Answer the question
In order to leave comments, you need to log in
Need help setting up master/slave DNS
Good afternoon, I can't set up master/slave dns, please help. CentOS OS. Here is what I do
MASTER
/etc/named.conf
options {
directory "/var/named";
dump-file "/var/named/data/cache_dump.db";
statistics-file "/var/named/data/named_stats.txt";
memstatistics-file "/var/named/data/named_mem_stats.txt";
recursion yes;
allow-query {any; };
version "Forbidden";
listen-on { ip-master; 127.0.0.1; };
allow recursion { none; };
allow-transfer { ip-slave; };
dnssec-enable yes;
dnssec-validation yes;
dnssec-lookaside auto;
/* Path to ISC DLV key */
bindkeys-file "/etc/named.iscdlv.
managed-keys-directory "/var/named/dynamic";
};
...
zone "site.com" IN {
type master;
file "/var/named/master/site.com";
allow-transfer { ip-slave; };
notify yes;
};
further I describe the zone in /var/named/master/site.com
SLAVE
options {
listen-on port 53 { ip-slave; 127.0.0.1; };
listen-on-v6 port 53 { none; };
version "No info";
directory "/var/named";
dump-file "/var/named/data/cache_dump.db";
statistics-file "/var/named/data/named_stats.txt";
memstatistics-file "/var/named/data/named_mem_stats.txt";
allow-query {any; };
recursion yes;
allow recursion { none; };
dnssec-enable yes;
dnssec-validation yes;
dnssec-lookaside auto;
/* Path to ISC DLV key */
bindkeys-file "/etc/named.iscdlv.key";
managed-keys-directory "/var/named/dynamic";
};
...
zone "site.com" IN {
type slave;
file "/var/named/dinhost-slave/site-slave.conf";
masters { ip-master; };
};
I restart both binds and the master does not copy the dig ns1
.site.com site.com
command to the slave. axfr produces
; <<>> DiG 9.8.2rc1-RedHat-9.8.2-0.17.rc1.el6.3 <<>> ns1 .site.com site.com. axfr
; (1 server found)
;; global options: +cmd
; transfer failed.
disconnected on both servers iptables the effect is the same.
Answer the question
In order to leave comments, you need to log in
Didn't find what you were looking for?
Ask your questionAsk a Question
731 491 924 answers to any question