Scribd
Upload
5 views20 pages

DNS Virtual Labs

The document provides instructions for generating and registering SSH keys for accessing Virtual Labs and BIND9 servers. It includes SSH commands for connecting to various servers, configuration details for master and slave DNS servers, and examples of DNS queries. Additionally, it outlines the necessary configuration files and commands for managing DNS settings and zones.

Uploaded by

dianfaridi1
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PPTX, PDF, TXT or read online on Scribd
5 views20 pages

DNS Virtual Labs

The document provides instructions for generating and registering SSH keys for accessing Virtual Labs and BIND9 servers. It includes SSH commands for connecting to various servers, configuration details for master and slave DNS servers, and examples of DNS queries. Additionally, it outlines the necessary configuration files and commands for managing DNS settings and zones.

Uploaded by

dianfaridi1
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PPTX, PDF, TXT or read online on Scribd
You are on page 1/ 20

DNS Virtual Labs

Generate Your SSH Keys : https://s.id/-MQTB


Register Your SSH Public Key : https://s.id/-MQyE

$ ssh-keygen -t rsa
Virtual Labs SSH User : idnic
Virtual Labs SSH JumpBox : vlab.idnic.net | port
60502
:
vlab.idnic.net | port 61002
:
vlab.idnic.net | port 61502
$ ssh -p 60502 idnic@vlab.idnic.net
$ ssh -p 61002 :
idnic@vlab.idnic.net
vlab.idnic.net | port $ ssh
62002 -p 61502 idnic@vlab.idnic.net
$ ssh -p 62002 idnic@vlab.idnic.net
Virtual Labs Networks : 172.31.0.0/20
BIND9 SSH User : root
BIND9 Master Server : 172.19.20.20
BIND9 Slave Server : 172.19.20.21
BIND9 Networks : 172.19.0.0/18

$ ssh root@172.19.20.20
$ ssh root@172.19.20.21
bind / named - master
# systemctl status named

# netstat -nltu

# ls -l /etc/bind/

# vi /etc/bind/named.conf.options

forwarders {

1.1.1.1;

};

dnssec-validation no;

…
bind / named - master
listen-on-v6 {

none;

};

listen-on port 53 {

127.0.0.1;

172.19.20.20;

};

allow-query {

172.19.0.0/18;

172.31.0.0/20;

};
bind / named - master
# named-checkconf -p

# systemctl reload named

# systemctl status named

# netstat -nltup

=== jumpbox ===

$ host -t a idnic.net 172.19.20.20

$ host -t ptr 8.8.8.8 172.19.20.20

$ dig -x 1.1.1.1 @172.19.20.20

$ dig +short idnic.net @172.19.20.20


bind / named - master
# vi /etc/bind/named.conf

include "/etc/bind/named.conf.options";

include "/etc/bind/named.conf.local";

include "/etc/bind/named.conf.default-zones";

include "/etc/bind/named.conf.cool-zones";
bind / named - master
# vi /etc/bind/named.conf.cool-zones

zone "19.172.in-addr.arpa" {

type master;

file "db.19.172";

allow-update { none; };

allow-transfer { 172.19.20.21; };

also-notify { 172.19.20.21; };

};

…
bind / named - master
…

zone "idnic.cool" {

type master;

file "db.cool";

allow-update { none; };

allow-transfer { 172.19.20.21; };

also-notify { 172.19.20.21; };

};

…
bind / named - master
# vi /var/cache/bind/db.19.172

$TTL 86400

@ IN SOA idnic.cool. root.idnic.cool. (

1 ; Serial

604800 ; Refresh

86400 ; Retry

2419200 ; Expire

86400 ) ; Negative Cache TTL

@ IN NS ns1.idnic.cool.

20.20 IN PTR ns1.idnic.cool.

21.20 IN PTR ns2.idnic.cool.


bind / named - master
# vi /var/cache/bind/db.cool

$TTL 604800

@ IN SOA idnic.cool. root.idnic.cool. (

2 ; Serial

604800 ; Refresh

86400 ; Retry

2419200 ; Expire

604800 ) ; Negative Cache TTL

@ IN NS ns1.idnic.cool.

ns1 IN A 172.19.20.20

ns2 IN A 172.19.20.21
bind / named - master
# named-checkconf -p

# systemctl reload named

=== jumpbox ===

$ host -t a idnic.cool 172.19.20.20

$ host -t ptr 172.19.20.20 172.19.20.20

$ host -t ptr 172.19.20.21 172.19.20.20

$ dig ns1.idnic.cool @172.19.20.20

$ dig ns2.idnic.cool @172.19.20.20

$ dig +short ns1.idnic.cool @172.19.20.20

$ dig +short ns2.idnic.cool @172.19.20.20


bind / named - slave
# systemctl status named

# netstat -nltu

# ls -l /etc/bind/

# vi /etc/bind/named.conf.options

forwarders {

1.1.1.1;

};

dnssec-validation no;

…
bind / named - slave
listen-on-v6 {

none;

};

listen-on port 53 {

127.0.0.1;

172.19.20.21;

};

allow-query {

172.19.0.0/18;

172.31.0.0/20;

};
bind / named - master
# named-checkconf -p

# systemctl reload named

# systemctl status named

# netstat -nltup

=== jumpbox ===

$ host -t a idnic.net 172.19.20.21

$ host -t ptr 8.8.8.8 172.19.20.21

$ dig -x 1.1.1.1 @172.19.20.21

$ dig +short idnic.net @172.19.20.21


bind / named - slave
# vi /etc/bind/named.conf

include "/etc/bind/named.conf.options";

include "/etc/bind/named.conf.local";

include "/etc/bind/named.conf.default-zones";

include "/etc/bind/named.conf.cool-zones";
bind / named - slave
# vi /etc/bind/named.conf.cool-zones

zone "19.172.in-addr.arpa" {

type slave;

file "db.19.172";

allow-update { none; };

masters { 172.19.20.20; };

};

…
bind / named - slave
…

zone "idnic.cool" {

type slave;

file "db.cool";

allow-update { none; };

masters { 172.19.20.20; };

};

…
bind / named - slave
# named-checkconf -p

# systemctl reload named

=== jumpbox ===

$ host -t a idnic.cool 172.19.20.21

$ host -t ptr 172.19.20.20 172.19.20.21

$ host -t ptr 172.19.20.21 172.19.20.21

$ dig ns1.idnic.cool @172.19.20.21

$ dig ns2.idnic.cool @172.19.20.21

$ dig +short ns1.idnic.cool @172.19.20.21

$ dig +short ns2.idnic.cool @172.19.20.21

You might also like

pFad - Phonifier reborn

Pfad - The Proxy pFad of © 2024 Garber Painting. All rights reserved.

Note: This service is not intended for secure transactions such as banking, social media, email, or purchasing. Use at your own risk. We assume no liability whatsoever for broken pages.


Alternative Proxies:

Alternative Proxy

pFad Proxy

pFad v3 Proxy

pFad v4 Proxy