{"id":3269,"date":"2019-06-15T11:38:58","date_gmt":"2019-06-15T08:38:58","guid":{"rendered":"https:\/\/kifarunix.com\/?p=3269"},"modified":"2019-06-15T14:24:28","modified_gmt":"2019-06-15T11:24:28","slug":"configure-bind-as-dns-server-on-ubuntu-18-04","status":"publish","type":"post","link":"https:\/\/kifarunix.com\/configure-bind-as-dns-server-on-ubuntu-18-04\/","title":{"rendered":"Configure BIND as DNS Server on Ubuntu 18.04"},"content":{"rendered":"\n

In this guide, we are going to learn how to install and configure BIND as DNS server on Ubuntu 18.04. BIND<\/a> (Berkeley Internet Name Domain system), or named, is the most widely used Domain Name System software on the Internet. <\/p>\n\n\n\n

Configure BIND as DNS Server on Ubuntu 18.04<\/h2>\n\n\n\n

Install BIND 9 on Ubuntu 18.04<\/h3>\n\n\n\n

To begin with, update system pakcages.<\/p>\n\n\n\n

apt update\napt upgrade<\/code><\/pre>\n\n\n\n
Next, install BIND 9 package and Utilities on Ubuntu 18.04.<\/p>\n\n\n\n
apt install bind9 bind9utils<\/code><\/pre>\n\n\n\n
Configuring BIND as Master DNS Server on Ubuntu 18.04<\/h3>\n\n\n\n
Once the installation of BIND packages is done, proceed to configure BIND as Master DNS server.<\/p>\n\n\n\n
Configure Access Control List<\/h3>\n\n\n\n
The acl<\/strong> statement can be used to define groups of hosts that can be permitted or denied access to the nameserver.. Hence, open the named options configuration file and define the acl block as shown below.<\/p>\n\n\n\n
vim \/etc\/bind\/named.conf.options<\/code><\/pre>\n\n\n\n
acl \"allowed\" {\n        192.168.2.0\/24;\n};\n\noptions {\n  directory \"\/var\/cache\/bind\";\n...<\/code><\/pre>\n\n\n\n
This create an ACL called allowed<\/strong> which allows the hosts on the local network (192.168.2.0\/24, in this demo).<\/p>\n\n\n\n
Define global server configuration options<\/h3>\n\n\n\n
The options<\/code> statement allows you to define global server configuration options, set defaults for other statements, specify the location of the named<\/code> working directory, the types of queries allowed…<\/p>\n\n\n\n
...\noptions {\n  directory \"\/var\/cache\/bind\";\n\n        recursion yes;\n        allow-recursion { localhost; allowed; };\n        listen-on port 53 { localhost; 192.168.2.5; };\n        allow-query { localhost; allowed; };\n        allow-transfer { none; };\n\n        forwarders {\n                192.168.2.1;\n                8.8.8.8;\n        };\n\n        dnssec-validation auto;\n\n        auth-nxdomain no;    # conform to RFC1035\n        listen-on-v6 { none; };\n};<\/code><\/pre>\n\n\n\n
Where:<\/p>\n\n\n\n
  • recursion<\/strong> – Specifies whether to act as a recursive server.<\/li>
  • allow-recursion<\/strong> – Defines hosts to allow recursive queries from.<\/li>
  • listen-on<\/strong> – Specifies the IPv4<\/code> network interface on which to listen for queries.<\/li>
  • allow-query<\/strong> – Specifies which hosts are allowed to query the nameserver for authoritative resource records.<\/li>
  • allow-transfer<\/strong> – Specifies which secondary servers are allowed to request a transfer of the zone’s information. <\/li>
  • forwarders<\/strong> – Defines one or more IP addresses of name servers to query.<\/li>
  • dnssec-validation<\/strong> – Specifies whether to prove that resource records are authentic through DNSSEC. The default option is yes<\/code>.<\/li>
  • auth-nxdomain<\/strong> –  defines whether the server should answer authoritatively.<\/li>
  • listen-on-v6<\/strong> – Specifies the IPv6<\/code> network interface on which to listen for queries. <\/li><\/ul>\n\n\n\n
    Save the configuration file and check for any syntax errors by running the command below. If there is not output, then the syntax is correct;<\/p>\n\n\n\n
    named-checkconf \/etc\/bind\/named.conf.options<\/code><\/pre>\n\n\n\n
    Configure DNS Server Zone Statements<\/h4>\n\n\n\n
    The zone<\/code> statement can be used to define the characteristics of a zone, such as the location of its configuration file and zone-specific options. To define the forward and reverse Zone statements, see below;<\/p>\n\n\n\n
    vim \/etc\/bind\/named.conf.local<\/code><\/pre>\n\n\n\n
    # Zone statement for forward DNS lookup\nzone \"kifarunix-demo.com\" IN {\n        type master;\n        file \"kifarunix-demo.com\";\n};\n# Zone statement for reverse DNS lookup\nzone \"2.168.192.in-addr.arpa\" IN {\n        type master;\n        file \"rev-kifarunix-demo.com\";\n};<\/code><\/pre>\n\n\n\n
    Create Forward and Reverse Zone Files<\/h4>\n\n\n\n
    Zone file is a text file that describes a DNS zone. It contains mappings between domain names and IP addresses and other DNS resource records (RR).<\/p>\n\n\n\n