1 Install BIND
Install bind9 with apt.
sudo apt-get install -y bind9
2 Configuration
Private network address is 172.16.11.0/24.
Private network name is moneyslow.com.
IP address of DNS server for private network is 172.16.11.70. This DNS server uses recursive query.
IP address of client is 172.16.11.250.
IP address of DNS server for internet is 172.16.11.1.
2.1 /etc/bind/named.conf.options
This is the configration file for BIND option.
Allow query from private network.
Allow recursive query.
Open 53/udp and 53/tcp if you running ufw.
options {
directory “/var/cache/bind”;
listen-on port 53 { localhost; 172.16.11.0/24; };
allow-query { localhost; 172.16.11.0/24; };
forwarders { 172.16.11.1; };
recursion yes;
}
2.2 /etc/bind/named.conf.local
This configuration file for private network is included by /etc/bind/named.conf.
zone “moneyslow.com” IN {
type master;
file “moneyslow.com.zone”;
};
2.3 /var/cache/bind/moneyslow.com.zone
This is a zone file for private network.
DNS server hostname is server.
Client hostname is client.
If you need more, append A record.
$TTL 86400
@ IN SOA moneyslow.com root.moneyslow.com (
2021050600
3600
900
604800
86400
)
@ IN NS server
server IN A 172.16.11.70
client IN A 172.16.11.250
3 Validation
named-checkconf validates /etc/bind/named.conf and included files.
$ named-checkconf
named-checkzone validates zone file.
$ /usr/sbin/named-checkzone moneyslow.com /var/cache/bind/moneyslow.com.zone
zone moneyslow.com/IN: loaded serial 2018050600
OK
4 Run BIND
Run BIND with systemd.
sudo systemctl enable bind9
sudo systemctl restart bind9
5 Excution result
Run nslookup on server.
$ nslookup server.moneyslow.com localhost.localdomain
Server: localhost.localdomain
Address: ::1#53
Name: server.moneyslow.com
Address: 172.16.11.70
Run nslookup on client.
$ nslookup client.moneyslow.com 172.16.11.70
Server: 172.16.11.70
Address: 172.16.11.70#53
Name: client.moneyslow.com
Address: 172.16.11.250