Red Hat LINUX 7.2 - OFFICIAL LINUX CUSTOMIZATION GUIDE Guida di Installazione Scaricare il pdf (Pagina 233)

Chapter 17. Berkeley Internet Name Domain (BIND) 233

zone "1.0.10.in-addr.arpa" IN {

type master;

file "domain.com.rr.zone";

allow-update { none; };

};

Figure 17-20. An example of a reverse resolution zone statement

There is very little difference between this example an a standard zone statement, except for how

the zone is named. Note that a reverse name resolution zone requires the ﬁrst three blocks of the IP

address to be reversed and ".in-addr.arpa" to be included after them. This allows the single block

of IP numbers used in the reverse name resolution zone ﬁle to be correctly attached with this zone.

17.3. Using rndc

BIND includes a utility called rndc which allows you to use command line statements to administer

the named daemon, locally, or remotely. The rndc program uses the /etc/rndc.conf ﬁle for its

conﬁguration options, which can be overridden with command line options.

In order to prevent unauthorized users on other systems from controlling BIND on your server, a

shared secret key method is used to explicitly grant privileges to particular hosts. In order for rndc

to issue commands to any named, even on a local machine, the keys used in /etc/named.conf and

/etc/rndc.conf must match.

17.3.1. Conﬁguration Files

Before attempting to use the rndc command, verify that the proper conﬁguration lines are in place in

the necessary ﬁles. Most likely, your conﬁguration ﬁles are not properly set if you run rndc and see a

message that states:

rndc: connect: connection refused

17.3.1.1. /etc/named.conf

In order for rndc to be allowed to connect to your named service, you must have a controls state-

ment in your /etc/named.conf ﬁle when named starts. The sample controls statement shown in

Figure 17-21 will allow you to execute rndc commands locally.

controls {

inet 127.0.0.1 allow { localhost; } keys {

key-name ; };

};

Figure 17-21. Sample controls statement in /etc/named.conf

This statement tells named to listen on the default TCP port 953 of the loopback address and allow

rndc commands coming from the localhost, if the proper key is given. The

key-name relates to

the key statement, which is also in the /etc/named.conf ﬁle. A sample key statement is shown in

Figure 17-22.

1 2 ... 228 229 230 231 232 233 234 235 236 237 238 ... 281 282

Nessun commento

Red Hat LINUX 7.2 - OFFICIAL LINUX CUSTOMIZATION GUIDE Guida di Installazione Pagina 233