You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
* `private_dns_server_using_bind.md` changes
* sentence style capitalization on headings
* remove all of the `iptables` references
* move `firewalld` rules out of the individual (8 and 9) sections so that these are global for both versions
* remove most passive voice
* replace most "we" with "you" and replace others with "the author"
* sentence simplification throughout
* Forgot to save my last changes
* # more small edits
* rewording and simplification
Copy file name to clipboardExpand all lines: docs/guides/dns/private_dns_server_using_bind.md
+9-11Lines changed: 9 additions & 11 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -25,9 +25,9 @@ External, or public, DNS servers map hostnames to IP addresses and, in the case
25
25
26
26
On a private network, particularly one for developing many systems, you can use your Rocky Linux workstation's */etc/hosts* file to map a name to an IP address.
27
27
28
-
This will work for _your_ workstation, but not for any other machine on your network. To make things universally applied, the best method is to take some time out and create a local, private DNS server to handle this for all of your machines.
28
+
This will work for _your_ workstation, but not for any other machine on your network. The best method to make things universally appliedis to take some time out and create a local, private DNS server to handle this for all your machines.
29
29
30
-
If you were creating production-level public DNS servers and resolvers, this author recommends the more robust [PowerDNS](https://www.powerdns.com/) authoritative and recursive DNS, which is installable on Rocky Linux servers. However this document is for a local network that will not be exposing its DNS servers to the outside world. That is why the author chose `bind` for this example.
30
+
Suppose you were creating production-level public DNS servers and resolvers. In that case, this author recommends the more robust [PowerDNS](https://www.powerdns.com/) authoritative and recursive DNS, which is installable on Rocky Linux servers. However, this document is for a local network that will not expose its DNS servers to the outside world. That is why the author chose `bind` for this example.
31
31
32
32
### The DNS server components explained
33
33
@@ -57,7 +57,7 @@ systemctl start named
57
57
58
58
## Configuration
59
59
60
-
Before making changes to any configuration file, make a backup copy of the original installed working file, _named.conf_:
60
+
Before making changes to any configuration file, create a backup copy of the original installed working file, _named.conf_:
61
61
62
62
```
63
63
cp /etc/named.conf /etc/named.conf.orig
@@ -71,13 +71,10 @@ Edit the _named.conf_ file. The author is using _vi_ , but you can substitute yo
71
71
vi /etc/named.conf
72
72
```
73
73
74
-
Turn off listening on the localhost. Do this by remarking out with a "#" sign, these two lines in the "options" section. This shuts down any connection to the outside world.
75
-
74
+
Turn off listening on the localhost. Do this by remarking with a "#" sign, these two lines in the "options" section. This shuts down any connection to the outside world.
76
75
77
76
This is helpful, particularly when you add this DNS to our workstations because you want the DNS server to only respond when the IP address requesting the service is local and not react if the server or service is on the Internet.
78
77
79
-
80
-
81
78
This way, the other configured DNS servers will take over nearly immediately to look up the Internet based services:
82
79
83
80
```
@@ -110,7 +107,7 @@ Save your changes (for _vi_, `SHIFT:wq!`)
110
107
111
108
## The forward and reverse records
112
109
113
-
You need to create two files in `/var/named`. These files are the ones that you will edit if you add machines to your network to include in the DNS.
110
+
You need to create two files in `/var/named`. You will edit these files if you add machines to your network to include them in the DNS.
114
111
115
112
The first is the forward file to map our IP address to the hostname. Again, our examples is "ourdomain" here. Note that the IP of our local DNS is 192.168.1.136. Add hosts at the bottom of this file.
116
113
@@ -142,7 +139,7 @@ www IN A 192.168.1.14
142
139
devel IN A 192.168.1.15
143
140
```
144
141
145
-
Add all the hosts you need along with their IP addresses and save your changes.
142
+
Add all the hosts and IP addresses you need and save your changes.
146
143
147
144
You need a reverse file to map our hostname to the IP address. In this case, the only part of the IP that you need is the last octet (in an IPv4 address each number separated by a "." is an octet) of the host, the PTR, and hostname.
148
145
@@ -255,7 +252,8 @@ systemctl restart named
255
252
256
253
## 9 Testing machines
257
254
258
-
You need to add the DNS server (in our example 192.168.1.136) to each machine that you want to have access to the servers that you added to your local DNS. The author is only going to show you an example of how to do this on a Rocky Linux workstation. Similar methods exist for other Linux distributions, Windows, and Mac machines.
255
+
256
+
You need to add the DNS server (in our example 192.168.1.136) to each machine that you want to have access to the servers that you added to your local DNS. The author only shows an example of how to do this on a Rocky Linux workstation. Similar methods exist for other Linux distributions, Windows, and Mac machines.
259
257
260
258
You will want to add the DNS servers to the list, not replace what is currently there, as you will still need Internet access, which will require your presently assigned DNS servers. DHCP (Dynamic Host Configuration Protocol) services generally assign these or they are statically assigned.
261
259
@@ -365,7 +363,7 @@ systemctl restart named
365
363
366
364
## 8 Testing machines
367
365
368
-
You need to add the DNS server (in our example 192.168.1.136) to each machine that you want to have access to the servers that you added to your local DNS. The author is only showing an example of how to do this on a Rocky Linux workstation. Similar methods exist for other Linux distributions, Windows, and Mac machines.
366
+
You need to add the DNS server (in our example 192.168.1.136) to each machine that you want to have access to the servers that you added to your local DNS. The author only shows an example of how to do this on a Rocky Linux workstation. Similar methods exist for other Linux distributions, Windows, and Mac machines.
369
367
370
368
You will want to add the DNS server to the list, as you will still need Internet access, which will require your currently assigned DNS servers. DHCP (Dynamic Host Configuration Protocol) generally assigns these, or they are statically assigned.
0 commit comments