On Fri, Apr 13, 2007 at 08:42:17AM +0700, [EMAIL PROTECTED] wrote: > Terima kasih atas tanggapan pak Yaya, > Tapi saya pake DJBDNS, Link yg dimaksud pak Yaya kan buat BIND
Pakai djbdns ya ? Sama dong dengan saya :-) Sebenarnya mau ditulis di blog http://awarmanf.wordpress.com Tapi ndak ada waktu, ini saya ambil dr catatan instalasi djbdns di RedHat 9, distro yg lain juga OK Slackware, debian, fedora. ############ # # DNS # ############ Prolog: domain lokal: domainku.org eth0 : interface ke LAN source yg diperlukan: djbdnsrocks.tar.gz (cari di google ya :-) i. Install Daemontools # mkdir -p /var/package # chmod 1755 /var/package # cd /var/package # tar zxvf daemontools-0.76.tar.gz # cd admin # cd daemontools-0.76 # patch -p1 < daemontools_errnopatch # package/install ii. Install ucspi-tcp # cd /tmp # tar zxvf ucspi-tcp-0.88.tar.gz # cd ucspi-tcp-0.88 # patch -p1 < ucspi-tcp_errnopatch # make # make setup check iii. Editing daemontools # mkdir /var/service # cd /command # vi svscanboot -- Notes : Add /var infront of all the /service directory /command/svc -dx /var/service/* /var/service/*/log env - PATH=$PATH svscan /var/service 2>&1 | \ # vi /etc/inittab -- Notes : Comment out SVSCAN part # init q # vi /etc/inittab -- Notes : Uncomment out SVSCAN part # ps -aux -- Check and see SVS is running on /var/service iv. Edit /etc/resolv.conf -- Add in -- domain domainku.org nameserver 192.168.0.254 ---- v. Preparing for djbdns # mkdir /var/dns # groupadd dns # useradd dnscache -g dns -d /var/dns -s /bin/false # useradd dnslog -g dns -d /var/dns -s /bin/false # useradd dns -g dns -d /var/dns -s /bin/false vi. Install djbdns # cd /tmp # tar xvzf djbdns-1.05.tar.gz # cd djbdns-1.05 # patch -p1 < djbdns_errnopatch # make # make setup check vii. Bringing up djbdns - dns server # tinydns-conf dns dnslog /var/dns/namedb 127.0.0.1 # sleep 1 # ln -s /var/dns/namedb /var/service # sleep 1 # cd /var/dns/namedb/root # ./add-ns domainku.org 127.0.0.1 # ./add-ns 0.168.192.in-addr.arpa 127.0.0.1 # ./add-host domainku.org 192.168.0.254 # ./add-alias server.domainku.org 192.168.0.254 # ./add-alias webmail.domainku.org 192.168.0.254 # ./add-host pc-1.domainku.org 192.168.0.1 # ./add-host pc-2.domainku.org 192.168.0.2 # ./add-host pc-3.domainku.org 192.168.0.3 # make viii. Bringing up djbdns - dns cache server # dnscache-conf dnscache dnslog /var/dns/dnscache 192.168.0.254 # ln -s /var/dns/dnscache /var/service # touch /var/dns/dnscache/root/ip/192.168.0 # echo 127.0.0.1 > /var/dns/dnscache/root/servers/domainku.org # echo 127.0.0.1 > /var/dns/dnscache/root/servers/1.0.0.127.in-addr.arpa # echo 127.0.0.1 > /var/dns/dnscache/root/servers/0.168.192.in-addr.arpa ix. Forwarding ISP external cache # echo 202.134.1.10 > /var/dns/dnscache/root/servers/@ # echo 202.134.0.155 >> /var/dns/dnscache/root/servers/@ # echo 1 > /var/dns/dnscache/env/FORWARDONLY # echo 1000000 > /var/dns/dnscache/env/CACHESIZE # echo 3000000 > /var/dns/dnscache/env/DATALIMIT # svc -t /var/service/dnscache # svc -t /var/service/namedb Testing: # dnsq ns domainku.org 127.0.0.1 2 domainku.org: 67 bytes, 1+1+0+1 records, response, authoritative, noerror query: 2 domainku.org answer: domainku.org 259200 NS a.ns.domainku.org additional: a.ns.domainku.org 259200 A 127.0.0.1 [EMAIL PROTECTED] rc.d]# dnsqr a server.domainku.org 1 server.domainku.org: 55 bytes, 1+1+0+0 records, response, noerror query: 1 server.domainku.org answer: server.domainku.org 86400 A 192.168.0.254 # host -t ns domainku.org domainku.org name server a.ns.domainku.org. # host -t any server.domainku.org server.domainku.org has address 192.168.0.254 Ini script rc.djbdns: #!/bin/sh # M.J. Prinsen # # description: the djbdns DNS USAGE="Usage: `basename $0` start|stop|stat|reload|pause|cont|restart" PATH=/bin:/usr/bin:/usr/local/bin:/usr/local/sbin export PATH case "$1" in start) echo "Starting dns" if svok /var/service/dnscache ; then svc -u /var/service/dnscache else echo dnscache service not running fi if svok /var/service/namedb ; then svc -u /var/service/namedb else echo namedb service not running fi ##if svok /var/service/axfrdns ; then ## svc -u /var/service/axfrdns ##else ## echo axfrdns service not running ##fi if [ -d /var/lock/subsys ]; then touch /var/lock/subsys/dns fi ;; stop) echo "Stopping dns ..." echo " dnscache" svc -d /var/service/dnscache echo " namedb" svc -d /var/service/namedb ##echo " axfrdns" ##svc -d /var/service/axfrdns if [ -f /var/lock/subsys/dns ]; then rm /var/lock/subsys/dns fi ;; stat) svstat /var/service/dnscache svstat /var/service/dnscache/log echo "--" svstat /var/service/namedb svstat /var/service/namedb/log ##echo "--" ##svstat /var/service/axfrdns ##svstat /var/service/axfrdns/log ;; reload|hup) echo "Sending HUP signal to dns." svc -h /var/service/dnscache svc -h /var/service/namedb ##svc -h /var/service/axfrdns ;; pause) echo "Pausing dnscache" svc -p /var/service/dnscache echo "Pausing namedb" svc -p /var/service/namedb ##echo "Pausing axfrdns" ##svc -p /var/service/axfrdns ;; cont) echo "Continuing dnscache" svc -c /var/service/dnscache echo "Continuing namedb" svc -c /var/service/namedb ##echo "Continuing axfrdns" ##svc -c /var/service/axfrdns ;; restart) echo "Restarting dns:" echo "* Stopping dnscache." svc -d /var/service/dnscache echo "* Stopping namedb." svc -d /var/service/namedb ##echo "* Stopping axfrdns." ##svc -d /var/service/axfrdns echo "* Restarting dnscache." svc -u /var/service/dnscache echo "* Restarting namedb." svc -u /var/service/namedb ##echo "* Restarting axfrdns." ##svc -u /var/service/axfrdns ;; *) echo $USAGE 1>&2 exit 1 esac -- Terimakasih sebelumnya dan sesudahnya. Salam, ~~ Arief Yudhawarman ~~ -- FAQ milis di http://wiki.linux.or.id/FAQ_milis_tanya-jawab Unsubscribe: kirim email ke [EMAIL PROTECTED] Arsip dan info milis selengkapnya di http://linux.or.id/milis
