Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I have been reading about bind for a few days now, but one thing I am still unsure of is, how do I make my DNS settings available to the world?

share|improve this question
add comment

1 Answer

up vote 1 down vote accepted
  1. You install BIND
  2. You make sure it starts when the OS does chkconfig named on
  3. You turn it on immediately service named start
  4. You configure /etc/resolve.conf so that your DNS server looks to itself
  5. You configure the options statement within named.conf:

    (a) Disallow zone transfers: allow-transfer { none; };

    (b) Disallow version queries: version “Not Available”;

    (c) Allow queries from any IP allow-query {any;};

    (d) Configure forwarders if you want to forward queries.

    (e) Configure your zones.

(And because markdown is broken, my list will start over at #1, but it should be #6)

  1. Create your zone files in /var/named/
  2. Create reverse lookup zones as needed.
  3. Change ownership of the files you created to named:named
  4. Allow TCP/UDP port 53 through your firewall. Yes, TCP. TCP is used not only for zone transfers, but for large queries (only applicable if you have a huge list of returns to a query though).
  5. Restart bind: service named restart

Seem like a lot of work?

It is until you get the hang of it. Running a public DNS server is no joke as miscreants look at it like a rather toothsome morsel. If a DNS server can be hacked, it can be pointed at to deceive the unwitting. Treat it carefully and keep reading up on this.

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.