DNSサーバ基本設定

Debian を DNS サーバにしてみたので手順とかをメモ。

bind install

1. apt-get update
2. apt-get install bind9
3. apt-get install dnsutils

サーバーとして動作させるなら dnsutils は不要かもしれないけれども、自分宛の動作確認とかで dig くらいは入れておきたいのでこれも入れることにした。

log configuration

DNSサーバーのログを残すための設定。これも基本的なもの。DNS SEC とかはやらないので、、、独断と偏見で default と general と database を設定してみる。

1. mkdir /var/log/named
2. chown bind /var/log/named
3. chgrp bind /var/log/named
4. create /etc/bind/named.logging.conf
5. edit /etc/bind/named.conf

/etc/bind/named.logging.conf

logging { 
    channel default-log { 
        file "/var/log/named/default.log"; 
        print-category yes; 
        print-time yes; 
        print-severity yes; 
    }; 
    channel general-log { 
        file "/var/log/named/general.log"; 
        print-category yes; 
        print-time yes; 
        print-severity yes; 
    }; 
    channel database-log { 
        file "/var/log/named/database.log"; 
        print-category yes; 
        print-time yes; 
        print-severity yes; 
    }; 
    category default { 
        "default-log"; 
    }; 
    category general { 
        "general-log"; 
    }; 
    category database { 
        "database-log"; 
    }; 
};

/etc/bind/named.conf

// This is the primary configuration file for the BIND DNS server named. 
// 
// Please read /usr/share/doc/bind9/README.Debian.gz for information on the 
// structure of BIND configuration files in Debian, *BEFORE* you customize 
// this configuration file. 
// 
// If you are just adding zones, please do that in /etc/bind/named.conf.local 

include "/etc/bind/named.conf.options"; 
include "/etc/bind/named.logging.conf";  // added this line 
include "/etc/bind/named.conf.local"; 
include "/etc/bind/named.conf.default-zones";