API tools faq
paste
Guest User

Untitled

a guest
Oct 17th, 2018
92
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 8.29 KB | None | 0 0
raw download clone embed print report
  1. root@server1:/etc/bind# named -v
  2. BIND 9.10.3-P4-Debian <id:ebd72b3>
  3.  
  4. acl trusted {
  5. 127.0.0.1;
  6. xxx.xxx.xxx.43; # NS1
  7. xx.xx.xx.107; # NS2
  8. 81.169.148.38; # Strato DNS
  9. };
  10.  
  11. options {
  12. directory "/var/cache/bind";
  13.  
  14. // If there is a firewall between you and nameservers you want
  15. // to talk to, you may need to fix the firewall to allow multiple
  16. // ports to talk. See http://www.kb.cert.org/vuls/id/800113
  17.  
  18. // If your ISP provided one or more IP addresses for stable
  19. // nameservers, you probably want to use them as forwarders.
  20. // Uncomment the following block, and insert the addresses replacing
  21. // the all-0's placeholder.
  22.  
  23. // forwarders {
  24. // 0.0.0.0;
  25. // };
  26.  
  27. //========================================================================
  28. // If BIND logs error messages about the root key being expired,
  29. // you will need to update your keys. See https://www.isc.org/bind-keys
  30. //========================================================================
  31. dnssec-validation auto;
  32. listen-on port 53 { any; };
  33. recursion no;
  34. allow-query { any; };
  35. auth-nxdomain no; # conform to RFC1035
  36. listen-on-v6 { any; };
  37. allow-notify { trusted; };
  38. allow-transfer { trusted; };
  39. };
  40.  
  41. //
  42. // Do any local configuration here
  43. //
  44.  
  45. // Consider adding the 1918 zones here, if they are not used in your
  46. // organization
  47. //include "/etc/bind/zones.rfc1918";
  48. zone "my-domain.com" {
  49. type master;
  50. file "/etc/bind/forward.my-domain.com";
  51. allow-transfer { xx.xx.xx.107; };
  52. };
  53.  
  54. $TTL 604800
  55.  
  56. @ IN SOA primary.my-domain.com. root.primary.my-domain.com. (
  57. 6 ; Serial
  58. 604820 ; Refresh
  59. 86600 ; Retry
  60. 2419600 ; Expire
  61. 604600 ) ; Negative Cache TTL
  62.  
  63. ;Name Server Information
  64. @ IN NS primary.my-domain.com.
  65. @ IN NS secondary.my-domain.com.
  66.  
  67. ;IP address of Your Domain Name Server(DNS)
  68. primary IN A xxx.xxx.xxx.43
  69. secondary IN A xx.xx.xx.107
  70.  
  71. ;A Record for Host names
  72. @ IN A xxx.xxx.xxx.43
  73. www IN A xxx.xxx.xxx.43
  74.  
  75. ;CNAME Record
  76. ftp IN CNAME www.my-domain.com.
  77.  
  78. acl trusted {
  79. 127.0.0.1;
  80. xxx.xxx.xxx.43; # NS1
  81. xx.xx.xx.107; # NS2
  82. 81.169.148.38; # Strato DNS
  83. };
  84.  
  85. options {
  86. directory "/var/cache/bind";
  87.  
  88. // If there is a firewall between you and nameservers you want
  89. // to talk to, you may need to fix the firewall to allow multiple
  90. // ports to talk. See http://www.kb.cert.org/vuls/id/800113
  91.  
  92. // If your ISP provided one or more IP addresses for stable
  93. // nameservers, you probably want to use them as forwarders.
  94. // Uncomment the following block, and insert the addresses replacing
  95. // the all-0's placeholder.
  96.  
  97. // forwarders {
  98. // 0.0.0.0;
  99. // };
  100.  
  101. //========================================================================
  102. // If BIND logs error messages about the root key being expired,
  103. // you will need to update your keys. See https://www.isc.org/bind-keys
  104. //========================================================================
  105. dnssec-validation auto;
  106. listen-on port 53 { any; };
  107. recursion no;
  108. allow-query { any; };
  109. auth-nxdomain no; # conform to RFC1035
  110. listen-on-v6 { any; };
  111. allow-notify { trusted; };
  112. allow-transfer { trusted; };
  113. };
  114.  
  115. //
  116. // Do any local configuration here
  117. //
  118.  
  119. // Consider adding the 1918 zones here, if they are not used in your
  120. // organization
  121. //include "/etc/bind/zones.rfc1918";
  122. zone "my-domain.com" {
  123. type slave;
  124. file "/etc/bind/forward.my-domain.com";
  125. masters { xxx.xxx.xxx.43; };
  126. };
  127.  
  128. $TTL 604800
  129.  
  130. @ IN SOA primary.my-domain.com. root.primary.my-domain.com. (
  131. 6 ; Serial
  132. 604820 ; Refresh
  133. 86600 ; Retry
  134. 2419600 ; Expire
  135. 604600 ) ; Negative Cache TTL
  136.  
  137. ;Name Server Information
  138. @ IN NS primary.my-domain.com.
  139. @ IN NS secondary.my-domain.com.
  140.  
  141. ;IP address of Your Domain Name Server(DNS)
  142. primary IN A xxx.xxx.xxx.43
  143. secondary IN A xx.xx.xx.107
  144.  
  145. ;A Record for Host names
  146. @ IN A xxx.xxx.xxx.43
  147. www IN A xxx.xxx.xxx.43
  148.  
  149. ;CNAME Record
  150. ftp IN CNAME www.my-domain.com.
  151.  
  152. ~$ dig my-domain.com @xxx.xxx.xxx.43
  153.  
  154. ; <<>> DiG 9.11.3-1ubuntu1.2-Ubuntu <<>> my-domain.com @xxx.xxx.xxx.43
  155. ;; global options: +cmd
  156. ;; Got answer:
  157. ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 31536
  158. ;; flags: qr aa rd; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 3
  159. ;; WARNING: recursion requested but not available
  160.  
  161. ;; OPT PSEUDOSECTION:
  162. ; EDNS: version: 0, flags:; udp: 4096
  163. ;; QUESTION SECTION:
  164. ;my-domain.com. IN A
  165.  
  166. ;; ANSWER SECTION:
  167. my-domain.com. 604800 IN A xxx.xxx.xxx.43
  168.  
  169. ;; AUTHORITY SECTION:
  170. my-domain.com. 604800 IN NS secondary.my-domain.com.
  171. my-domain.com. 604800 IN NS primary.my-domain.com.
  172.  
  173. ;; ADDITIONAL SECTION:
  174. primary.my-domain.com. 604800 IN A xxx.xxx.xxx.43
  175. secondary.my-domain.com. 604800 IN A xx.xx.xx.107
  176.  
  177. ;; Query time: 16 msec
  178. ;; SERVER: xxx.xxx.xxx.43#53(xxx.xxx.xxx.43)
  179. ;; WHEN: Tue Oct 16 14:42:09 CEST 2018
  180. ;; MSG SIZE rcvd: 136
  181.  
  182. ~$ nslookup my-domain.com xxx.xxx.xxx.43
  183. Server: xxx.xxx.xxx.43
  184. Address: xxx.xxx.xxx.43#53
  185.  
  186. Name: my-domain.com
  187. Address: xxx.xxx.xxx.43
  188.  
  189. ~$ dig my-domain.com
  190.  
  191. ; <<>> DiG 9.11.3-1ubuntu1.2-Ubuntu <<>> my-domain.com
  192. ;; global options: +cmd
  193. ;; Got answer:
  194. ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 7286
  195. ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1
  196.  
  197. ;; OPT PSEUDOSECTION:
  198. ; EDNS: version: 0, flags:; udp: 65494
  199. ;; QUESTION SECTION:
  200. ;my-domain.com. IN A
  201.  
  202. ;; ANSWER SECTION:
  203. my-domain.com. 69 IN A 81.169.145.157
  204.  
  205. ;; Query time: 0 msec
  206. ;; SERVER: 127.0.0.53#53(127.0.0.53)
  207. ;; WHEN: Tue Oct 16 14:44:23 CEST 2018
  208. ;; MSG SIZE rcvd: 58
  209.  
  210. ~$ nslookup my-domain.com
  211. Server: 127.0.0.53
  212. Address: 127.0.0.53#53
  213.  
  214. Non-authoritative answer:
  215. Name: my-domain.com
  216. Address: 81.169.145.157
  217. Name: my-domain.com
  218. Address: 2a01:238:20a:202:1157::
  219.  
  220. $ dig +trace guzzijason.com. | grep -E 'INs*NS'
  221. . 509129 IN NS b.root-servers.net.
  222. . 509129 IN NS h.root-servers.net.
  223. . 509129 IN NS g.root-servers.net.
  224. . 509129 IN NS i.root-servers.net.
  225. . 509129 IN NS m.root-servers.net.
  226. . 509129 IN NS k.root-servers.net.
  227. . 509129 IN NS f.root-servers.net.
  228. . 509129 IN NS j.root-servers.net.
  229. . 509129 IN NS e.root-servers.net.
  230. . 509129 IN NS c.root-servers.net.
  231. . 509129 IN NS d.root-servers.net.
  232. . 509129 IN NS l.root-servers.net.
  233. . 509129 IN NS a.root-servers.net.
  234. com. 172800 IN NS a.gtld-servers.net.
  235. com. 172800 IN NS b.gtld-servers.net.
  236. com. 172800 IN NS c.gtld-servers.net.
  237. com. 172800 IN NS d.gtld-servers.net.
  238. com. 172800 IN NS e.gtld-servers.net.
  239. com. 172800 IN NS f.gtld-servers.net.
  240. com. 172800 IN NS g.gtld-servers.net.
  241. com. 172800 IN NS h.gtld-servers.net.
  242. com. 172800 IN NS i.gtld-servers.net.
  243. com. 172800 IN NS j.gtld-servers.net.
  244. com. 172800 IN NS k.gtld-servers.net.
  245. com. 172800 IN NS l.gtld-servers.net.
  246. com. 172800 IN NS m.gtld-servers.net.
  247. guzzijason.com. 172800 IN NS ns01.guzzijason.com. # Note: delegation NS record hosted by gtld-servers
  248. guzzijason.com. 172800 IN NS ns02.guzzijason.com. # Note: delegation NS record hosted by gtld-servers
  249. guzzijason.com. 7200 IN NS ns01.guzzijason.com. # authoritative NS record served by guzzijason.com nameservers
  250. guzzijason.com. 7200 IN NS ns02.guzzijason.com. # authoritative NS record served by guzzijason.com nameservers
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!