Answer the question
In order to leave comments, you need to log in
[[+content_image]]
Help with configuring slave dns server
The task is as follows, there are 2 servers, the primary is raised on the main one, on the second slave dns.
Master
[[email protected] ~]# cat /etc/named.conf
options {
directory "/var/named";
dump-file "/var/named/data/cache_dump.db";
statistics-file "/var/named/data/named_stats.txt";
memstatistics-file "/var/named/data/named_mem_stats.txt";
//recursion yes;
allow-query { any; };
version "Forbidden";
listen-on port 53 { 178.89.xxx.ccc; };
allow-recursion { none; };
allow-transfer { 178.89.aaa.bbb; };
dnssec-enable yes;
dnssec-validation yes;
dnssec-lookaside auto;
bindkeys-file "/etc/named.iscdlv.key";
managed-keys-directory "/var/named/dynamic";
};
logging {
channel default_debug {
file "data/named.run";
severity dynamic;
};
};
zone "." IN {
type hint;
file "named.ca";
};
zone "xxx.89.178.in-addr.arpa" IN {
type master;
file "/var/named/xxx.89.178.in-addr.arpa";
allow-update { none; };
};
zone "site.ru" {
type master;
file "/var/named/site.ru";
notify yes;
};
zone "another-site.ru" {
type master;
file "/var/named/another-site.ru";
};
[[email protected] ~]# cat /etc/named.conf
options {
listen-on port 53 { 178.89.aaa.bbb; 127.0.0.1; };
listen-on-v6 port 53 { none; };
version "No info";
directory "/var/named";
dump-file "/var/named/data/cache_dump.db";
statistics-file "/var/named/data/named_stats.txt";
memstatistics-file "/var/named/data/named_mem_stats.txt";
recursion no;
allow-recursion { any; };
allow-query { any; };
allow-query-cache { any; };
dnssec-enable yes;
dnssec-validation yes;
dnssec-lookaside auto;
bindkeys-file "/etc/named.iscdlv.key";
masterfile-format text;
managed-keys-directory "/var/named/dynamic";
};
logging {
category lame-servers { null; };
channel default_debug {
file "data/named.run";
severity dynamic;
};
};
zone "." IN {
type hint;
file "named.ca";
};
zone "site.ru" IN {
type slave;
file "/var/named/site-slave/site-slave.conf";
masters { 178.89.xxx.ccc; };
};
key "rndc-key" {
algorithm hmac-md5;
secret "fergergergerg";
};
controls {
inet 127.0.0.1 port 953
allow { 127.0.0.1; } keys { "rndc-key"; };
};
include "/etc/named.rfc1912.zones";
include "/etc/named.root.key";
Answer the question
In order to leave comments, you need to log in
no way normally. as an option, you can parse the config on the master with a script, and on its basis generate the slave config. The zone file is pulled to the slave automatically, but the zone must be specified in the config.
Didn't find what you were looking for?
Ask your questionAsk a Question
731 491 924 answers to any question