Server's
> /etc/named.conf?
> >
> > Look at the ARM examples.

You can find links to various download sites for the latest BIND 9
distribution here: http://www.isc.org/products/BIND/bind9.html. The ARM is
contained in the BIND distribution, in the doc/arm subdirectory.


- Kevin