Raspbian: Konfigurasi DNS Server
Revision as of 15:32, 10 October 2018 by Onnowpurbo (talk | contribs)
Install BIND
install BIND
sudo su apt update apt install bind9 bind9utils bind9-doc
Setup hanya untuk IPv4 (-4) jika dibutuhkan
vi /etc/default/bind9
Tambahkan (-4)
OPTIONS="-4 -u bind"
Konfigurasi Local File
Edit
sudo vi /etc/bind/named.conf.local
Di file ini kita bisa tambahkan forward dan revese zone (asumsi subnet 192.168.1.0/24) dari sebuah domain, contoh
zone "darmajaya.ac.id" {
type master;
file "/etc/bind/zones/db.darmajaya.ac.id"; # zone file path
allow-transfer { 10.128.20.12; }; # ns2 private IP address - secondary
};
zone "1.168.192.in-addr.arpa" {
type master;
file "/etc/bind/zones/db.192.168.1"; # 192.168.1.0/24 subnet
allow-transfer { 10.128.20.12; }; # ns2 private IP address - secondary
};
Buat Forward Zone File
Buat dan edit
sudo mkdir /etc/bind/zones cd /etc/bind/zones sudo cp ../db.local ./db. sudo vi /etc/bind/zones/db.darmajaya.ac.id
Isi awalnya kira-kira
$TTL 604800
@ IN SOA localhost. root.localhost. (
2 ; Serial
604800 ; Refresh
86400 ; Retry
2419200 ; Expire
604800 ) ; Negative Cache TTL
;
@ IN NS localhost. ; delete this line
@ IN A 127.0.0.1 ; delete this line
@ IN AAAA ::1 ; delete this line
Dapat kita ubah menjadi, misalnya,
$TTL 604800
@ IN SOA ns1.darmajaya.ac.id. admin.darmajaya.ac.id. (
3 ; Serial
604800 ; Refresh
86400 ; Retry
2419200 ; Expire
604800 ) ; Negative Cache TTL
;
; name servers - NS records
IN NS ns1.darmajaya.ac.id.
IN NS ns2.darmajaya.ac.id.
; name servers - A records
ns1.darmajaya.ac.id. IN A 192.168.1.11
ns2.darmajaya.ac.id. IN A 192.168.1.12
; 192.168.1.0/16 - A records
www.darmajaya.ac.id. IN A 192.168.1.10
darmajaya.ac.id. IN A 192.168.1.10
Buat Reverse Zone File
Buat dan edit
cd /etc/bind/zones sudo cp ../db.127 ./db.192.168.1 sudo vi /etc/bind/zones/db.192.168.1
Awalnya akan berisi kira-kira
$TTL 604800
@ IN SOA localhost. root.localhost. (
1 ; Serial
604800 ; Refresh
86400 ; Retry
2419200 ; Expire
604800 ) ; Negative Cache TTL
;
@ IN NS localhost. ; delete this line
1.0.0 IN PTR localhost. ; delete this line
Ubah menjadi kira-kira,
$TTL 604800
@ IN SOA darmajaya.ac.id. admin.darmajaya.ac.id. (
3 ; Serial
604800 ; Refresh
86400 ; Retry
2419200 ; Expire
604800 ) ; Negative Cache TTL
; name servers
IN NS ns1.darmajaya.ac.id.
IN NS ns2.darmajaya.ac.id.
; PTR Records
11.10 IN PTR ns1.darmajaya.ac.id. ; 10.128.10.11
12.20 IN PTR ns2.darmajaya.ac.id. ; 10.128.20.12
101.100 IN PTR www.darmajaya.ac.id. ; 10.128.100.101
102.200 IN PTR darmajaya.ac.id. ; 10.128.200.102
Cek Syntax Konfigurasi BIND
Jalankan perintah
sudo named-checkconf
Cek zone tertentu
sudo named-checkzone nyc3.example.com db.nyc3.example.com sudo named-checkzone 128.10.in-addr.arpa /etc/bind/zones/db.10.128
Pastikan tidak ada error
Restart BIND
Restart
sudo service bind9 restart