Re: [gentoo-user] BIND Configuration for DNS

2022-01-15 Thread Grant Taylor

On 1/14/22 8:45 AM, Raphael Mejias Dias wrote:

Hello,


Hi,

I'm trying to configure BIND for a local DNS server, but I'm not sure 
that it's ok.


Based on your other comments, it seems as if there is more of a question 
about overall DNS configuration and operation than about the BIND DNS 
server (named) itself.


Basically, I'm wanting to create an internal address like 
intranet.local,


Okay.

this way, I can change the internal IP address, without the obligation 
to reconfigure the client machines to lookup the new IP, only changing 
the DNS lookup table.


It sounds like you might be referring to updating DNS vs updating the 
hosts file.


First, I had followed the Gentoo Wiki and after I tried BIND official 
documentation.


ACK

I've realized the network PC's did not find the DNS address, only the 
localhost can find it,


I'm assuming that means the server running BIND (named).


when I force the DNS, the client PC cannot access the internet anymore.


I'm assuming that means that BIND (named) is working and doing what you 
want with regard to the local / internal domain name.


With these assumptions, it seems to me like BIND (named) is working and 
that it is likely not configured to allow clients to perform recursive 
queries.


Assuming this is the case, you need to change the allow-recursion 
parameter to allow the LAN clients to perform recursive queries.


This is predicated on the system BIND (named) is running on being able 
to access the internet to query external resources on behalf of the LAN 
clients.



If someone knows a guide to help, I'll be glad to know.


Please reply if any of my assumptions are wrong or if you have other 
questions.



Thanks.


You're welcome.



--
Grant. . . .
unix || die



Re: [gentoo-user] BIND Configuration for DNS

2022-01-14 Thread Rich Freeman
On Fri, Jan 14, 2022 at 10:45 AM Raphael Mejias Dias  wrote:
>
> Basically, I'm wanting to create an internal address like intranet.local, 
> this way, I can change the internal IP address, without the obligation to 
> reconfigure the client machines to lookup the new IP, only changing the DNS 
> lookup table.

I'd avoid using the .local TLD due to RFC 6762.  You might also
consider whether mDNS is actually the easiest solution to your
problem.

> I've realized the network PC's did not find the DNS address, only the 
> localhost can find it, when I force the DNS, the client PC cannot access the 
> internet anymore.

I don't know what you mean by "force the DNS" but in general most OSes
will just have a list of DNS servers that they will pick from either
in order or randomly, and without regard to what the TLD is.  So,
you'll probably want to tell them to use your internal DNS server as
the only DNS server.  This means it needs to be authoritative for your
internal domain and resolving for the others.

If you used the .local TLD then you might also be running into issues
with conflicts with RFC 6762.

BIND is capable of doing the job - I have it set up to resolve an
internal domain and outside DNS.

I have BIND set up to forward first to Google DNS, and then added my
zones to it.

-- 
Rich



[gentoo-user] BIND Configuration for DNS

2022-01-14 Thread Raphael Mejias Dias
Hello,

I'm trying to configure BIND for a local DNS server, but I'm not sure that
it's ok.

Basically, I'm wanting to create an internal address like intranet.local,
this way, I can change the internal IP address, without the obligation to
reconfigure the client machines to lookup the new IP, only changing the DNS
lookup table.

First, I had followed the Gentoo Wiki and after I tried BIND official
documentation.
I've realized the network PC's did not find the DNS address, only the
localhost can find it, when I force the DNS, the client PC cannot access
the internet anymore.

If someone knows a guide to help, I'll be glad to know.

Thanks.

Best Regards,

M.S. Raphael Mejias Dias
Nuclear Engineer | Reactors

Secure e-mail: raphael.mejias.d...@protonmail.com
PGP Key for raph...@gmail.com:
https://pgp.mit.edu/pks/lookup?op=get=0x87BC5A746072F951