DNS ma le DHCP ile Debian 8 "Jessie" - SMB Networks

Faʻasino lautele o le faʻasologa: Fesootaiga komepiuta mo SMEs: Faatomuaga

Talofa uo !. Ina ua maeʻa muamua ulugaliʻi tusitusiga i luga o le Domain System Suafa ma le Dynamic Host Configuration Protocol lomia faasalalau i le «DNS ma le DHCP i le openSUSE 13.2 'Harlequin'"ma"DNS ma le DHCP ile CentOS 7«, Uma mai le faasologa SME Fesootaiga, e tatau ona tatou faʻatulagaina na tautua i Debian.

Matou te toe fai atu o se amataga lelei e aʻoaʻo ai e uiga i manatu faʻavae o le DNS ma le DHCP o Wikipedia.

Faapipiʻiina o le polokalama faʻagaioiga

O le a matou amata mai le faʻavaeina faʻavae o se sapalai ma le Debian 8 "Jessie" faʻagaioiga polokalama e aunoa ma le faʻapipiʻiina o se siʻosiʻomaga siosiomaga poʻo se isi polokalame. O se masini tafailagi ma le 512 megabytes o RAM ma le 20 gigabyte hard drive e sili atu ma le lava.

I le taimi o le faapipiiina gaioiga-i tusitusiga tusitusiga sili sili ona lelei- ma le mulimuli i le faʻasologa o pupuni, na matou filifilia vaega nei:

  • Gagana: Sipaniolo - Sipaniolo
  • Atunuʻu, teritori poʻo le eria: U.S
  • Keymap e faʻaaoga: Amerika Igilisi
  • Faʻalelei lima le fesoʻotaʻiga:
    • IP tuatusi: 192.168.10.5
    • Netmask: 255.255.255.0
    • Faitotoʻa: 192.168.10.1
    • Nameserver tuatusi: 127.0.0.1
    • Igoa masini: dns
    • Igoa ole igoa: desdelinux.fan
  • Mautinoa Upu Lautele Faʻamatalaga: Lau upu faʻamau (ona fesili lea mo le faʻamaoniga)
  • Igoa atoa mo le tagata fou: Debian Muamua OS Buzz
  • Igoa Igoa mo le teuga tupe: pisapisao
  • Filifili se faʻaupuga mo le tagata fou: Lau upu faʻamau (ona fesili lea mo le faʻamaoniga)
  • Filifili lau taimi sone: Sase
  • Faʻavasegaina metotia: Taʻitaʻia - faʻaaoga le disk atoa
    • Filifili disk i le vaeluaina: Virtual disk 1 (vda) - 21.5 GB Virto Block Device
    • Polokalame vaeluaina: Uma faila i se vaeluaina (fautuaina mo newbies).
    • Faʻauma vaevaega ma tusi suiga i disk
    • E te manaʻo e tusi suiga i disk?
  • E te manaʻo e suʻesuʻe seisi CD poʻo se DVD?:
  • E te manaʻo e faʻaaoga se kopi od?:
  • E te manaʻo e fai le suʻesuʻega o le faʻaogaina o le afifi?:
  • Filifili polokalama e faapipii:
    [] Debian siosiomaga siosiomaga
    [*] Faʻatulaga faiga aoga
  • E te manaʻo e faʻapipiʻi le GRUB boot loader i le autu faʻamau faʻamau?
    • / dev / vda
  • "Ua maeʻa ona faapipiiina":

I loʻu manatu tauagafau, faʻapipiʻi Debian e faigofie. E naʻo le manaʻomia e tali fesili o filifiliga muamua ma nisi faʻamatalaga. Ou te faʻamalosi foi e fai atu e faigofie atu ona mulimuli i laʻasaga muamua nai lo le ala i se vitio, mo se faʻataʻitaʻiga. A ou faitau ou te leiloa le mafaufau. O le isi mataupu o le matamata, faitau, faʻamatala, ma tuʻuina i tua le vitio, pe a ou leiloa pe le malamalama lelei i se uiga taua. O se laupepa tusilima, poʻo se faila tusitusia faigofie kopiina i luga o le feaveaʻi, o le a avea o se aoga lelei atoatoa.

Faʻasologa muamua

A maeʻa le faʻapipiʻiina o le faʻavae ma le toefaʻavae muamua, matou te faʻaauau pea ona faʻalauiloa le Polokalame Faʻatutuina.

Pe a faʻaleleia le faila Punavai. lisi, matou te faʻaalia manatu uma o loʻo iai i le amataga ona o le a matou galulue faʻatasi ma fale teu oloa i le lotoifale. O le aano mulimuli o le faila -faʻaofia ai manatu laina- o le:

aʻa @ dns: ~ # nano /etc/apt/source.list
deb http://192.168.10.1/repos/jessie/debian/ jessie main contrib deb http://192.168.10.1/repos/jessie/debian-security/ jessie / faafouina autu autu

Matou te faʻafouina le faiga

aʻa @ dns: ~ # aptitude faʻafouga
aʻa @ dns: ~ # faʻafouina taleni
aʻa @ dns: ~ # toe toe

Matou te faʻatuina le SSH e faʻaavanoa mamao ai

aʻa @ dns: ~ # aptitude faʻapipiʻi ssh

Faʻatagaina le tagata faʻaaoga e amata se sauniga mamao e ala i le SSH aʻa -mai le Enterprise LAN naʻo matou- matou te fesuiaʻia lana faila faʻamau:

aʻa @ dns: ~ # nano / etc / ssh / sshd_config
.... PermitRootLogin ioe ....

aʻa @ dns: ~ # systemctl toe amata ssh.service
aʻa @ dns: ~ # systemctl tulaga ssh.service

Tatou amataina se sauniga taumamao ala SSH i «dns» mai le «sysadmin» masini:

buzz @ sysadmin: ~ $ rm .ssh / known_hosts buzz @ sysadmin: ~ $ ssh root@192.168.10.5 ... root@192.168.10.5's password: ... root @ dns: ~ #

Matua faila faʻatulagaina

O faila autu o le faʻamaumauga o le tino e tusa ma a matou filifiliga i le taimi o le faʻapipiʻiina:

aʻa @ dns: ~ # pusi / etc / au
127.0.0.1 localhost 192.168.10.5 dns.desdelinux.fan dns # O laina ia e manaʻomia mo IPv6 gafatia talimalo :: 1 localhost ip6-localhost ip6-loopback ff02 :: 1 ip6-allnodes ff02 :: 2 ip6-allrouters

aʻa @ dns: ~ # pusi /etc/resolv.conf 
saili mai linux.fan nameserver 127.0.0.1

aʻa @ dns: ~ # igoa ole igoa
dns

aʻa @ dns: ~ # hostname -f
dns.fromlinux.fan

aʻa @ dns: ~ # pusi / etc / network / interfaces
# Lenei faila faʻamatalaina fesoʻotaʻiga fesoʻotaʻiga avanoa i lau faiga # ma faʻafefea ona faʻagaoioia i latou. Mo nisi faʻamatalaga, vaʻai vaʻai (5). punavai /etc/network/interfaces.d/* # O le loopback network interface auto lo iface lo inet loopback # The primary network interface allow-hotplug eth0 iface eth0 inet static address 192.168.10.5 netmask 255.255.255.0 network 192.168.10.0 broadcast 192.168.10.255. 192.168.10.1 gateway 127.0.0.1 # dns- * filifiliga e faʻaogaina e le resolvconf package, pe a faʻapipiʻi dns-nameservers XNUMX dns-search mai linux.fan

Matou te faʻapipiʻi maoaʻe poto masani afifi

root @ dns: ~ # aptitude faʻapipiʻi htop mc deborphan

Faʻamamaina download afifi pe a iai

root @ dns: ~ # aptitude install -f root @ dns: ~ # aptitude purge ~ c root @ dns: ~ # aptitude clean root @ dns: ~ # aptitude autoclean

Matou te faʻapipiʻi le BIND9

  • AO LEI faapipiiina le fusi matou te matua fautuaina asiasi i le itulau DNS ituaiga faʻamaumauga luga o Wikipedia, uma i ona Sipaniolo ma Igilisi faʻaliliuga. O nei ituaiga resitara o mea ia o le a matou faʻaaogaina i le faʻatulagaina o faila Zones, uma tuusaʻo ma Reverse. E matua aʻoaʻoina le iloa o mea o matou feagai.
  • Faʻaauau foi matou te fautua atu faitau le mea lea Talosaga mo Faamatalaga RFC - Talosaga mo Faʻamatalaga, e fesoʻotaʻi vavalalata ma le soifua maloloina gaioiga o le DNS tautua, aemaise lava e tusa ai ma le Recursion i le Root Servers:
    • RFC 1912, 5735, 6303, ma BCP 32: fesoʻotaʻi i localhost
    • RFC 1912, 6303: Sone sitaili mo le tuatusi IPv6 localhost
    • RFC 1912, 5735 ma le 6303: Fesootaʻiga i le Lotoifale Fesoʻotaʻiga - «Lenei» Fesootaiga
    • RFC 1918, 5735 ma le 6303: Fesoasoani Tumaoti Fesoʻotaʻiga
    • RFC 6598: Avanoa Fetufaʻiga o Feiloaʻiga
    • RFC 3927, 5735 ma le 6303: Link-lotoifale / APIPA
    • RFC 5735 ma le 5736: Inisinia Inisinia Galuega Malosiaga faʻatautaia tofiga
    • RFC 5735, 5737 ma le 6303: TEST-NET- [1-3] mo Faʻamaumauga
    • RFC 3849 ma le 6303: IPv6 Faʻataʻitaʻiga Faʻavasega mo Faʻamaumauga
    • BCP 32: Igoa Igoa mo Faʻamaumauga ma Suʻega
    • RFC 2544 ma le 5735: Suʻesuʻeina o le Benchmark Router
    • RFC 5735: Faʻasaoina IANA - Old Vasega E Avanoa
    • RFC 4291: IPv6 Lauga Uma
    • RFC 4193 ma le 6303: IPv6 ULA
    • RFCs 4291 ma 6303: IPv6 Link Lotoifale
    • RFC 3879 ma le 6303: IPv6 Faʻaletonu Nofoaga-Lotoifale tuatusi
    • RFC 4159: IP6.INT ua Faʻaleaogaina

Faʻatulagaga

aʻa @ dns: ~ # aptitude search bind9
p bind9 - Initaneti Domain Name Server p bind9-doc - Faʻamaumauga mo le BIND i bind9-host - Faʻamatalaga o le 'host' o loʻo fusifusia ma le BIND 9.X p bind9utils - O mea faigaluega mo le BIND p gforge-dns-bind9 - mea faigaluega atinaʻe faʻatasi - DNS management (faʻaaogaina le Bind9) i O le libbind9-90 - BIND9 Shared Library faʻaoga e le BIND

Faʻata foʻi ona tamoʻe sailiga faʻaalia ~ dbind9

aʻa @ dns: ~ # aptitude faʻapipiʻi bind9

aʻa @ dns: ~ # systemctl toe amata bind9.service

aʻa @ dns: ~ # systemctl tulaga bind9.service
● bind9.service - BIND Domain Name Server Loaded: utaina (/lib/systemd/system/bind9.service; mafai) Faʻasolo i totonu: /run/systemd/generator/bind9.service.d └─50-insserv.conf- $ named.conf
   Toaga: toaga (tamoʻe) talu mai Fri 2017-02-03 10:33:11 EST; 1s talu ai Docs: man: igoa (8) Faʻagasologa: 1460 ExecStop = / usr / sbin / rndc taofi (code = exited, tulaga = 0 / MANUIA) Autu PID: 1465 (igoa) CGroup: /system.slice/bind9.service └─1465 / usr / sbin / named -f -u bind Feb 03 10:33:11 dns igoa [1465]: otometi avanoa sone: 8.BD0.1.0.0.2.IP6.ARPA Fepuari 03 10:33:11 dns igoa [1465]: faʻatonuga auala faʻalogo i le 127.0.0.1 # 953 Fepuari 03 10:33:11 dns igoa [1465]: faʻatonutonu auala faʻalogo luga :: 1 # 953 Fepuari 03 10:33:11 dns igoa [1465]: pulea -keys-zone: utaina serial 2 Fep 03 10:33:11 dns igoa [1465]: sone 0.in-addr.arpa/IN: utaina serial 1 Fepuari 03 10:33:11 dns igoa [1465]: sone localhost / IN: utaina serial Fepuari 2 03 10:33:11 dns igoa [1465]: sone 127.in-addr.arpa/IN: utaina serial Feb 1 03 10:33:11 dns igoa [1465]: sone 255.in -addr.arpa/IN: utaina serial 1 Fep 03 10:33:11 dns igoa [1465]: uma sone utaina Fepuari 03:10:33 taʻu igoa [11]: tamoe Fautuaga: O nisi laina na ellipsized, faaaoga -l e faʻaali atoa.

Faʻaleleia faila faʻapipiʻi e le BIND9

I se auala eseʻese i le DNS service configuration i le CentOS ma le openSUSE, i Debian o faila nei e fausia i le tusi faʻasino. / etc / fusifusia:

aa @ dns: ~ # ls -l / etc / bind /
aofaʻi 52 -rw-r - r-- 1 aʻa aʻa 2389 Jun 30 2015 bind.keys -rw-r - r-- 1 aʻa aʻa 237 Jun 30 2015 db.0 -rw-r - r-- 1 aʻa aʻa 271 Jun 30 2015 db.127 -rw-r - r-- 1 aʻa aʻa 237 Jun 30 2015 db.255 -rw-r - r-- 1 aʻa aʻa 353 Jun 30 2015 db.empty -rw- r - r-- 1 aa aʻafia 270 Jun 30 2015 db.local -rw-r - r-- 1 root root 3048 Jun 30 2015 db.root -rw-r - r-- 1 aa fusifusia 463 Jun 30 2015 igoa.conf -rw-r - r-- 1 aʻa fusifusia 490 Jun 30 2015 igoa.conf.default-sone -rw-r - r-- 1 aʻa fusifusia 165 Jun 30 2015 igoa.conf.local -rw -r - r-- 1 aʻa fusifusia 890 Fepuari 3 10:32 igoa.conf.options -rw-r ----- 1 fusifusia fusifusia 77 Fepuari 3 10:32 rndc.key -rw-r - r - 1 aʻa aʻa 1317 Jun 30 2015 zones.rfc1918

O faila uma i luga o loʻo i tusitusiga faigofie. Afai tatou te manaʻo e iloa le uiga ma le anotusi o latou taʻitasi, e mafai ona tatou faia i le faʻaaogaina o tulafono itiiti o pusi, o le lelei faʻataʻitaʻi.

Faʻatasi ma faʻamaumauga

I le tusi tuatusi / usr / share / doc / bind9 o le a tatou maua:

aʻa @ dns: ~ # ls -l / usr / share / doc / bind9
aofaʻi 56 -rw-r - r-- 1 aʻa aʻa 5927 Jun 30 2015 puletaofia -rw-r - r-- 1 aʻa aʻa 19428 30 Jun 2015 1 changelog.Debian.gz -rw-r - r-- 11790 aʻa aʻa 27 Ian 2014 1 FAQ.gz -rw-r - r-- 396 aʻa aʻa 30 Jun 2015 1 TALA FOU.Debian.gz -rw-r - r-- 3362 aʻa aʻa 30 Jun 2015 1 README.Debian. Gz -rw- r - r-- 5840 aʻa aʻa 27 Ianuari 2014 XNUMX README.gz

I faʻamaumauga talu ai, o le a tatou maua ai le anoanoaʻi suʻesuʻega o meafaitino matou te fautuaina le faitauina A o leʻi faʻatulagaina le fusi, ma e oʻo foi i luma o le sailia o le Initaneti mo tala e fesoʻotaʻi ma BIND ma DNS i se tulaga lautele.. O le a tatou faitau i le anotusi o nisi o na faila:

FAQs o Ftalafeagai Afaasee Qmanatu e uiga i le FUA 9

  1. Fesili ma Faʻapipiʻi Fesili - Fesili e uiga i le Faʻatasia ma Faʻapipiʻi
  2. Fetuunaiga ma Faʻatulaga Fesili - Fesili e uiga i faʻatulagaina ma faʻalelei
  3. Fesili Faagaioiga - Fesili e uiga i le Faagaioiga
  4. Fesili Lautele - Faʻamatalaga lautele
  5. Faʻagaioiga-Faʻatonu Faʻapitoa fesili - Fesili faʻapitoa e uiga i Faʻagaioiga Faʻagaioiga
    1. HPUX
    2. Linux
    3. pupuni
    4. FreeBSD
    5. Solaris
    6. Apple Mac OSX

TALA FOU. Debian.gz

TALA FOU. Debian i le aotelega taʻu mai ia i tatou o tapulaʻa faataga-fesili-cache y faʻataga-toe faʻafoi ua mafai e ala i le le masani ai mo ACLs o loʻo faʻapipiʻi i le BIND -fausiaina- 'localnets'ma'localhost'. E faʻailoa mai ai foʻi ia matou, o suiga le masani ai na faia ina ia faʻaititia ai le faʻaosofia o mea nana i se osofaʻiga e Faʻaipoipo mai fesoʻotaʻiga i fafo.

E siaki le mea o loʻo tusia i le parakalafa talu ai, pe a fai mai se masini i luga o le upega tafailagi lava ia 192.168.10.0 / 24 o le tasi lea i la matou faʻataʻitaʻiga, matou te faia se talosaga DNS i luga o le vaega mai linux.net, ma i le taimi lava e tasi i luga o le sapalai lava ia dns.fromlinux.fan matou te faʻatinoina siʻusiʻu -f / var / log / syslog o le a matou mauaina mea nei:

buzz @ sysadmin: ~ $ eli localhost
.... ;; OPT PSEUDOSECTION :; EDNS: lomiga: 0, fuʻa:; udp: 4096 ;; FESILI FESILI:; localhost. I LE ;; TALI Vaega: localhost. 604800 I LE 127.0.0.1 ;; PULEGA O TUSI: localhost. 604800 I NS lotoifale. ;; FUAFUAGA FAʻAOPOOPO: localhost. 604800 I AAAA :: 1

buzz @ sysadmin: ~ $ eli mai le linux.net
....
;; OPT PSEUDOSECTION :; EDNS: lomiga: 0, fuʻa:; udp: 4096 ;; FESILI FESILI :; desdelinux.net. I LE A
....
aʻa @ dns: ~ # tail -f / var / log / syslog ....
Fep 4 13:04:31 dns igoa [1602]: mea sese (fesoʻotaʻiga le mafai ona mauaina) fofo 'desdelinux.net/A/IN': 2001: 7fd :: 1 # 53 Fepuari 4 13:04:31 dns igoa [1602]: mea sese (fesoʻotaʻiga le mafai ona mauaina) fofo 'desdelinux.net/A/IN': 2001: 503: c27 :: 2:30 53
....

Le iʻuga o syslog e umi atu ona o le sailiga mo aʻa tautua e le BIND. Ioe le faila /etc/resolv.conf i le 'au sysadmin.fromlinux.fan tusi i le DNS 192.168.10.5.

Mai le faʻatinoina o isi muamua tulafono e mafai ona tatou aumaia ni faaiuga muamua:

  • O le BIND ua faʻatulagaina e ala i le le masani ai o se Cache Server aoga e aunoa ma le manaʻoga mo mulimuli ane configurations, ma tali DNS fesili mo le localnets ma le localhost
  • Toe faʻataʻitaʻi - Toe faimalaga ua mafai mo localnets ma le localhost
  • Leai se ofisa pule
  • E le pei o le CentOS, lea na matou folafolaina ai le tapulaʻa «Faʻalogo-i luga o le taulaga 53 {127.0.0.1; 192.168.10.5; }; » manino faʻalogo mo DNS talosaga i luga o le network interface 192.168.10.5 DNS lava ia, i Debian e le manaʻomia aua e lagolagoina ai talosaga DNS mo localnets ma le localhost lē mafai Siaki mea o i totonu o le faila /etc/bind/named.conf.options ma o le a latou vaʻaia e leai se faʻamatalaga faʻalogo-i.
  • IPv4 ma IPv6 fesili e faʻatagaina

Afai naʻo le faitau ma faʻamatala -o se apa e pei ona matou fai atu ai i Cuba- le potu teu TALA FOU. Debian.gz Ua matou mauaina ni faaiuga lelei e faʻatagaina ai matou ona iloa atili atili e uiga i le Default Configuration Philosophy o le Team Debian e faʻatatau i le BIND, o a isi mea mananaia e mafai ona tatou iloa mai le faʻaauau pea ona faitau faila o le Faʻatasi Faʻamaumauga?.

FAITAU.Debian.gz

FAITAU.Debian faʻailoa mai ia matou -i totonu o le tele o isi itu- o le Faʻalautelega Puipuiga mo le Domain Name System - Igoa ole Igoa ole Igoa ole Igilisi o DNSSEC, ua mafai; ma toe faʻamautinoa mai o le faʻatulagaina le aoga e aoga mo le tele o 'auʻauna (laupepa - laupepa laulaau faʻasino i laʻau o le laʻau laʻau) e aunoa ma le manaʻoga mo faʻalavelave a tagata faʻaoga.

  • DNSSEC fai mai Wikipedia: O le Domain Name System Security Extensions (DNSSEC) o se seti o faʻamatalaga o le Inisinia Task Force (IETF) e faʻamautuina nisi ituaiga o faʻamatalaga saunia e le igoa system igoa igoa (DNS) faʻaaogaina i le Initaneti Protocol (IP). O se seti o faʻalautelega i le DNS o loʻo tuʻuina atu ai i tagata DNS (poʻo iugafono) le faʻamaoniga o le DNS data source, faʻamaonia le faʻafitia o le i ai ma le faʻamaoni o faʻamaumauga, ae le o maua pe faʻamaonia.

E uiga i le Polokalame faʻatulagaina taʻu mai ia matou o Static Configuration Files, o Zone Files mo Root Servers, ma le Forward and Reverse Zones o le localhost latou i totonu / etc / fusifusia.

Le Temoni Galulue Faʻasino igoa es / var / cache / fusifusia soʻo se faila le tumau na faia e le igoa e pei o faʻamatalaga e galue ai o se Slave Server, o loʻo tusia i le File System / var, o fea na latou iai.

E le pei o faʻamatalaga muamua o le BIND package mo Debian, le faila igoa.conf ma le db. * sapalai, latou ua faaigoaina o configurations faila. I se auala afai matou te manaʻomia se DNS Server e galue faʻapitoa o se Cache Server ma e le o se Faʻamalosiʻau mo seisi lava, e mafai ona tatou faʻaaogaina a o faʻapipiʻi ma faʻamau e le masani ai.

Afai e te manaʻomia le faʻatinoina o se DNS Pule, latou fautua mai e tuʻu faila o le Master Zones i le faʻasino lava e tasi / etc / fusifusia. Afai o le faigata o vaega na o le igoa o le a avea ma Faʻatonutonu manaʻomia ia, e fautuaina e faia se subdirectory fausaga, e faʻasino i le sone faila matua i totonu o le faila igoa.conf.

Soo se Faila Sone mo le igoa galue o le Slave Server tatau ona tu i totonu / var / cache / fusifusia.

O le Sone Faila e noatia i Dynamic Updates e se DHCP poʻo le faʻatonuga fa'afouga, e tatau ona teuina i totonu / var / lib / fusifusia.

Afai e faʻaaoga le operating system tagata faʻaopoopo, o le faʻapipiʻiina faʻamatalaga faʻatoa mafai ona galue ma le le masani faʻamau faʻamau. Suiga mulimuli ane ile faʻatulagaina ole igoa Atonu latou te manaʻomia ni suiga i le apparmor profile. Asiasi mai https://wiki.ubuntu.com/DebuggingApparmor ae le i faʻatumuina se pepa faʻamaonia a meaola laʻitiiti i lena tautua.

E i ai le tele o mataupu fesoʻotaʻi ma le tamoe Debian BIND i se Chroot Cage - falepuipui falepuipui. Asiasi i le http://www.tldp.org/HOWTO/Chroot-BIND-HOWTO.html mo nisi faʻamatalaga.

Isi faʻamatalaga

tamaloa igoa, tamaloa igoa. conf, tamaloa igoa-checkconf, tamaloa igoa-checkzone, tamaloa rndc, ma isi

aʻa @ dns: ~ # faʻaigoaina -v
BIND 9.9.5-9 + deb8u1-Debian (Extension Support Version)

aʻa @ dns: ~ # faʻaigoaina -V
BIND 9.9.5-9 + deb8u1-Debian (Extension Support Version) fausia e fai ma '--prefix = / usr' '--mandir = / usr / share / man' \ '--infodir = / usr / share / info' '--sysconfdir = / etc / bind' \ '- -localstatedir = / var '' --enable-threads '' --enable-largefile '\' --with-libtool '' --enable-shared '' --enable-static '\' --with-openssl = / usr '' --with-gssapi = / usr '' --with-gnu-ld '\' --with-geoip = / usr '' --with-atf = no '' --enable-ipv9 '' --enable-rrl '\' --enable-filter-aaaa '\' CFLAGS = -fno-ketat-aliasing -fno-delete-null-pointer-siaki -DDIG_SIGCHASE -O8 'tuufaatasia e GCC 50 faʻaaogaina OpenSSL lomiga : OpenSSL 6k 2 Ian 4.9.2 faʻaaogaina le libxml1.0.1 lomiga: 8

aʻa @ dns: ~ # ps -e | grep igoa
  408? 00:00:00 faʻaigoaina

aʻa @ dns: ~ # ps -e | fusi grep
  339? 00:00:00 rpcbind

aʻa @ dns: ~ # ps -e | grep fusi9
aʻa @ dns: ~ #

aʻa @ dns: ~ # ls / var / run / names /
igoa.pid sauniga.key  
root @ dns: ~ # ls -l /var/run/named/named.pid 
-rw-r - r-- 1 bind bind 4 Feb 4 13:20 /var/run/named/named.pid

aʻa @ dns: ~ # rndc tulaga
faʻamatalaga: 9.9.5-9 + deb8u1-Debian CPUs maua: 9 tagata faigaluega filo: 8 UDP faʻalogologo i leisi interface: 50 numera o sone: 1 debug tulaga: 1 xfers tamoʻe: 1 xfers tolopo: 100 soa fesili i le alualu i luma: 0 fesili logging ua ESE recursive tagata faʻatau: 0/0/0 tcp tagata o tausia: 0/0 tautua o loʻo ola ma tamoe
  • E le faʻafitia le taua o le faʻafesoʻotaʻia o le Faʻamaumauga faʻapipiʻi ma le BIND9 afifi i luma o se isi.

fusia9-doc

root @ dns: ~ # aptitude faʻapipiʻi bind9-doc sootaga2
aʻa @ dns: ~ # dpkg -L bind9-doc

Afifi fusia9-doc faʻapipiʻi, faʻatasi ai ma isi faʻamatalaga aoga, le BIND 9 Administrator Reference Manual. Ina ia maua le tusi lesona-i le Igilisi- matou te faʻatinoina:

aʻa @ dns: ~ # sootaga2 faila: ///usr/share/doc/bind9-doc/arm/Bv9ARM.html
BIND 9 Administrator Reference Manual Manual (c) 2004-2013 Internet Systems Consortium, Inc. ("ISC") Pule Tau Fatuga (c) 2000-2003 Initaneti Polokalama Komesina.

Matou te talosia ia tou fiafia e faitau.

  • A aunoa ma le tuua o le fale, ua i ai ia matou Abundant Faʻamaumauga aloaia e uiga i le BIND ma e uiga i le DNS tautua i le lautele.

Matou te configure le FUSI i le faiga Debian

/etc/bind/named.conf "le pule aʻoga"

aa @ dns: ~ # nano /etc/bind/named.conf
// O le faila faila muamua lea mo le BIND DNS server igoa.
//
// Faʻamolemole faitau /usr/share/doc/bind9/README.Debian.gz mo faʻamatalaga i luga o le
// fausaga o BIND config files i Debian, * MUA * e te faʻapitoa
// lenei faila faʻatulagaina.
//
// Afai o naʻo lou faʻaopopoina o sone, faʻamolemole fai i le /etc/bind/named.conf.local

aofia ai le "/etc/bind/named.conf.options";
aofia ai le "/etc/bind/named.conf.local";
aofia ai "/etc/bind/named.conf.default-zones";

E manaʻomia le faʻaliliuga ile ulutala tusia?

/etc/bind/named.conf.options

aʻa @ dns: ~ # cp /etc/bind/named.conf.options /etc/bind/named.conf.options.original

aʻa @ dns: ~ # nano /etc/bind/named.conf.options
filifiliga {Directory "/ var / cache / bind"; // Afai e i ai se firewall i le va o oe ma nameservers e te manaʻo ai // e talanoa i ai, oe ono manaʻomia e lipea le firewall e faʻatagaina ai le tele // port e talanoa. Vaʻai http://www.kb.cert.org/vuls/id/800113 // A faʻapea na tuʻuina atu e lau ISP se tasi pe sili atu tuatusi IP mo fale o malo // nameservers, oe ono manaʻo e faʻaaoga ia latou o ni tagata faʻasalalau. // Uncomment the following block, and insert the tuatusi sui le // the all-0's placeholder. // forwarders {// 0.0.0.0; //}; // =________________________________________________________ ==== $ // Afai BIND logs mea sese tala e uiga i le aʻa ki ua maeʻa, // oe o le a manaʻomia e faʻafou au ki. Vaʻai https://www.isc.org/bind-keys // =________________________________________ =________________________________________ $

    // Matou te le manaʻo i le DNSSEC
        dnssec-mafai leai;
        //dnssec-faamaoniga taavale;

        auth-nxdomain leai; # tausisi i le RFC1035

 // Matou te le tau faʻalogo mo IPv6 tuatusi
        // faalogo-i-v6 {soo se; };
    faʻalogo-i-v6 {leai; };

 // Mo siaki mai localhost ma sysadmin
    // through dig desdelinux.fan axfr // E leai se matou Slave DNS ... e oʻo mai i le taimi nei
 faataga-fesiitai {localhost; 192.168.10.1; };
};

aʻa @ dns: ~ # faʻaigoa-checkconf 
aʻa @ dns: ~ #

/etc/bind/named.conf.local

I le ulutala faʻaalia o lenei faila, latou te fautuaina le aofia ai o le Sone faʻasino atu i le RFC-1918 faamatalaina i le faila /etc/bind/zones.rfc1918. O le tuʻufaʻatasia o nei sone i le lotoifale e maua ai soʻo se fesili e uiga ia latou e le tuʻua le upega tafaʻilagi i le aʻa aʻa, e lua ona taua taua:

  • Vave faʻapitonuʻu iugafono mo tagata faʻaoga
  • E le fausiaina le talafeagai - pe faʻagaeʻetia - feoaiga i aʻa tautua.

Ia te aʻu lava ia, e leai saʻu fesoʻotaʻiga i le Initaneti e suʻea ai le Toe Faʻaleleia poʻo le Faʻafoʻi Atu. Ae ui i lea, ma talu ai matou te leʻi faʻaleaogaina le Recursion i le names.conf.options faila -e ala i le recursion leai; - e mafai ona tatou faʻaaogaina vaega ua taua ma isi o loʻo ou faʻamatalaina i lalo.

A faʻapipiʻi le BIND 9.9.7 i luga o le FreeBSD 10.0 Operating System, ma e faʻapea foi - ma e leai se mea e tupu ai- Free Software, le config file /usr/local/etc/namedb/named.conf.sample O loʻo iai le faʻasologa o sone e fautuaina ai le tautuaina o le atunuʻu i le -also- maua le faʻamanuiaga ua taua muamua.

Ina ia aua neʻi suia le faʻavae muamua o le BIND i Debian, matou te fautuaina le faia o le faila /etc/bind/zones.rfcFreeBSD ma faaaofia ai i le /etc/bind/named.conf.local ma mea o loʻo faʻailoa mai lalo, ma ala - ala i faila ua uma ona fetuunai ia Debian:

aa @ dns: ~ # nano /etc/bind/zones.rfcFreeBSD
// Tulaga Fetufa'atasi Avanoa (RFC 6598)
zone "64.100.in-addr.arpa" { type master; file "/etc/bind/db.empty"; };
zone "65.100.in-addr.arpa" { type master; file "/etc/bind/db.empty"; };
zone "66.100.in-addr.arpa" { type master; file "/etc/bind/db.empty"; };
zone "67.100.in-addr.arpa" { type master; file "/etc/bind/db.empty"; };
zone "68.100.in-addr.arpa" { type master; file "/etc/bind/db.empty"; };
zone "69.100.in-addr.arpa" { type master; file "/etc/bind/db.empty"; };
zone "70.100.in-addr.arpa" { type master; file "/etc/bind/db.empty"; };
zone "71.100.in-addr.arpa" { type master; file "/etc/bind/db.empty"; };
zone "72.100.in-addr.arpa" { type master; file "/etc/bind/db.empty"; };
zone "73.100.in-addr.arpa" { type master; file "/etc/bind/db.empty"; };
zone "74.100.in-addr.arpa" { type master; file "/etc/bind/db.empty"; };
zone "75.100.in-addr.arpa" { type master; file "/etc/bind/db.empty"; };
zone "76.100.in-addr.arpa" { type master; file "/etc/bind/db.empty"; };
zone "77.100.in-addr.arpa" { type master; file "/etc/bind/db.empty"; };
zone "78.100.in-addr.arpa" { type master; file "/etc/bind/db.empty"; };
zone "79.100.in-addr.arpa" { type master; file "/etc/bind/db.empty"; };
zone "80.100.in-addr.arpa" { type master; file "/etc/bind/db.empty"; };
zone "81.100.in-addr.arpa" { type master; file "/etc/bind/db.empty"; };
zone "82.100.in-addr.arpa" { type master; file "/etc/bind/db.empty"; };
zone "83.100.in-addr.arpa" { type master; file "/etc/bind/db.empty"; };
zone "84.100.in-addr.arpa" { type master; file "/etc/bind/db.empty"; };
zone "85.100.in-addr.arpa" { type master; file "/etc/bind/db.empty"; };
zone "86.100.in-addr.arpa" { type master; file "/etc/bind/db.empty"; };
zone "87.100.in-addr.arpa" { type master; file "/etc/bind/db.empty"; };
zone "88.100.in-addr.arpa" { type master; file "/etc/bind/db.empty"; };
zone "89.100.in-addr.arpa" { type master; file "/etc/bind/db.empty"; };
zone "90.100.in-addr.arpa" { type master; file "/etc/bind/db.empty"; };
zone "91.100.in-addr.arpa" { type master; file "/etc/bind/db.empty"; };
zone "92.100.in-addr.arpa" { type master; file "/etc/bind/db.empty"; };
zone "93.100.in-addr.arpa" { type master; file "/etc/bind/db.empty"; };
zone "94.100.in-addr.arpa" { type master; file "/etc/bind/db.empty"; };
zone "95.100.in-addr.arpa" { type master; file "/etc/bind/db.empty"; };
zone "96.100.in-addr.arpa" { type master; file "/etc/bind/db.empty"; };
zone "97.100.in-addr.arpa" { type master; file "/etc/bind/db.empty"; };
zone "98.100.in-addr.arpa" { type master; file "/etc/bind/db.empty"; };
zone "99.100.in-addr.arpa" { type master; file "/etc/bind/db.empty"; };
zone "100.100.in-addr.arpa" { type master; file "/etc/bind/db.empty"; };
zone "101.100.in-addr.arpa" { type master; file "/etc/bind/db.empty"; };
zone "102.100.in-addr.arpa" { type master; file "/etc/bind/db.empty"; };
zone "103.100.in-addr.arpa" { type master; file "/etc/bind/db.empty"; };
zone "104.100.in-addr.arpa" { type master; file "/etc/bind/db.empty"; };
zone "105.100.in-addr.arpa" { type master; file "/etc/bind/db.empty"; };
zone "106.100.in-addr.arpa" { type master; file "/etc/bind/db.empty"; };
zone "107.100.in-addr.arpa" { type master; file "/etc/bind/db.empty"; };
zone "108.100.in-addr.arpa" { type master; file "/etc/bind/db.empty"; };
zone "109.100.in-addr.arpa" { type master; file "/etc/bind/db.empty"; };
zone "110.100.in-addr.arpa" { type master; file "/etc/bind/db.empty"; };
zone "111.100.in-addr.arpa" { type master; file "/etc/bind/db.empty"; };
zone "112.100.in-addr.arpa" { type master; file "/etc/bind/db.empty"; };
zone "113.100.in-addr.arpa" { type master; file "/etc/bind/db.empty"; };
zone "114.100.in-addr.arpa" { type master; file "/etc/bind/db.empty"; };
zone "115.100.in-addr.arpa" { type master; file "/etc/bind/db.empty"; };
zone "116.100.in-addr.arpa" { type master; file "/etc/bind/db.empty"; };
zone "117.100.in-addr.arpa" { type master; file "/etc/bind/db.empty"; };
zone "118.100.in-addr.arpa" { type master; file "/etc/bind/db.empty"; };
zone "119.100.in-addr.arpa" { type master; file "/etc/bind/db.empty"; };
zone "120.100.in-addr.arpa" { type master; file "/etc/bind/db.empty"; };
zone "121.100.in-addr.arpa" { type master; file "/etc/bind/db.empty"; };
zone "122.100.in-addr.arpa" { type master; file "/etc/bind/db.empty"; };
zone "123.100.in-addr.arpa" { type master; file "/etc/bind/db.empty"; };
zone "124.100.in-addr.arpa" { type master; file "/etc/bind/db.empty"; };
zone "125.100.in-addr.arpa" { type master; file "/etc/bind/db.empty"; };
zone "126.100.in-addr.arpa" { type master; file "/etc/bind/db.empty"; };
zone "127.100.in-addr.arpa" { type master; file "/etc/bind/db.empty"; };

// Link-local / APIPA (RFCs 3927, 5735 ma 6303)
sone "254.169.in-addr.arpa" {ituaiga matai; faila "/etc/bind/db.empty"; };

// IETF protocol tofiga (RFCs 5735 ma 5736)
sone "0.0.192.in-addr.arpa" {ituaiga matai; faila "/etc/bind/db.empty"; };

// TEST-NET- [1-3] mo Faʻamaumauga (RFCs 5735, 5737 ma 6303)
sone "2.0.192.in-addr.arpa" {ituaiga matai; faila "/etc/bind/db.empty"; }; sone "100.51.198.in-addr.arpa" {ituaiga matai; faila "/etc/bind/db.empty"; }; sone "113.0.203.in-addr.arpa" {ituaiga matai; faila "/etc/bind/db.empty"; };

// IPv6 Faʻataʻitaʻiga Faʻavasega mo Faʻamaumauga (RFCs 3849 ma 6303)
sone "8.bd0.1.0.0.2.ip6.arpa" {ituaiga matai; faila "/etc/bind/db.empty"; };

// Nofoaga Igoa mo Faʻamaumauga ma Suʻega (BCP 32)
sone "suʻega" {type master; faila "/etc/bind/db.empty"; }; sone "faʻataʻitaʻiga" {type master; faila "/etc/bind/db.empty"; }; sone "le aoga" {type master; faila "/etc/bind/db.empty"; }; sone "example.com" {ituaiga pule; faila "/etc/bind/db.empty"; }; sone "example.net" {ituaiga pule; faila "/etc/bind/db.empty"; }; sone "example.org" {ituaiga matai; faila "/etc/bind/db.empty"; };

// Router Benchmark Testing (RFCs 2544 ma 5735)
sone "18.198.in-addr.arpa" {ituaiga matai; faila "/etc/bind/db.empty"; }; sone "19.198.in-addr.arpa" {ituaiga matai; faila "/etc/bind/db.empty"; };

// IANA Reservation - Old Class E Space (RFC 5735)
sone "240.in-addr.arpa" {ituaiga matai; faila "/etc/bind/db.empty"; }; sone "241.in-addr.arpa" {ituaiga matai; faila "/etc/bind/db.empty"; }; sone "242.in-addr.arpa" {ituaiga matai; faila "/etc/bind/db.empty"; }; sone "243.in-addr.arpa" {ituaiga matai; faila "/etc/bind/db.empty"; }; sone "244.in-addr.arpa" {ituaiga matai; faila "/etc/bind/db.empty"; }; sone "245.in-addr.arpa" {ituaiga matai; faila "/etc/bind/db.empty"; }; sone "246.in-addr.arpa" {ituaiga matai; faila "/etc/bind/db.empty"; }; sone "247.in-addr.arpa" {ituaiga matai; faila "/etc/bind/db.empty"; }; sone "248.in-addr.arpa" {ituaiga matai; faila "/etc/bind/db.empty"; }; sone "249.in-addr.arpa" {ituaiga matai; faila "/etc/bind/db.empty"; }; sone "250.in-addr.arpa" {ituaiga matai; faila "/etc/bind/db.empty"; }; sone "251.in-addr.arpa" {ituaiga matai; faila "/etc/bind/db.empty"; }; sone "252.in-addr.arpa" {ituaiga matai; faila "/etc/bind/db.empty"; }; sone "253.in-addr.arpa" {ituaiga matai; faila "/etc/bind/db.empty"; }; sone "254.in-addr.arpa" {ituaiga matai; faila "/etc/bind/db.empty"; };

// IPv6 Lauga Uiga (RFC 4291)
sone "1.ip6.arpa" {ituaiga matai; faila "/etc/bind/db.empty"; }; sone "3.ip6.arpa" {ituaiga matai; faila "/etc/bind/db.empty"; }; sone "4.ip6.arpa" {ituaiga matai; faila "/etc/bind/db.empty"; }; sone "5.ip6.arpa" {ituaiga matai; faila "/etc/bind/db.empty"; }; sone "6.ip6.arpa" {ituaiga matai; faila "/etc/bind/db.empty"; }; sone "7.ip6.arpa" {ituaiga matai; faila "/etc/bind/db.empty"; }; sone "8.ip6.arpa" {ituaiga matai; faila "/etc/bind/db.empty"; }; sone "9.ip6.arpa" {ituaiga matai; faila "/etc/bind/db.empty"; }; sone "a.ip6.arpa" {ituaiga matai; faila "/etc/bind/db.empty"; }; sone "b.ip6.arpa" {ituaiga matai; faila "/etc/bind/db.empty"; }; sone "c.ip6.arpa" {ituaiga matai; faila "/etc/bind/db.empty"; }; sone "d.ip6.arpa" {ituaiga matai; faila "/etc/bind/db.empty"; }; sone "e.ip6.arpa" {ituaiga matai; faila "/etc/bind/db.empty"; }; sone "0.f.ip6.arpa" {ituaiga matai; faila "/etc/bind/db.empty"; }; sone "1.f.ip6.arpa" {ituaiga matai; faila "/etc/bind/db.empty"; }; sone "2.f.ip6.arpa" {ituaiga matai; faila "/etc/bind/db.empty"; }; sone "3.f.ip6.arpa" {ituaiga matai; faila "/etc/bind/db.empty"; }; sone "4.f.ip6.arpa" {ituaiga matai; faila "/etc/bind/db.empty"; }; sone "5.f.ip6.arpa" {ituaiga matai; faila "/etc/bind/db.empty"; }; sone "6.f.ip6.arpa" {ituaiga matai; faila "/etc/bind/db.empty"; }; sone "7.f.ip6.arpa" {ituaiga matai; faila "/etc/bind/db.empty"; }; sone "8.f.ip6.arpa" {ituaiga matai; faila "/etc/bind/db.empty"; }; sone "9.f.ip6.arpa" {ituaiga matai; faila "/etc/bind/db.empty"; }; sone "afip6.arpa" {type master; faila "/etc/bind/db.empty"; }; sone "bfip6.arpa" {ituaiga matai; faila "/etc/bind/db.empty"; }; sone "0.efip6.arpa" {ituaiga matai; faila "/etc/bind/db.empty"; }; sone "1.efip6.arpa" {ituaiga matai; faila "/etc/bind/db.empty"; }; sone "2.efip6.arpa" {ituaiga matai; faila "/etc/bind/db.empty"; }; sone "3.efip6.arpa" {ituaiga matai; faila "/etc/bind/db.empty"; }; sone "4.efip6.arpa" {ituaiga matai; faila "/etc/bind/db.empty"; }; sone "5.efip6.arpa" {ituaiga matai; faila "/etc/bind/db.empty"; }; sone "6.efip6.arpa" {ituaiga matai; faila "/etc/bind/db.empty"; }; sone "7.efip6.arpa" {ituaiga matai; faila "/etc/bind/db.empty"; };

// IPv6 ULA (RFCs 4193 ma 6303)
sone "CFip6.arpa" {ituaiga matai; faila "/etc/bind/db.empty"; }; sone "dfip6.arpa" {ituaiga matai; faila "/etc/bind/db.empty"; };

// IPv6 Link Lotoifale (RFCs 4291 ma 6303)
sone "8.efip6.arpa" {ituaiga matai; faila "/etc/bind/db.empty"; }; sone "9.efip6.arpa" {ituaiga matai; faila "/etc/bind/db.empty"; }; sone "aefip6.arpa" {type master; faila "/etc/bind/db.empty"; }; sone "befip6.arpa" {ituaiga matai; faila "/etc/bind/db.empty"; };

// IPv6 Faʻaletonu Nofoaga-Lotoifale tuatusi (RFCs 3879 ma 6303)
sone "cefip6.arpa" {ituaiga matai; faila "/etc/bind/db.empty"; }; sone "defip6.arpa" {ituaiga matai; faila "/etc/bind/db.empty"; }; sone "eefip6.arpa" {ituaiga matai; faila "/etc/bind/db.empty"; }; sone "fefip6.arpa" {ituaiga matai; faila "/etc/bind/db.empty"; };

// IP6.INT ua Faʻaleaogaina (RFC 4159)
sone "ip6.int" {ituaiga matai; faila "/etc/bind/db.empty"; };

E ui lava ua matou aveʻesea le avanoa e faʻalogo ai i IPv6 talosaga i a matou faʻataʻitaʻiga, e aoga le aofia ai o IPv6 sone i le faila talu ai mo i latou e manaʻomia.

O le aano mulimuli o /etc/bind/named.conf.local es:

root @ dns: ~ # nano /etc/bind/named.conf.local
// // Fai se mea e faʻatulaga ai lou lotoifale ii // // Mafaufau e faʻaopopo le 1918 sone iinei, pe a fai e le faʻaaogaina i lau // faʻalapotopotoga
aofia ai le "/etc/bind/zones.rfc1918"; aofia ai le "/etc/bind/zones.rfcFreeBSD";

// Faʻalauiloaina o le igoa, ituaiga, nofoaga, ma le faʻafouga faʻatagaina
// of the DNS Records Zones // O Sone uma e lua o MASTERS
sone "desdelinux.fan" {
 ituaiga matai;
 faila "/var/lib/bind/db.desdelinux.fan";
};

sone "10.168.192.in-addr.arpa" {
 ituaiga matai;
 faila "/var/lib/bind/db.10.168.192.in-addr.arpa";
};

aʻa @ dns: ~ # faʻaigoa-siaki faʻavae @ dns: ~ #

Matou te fausiaina faila mo Sone taʻitasi

O mea o faila i vaega taʻitasi e mafai ona kopiina faʻapitoa mai le tusitusiga «DNS ma le DHCP ile CentOS 7«, Pau lava le mea ia matou faʻaeteete e sui le nofoaga faʻatulagaina i / var / lib / fusifusia:

[root @ dns ~] # nano /var/lib/bind/db.fromlinux.fan
$ TTL 3H @ I SOA dns.fromlinux.fan. root.dns.fromlinux.fan. (1; serial 1D; faʻafouina 1H; toe taumafai 1W; faamutaina 3H); maualalo pe; Le lelei le taimi o le teuina o le ola e ola ai; @ I NS dns.fromlinux.fan. @ I MX 10 meli.fromlinux.fan. @ I TXT "FromLinux, lau Blog faʻapitoa mo Free Software"; sysadmin IN A 192.168.10.1 ad-dc IN A 192.168.10.3 fileserver IN A 192.168.10.4 dns IN A 192.168.10.5 proxyweb IN A 192.168.10.6 blog IN A 192.168.10.7 ftpserver IN A 192.168.10.8 mail IN A 192.168.10.9

[root @ dns ~] # nano /var/lib/bind/db.10.168.192.in-addr.arpa
$ TTL 3H @ I SOA dns.fromlinux.fan. root.dns.fromlinux.fan. (1; serial 1D; faʻafouina 1H; toe taumafai 1W; faamutaina 3H); maualalo pe; Le lelei le taimi o le teuina o le ola e ola ai; @ I NS dns.fromlinux.fan. ; 1 I PTR sysadmin.fromlinux.fan. 3 I PTR ad-dc.fromlinux.fan. 4 I PTR faila faila.fromlinux.fan. 5 I PTR dns.fromlinux.fan. 6 I PTR sui sui.desdelinux.fan. 7 I PTR blog.desdelinux.fan. 8 I PTR ftpserver.fromlinux.fan. 9 I PTR meli.fromlinux.fan.

Matou te siakiina le faʻasologa o sone taʻitasi

aʻa @ dns: ~ # faʻaigoaina-siaki mai linux.fan / var / lib / bind / db. mai le linux.fan 
sone mai le linux.fan/IN: utaina serial 1 OK

root @ dns: ~ # named-checkzone 10.168.192.in-addr.arpa /var/lib/bind/db.10.168.192.in-addr.arpa 
sone 10.168.192.in-addr.arpa/IN: utaina serial 1 OK

Siakiina ole tulaga masani ole faʻamau

aʻa @ dns: ~ # faʻaigoa-checkconf -zp
  • Mulimuli i taualumaga o le suia o le igoa.conf E tusa ai ma o matou manaʻoga ma siaki, ma fausia faila sone taʻitasi ma siaki ia, matou te masalosalo o le a matou feagai ma sili atu faʻafitauli faigata. Ile iʻuga ua matou iloa ose taʻaloga a le tama, ma le tele o manatu ma faʻasologa faʻanumera. 😉

O siaki na faʻafoʻi maia faʻaiuga lelei, o le mea lea e mafai ai ona tatou toe amataina le faʻamau - igoa.

Matou toe amataina le faʻamau ma siaki lona tulaga

[root @ dns ~] # systemctl toe amata le bind9.service
[root @ dns ~] # systemctl tulaga bind9.service
● bind9.service - BIND Domain Name Server Loaded: utaina (/lib/systemd/system/bind9.service; mafai) Faʻapaʻu-I: /run/systemd/generator/bind9.service.d └─50-insserv.conf- $ named.conf Active: toaga (tamoʻe) talu mai le Sun 2017-02-05 07:45:03 EST; 5s talu ai Docs: man: igoa (8) Faʻagasologa: 1345 ExecStop = / usr / sbin / rndc taofi (code = exited, tulaga = 0 / MANUIA) Autu PID: 1350 (igoa) CGroup: /system.slice/bind9.service └─1350 / usr / sbin / igoa -f -u bind Feb 05 07:45:03 dns igoa [1350]: sone 1.f.ip6.arpa/IN: utaina serial 1 Fepuari 05 07:45:03 dns igoa [1350]: sone afip6.arpa/IN: utaina serial 1 Fepuari 05 07:45:03 dns igoa [1350]: sone localhost / IN: utaina serial 2 Feb 05 07:45:03 dns igoa [1350]: sone tofotofoga / IN: utaina serial 1 Fepuari 05 07:45:03 dns igoa [1350]: sone faʻataʻitaʻiga / IN: utaina serial 1 Fep 05 07:45:03 dns igoa [1350]: sone 5.efip6.arpa/IN: utaina serial 1 Fepuari 05 07:45:03 dns igoa [1350]: sone bfip6.arpa/IN: utaina serial 1 Feb 05 07:45:03 dns igoa [1350]: sone ip6.int/IN: utaina serial 1 Fepuari 05 07:45:03 dns igoa [1350]: uma sone utaina Fep 05 07:45:03 dns igoa [1350]: tamoe

Afai tatou te maua soʻo se ituaiga o mea sese i le faʻatinoina o le mulimuli faʻatonuga, e tatau ona tatou toe amataina le igoa.service ma toe siaki lau tulaga. Afai ua o ese mea sese, ua amata ma le manuia le tautua. A leai, e tatau ona tatou faʻatinoina se iloiloga maeʻaeʻa o faila uma na fesuiaʻi ma faia, ma toe fai le faiga.

Siaki

O siaki e mafai ona faia i luga o le tutusa tautua pe i luga o se masini fesoʻotaʻi i le LAN. Matou te fiafia e faia ia mea mai le 'au sysadmin.fromlinux.fan lea na matou tuʻuina iai le faʻatagaga e faia ai Sone Fetufaʻiga. O le faila /etc/resolv.conf o le 'au lea o loʻo mulimuli mai:

buzz @ sysadmin: ~ $ cat /etc/resolv.conf 
# Fausia e NetworkManager saili mai linux.fan nameserver 192.168.10.5

buzz @ sysadmin: ~ $ eli mai le linux.fan axfr
; << >> DiG 9.9.5-9 + deb8u1-Debian << >> desdelinux.fan axfr ;; filifiliga a le lalolagi: + cmd mai le linux.fan. 10800 I SOA dns.fromlinux.fan. aʻa.dns.fromlinux.fan. 1 86400 3600 604800 10800 mai le linux.fan. 10800 I NS dns.fromlinux.fan. mai linux.fan. 10800 I MX 10 meli.fromlinux.fan. mai linux.fan. 10800 IN TXT "MaiLinux, o lau Blog ua tuʻufaʻatasia mo le Polokalama Loloto" ad-dc.desdelinux.fan. 10800 I SE 192.168.10.3 blog.desdelinux.fan. 10800 IN A 192.168.10.7 dns.fromlinux.fan. 10800 IN A 192.168.10.5 fileserver.fromlinux.fan. 10800 IN A 192.168.10.4 ftpserver.fromlinux.fan. 10800 I LE 192.168.10.8 meli.fromlinux.fan. 10800 IN A 192.168.10.9 proxyweb.fromlinux.fan. 10800 IN A 192.168.10.6 sysadmin.fromlinux.fan. 10800 IN I le 192.168.10.1 mai le linux.fan. 10800 I SOA dns.fromlinux.fan. aʻa.dns.fromlinux.fan. 1 86400 3600 604800 10800 ;; Taimi ole fesili: 1 msec ;; SERVER: 192.168.10.5 # 53 (192.168.10.5) ;; ONA: Aso Feb 05 07:49:01 EST 2017
;; Tele XFR: 13 faʻamaumauga (feʻau 1, bytes 385)

buzz @ sysadmin: ~ $ eli 10.168.192.in-addr.arpa axfr
; << >> DiG 9.9.5-9 + deb8u1-Debian << >> 10.168.192.in-addr.arpa axfr ;; filifiliga i le lalolagi atoa: + cmd 10.168.192.in-addr.arpa. 10800 I SOA dns.fromlinux.fan. aʻa.dns.fromlinux.fan. 1 86400 3600 604800 10800 10.168.192.in-addr.arpa. 10800 I NS dns.fromlinux.fan. 1.10.168.192.in-addr.arpa. 10800 I PTR sysadmin.fromlinux.fan. 3.10.168.192.in-addr.arpa. 10800 I PTR ad-dc.fromlinux.fan. 4.10.168.192.in-addr.arpa. 10800 I PTR faila faila.fromlinux.fan. 5.10.168.192.in-addr.arpa. 10800 I PTR dns.fromlinux.fan. 6.10.168.192.in-addr.arpa. 10800 I PTR sui sui.fromlinux.fan. 7.10.168.192.in-addr.arpa. 10800 I PTR blog.desdelinux.fan. 8.10.168.192.in-addr.arpa. 10800 I PTR ftpserver.fromlinux.fan. 9.10.168.192.in-addr.arpa. 10800 I PTR meli.fromlinux.fan. 10.168.192.in-addr.arpa. 10800 I SOA dns.fromlinux.fan. aʻa.dns.fromlinux.fan. 1 86400 3600 604800 10800 ;; Taimi ole fesili: 1 msec ;; SERVER: 192.168.10.5 # 53 (192.168.10.5) ;; ONA: Aso Feb 05 07:49:47 EST 2017
;; Tele XFR: 11 faʻamaumauga (feʻau 1, bytes 333)

buzz @ sysadmin: ~ $ dig IN SOA mai le linux.fan
buzz @ sysadmin: ~ $ dig IN MX mai le linux.fan buzz @ sysadmin: ~ $ dig IN TXT mai le linux.fan

buzz @ sysadmin: ~ $ talimalo sui
proxyweb.desdelinux.fan ei ai le tuatusi 192.168.10.6

buzz @ sysadmin: ~ $ talimalo ftpserver
ftpserver.desdelinux.fan ei ai le tuatusi 192.168.10.8

buzz @ sysadmin: ~ $ talimalo 192.168.10.9
9.10.168.192.in-addr.arpa igoa igoa faʻailoga meli.fromlinux.fan.

… Ma seisi lava faʻamaoniga matou te manaʻomia.

Matou te faʻapipiʻi ma faʻatulaga le DHCP

I luga o Debian, o le DHCP tautua e saunia e le afifi isc-dhcp-tautua:

aʻa @ dns: ~ # aptitude search isc-dhcp
i isc-dhcp-client - DHCP client mo otometi le mauaina o se IP address p isc-dhcp-client-dbg - ISC DHCP server mo otometi IP tuatusi tofiga (client debug) i isc-dhcp-masani - masani faila faʻaaoga e uma isc-dhcp afifi p isc-dhcp-dbg - ISC DHCP server mo otometi IP tuatusi tofiga (debuging faatusa p isc-dhcp-dev - API mo le ulufaleina ma suia le DHCP server ma tagata o tausia tulaga p isc-dhcp-moligafua - ISC DHCP moliga daemon p isc-dhcp-relay-dbg - ISC DHCP server mo otometi IP tuatusi tofiga (moliga debug) p isc-dhcp-server - ISC DHCP server mo otometi IP tuatusi atofaina p isc-dhcp-server-dbg - ISC DHCP auauna mo otometi tuatusi IP tuatusi (server debug) p isc-dhcp-server-ldap - DHCP server e faʻaaogaina le LDAP e avea ma ona tua

root @ dns: ~ # aptitude faʻapipiʻi isc-dhcp-server

Ina ua maeʻa le faapipiiina o le afifi, le -omnipresent- faatulagaga faitioga ua le mafai le amataga o le tautua. I Debian, e tatau ona tatou faʻailoa manino atu le itu fesoʻotaʻiga fesoʻotaʻi o le a lisiina IP tuatusi ma tali atu i talosaga, le isc-dhcp-tautua:

aa @ dns: ~ # nano / etc / default / isc-dhcp-server
.... # O a fesoʻotaʻiga e tatau i le DHCP server (dhcpd) tautuaina ai talosaga a le DHCP? # Faʻavavae eseʻese le tele o fesoʻotaʻiga ma avanoa, eg "eth0 eth1".
INTERFACES = "eth0"

Faʻapipiʻi pepa

root @ dns: ~ # ls -l / usr / share / doc / isc-dhcp-server /
aofaʻi 44 -rw-r - r-- 1 aʻa aʻa 1235 Tes 14 2014 puletaofia -rw-r - r-- 1 aʻa aʻa 26031 Fepuari 13 2015 changelog.Debian.gz drwxr-xr-x 2 aʻa aʻa 4096 Feb 5 08 : 10 faʻataʻitaʻiga -rw-r - r-- 1 aʻa aʻa 592 Tes 14 2014 TALA FOU.Bebian.gz -rw-r - r-- 1 aʻa aʻa 1099 Tes 14 2014 README.Debian

TSIG ki "dhcp-ki"

O le gafa o le ki e fautuaina TSIG o Saini o Galuega - Tlafoai SIGnatura, mo le faʻamaoniaina o DNS malosi faʻafouina e DHCP. E pei ona tatou vaaia i le mataupu muamua «DNS ma le DHCP ile CentOS 7«, Matou te manatu o le augatupulaga o lea ki e le taua tele, ae maise lava pe a tuʻuina uma tautua i luga o le tutusa tautua. Ae ui i lea, matou te ofaina le tulaga lautele mo lona otometi augatupulaga:

aa @ dns: ~ # dnssec-keygen -a HMAC-MD5 -b 128 -r / dev / urandom -n USER dhcp-ki
Kdhcp-ki. + 157 + 11088

aʻa @ dns: ~ # pusi Kdhcp-ki. +157 + 11088.faʻasino 
Tumaoti-ki-faʻatulagaina: v1.3 Algorithm: 157 (HMAC_MD5) Ki: TEqfcx2FUMYBQ1hA1ZGelA == Faʻamau: AAA = Fausia: 20170205121618 Faʻasalalau: 20170205121618 Faʻaola: 20170205121618

aʻa @ dns: ~ # nano dhcp.key
ki dhcp-ki {
        algorithm hmac-md5;
        lilo "TEqfcx2FUMYBQ1hA1ZGelA ==";
};

aa @ dns: ~ # install -o root -g bind -m 0640 dhcp.key /etc/bind/dhcp.key root @ dns: ~ # install -o root -g root -m 0640 dhcp.key / etc / dhcp /dhcp.key root @ dns: ~ # ls -l /etc/bind/*.key
-ww-r ----- 1 aʻa fusifusia 78 Fepuari 5 08:21 /etc/bind/dhcp.key -rw-r ----- 1 fusifusia fusifusia 77 Fep 4 11 47:XNUMX / etc / bind / rndc .key
aʻa @ dns: ~ # ls -l /etc/dhcp/dhcp.key 
-rw-r ----- 1 aʻa aʻa 78 Fepuari 5 08:21 /etc/dhcp/dhcp.key

Faʻafouina o le BIND Zones faʻaaogaina le dhcp-ki

root @ dns: ~ # nano /etc/bind/named.conf.local
// // Do any local setting here // // Mafaufau e faʻaopopo le 1918 sone ii, pe a le faʻaaogaina i lau // faʻalapotopotoga aofia ai "/etc/bind/zones.rfc1918"; aofia ai le "/etc/bind/zones.rfcFreeBSD"; aofia ai le "/etc/bind/dhcp.key"; // Faʻalauiloaina o le igoa, ituaiga, nofoaga, ma le faʻafouga faʻatagaga // o le DNS Records Zones // Uma Sone o MASTER sone "desdelinux.fan" {type master; faila "/var/lib/bind/db.desdelinux.fan";
 faʻatagaina-faʻafouina {ki dhcp-ki; };
}; sone "10.168.192.in-addr.arpa" {ituaiga matai; faila "/var/lib/bind/db.10.168.192.in-addr.arpa";
 faʻatagaina-faʻafouina {ki dhcp-ki; };
};
aʻa @ dns: ~ # faʻaigoa-checkconf 
aʻa @ dns: ~ #

Matou te configure le isc-dhcp-server

aa @ dns: ~ # mv /etc/dhcp/dhcpd.conf /etc/dhcp/dhcpd.conf.original
aa @ dns: ~ # nano /etc/dhcp/dhcpd.conf
ddns-update-style le tumau; ddns-faʻafouga luga; ddns-domainname "desdelinux.fan."; ddns-rev-domainname "in-addr.arpa."; le amanaʻia le tagata faʻatau-faʻaleleia pule; filifiliga ip-lafo i luma; filifiliga domain-name "desdelinux.fan"; aofia ai le "/etc/dhcp/dhcp.key"; sone mai le linux.fan. {tulaga muamua 127.0.0.1; ki dhcp-ki; } sone 10.168.192.in-addr.arpa. {tulaga muamua 127.0.0.1; ki dhcp-ki; } fefaʻasoaaʻi-laina toe tuʻufaʻatasi {subnet 192.168.10.0 netmask 255.255.255.0 {filifiliga router 192.168.10.1; filifiliga subnet-mask 255.255.255.0; filifiliga faasalalau-tuatusi 192.168.10.255; filifiliga filifiliga-igoa-tautua 192.168.10.5; filifiliga netbios-igoa-tautua 192.168.10.5; tele 192.168.10.30 192.168.10.250; }} # FAʻAIʻU dhcpd.conf

Matou te siaki le faila dhcpd.conf

aʻa @ dns: ~ # dhcpd -t
Internet Systems Consortium DHCP Server 4.3.1 Pule Tau Fatuga 2004-2014 Initaneti Faʻavasega Consortium. Ua taofia aia tatau uma. Mo faʻamatalaga, faʻamolemole asiasi ane i le https://www.isc.org/software/dhcp/ Config file: /etc/dhcp/dhcpd.conf Database file: /var/lib/dhcp/dhcpd.leases PID file: / var / run /dhcpd.pid

Matou toe amataina le faʻamau ma amata le isc-dhcp-server

aʻa @ dns: ~ # systemctl toe amata bind9.service 
aʻa @ dns: ~ # systemctl tulaga bind9.service 

root @ dns: ~ # systemctl amata isc-dhcp-server.service
root @ dns: ~ # systemctl tulaga isc-dhcp-server.service 
● isc-dhcp-server.service - LSB: DHCP server Loaded: utaina (/etc/init.d/isc-dhcp-server) Toaga: toaga (tamoʻe) talu mai le Sun 2017-02-05 08:41:45 EST; 6s talu ai Faʻagasologa: 2039 ExecStop = / etc / init.d / isc-dhcp-server stop (code = exited, status = 0 / SUCCESS) Faʻagasologa: 2049 ExecStart = / etc / init.d / isc-dhcp-server amata ( code = exited, status = 0 / SUCCESS) CGroup: /system.slice/isc-dhcp-server.service └─2057 / usr / sbin / dhcpd -q -cf /etc/dhcp/dhcpd.conf -pf / var / tamoe / dhcpd.pid eth0 Fep 05 08 41:43:2056 dns dhcpd [0]: Tusitala 05 lisi e lisi atu i lisi lisi. Fep 08 41:43:2057 dns dhcpd [05]: Auaunaga amata tautua. Fep 08 41:45:2049 dns isc-dhcp-server [XNUMX]: Amataina ISC DHCP server: dhcpd.

Siaki ma tagata faʻatau

Na matou amataina se tagata maʻi ma le Windows 7 operating system, ma le igoa «LAGER».

buzz @ sysadmin: ~ $ talimalo talimalo
LAGER.desdelinux.fan ei ai le tuatusi 192.168.10.30

buzz @ sysadmin: ~ $ eli i le txt lager.fromlinux.fan

Matou te suia le igoa o le tagata lea i le "fitu" ma toe amata le tagata o tausia

buzz @ sysadmin: ~ $ talimalo talimalo
;; ua uma le fesoʻotaʻiga; leai se tautua na mauaina

uʻamea@sysadmin: ~ $ talimalo fitu
fitu.fromlinux.fan ei ai le tuatusi 192.168.10.30
buzz @ sysadmin: ~ $ talimalo 192.168.10.30
30.10.168.192.in-addr.arpa igoa igoa faʻasino fitu.fromlinux.fan.

buzz @ sysadmin: ~ $ eli i le txt fitu.fromlinux.fan

Na matou toe faʻaigoaina le client 7 i le "win7"

buzz @ sysadmin: ~ $ talimalo fitu
;; ua uma le fesoʻotaʻiga; leai se tautua na mauaina

buzz @ sysadmin: ~ $ talimalo win7
win7.fromlinux.fan ei ai le tuatusi 192.168.10.30
buzz @ sysadmin: ~ $ talimalo 192.168.10.30
30.10.168.192.in-addr.arpa igoa igoa faʻailoga win7.fromlinux.fan.

buzz @ sysadmin: ~ $ eli i le txt win7.fromlinux.fan
; << >> DiG 9.9.5-9 + deb8u1-Debian << >> i le txt win7.fromlinux.fan ;; filifiliga i le lalolagi atoa: + cmd ;; Maua se tali: ;; - >> HEADER << - opcode: QUERY, tulaga: NOERROR, id: 11218 ;; fuʻa: qr aa rd ra; QUERY: 1, TALI: 1, PULEGA: 1, FAʻAALIGA: 2 ;; OPT PSEUDOSECTION :; EDNS: lomiga: 0, fuʻa:; udp: 4096 ;; FESILI FESILI :; win7.fromlinux.fan. I TXT ;; TALI Vaega: win7.fromlinux.fan. 3600 IN TXT "31b7228ddd3a3b73be2fda9e09e601f3e9" ;; TUSI FAʻAMATALAGA: desdelinux.fan. 10800 I NS dns.fromlinux.fan. ;; Vaega FAAOPOOPO: dns.fromlinux.fan. 10800 I LE 192.168.10.5 ;; Taimi ole fesili: 0 msec ;; SERVER: 192.168.10.5 # 53 (192.168.10.5) ;; WHEN: Sun Feb 05 09:13:20 EST 2017 ;; MSG SIZE rcvd: 129

buzz @ sysadmin: ~ $ eli mai le linux.fan axfr
; << >> DiG 9.9.5-9 + deb8u1-Debian << >> mai le linux.fan axfr ;; filifiliga a le lalolagi: + cmd mai le linux.fan. 10800 I SOA dns.fromlinux.fan. root.dns.fromlinux.fan. 8 86400 3600 604800 10800 mai le linux.fan. 10800 I NS dns.fromlinux.fan. mai linux.fan. 10800 I MX 10 meli.fromlinux.fan. mai linux.fan. 10800 IN TXT "MaiLinux, o lau Blog ua tuʻufaʻatasia mo le Polokalama Loloto" ad-dc.desdelinux.fan. 10800 I SE 192.168.10.3 blog.desdelinux.fan. 10800 IN A 192.168.10.7 dns.fromlinux.fan. 10800 IN A 192.168.10.5 fileserver.fromlinux.fan. 10800 IN A 192.168.10.4 ftpserver.fromlinux.fan. 10800 I LE 192.168.10.8 meli.fromlinux.fan. 10800 IN A 192.168.10.9 proxyweb.fromlinux.fan. 10800 IN A 192.168.10.6 sysadmin.fromlinux.fan. 10800 I LE 192.168.10.1
win7.fromlinux.fan. 3600 IN  TXT "31b7228ddd3a3b73be2fda9e09e601f3e9"
win7.fromlinux.fan. 3600 I LE 192.168.10.30
mai linux.fan. 10800 I SOA dns.fromlinux.fan. root.dns.fromlinux.fan. 8 86400 3600 604800 10800 ;; Taimi ole fesili: 2 msec ;; SERVER: 192.168.10.5 # 53 (192.168.10.5) ;; WHEN: Sun Feb 05 09:15:13 EST 2017 ;; Fua tele XFR: 15 faamaumauga (feau 1, bytes 453)

I galuega faatino i luga atu, na matou faamamafaina i luga lototele le TTL -i sekone- mo komepiuta ma IP tuatusi faʻatagaina e le DHCP tautua i latou o loʻo iai se faʻamatalaga manino o le TTL 3600 na tuʻuina mai e le DHCP. O IPs tumau e taʻitaʻia e le $ TTL o 3H -3 itula = 10800 sekone- folafolaina i le faamaumauga a le SOA o faila sone taʻitasi.

E mafai ona latou siakiina le sone faʻafeagai i le auala lava e tasi.

[root @ dns ~] # eli 10.168.192.in-addr.arpa axfr

Isi tulafono sili ona manaia o:

[root @ dns ~] # named-journalprint /var/lib/bind/db.desdelinux.fan.jnl
mai desdelinux.fan. 10800 I SOA dns.fromlinux.fan. aʻa.dns.fromlinux.fan. 1 86400 3600 604800 10800 faʻaopopo le desdelinux.fan. 10800 I SOA dns.fromlinux.fan. root.dns.fromlinux.fan. 2 86400 3600 604800 10800 faʻaopoopo le LAGER.fromlinux.fan. 3600 IN A 192.168.10.30 faʻaopopo le LAGER.fromlinux.fan. 3600 IN TXT "31b7228ddd3a3b73be2fda9e09e601f3e9" mai le desdelinux.fan. 10800 I SOA dns.fromlinux.fan. root.dns.fromlinux.fan. 2 86400 3600 604800 10800 mai le LAGER.fromlinux.fan. 3600 IN A 192.168.10.30 faʻaopopo mai le linux.fan. 10800 I SOA dns.fromlinux.fan. root.dns.fromlinux.fan. 3 86400 3600 604800 10800 mai le desdelinux.fan. 10800 I SOA dns.fromlinux.fan. root.dns.fromlinux.fan. 3 86400 3600 604800 10800 mai le LAGER.fromlinux.fan. 3600 IN TXT "31b7228ddd3a3b73be2fda9e09e601f3e9" faʻaopopo desdelinux.fan. 10800 I SOA dns.fromlinux.fan. aʻa.dns.fromlinux.fan. 4 86400 3600 604800 10800 mai le desdelinux.fan. 10800 I SOA dns.fromlinux.fan. aʻa.dns.fromlinux.fan. 4 86400 3600 604800 10800 faʻaopopo le desdelinux.fan. 10800 I SOA dns.fromlinux.fan. aʻa.dns.fromlinux.fan. 5 86400 3600 604800 10800 faʻaopopo le fitu.fromlinux.fan. 3600 IN A 192.168.10.30 faʻaopopo fitu.fromlinux.fan. 3600 IN TXT "31b7228ddd3a3b73be2fda9e09e601f3e9" mai le desdelinux.fan. 10800 I SOA dns.fromlinux.fan. aʻa.dns.fromlinux.fan. 5 86400 3600 604800 10800 mai le fitu.fromlinux.fan. 3600 IN A 192.168.10.30 faʻaopopo mai le linux.fan. 10800 I SOA dns.fromlinux.fan. root.dns.fromlinux.fan. 6 86400 3600 604800 10800 mai le desdelinux.fan. 10800 I SOA dns.fromlinux.fan. aʻa.dns.fromlinux.fan. 6 86400 3600 604800 10800 mai le fitu.fromlinux.fan. 3600 IN TXT "31b7228ddd3a3b73be2fda9e09e601f3e9" faʻaopopo desdelinux.fan. 10800 I SOA dns.fromlinux.fan. root.dns.fromlinux.fan. 7 86400 3600 604800 10800 mai le desdelinux.fan. 10800 I SOA dns.fromlinux.fan. aʻa.dns.fromlinux.fan. 7 86400 3600 604800 10800 faʻaopopo le desdelinux.fan. 10800 I SOA dns.fromlinux.fan. aʻa.dns.fromlinux.fan. 8 86400 3600 604800 10800 faʻaopoopo win7.fromlinux.fan. 3600 IN A 192.168.10.30 faʻaopopo win7.fromlinux.fan. 3600 IN TXT "31b7228ddd3a3b73be2fda9e09e601f3e9"

[root @ dns ~] # named-journalprint /var/lib/bind/db.10.168.192.in-addr.arpa.jnl
mai le 10.168.192.in-addr.arpa. 10800 I SOA dns.fromlinux.fan. root.dns.fromlinux.fan. 1 86400 3600 604800 10800 faʻaopopo le 10.168.192.in-addr.arpa. 10800 I SOA dns.fromlinux.fan. root.dns.fromlinux.fan. 2 86400 3600 604800 10800 faʻaopoopo le 30.10.168.192.in-addr.arpa. 3600 I PTR LAGER.fromlinux.fan. mai le 10.168.192.in-addr.arpa. 10800 I SOA dns.fromlinux.fan. root.dns.fromlinux.fan. 2 86400 3600 604800 10800 a 30.10.168.192.in-addr.arpa. 3600 I PTR LAGER.fromlinux.fan. faʻaopopo le 10.168.192.in-addr.arpa. 10800 I SOA dns.fromlinux.fan. root.dns.fromlinux.fan. 3 86400 3600 604800 10800 del 10.168.192.in-addr.arpa. 10800 I SOA dns.fromlinux.fan. root.dns.fromlinux.fan. 3 86400 3600 604800 10800 faʻaopoopo le 10.168.192.in-addr.arpa. 10800 I SOA dns.fromlinux.fan. root.dns.fromlinux.fan. 4 86400 3600 604800 10800 faʻaopoopo le 30.10.168.192.in-addr.arpa. 3600 I le PTR fitu.fromlinux.fan. mai le 10.168.192.in-addr.arpa. 10800 I SOA dns.fromlinux.fan. root.dns.fromlinux.fan. 4 86400 3600 604800 10800 a 30.10.168.192.in-addr.arpa. 3600 I le PTR fitu.fromlinux.fan. faʻaopopo le 10.168.192.in-addr.arpa. 10800 I SOA dns.fromlinux.fan. root.dns.fromlinux.fan. 5 86400 3600 604800 10800 del 10.168.192.in-addr.arpa. 10800 I SOA dns.fromlinux.fan. root.dns.fromlinux.fan. 5 86400 3600 604800 10800 faʻaopoopo le 10.168.192.in-addr.arpa. 10800 I SOA dns.fromlinux.fan. root.dns.fromlinux.fan. 6 86400 3600 604800 10800 faʻaopoopo le 30.10.168.192.in-addr.arpa. 3600 I PTR win7.fromlinux.fan.

[root @ dns ~] # journalctl -f

Faʻatonutonuina o faila a Sone

A maeʻa ona ulufale le DHCP i le taʻaloga o le toe faʻaleleia o faila o le BIND, pe a fai e manaʻomia le fesuiaʻiga o le faila o le sone, e tatau ona tatou faʻatino le faʻatonuga lea, ae le o le mea e te leʻi iloa muamua e uiga i le faʻagaioiga o le sone rndc -tamaloa rndc- mo le faʻatonutonuina o igoa.

  • rndc freeze [sone [vasega [vaʻai]]], taofia le tumau le toe faʻaleleia o se sone. Afai e le faʻamaoti mai se tasi, o le a faʻaʻaisa uma. O le faʻatagaina le faʻatonutonuina o le sone faʻaisa pe o sone uma. Soʻo se malosi faʻafouina o le a teʻena aisa.
  • rndc liu suavai [sone [vasega [vaʻai]]], faʻafaigofie faʻafouina malosiaga luga o le muamua paʻa sone. E toe ave e le DNS server le faila o le sone mai le disk, ma toe faʻafouina malosiaga e toe faʻamalosia pe a maeʻa le toe uta.

Lapataiga e tatau ona faia pe a tatou lima faʻasaʻo se sone faila? Tutusa pei o tatou o faia, e aunoa ma le faʻagaloina e faʻateleina le numera numera i le 1 poʻo le serial ae e leʻi sefeina le faila ma suiga mulimuli.

Matou te liu aisa

A o matou o le a faia suiga i le agai i luma ma Faʻafoi Sone a o DNS ma DHCP o loʻo tamoʻe, o le sili ona maloloina mea e fai o le faʻamalo le DNS Sone:

[Root @ dns ~] # rndc liu aisa

Eria mailinux.fan o loʻo iai faamaumauga nei:

[Root @ dns ~] # pusi /var/lib/bind/db.fromlinux.fan
$ MUA. $ TTL 10800; 3 itula mai linux.fan I SOA dns.from linux.fan. root.dns.fromlinux.fan. (
                                8; serial
                                86400; faʻafouina (1 aso) 3600; toe faʻataʻitaʻi (1 itula) 604800; faamutaina (1 vaiaso) 10800; aupito maualalo (3 itula)) NS dns.fromlinux.fan. MX 10 meli.fromlinux.fan. TXT "FromLinux, your Blog dedicated to Free Software" $ ORIGIN fromlinux.fan. ad-dc To 192.168.10.3 blog To 192.168.10.7 dns To 192.168.10.5 fileserver To 192.168.10.4 ftpserver To 192.168.10.8 mail To 192.168.10.9 proxyweb To 192.168.10.6 sysadmin To 192.168.10.1 $ TTL 3600; 1 itula win7 A 192.168.10.30 TXT "31b7228ddd3a3b73be2fda9e09e601f3e9"

Seʻi o tatou faʻaopopo le tautua «fale puipui»Ma le IP 192.168.10.10:

aʻa @ dns: ~ # nano /var/lib/bind/db.fromlinux.fan
$ MUA. $ TTL 10800; 3 itula mai le linux.fan I SOA dns.from linux.fan. aʻa.dns.fromlinux.fan. (
                9; serial
                86400; faʻafouina (1 aso) 3600; toe taumafai (1 itula) 604800; faamutaina (1 vaiaso) 10800; aupito maualalo (3 itula)) NS dns.fromlinux.fan. MX 10 meli.fromlinux.fan. TXT "FromLinux, your Blog dedicated to Free Software" $ ORIGIN fromlinux.fan. ad-dc I le 192.168.10.3 blog I le 192.168.10.7 dns I le 192.168.10.5 faila faila i le 192.168.10.4 ftpserver I le 192.168.10.8 meli I le 192.168.10.9 proxyweb I le 192.168.10.6
tafatafa o le A 192.168.10.10
sysadmin A 192.168.10.1 $ TTL 3600; 1 itula win7 A 192.168.10.30 TXT "31b7228ddd3a3b73be2fda9e09e601f3e9"

E tatau foi ona tatou suia le sone faʻafefe:

aʻa @ dns: ~ # nano /var/lib/bind/db.10.168.192.in-addr.arpa
$ MUA. $ TTL 10800; 3 itula 10.168.192.in-addr.arpa IN SOA dns.fromlinux.fan. aʻa.dns.fromlinux.fan. (
                                7; serial
                                86400; faʻafouina (1 aso) 3600; toe faʻataʻitaʻi (1 itula) 604800; faamutaina (1 vaiaso) 10800; aupito maualalo (3 itula)) NS dns.fromlinux.fan. $ ORIGIN 10.168.192.in-addr.arpa. 1 PTR sysadmin.fromlinux.fan. 3 PTR ad-dc.fromlinux.fan. $ TTL 3600; 1 itula 30 PTR win7.fromlinux.fan. $ TTL 10800; 3 itula 4 PTR faila faila.fromlinux.fan. 5 PTR dns.fromlinux.fan. 6 PTR sui sui.desdelinux.fan. 7 PTR blog.desdelinux.fan. 8 PTR ftpserver.fromlinux.fan. 9 PTR meli.fromlinux.fan.
10 PTR faletusi.fromlinux.fan.

Matou defrost ma toe faʻaleleia sone

[Root @ dns ~] # rndc liu suavai

aʻa @ dns: ~ # journalctl -f
- Laʻau amata i le Sun 2017-02-05 06:27:10 EST. - Fepuari 05 12:00: 29 dns igoa [1996]: mauaina faʻatonutonu auala faʻatonutonu 'thaw' Fep 05:12:00 dns igoa [29]: talatala uma sone: manuia Fepuari 1996 05:12:00 dns igoa [29 ]: sone 1996.in-addr.arpa/IN: faila o tusi o talaaga ua leva: aveʻese faila faila Fepuari 10.168.192 05:12:00 dns igoa [29]: sone 1996.in-addr.arpa/ IN : utaina serial 10.168.192 Fepuari 7 05:12:00 dns igoa [29]: sone desdelinux.fan/IN: faila faila ua tuai: aveʻesea faila tusi faila Fepuari 1996 05:12:00 dns igoa [29]: sone desdelinux. ili / I: utaina serial 1996

buzz @ sysadmin: ~ $ talimalo fale talimalo
shorewall.fromlinux.fan ei ai le tuatusi 192.168.10.10

buzz @ sysadmin: ~ $ talimalo 192.168.10.10
10.10.168.192.in-addr.arpa igoa igoa faʻailoga shorewall.fromlinux.fan.

buzz @ sysadmin: ~ $ eli mai le linux.fan axfr

buzz @ sysadmin: ~ $ eli 10.168.192.in-addr.arpa axfr

aʻa @ dns: ~ # journalctl -f
.... Feb 05 12:03:05 dns igoa [1996]: tagata tautua 192.168.10.1 # 37835 (desdelinux.fan): fesiitaʻi o 'desdelinux.fan/IN': AXFR amata Fepuari 05 12:03:05 dns igoa [1996]: client 192.168.10.1 # 37835 (desdelinux.fan): fesiitaʻi o 'desdelinux.fan/IN': AXFR faʻaiʻu Fepuari 05 12:03:20 dns igoa [1996]: tagata faʻatau 192.168.10.1 # 46905 (10.168.192 10.168.192.in-addr.arpa): fesiitaʻi o le '05 .12.in-addr.arpa / IN ': AXFR amata Fepuari 03 20:1996:192.168.10.1 dns igoa [46905]: tagata o tausia 10.168.192 # 10.168.192 (XNUMX .in-addr.arpa): fesiitaʻi o le 'XNUMX .XNUMX.in-addr.arpa / IN ': Ua maeʻa AXFR

Aotelega

E oʻo mai i le taimi nei o loʻo i ai se matou server Caché DNS o loʻo faʻatautaia, lea e lagolagoina le Recursion, o le Pule mo le Sone mailinux.fan, ma e faʻatagaina ai le DHCP ona faʻafouina le Forward and Reverse Zones ma igoa o komupiuta ma IP na te foaʻiina.

Lenei tusitusiga ma le lua muamua «DNS ma le DHCP i le openSUSE 13.2 'Harlequin'"ma"DNS ma le DHCP ile CentOS 7»E tasi lava. Oe o le a mauaina lautele manatu e uiga i le DNS ma le DHCP, ma mea taua o tufatufaina taʻitasi i latou taʻitasi. O i latou o Manatu ulufale i le mataupu, ma se faʻavae mo sili atu faigata atinaʻe.

Matou te le faatuai e tauanau - toe - i le taua o le faitauina o le poto faʻamaumauga ua faapipiiina e ala i le le masani ai ma afifi taʻitasi, AO LEI configuring soʻo se auiliiliga. Matou te taʻua mai lo matou lava poto masani.

Le tilivaina atu

Atonu o le "Microsoft® Active Directory + BIND"


O mataupu o le tusitusiga e tausisi ia tatou mataupu silisili o amio lelei faʻatonu. E lipotia se mea sese kiliki iinei.

23 manatu, tuʻu lau

Tuʻu lau faamatalaga

o le a le lomia lou tuatusi imeli.

*

*

  1. E tali atu mo faʻamatalaga: Miguel Ángel Gatón
  2. Faamoemoega o faʻamatalaga: Pulea le SPAM, faʻamatalaga pulega.
  3. Tulaga faʻatulafonoina: Lau maliega
  4. Fesoʻotaʻiga o faʻamatalaga: O faʻamatalaga o le a le fesoʻotaʻi atu i isi vaega vagana i tulafono faʻatulafonoina.
  5. Teuina o faʻamatalaga: Faʻamaumauga tuʻufaʻatasia e Occentus Networks (EU)
  6. Aia Tatau: I soo se taimi e mafai ai ona e faʻatapulaʻaina, toe maua ma aveʻese au faʻamatalaga.

  1.   pili malo

    O le a se vaega o aʻoaʻoga na e lafoina paʻaga, ou te le iloa poʻo fea le tele o agavaʻa mo auiliiliga ma okaina i mataupu faigata e pei ona aumai mai.

    Lau faamalo sili ona faamaoni, o se faaeaga le mafai ona faitau atu ia te oe

  2.   bafo malo

    E tatau ona ou taʻu atu ia te oe o le HOSTIA o aʻoaʻoga na e lolomia, ou te alofa ia i latou.
    Ou te faʻatali lava mo lauisi mataupu.
    A maeʻa oe, e te tuʻuina i totonu o le pdf? O se pepa faʻatatau i loʻu manatu e taua tele, e tatau ona teu lelei.
    Faafetai tele lava ma se faafeiloaiga tele.
    Bafo.

  3.   Feterika malo

    Bafo: Faafetai lava mo lau iloiloga ma lau faamatalaga. O le taui silisili mo le taimi, galuega, ma le taumafaiga ou te faʻapaia i taʻitaʻi taʻitasi o le manatu. Ia e lelei pe le lelei, ae o le faʻailoga e leʻo leiloa. Ou te matea o le toatele o le aufaitau na o le download ma sefe, pe faʻailogaina. Ae e mafai ona ou faʻapea e tusa ma le aofaʻi o asiasiga. O se faʻanoanoaga tele le le tele o ni manatu, e ui lava ou te iloa o mataupu ou te feagai ai e taua lava mo Sysadmins. Talofa foi ia te oe ma o le a ou faatali mo oe i laʻu isi tala.

  4.   Feterika malo

    Lise: Faʻafetai mo lau faʻamaoni suʻesuʻega o le a ou manatuaina pea.

  5.   artus malo

    Faʻafefea e le faʻatulagaina pe a fai e lua aʻu fesoʻotaʻiga fesoʻotaʻiga i le tulaga o fusifusia
    Faʻafetai ma faʻamalo i lenei mea.

  6.   Feterika malo

    Artus: Faʻafetai mo lau faamatalaga ma lau faʻamalo.
    O le tali i lau fesili tatau ai se isi tusitusiga i luga o le faʻaaogaina o Vaaiga - manatu i le FUSI.

    I le tulaga o loʻo ia te oe Delegated Zone i lalo o lau matafaioi, ma e te manaʻo ia i ai se tasi BIND e auai i fesili i totonu mai lau LAN ma fafo fesili mai le Initaneti-ma le BIND puipuia e se Firewall o le mea moni- e fautuaina e faʻaaoga le Vaaiga .

    O le Views, mo se faʻataʻitaʻiga, faʻatagaina oe e faʻaali se faʻavasega mo lau SME Network ma seisi mo le Initaneti. A matou le faʻamalamalamaina ma le manino soʻo se Vaʻaiga, e faʻatupuina e le BIND se mea e tasi e faʻaalia ai komupiuta uma o faʻatalanoa.

    I le avea ai o le faʻaaogaina o Views Ou te manatu o se alualu i luma mataupu mafai ma tusi se tala e uiga i ai, muamua pe ina ua maeʻa le folafolaina pou faʻasalalau i le faʻaiuga o ia.

    I le taimi nei, afai e lua au fesoʻotaʻiga fesoʻotaʻiga feagai ma lau SME Network -faʻatulagaina e lua Private Networks- mo soʻo se mafuaʻaga o le mamanu, avega paleni, numera o masini poʻo isi, ma e te manaʻo e tuʻuina uma au sone i uma fesoʻotaʻiga, oe mafai ona fofo ma faamatalaga:

    faʻalogo
    127.0.0.1;
    IP-Tumaoti-Interface1;
    IP-interface-Private2;
    };

    I lenei auala, le BIND faʻalogo mo talosaga i uma interfaces.

    Afai o au komepiuta uma o loʻo i luga o le Class C Private Network 192.168.10.0/255.255.240.0 -e oʻo atu i le 4094 au - mo se faʻataʻitaʻiga, e mafai foi ona e faʻaaogaina le faʻamatalaga:

    faʻalogo-i le {127.0.0.1; 192.168.10.0/20; };

    Ma oe faʻaauau pea faʻaali se tasi vaʻaiga i komepiuta uma fesoʻotaʻi i lau Private LAN.

    Ou te faamoemoe o laʻu tali puupuu e fesoasoani ia te oe. Talofa ma le manuia.

    1.    artus malo

      Faʻafetai mo le tali vave E te vaʻai mai o loʻo ou faʻapipiʻiina le Debian Server ma le version 9 (Strech), o loʻo iai le DNS, dhcp ma le squid e fai ma sui, mo faʻamalamalamaga filiga o le a ou faʻaaogaina le e2guardian.

      E lua fesoʻotaʻiga fesoʻotaʻiga a le komipiuta, e mafai ai e komipiuta i luga o le LAN ona o atu i le Initaneti.
      router: 192.168.1.1
      eth0: 192.168.1.55 (e ala i lenei Ofisa o le a alu i le Initaneti)
      eth1: 192.168.100.1 (LAN)

      O le manatu e mafai e komipiuta ona o i le Initaneti e ala i lenei sui sui, o le a maua ai foʻi ips ma dns i komupiuta i luga o le upega tafaʻilagi.

      I lenei tulaga, ou te le manaʻomia le tautua e auai i talosaga dns e ala i le eth0 interface (Ou te le manaʻo e tuʻu atu aʻu sone i uma fesoʻotaʻiga, naʻo laʻu LAN); Afai la ou te aveʻese le IP-tumaʻoti-interface1, e lava na?

      Faʻafetai toe faʻafetai.

  7.   Eteuati Claus malo

    Lelei tele tusitusiga laʻu uo
    O loʻo ia te oe le FUSI i ou uaua, tusa lava pe e te tautala ma mafaufau i se isi mea 🙂
    Faʻafetai

  8.   Feterika malo

    Artus: Aveʻese le 192.168.1.55 interface mai le faʻalogo-i luga o le faʻamatalaga ma alu. Pe faʻailoa naʻo le faʻalogo-i luga o le {127.0.0.1; 192.168.100.1; }; ma o le mea lena. O le BIND o le a faʻalogo na o latou interfaces.

    1.    artus malo

      Manuia faafetai.

  9.   Feterika malo

    Eduardo: laʻu uo, ou te fiafia lava ia dnsmasq mo "laʻititi" upega, ma o le a tatou vaʻai i le "tele" latou mafai ona i ai. 😉 E ui lava ou te iloa o le BIND + isc-dhcp-server o le BIND + isc-dhcp-server. 😉

  10.   Feterika malo

    Eduardo: Na galo ia te aʻu ona taʻu atu ia te oe o le BIND Faʻapitoa o oe, Master.

  11.   tagata faʻaaoga malo

    Tausaga le faʻaaogaina o le BIND ma ou te aʻoaʻoina pea i au tusitusiga, faʻafetai lava Federico, ma lenei faʻasologa o aʻoaʻoga a sysadmin ua faʻateʻaina. Ou te toe foʻi mai ma ou toe fai atu, o le aitia o le aofia uma o lenei malamalama i se aloaʻia feaveaʻiga tulaga e le leaga uma, avatu i le ulu o se mea lelei tele mafai ona sau i fafo. O se faafeiloaiga.

  12.   Feterika malo

    Dhunter uo: O au tala e taliaina lelei i taimi uma. Faʻapipiʻiina mea uma e faigata ma toetoe lava a le mafai, aua o se mataupu fou e sau i taimi uma. I mataupu, e alu ma e mafai. O nisi tusitusiga e tatau ona toe tusia ina ia maua ai le tumau i configurations. Ou te le folafolaina se mea, ae o le a tatou vaʻai.

  13.   Ismael Alvarez Wong malo

    talofa federico, o aʻu manatu nei:
    1) O le faʻamamafaina oe i luga o le «... faitau muamua ae le i faʻamauina le fusi ma e oʻo foi i luma o le sailia o le Initaneti mo tala e fesoʻotaʻi ma BIND ma DNS ...» saili mo latou i luga o la tatou lava komepiuta ma nei mea uma ... ... aunoa ma le tuua le fale ... »ia faʻaaoga a oe lava upu.
    2) I lenei pou matou te maua ai le tele o manatu e uiga i le DNS e faʻatumuina le tasi na saunia i lua muamua pou ma e masani ona faʻafetaia; faʻataʻitaʻiga: DNSSEC (Domain Name System Security Extensions) ma le mea e faʻaaoga ai; faʻapea foʻi ma le BIND Configuration Scheme ma ona Static Configuration Files, Zone Files mo Root Servers, ma le Forward and Reverse Zones o le localhost i Debian.
    3) TELE le pito o le le faʻamutaina o le toe taʻutaʻua (faʻaaogaina o le laina "recursion no;") ona aofia ai lea i le faila faʻatulagaina /etc/bind/named.conf.local, o le sone faila / etc / bind / sone. Rfc1918 ma / etc /bind/zones.rfcFreeBSD e puipuia ai soʻo se fesili e faʻatatau ia latou mai le tuʻua o le lotoifale upega tafaʻilagi i aʻa sapalai.
    4) E le pei o le post muamua e uiga i le CentOS 7, i lenei pou pe a fai o le TSIG Key "dhcp-key" e fausiaina mo le malosi o DNS faʻafouga mai DHCP; ia faʻatagaina i le /etc/bind/named.conf.local faila, aofia ai "allow-update {key dhcp-key; }; » i le faʻatulagaina o sone tuʻusaʻo ma fuli o la matou vaega.
    5) O le tele auiliiliga (tutusa ma le meli muamua i le CentOS 7) o mea uma e fesoʻotaʻi ma siaki o le faʻagaioiga o DNS, DHCP ma ma tagata faʻatau.
    6) TELE le pito o le faʻaogaina o le "faʻatulagaina" faʻatonuga (pe faʻafefea ona e tusia, ou te le o uiga le filifiliga o le igoa e tasi o loʻo faʻaaogaina i isi faʻatonuga), ou te leʻi iloaina, aua e moni " 3 ile 1 "kulupu kopi (cp), faʻavaeina o tagata e ana (chown) ma faʻatagaina (chmod).
    . I le iuga, o lau tali ia Artus e uiga i le faʻaaogaina o Views i le BIND e lelei tele, tasi mo le LAN (oe lava fesoʻotaʻiga) ma le isi mo Initaneti ina ia naʻo tagata lautele auaunaga mafai ona feutanaʻi. Talosia mulimuli ane e i ai le taimi e sauni ai se pou ona o se sili ona aoga talosaga mataupu mo le tele sysadmins.
    Leai se mea Federico o loʻo faʻaauau pea ona ou fiafia e uiga i le PYMES series ma oute vaʻai i luma i le isi pou "Microsoft Active Directory + BIND"

  14.   Feterika malo

    Wong: Paʻaga ma uo, o au manatu faʻaopoopo aʻu tusitusiga ma faʻaalia e malamalama i latou. E tele isi filifiliga a le "faʻau". Fesili tamaloa faʻapipiʻi. Faʻafetai ile afe mo manatu !!!

  15.   crespo88 malo

    Ou te leʻi faitauina lava ni tala, o le a ou faia pe a uma ona taʻua aʻu faʻavae.
    Ua e faia ma ua e ausia mea e tele, na e aumaia ia i matou se malamalama ae le o le tasi e vaʻaia i le "pito o le auala faʻaofuofu" pe a leai se toe faʻamoemoe pei ona masani ona tatou fai atu; E leʻo le mea e aunoa ma se mea, na e tuʻuina mai le malamalama atoa e mafai ai ona e faʻapea "Ile iʻuga matou te iloa o se taʻaloga a tama, ma le tele o manatu ma fussy syntax" a o e faʻamatalaina ile pou.
    POST TRUNK ma faʻatasi ai ma mea na muamua atu mo ni nai sili atu taʻutaʻua distros. Na e usitaʻia le faʻalauteleina o manatu ma manatu e masani ona afaina ai matou i le tele o taimi. Sa ou faitau auiliili, filemu ma e le mafai ona aua neʻi fai se tala ma lagona le MAFAI ONA FOAʻI mo lena tuuto ma le tuʻuina atu.
    E aunoa ma se toe feiloaʻiga, matou te moomoo ia outou uma soifua maloloina ma ia faaauau pea ona foai; Matou te faʻafetai ia te oe ma talosia ia manuia, tamaoaiga, soifua maloloina (matou te manaʻo ia e faʻaluaina) ma alofa faʻatasi ma oe (ma Sandra's ina ia sili atu, hahaha).
    Ou te iloa o le manatu alu sili atu tala atu o le anotusi o le pou, e alu i le tagata lava ia aua o matou o uo ma ou te faamemelo i lou le manatu faapito sauaga. E leai se tasi E LEAI faia se mea e te faia mo matou o loʻo manaʻo e aʻoaʻo atili ma e iai la matou tiute ole puleaina o SME network i luga o matou tauʻau, ae leʻo se mea faigofie.
    Sl2 tagata uma.

  16.   Feterika malo

    crespo88: Faʻafetai tele lava mo lau iloiloga e uiga i lenei ma isi lomia tusitusiga. Atonu e manatu nisi o le au faitau ou te faia uma aʻu mea, pe a ou le faia. Ou te faʻasino pea i le Entry Point, tusa lava pe o faʻataʻitaʻiga e aoga atoatoa. BIND o le Electronic Alamanuia ma DHCP e le o mamao i tua. Ina ia iloa latou i luga atu o le averesi, oe tatau ona pasi se tikeri postgraduate i le Iunivesite o Helsinki, 😉

  17.   FealoafaniFealoafani placeholder image malo

    Ou te iloa o lenei mataupu manaia ma sili ona taua. Ou te fiafia i lenei suʻesuʻega o le a le mea uma e uiga i le linux network management ma aemaise ai server: dns, dynamics ma static dhcp ma virtual network, bin9, samba, print server, ldap, network supervision ma tusi talosaga, faaputuga o faʻamatalaga mo polokalame 'polokalame ma vlan, ma isi Ole mea lena e taua ai ma o nei fesoasoani e sili ona lelei ma faʻataʻitaʻiga ma faʻataʻitaʻiga.

  18.   Feterika malo

    Talofa miguel !!!
    Faʻafetai mo le faʻamatalaga ma ou te faʻamoemoe e fesoasoani le faʻasologa ia te oe i mea e te fiafia i ai. Alofaaga.

  19.   Jorge malo

    Faʻafetai tele lava mo le tusitusiga Federico, ua faʻaalia ai e te iloa e uiga i le debian. O se opo.

  20.   Feterika malo

    Faafetai lava Jorge, mo lau faamatalaga. Talosia ia fesoasoani aʻu tala ia te oe.

  21.   Pablo Raúl Vargas Hall malo

    Faʻafetai tele lava mo le pou ua maeʻa faʻamaumauina ma faʻamalosia matou e faitau, faitau ma toe faitau. I le taimi nei ma le tusiga lea o le a e lolomiina, ou te manaʻo ia e mafaufau i manatu o le faʻatasiga o le a i ai:
    Microsoft Active Directory ma Samba4 o le Active Directory

    E le gata i lea, na ou manaʻo e talanoa i mea nei:
    Faʻafefea e le faʻatinoina o Bind + Isc-dhcp i le FW i se dmz le mea o le a pule ai le pulega i le dmz ma se samba 4 AD