M
M
Maxim2014-09-04 14:26:16
Domain Name System
Maxim, 2014-09-04 14:26:16

Where is the cant in the DNS records?

For educational purposes, I decided to raise DNS on Centos 6.5
as a caching server, I succeeded, but I can’t create my own zones.
bind config

//
// named.conf
//
// Provided by Red Hat bind package to configure the ISC BIND named(8) DNS
// server as a caching only nameserver (as a localhost DNS resolver only).
//
// See /usr/share/doc/bind*/sample/ for example named configuration files.
//

options {
  listen-on port 53 { 127.0.0.1; 192.168.1.0/24; 10.214.2.134; };
  listen-on-v6 port 53 { ::1; };
  directory 	"/var/named";
  dump-file 	"/var/named/data/cache_dump.db";
        statistics-file "/var/named/data/named_stats.txt";
        memstatistics-file "/var/named/data/named_mem_stats.txt";
  allow-query     { "any"; };
  recursion yes;
  
  forwarders {
    8.8.8.8;
    8.8.4.4;
  };


  dnssec-enable yes;
  dnssec-validation yes;
  dnssec-lookaside auto;

  /* Path to ISC DLV key */
  bindkeys-file "/etc/named.iscdlv.key";

  managed-keys-directory "/var/named/dynamic";
};

logging {
        channel default_debug {
                file "data/named.run";
                severity dynamic;
        };
};

zone "." IN {
  type hint;
  file "named.ca";
};


zone "onko4.local" {
  type master;
  file "/etc/named/onko4.local";
  allow-transfer { 192.168.1.5;};
};

zone "1.168.192.in-addr.arpa" IN {
  type master;
  file "/etc/named/onko4.local.rev";
  allow-transfer {192.168.1.5;};
};

include "/etc/named.rfc1912.zones";
include "/etc/named.root.key";

zone
$TTL 36000
@ SOA onko4.local. root.onko4.local. 2007012000 (
            10h ; slave-server connection preiod
                                                1h  ; retry
                                                1w  ; lifetime
                                                1h ); negative ttl

IN	NS	root.onko4.local.
root.onko4.local	A	192.168.1.5

onko4.local		A	192.168.1.199
www.onko4.local		A	192.168.1.199
gateway.onko4.local	A	192.168.1.5
sip.onko4.local		A	192.168.1.4
nx.onko4.local		A	10.214.2.131
ftp.onko4.local		A	192.168.1.3

and the reverse (I don’t understand its meaning, if possible, please explain)
1.168.192.in-addr.arpa. 10800 IN SOA onko4.local. root.onko4.local. 2007012001 (
                                                10h  ; slave-server connection period
                                                1h   ; retry
                                                1w   ; life-time
                                                1h ) ; negative ttl

                NS root.onko4.local.

1 PTR onko4.local.
2 PTR www.onko4.local.
3 PTR gateway.onko4.local.
4 PTR sip.onko4.local.
5 PTR nx.onko4.local.
6 PTR ftp.onko4.local.

And the errors themselves
[[email protected] ~]# service named restart
Останавливается named:                                     [  OK  ]
Запускается named:
Error in named configuration:
zone onko4.local/IN: has no NS records
zone onko4.local/IN: not loaded due to errors.
_default/onko4.local/IN: bad zone
/etc/named/onko4.local.rev:7: using RFC1035 TTL semantics
zone 1.168.192.in-addr.arpa/IN: loaded serial 2007012001
zone localhost.localdomain/IN: loaded serial 0
zone localhost/IN: loaded serial 0
zone 1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ip6.arpa/IN: loaded serial 0
zone 1.0.0.127.in-addr.arpa/IN: loaded serial 0
zone 0.in-addr.arpa/IN: loaded serial 0
                                                           [СБОЙ ]

I would be very grateful if you help me.
Trying to set up for the first time.
Thanks

Answer the question

In order to leave comments, you need to log in

[[+comments_count]] answer(s)
S
Sergey Petrikov, 2014-09-04
@maxpointn2point

root.onko4.local is missing a trailing dot for this entry and all below. It should be like this:
root.onko4.local.

R
ReD, 2014-12-22
@trinitr0

The meaning of the reverse zone is that it allows a symbolic name by IP address. Required for the mail to work correctly. Also for displaying the results of the netstat utility. Or sometimes when specifying names instead of addresses in firewall rules.

Didn't find what you were looking for?

Ask your question

Ask a Question

731 491 924 answers to any question