932
edits
Changes
m
Undo revision 134038 by Peter.callaghan (talk)
= Running and testing the DNS server =
* Make sure that you have "named-chroot.service" enableenabled.* Start the "named" service: systemctl start named-chroot.service * Check the status of the "named" service: systemctl status named-chroot.service. Make sure the "named-chroot" service is active and running. If the "named" service failed to start, check for typo or syntax error in the BIND configuration file /etc/named.conf and your forward and reverse lookup zone files. There are two utilities provided by the "bind" package. They are called "named-checkconf" and "named-checkzone", and both are in the /usr/sbin directory.
** named-checkconf can be used to check for typo or syntax errors in named.conf.
** named-checkzone can be used to check for type or syntax errors in your zone files.
* Review the output of each DNS query result and compare it with the expected value as derived from the corresponding DNS resource record in the zone file. If there is any mismatch, employ your troubleshooting skill to fix it.
As an example, if an authoritative DNS server with IP address 192.168.99,.53 has the cp.net zone file:
<pre>
$TTL 300
== Capture and study the DNS query traffic ==
* Run the appropriate "tcpdump" command on your DNS server to capture all DNS query and response packets to a file and name the tcpdump capture packet file as [student-id]-lab2-dns-packet. While tcpdump is running on your DNS server, repeat all the DNS queries (SOA, NS, A, PTR) on your host. If you have firewall (iptables or firewalld) running on your DNS server, make sure that the port for DNS are opened on the firewall. * Possible tcpdump command: "tcpdump -i eth0 host 192.168.99.53 and port 53 -w rchan-lab2-dns-packet"* Please read the tcpdump file with the "-r" flag to verify that the targeted packets were captured to the file.
= Completing the Lab =
* You should have the directory /root/lab2 on your DNS server.
* Make a copy of the DNS server configuration file "named.conf" in the /root/lab2 directory and named it as "[student-id]-named.conf.txt" * Copy your forward lookup zone file "my-zone.txt" to the /root/lab2 directoryas [student-id]-my-zone.txt.* Copy your reverse lookup zone file "rev-zone.txt" to the /root/lab2 directoryas [student-id]-rev-zone.txt.
* Upload the following files in the "/root/lab2" directory to blackboard by the due date:
** /root/lab2/[student-id]-named.conf.txt** /root/lab2/[student-id]-my-zone.txt** /root/lab2/[student-id]-rev-zone.txt
** /root/lab2/[student-id]-lab2-test-output.txt
** /root/lab2/[student-id]-lab2-dns-packet
