Download as txt, pdf, or txt
Download as txt, pdf, or txt
You are on page 1of 3

SERVICIO DNS escucha por el puerto 53

primero hacer un apt-get updates

instalacion del servcio


apt-get install bind9

service bind9 status

dir /etc/bind

nano /etc/network/interfaces

address 192.168.222.2
netmask 255.255.255.0
gateway 192.168.222.1
dns-nameservers 192.168.222.2
dns-search faze.es

reiniciar el servicio

service networking reload

ip ad flush enp0s3

ifdown enp0s3
ifup enp0s3

cat /etc/resolv.conf

resolvconf -u

nano /etc/nsswitch.conf

cambiar la palabra "dns" al inicio de hosts:

nano /etc/bind/named.conf.local

//zona directa para el dominio faze.es


zone "faze.es" {
type master;
file "/etc/bind/db.faze.es";
};

//zona directa para la red 192.168.222.0


zone "222.168.192.in-addr.arpa" {
type marter;
file "/etc/bind/db.222.168.192";
};

cp /etc/bind/db.local /etc/bind/db.enruta.ec
cp db.local db.enruta.ec
nano /etc/bind/db.faze.es

cp /etc/bind/db.faze.es /etc/bind/db.222.168.192

cp db.127 db.192.168.8

mi maquina se llama eve

nano /etc/bind/db.222.168.192

para verificar que esta todo bien en la zona directa

named-checkzone enruta.ec /etc/bind/db.enruta.ec

para verificar que esta todo bien en la zona inversa

named-checkzone 8.168.192.in-addr.arpa /etc/bind/db.192.168.8

entrar a
nano named.conf.options

options {
directory "/var/cache/bind";

// If there is a firewall between you and nameservers you want


// to talk to, you may need to fix the firewall to allow multiple
// ports to talk. See http://www.kb.cert.org/vuls/id/800113

// If your ISP provided one or more IP addresses for stable


// nameservers, you probably want to use them as forwarders.
// Uncomment the following block, and insert the addresses replacing
// the all-0's placeholder.

// forwarders {
// 10.102.12.2;
10.102.12.10;
};

//========================================================================
// If BIND logs error messages about the root key being expired,
// you will need to update your keys. See https://www.isc.org/bind-keys
//========================================================================
dnssec-validation auto;

auth-nxdomain no; # conform to RFC1035


listen-on-v6 { any; };
};

entrar a
nano /etc/resolv.conf

mv db.192.168.8 db.192.168.10

nameserver 192.168.8.144
domain enruta.ec
options edns0
search enruta.ec

nslookup 192.168.8.144 para saber que dns esta apuntando

You might also like