Module 4

DNS Installation

DNS Software BIND (80+ %)

www.isc.org Berkeley Internet Name Domain

NSD (Name Server Daemon) www.nlnetlabs.nl/projects/nsd Authoritative DNS Only

UNBOUND unbound.net Caching DNS only

DNS Software - BIND Bind runs on:

Linux BSD (Free/Open/NetBSD) Windows (Server 2000, 2003, XP, Vista, 7) Lots of *nix systems

Out-of-the-box installs on most Linux distributions and RPMs

BSD – Ports system Windows – zipped .exe (runs as a service) Daemon name is named

BIND chroot/jail/sandbox Most distributions default to chroot install

/var/named /var/named/chroot

Chroot is a matter of taste but important in secure environments

Chroot limits all daemon access to a defined path (adds base to all paths)

Invoked with –t option when bind loads -u named limits access to named account

Exercise Install BIND on your PC Uses latest BIND9 Default path:

%systemroot%\system32\dns %systemroot%\sysWOW64\dns

BIND – run time Starting BIND

/etc/rc.d/init.d/named start named –u named [-t /path/]

Stopping BIND /etc/rc.d/init.d/named stop ps ax |grep named, Kill PID

Windows Control uses: Administrative tools->Services

BIND Control - rndc rndc tool with bind installation Allows remote access to bind Default install enables rndc

Disable with empty controls clause controls {};

Before use must run to set up default key: rndc-confgen -a

BIND – rndc commands Flush – flush cache(s) Freeze zone – stop DDNS activity Thaw zone – restart DDNS activity Halt – immediate stop (no restart) Status – BIND status Reload – reload config file and all zones

(keeps cache) Refresh zone – force zone transfer Stop – graceful stop (no restart)

Quick Quiz Name 2 Open Source DNS

implementations? What is the name of BIND's daemon

(process)? What is the name of the remote control

tool? Did your installation work?