Raspbian: Konfigurasi DNS Server
Revision as of 15:35, 10 October 2018 by Onnowpurbo (talk | contribs) (→Cek Syntax Konfigurasi BIND)
Install BIND
install BIND
sudo su apt update apt install bind9 bind9utils bind9-doc
Setup hanya untuk IPv4 (-4) jika dibutuhkan
vi /etc/default/bind9
Tambahkan (-4)
OPTIONS="-4 -u bind"
Konfigurasi Local File
Edit
sudo vi /etc/bind/named.conf.local
Di file ini kita bisa tambahkan forward dan revese zone (asumsi subnet 192.168.1.0/24) dari sebuah domain, contoh
zone "darmajaya.ac.id" { type master; file "/etc/bind/zones/db.darmajaya.ac.id"; # zone file path allow-transfer { 10.128.20.12; }; # ns2 private IP address - secondary };
zone "1.168.192.in-addr.arpa" { type master; file "/etc/bind/zones/db.192.168.1"; # 192.168.1.0/24 subnet allow-transfer { 10.128.20.12; }; # ns2 private IP address - secondary };
Buat Forward Zone File
Buat dan edit
sudo mkdir /etc/bind/zones cd /etc/bind/zones sudo cp ../db.local ./db. sudo vi /etc/bind/zones/db.darmajaya.ac.id
Isi awalnya kira-kira
$TTL 604800 @ IN SOA localhost. root.localhost. ( 2 ; Serial 604800 ; Refresh 86400 ; Retry 2419200 ; Expire 604800 ) ; Negative Cache TTL ; @ IN NS localhost. ; delete this line @ IN A 127.0.0.1 ; delete this line @ IN AAAA ::1 ; delete this line
Dapat kita ubah menjadi, misalnya,
$TTL 604800 @ IN SOA ns1.darmajaya.ac.id. admin.darmajaya.ac.id. ( 3 ; Serial 604800 ; Refresh 86400 ; Retry 2419200 ; Expire 604800 ) ; Negative Cache TTL ; ; name servers - NS records IN NS ns1.darmajaya.ac.id. IN NS ns2.darmajaya.ac.id. ; name servers - A records ns1.darmajaya.ac.id. IN A 192.168.1.11 ns2.darmajaya.ac.id. IN A 192.168.1.12 ; 192.168.1.0/16 - A records www.darmajaya.ac.id. IN A 192.168.1.10 darmajaya.ac.id. IN A 192.168.1.10
Buat Reverse Zone File
Buat dan edit
cd /etc/bind/zones sudo cp ../db.127 ./db.192.168.1 sudo vi /etc/bind/zones/db.192.168.1
Awalnya akan berisi kira-kira
$TTL 604800 @ IN SOA localhost. root.localhost. ( 1 ; Serial 604800 ; Refresh 86400 ; Retry 2419200 ; Expire 604800 ) ; Negative Cache TTL ; @ IN NS localhost. ; delete this line 1.0.0 IN PTR localhost. ; delete this line
Ubah menjadi kira-kira,
$TTL 604800 @ IN SOA darmajaya.ac.id. admin.darmajaya.ac.id. ( 3 ; Serial 604800 ; Refresh 86400 ; Retry 2419200 ; Expire 604800 ) ; Negative Cache TTL ; name servers IN NS ns1.darmajaya.ac.id. IN NS ns2.darmajaya.ac.id. ; PTR Records 11.10 IN PTR ns1.darmajaya.ac.id. ; 10.128.10.11 12.20 IN PTR ns2.darmajaya.ac.id. ; 10.128.20.12 101.100 IN PTR www.darmajaya.ac.id. ; 10.128.100.101 102.200 IN PTR darmajaya.ac.id. ; 10.128.200.102
Cek Syntax Konfigurasi BIND
Jalankan perintah
sudo named-checkconf
Cek zone tertentu
sudo named-checkzone darmajaya.ac.id db.darmajaya.ac.id sudo named-checkzone 1.168.192.in-addr.arpa /etc/bind/zones/db.192.168.1
Pastikan tidak ada error, keluar
OK
Restart BIND
Restart
sudo service bind9 restart