[KLUG Members] Devel Linux as DNS Server

Todd Pillars todd at terralabs.com
Fri Aug 19 16:10:37 EDT 2005


Bruce Smith wrote:
>>>I use DL as my company's DNS servers.  I cheated and simply copied over
>>>my the named config files from the distro I was previously using.  :-)
>>
>>Kinda thought I would do that too, only the jail config example on the 
>>devil linux site is confusing. Maybe a sample config for something a 
>>little less exotic (for me ;) than Lotus Notes. hmmm... Bind?
> 
> 
> You really don't have to worry about the jail script, it's all setup and
> ready to go.
After a bit of digging I did find that, I guess I was trying to make it 
harder than it was.

> 
> Just create the config file:  /etc/named.conf
did it

> 
> And put your zones in  /etc/named/ 
> (and make sure that directory is set in /etc/named.conf)
did that

> 
> It copies everything over to a jail directory and starts named.
yep it did

> 
> The only weird thing is when you modify any zone file, you can't just
> SIGHUP the server, you have to restart it fully, since the config files
> are now in two different places.  "/etc/init.d/named restart"
> 
> Of if you don't run to use a chroot jail, simply turn it off in setup
> (or by editing /etc/sysconfig/config)
this is about the only time you want jail ;)

> 
> 
>>>Probably something screwed up in your /etc/sysconfig/config  
>>>Edit it manually and look for something like "CONFIG_=xxx"
>>>where it should be "CONFIG_NAME=xxx"  ("NAME" is missing)
>>>
>>>Seems like there was a recent bug fix on this one too.
>>>If you find out which service is missing the name, let me know
>>>which one and I'll double check to make sure it's fixed.
>>
>>The only CONFIG_ anything is CONFIG_SPAMD in the config file, no CONFIG_=
> 
> 
> Crap, meant to say "START_", not "CONFIG_".  Look for that instead.
Yep found that, started SSHD, SCP'd the files and she took right off!

Excellent! Thank you for your help.

Todd

PS on the second go round of "setup" I just did not configure the 
firewall so the other nics are swaying in the wind. An nmap only shows 
ports 22 and 53 open, and after shutting down SSHD all should be well!


More information about the Members mailing list