2/28/2015

RHEL7:Configureamasternameserver.CertDepot

CertDepot
EverythingyouneedtopassyourRHCSA,RHCE,LFCS,LFCE&VCPexams.

Go

searchhere
Home

About

RHEL6

RHEL7

VCP5DCV

RHEL7:Configurea
masternameserver.
LastupdatedonOctober27,2014(2,579views)NoComments

Upcoming
Events
MAR

6
Fri

Sharethislink

InstallingamasterDNSserverwillbringyouseveral
advantages:

MAR

13
Fri

youdefinemachinenamesoneforallinacentralized
way,youcanthenbetterorganizeyourworkshops,
buildmachinesdedicatedtoaspecifictask(NFS
server,LDAPserver,etc),
youdontneedtoregularlyeditthe/etc/hostsfileof
eachofthem,
youcanusethemachinenameseverywhereinan
efficientway,
youcannowtestpostfixlabs:thisonlypointmakes
DNSservicemandatory.
BesidesmakingconversionbetweenIPaddressandnames,
theDNSserviceprovidestheinfrastructurenecessaryformail
managementthroughtheMXrecords.

MAR

20
Fri

6:00pm
View
Details
vanVugt:
Free
online
classon
SELinux
issues
6:00pm
View
Details
vanVugt:
Free
online
classon
NFS
Kerberos
6:00pm
View
Details
vanVugt:
Free
online
classon
ACLs

LetsinstallaDNSserverfortheexample.comdomain.Here,
http://www.certdepot.net/rhel7configuremasternameserver/

1/7

2/28/2015

RHEL7:Configureamasternameserver.CertDepot

theDNSserviceisinstalledonaservercalled
dns.example.comwithanIPaddressof192.168.1.5.

APR

3
Fri

Installthebindpackage:

#yuminstallybind
Editthe/etc/named.conffileandchangethelistenonoption
from127.0.0.1toany:

APR

10
Fri

listenonport53{any;};
Inthesamefile,changetheallowqueryoptionfromlocalhost
toany:

APR

15
Wed

allowquery{any;};
Inthesamefile,disablethednssecvalidationoption:
APR

dnssecvalidationno;

24
Fri

Stillinthesamefile,belowtherecursionoption,addthetwo
followinglines(with192.168.1.1beingtheDNSIPaddressof
yourInternetprovider):

6:00pm
View
Details
vanVugt:
Free
online
classon
Apache
6:00pmView
Details
vanVugt:Free
onlineclasson
troubleshooting
6:00pm
View
Details
vanVugt:
Free
online
classon
iSCSI
6:00pm
View
Details
vanVugt:
Free
online
classon
remote
logins

forwardonly;
forwarders{192.168.1.1;};
Aftertheloggingstanzaandstillinthe/etc/named.conffile,
addthefollowinglines(example.comissupposedtobeyour
domainname):

zone"example.com"{
typemaster;
file"example.com.zone";
allowupdate{none;};
};
zone"1.168.192.inaddr.arpa"{
http://www.certdepot.net/rhel7configuremasternameserver/

RHCSA6:
Taskofthe
day
Allowedtime:10
minutes.
Archiveandcompress
thecontentofthe/opt
directory(createfilesif
noneexists).
Uncompressand
2/7

2/28/2015

RHEL7:Configureamasternameserver.CertDepot

typemaster;
file"example.com.revzone";
allowupdate{none;};
};
Createthe/var/named/example.com.zonefileandinsertthe
followinglines(wheregatewayisyourgatewaytoInternet,dns
yourDNSserver,mailyourmailserverandclientasimple
client):

$TTL86400
@INSOAdns.example.com.root.example.com.(
2014080601;Serial
1d;refresh
2h;retry
4w;expire
1h);mincache
INNSdns.example.com.
INMX10mail.example.com.
gatewayINA192.168.1.1
dnsINA192.168.1.5
mailINA192.168.1.10
clientINA192.168.1.15
Note1:INNSindicatesanameserver,INMXamailserver.
Note2:ItisagoodpracticetoputthedateintheSerialfield
andincreaseit(onlythelasttwodigits)whenchangesare
required(ifyoudontincreasethem,nochangeswillbetaken
intoaccountevenafterrestartingthenamedservice).
Createthe/var/named/example.com.revzonefileandinsert
thefollowinglines:
$TTL86400
@INSOAdns.example.com.root.example.com.(

unarchivetheresulting
filein/root

RHCE6:Task
oftheday
Allowedtime:10
minutes.
Setupacachingonly
DNSservertoforward
DNSqueries.

Twitter
Tweets
Jastis4Ever
@Jastis4Ever

Retweeted by
CertDepot
Expand

Tweet to @CertDepot

Recently
Updated
Pages
RHEL7Free

2h;retry
4w;expire

resources
RHEL7:Useyum

1h);mincache

transaction
history.

http://www.certdepot.net/rhel7configuremasternameserver/

6h

How to Configure tigervnc

2014080601;Serial
1d;refresh

INNSdns.example.com.

Follow

available

3/7

2/28/2015

RHEL7:Configureamasternameserver.CertDepot

RHEL7:Install
1INPTRgateway.example.com.
5INPTRdns.example.com.
10INPTRmail.example.com.
15INPTRclient.example.com.
Checktheconfigurationfiles:

#namedcheckconf
Addthenewservicetothefirewall:

#firewallcmdpermanentaddservice=dns
Success
Reloadthefirewallconfiguration:
#firewallcmdreload
Success
ActivatetheDNSserviceatbootandstartit:
#systemctlenablenamed&&systemctlstartnamed

RedHat
EnterpriseLinux
systemsas
virtualguests.
RHEL7RHCSA
Examobjectives
RHEL7:Update
thekernel
package
appropriatelyto
ensurea
bootablesystem.
RHEL7:Locate,
read,anduse
system
documentation
includingman,
info,andfilesin
/usr/share/doc.
RHEL7:Howto
dealwithHTTPD
SELinuxpolicy.
SELINUX:Use
booleansettings
tomodifysystem
SELinuxsettings.

Checktheconfiguration:
#nslookupcnn.com127.0.0.1
Server:127.0.0.1
Address:127.0.0.1#53

SELINUX:
Diagnoseand
addressroutine
SELinuxpolicy
violations.
RHEL7:Howto
installaNginx&
PHPservice.

Nonauthoritativeanswer:
Name:cnn.com
Address:157.166.226.25
Name:cnn.com
Address:157.166.226.26

Recent
Comments

#dig@127.0.0.1cnn.com
;<<>>DiG9.9.4RedHat9.9.414.el7<<>>@127.0.0.1cnn.com
mfsidonRHEL6
http://www.certdepot.net/rhel7configuremasternameserver/

4/7

2/28/2015

RHEL7:Configureamasternameserver.CertDepot

;(1serverfound)
;;globaloptions:+cmd

LFCSExam
objectives

CertDepoton
;;Gotanswer:
;;>>HEADER<<opcode:QUERY,status:NOERROR,id:41414 Finalcallfor
RHCSA6&
;;flags:qrrdra;QUERY:1,ANSWER:2,AUTHORITY:13,ADDITIONAL:13
RHCE6exams.
;;OPTPSEUDOSECTION:
;EDNS:version:0,flags:;udp:4096

konradonFinal
callforRHCSA6

;;QUESTIONSECTION:
;cnn.com.INA

&RHCE6
exams.

;;ANSWERSECTION:

CertDepoton
Websitenews.

cnn.com.152INA157.166.226.26
cnn.com.152INA157.166.226.25

CertDepoton
RHEL7RHCSA
Examobjectives

;;AUTHORITYSECTION:
com.125267INNSc.gtldservers.net.
com.125267INNSi.gtldservers.net.
com.125267INNSa.gtldservers.net.

Pollfor
favorite
com.125267INNSm.gtldservers.net.
book
com.125267INNSk.gtldservers.net.
com.125267INNSf.gtldservers.net.
com.125267INNSl.gtldservers.net.
com.125267INNSd.gtldservers.net.
com.125267INNSj.gtldservers.net.
Whatisyourfavorite
com.125267INNSe.gtldservers.net. booktoprepare
com.125267INNSg.gtldservers.net. RHCSA&RHCE
com.125267INNSb.gtldservers.net.
exams?
com.125267INNSh.gtldservers.net.
;;ADDITIONALSECTION:
i.gtldservers.net.9799INA192.43.172.30
m.gtldservers.net.5154INA192.55.83.30
f.gtldservers.net.11700INA192.35.51.30
d.gtldservers.net.16095INA192.31.80.30
g.gtldservers.net.5325INA192.42.93.30
h.gtldservers.net.5345INA192.54.112.30
j.gtldservers.net.5108INA192.48.79.30
c.gtldservers.net.13522INA192.26.92.30
l.gtldservers.net.6529INA192.41.162.30
e.gtldservers.net.6040INA192.12.94.30

Damian
Tommasinos
book
MichaelJangs
book
AsgharGhoris
book
Others
None
Vote

k.gtldservers.net.10294INA192.52.178.30
ViewResults
b.gtldservers.net.3807INAAAA2001:503:231d::2:30
http://www.certdepot.net/rhel7configuremasternameserver/

5/7

2/28/2015

RHEL7:Configureamasternameserver.CertDepot

;;Querytime:70msec
;;SERVER:127.0.0.1#53(127.0.0.1)
;;WHEN:WedAug0613:00:29CEST2014
;;MSGSIZErcvd:496

LeaveaReply

Pollformost
difficult
topic
Whatdoyouthinkis
themostdifficult
topic?

Youmustbeloggedintopostacomment.
Samba
NFS
LDAP
SELinux
Mail
FTP
Kickstart
Others
Vote
ViewResults

Archives
February2015
January2015
December2014
November2014
October2014
September2014
August2014
July2014
June2014
May2014
April2014
March2014
http://www.certdepot.net/rhel7configuremasternameserver/

6/7