Module 4 DNS Installation

DNS Software BIND (80+ %) Berkeley Internet Name Domain NSD (Name Server Daemon) Authoritative DNS Only UNBOUND unbound.net Caching DNS only

DNS Software - BIND Bind runs on: Linux BSD (Free/Open/NetBSD) Windows (Server 2000, 2003, XP, Vista, 7) Lots of *nix systems Out-of-the-box installs on most Linux distributions and RPMs BSD – Ports system Windows – zipped.exe (runs as a service) Daemon name is named

BIND chroot/jail/sandbox Most distributions default to chroot install /var/named /var/named/chroot Chroot is a matter of taste but important in secure environments Chroot limits all daemon access to a defined path (adds base to all paths) Invoked with –t option when bind loads -u named limits access to named account

Exercise Install BIND on your PC Uses latest BIND9 Default path: %systemroot%\system32\dns %systemroot%\sysWOW64\dns

BIND – run time Starting BIND /etc/rc.d/init.d/named start named –u named [-t /path/] Stopping BIND /etc/rc.d/init.d/named stop ps ax |grep named, Kill PID Windows Control uses: Administrative tools->Services

BIND Control - rndc rndc tool with bind installation Allows remote access to bind Default install enables rndc Disable with empty controls clause controls {}; Before use must run to set up default key: rndc-confgen -a

BIND – rndc commands Flush – flush cache(s) Freeze zone – stop DDNS activity Thaw zone – restart DDNS activity Halt – immediate stop (no restart) Status – BIND status Reload – reload config file and all zones (keeps cache) Refresh zone – force zone transfer Stop – graceful stop (no restart)

Quick Quiz Name 2 Open Source DNS implementations? What is the name of BIND's daemon (process)? What is the name of the remote control tool? Did your installation work?