• DNS error, from a newbee to the real experts.. (2/2)

    From Weeltin@21:1/5 to All on Fri Jul 17 21:18:33 2020
    [continued from previous message]

    <br>// authoritative named.conf<br>//<br>acl trusted {<br>        <a href="http://192.168.14.0/24" target="_blank">192.168.14.0/24</a>;<br>        localhost;<br>};<br><br>acl rfc1918 {<br>        <a href="http://10.0.0.0/8" target="_blank">10.
    0.0.0/8</a>;<br>        <a href="http://172.16.0.0/12" target="_blank">172.16.0.0/12</a>;<br>        !<a href="http://192.168.14.0/24" target="_blank">192.168.14.0/24</a>;<br>        <a href="http://192.168.0.0/16" target="_blank">192.168.0.0/
    16</a>;<br>};<br><br>acl rfc5735 {<br>        <a href="http://0.0.0.0/8" target="_blank">0.0.0.0/8</a>;<br>        <a href="http://169.254.0.0/16" target="_blank">169.254.0.0/16</a>;<br>        <a href="http://192.0.0.0/24" target="_blank">
    192.0.0.0/24</a>;<br>        <a href="http://192.0.2.0/24" target="_blank">192.0.2.0/24</a>;<br>        <a href="http://192.88.99.0/24" target="_blank">192.88.99.0/24</a>;<br>        <a href="http://198.18.0.0/15" target="_blank">198.18.0.0/
    15</a>;<br>        <a href="http://198.51.100.0/24" target="_blank">198.51.100.0/24</a>;<br>        <a href="http://203.0.113.0/24" target="_blank">203.0.113.0/24</a>;<br>        <a href="http://224.0.0.0/4" target="_blank">224.0.0.0/4</a>;<
    };<br><br>options {<br>        directory &quot;/var/bind&quot;;<br><br>        // Configure the IPs to listen on here.<br>        listen-on {<br>                127.0.0.1;<br>                192.168.14.20;<br>        };<
            listen-on-v6 {<br>                none;<br>        };<br><br>        allow-query {<br>                trusted;<br>        };<br><br>        //query-source address * port 53;<br><br>        allow-query-
    cache {<br>                trusted;<br>        };<br><br>        blackhole { <br>                rfc5735;<br>                rfc1918;<br>        };<br><br>        allow-transfer {<br>                none;<
            };<br><br>        // Cryptographic authentication of DNS information <br>        // ENABLE LATER<br>    //dnssec-enable yes;<br>    //dnssec-validation yes;<br><br>        pid-file &quot;/var/run/named/named.pid&quot;;<br>
    <br>        // Changing this is NOT RECOMMENDED for a authoritative nameserver<br>        allow-recursion { none; };<br>        recursion no;<br>};<br><br>zone &quot;example.home&quot; {<br>  type master;<br>  file &quot;/etc/bind/db.
    example.home.zone&quot;;<br>};<br><br>zone &quot;14.168.192.in-addr.arpa&quot; {<br>  type master;<br>  file &quot;/etc/bind/db.14.168.192.zone&quot;;<br>};</p><p class="MsoNormal" style="margin:0cm 0cm 8pt;line-height:107%;font-size:11pt;font-family:&
    quot;Calibri&quot;,sans-serif"><br></p><p class="MsoNormal" style="margin:0cm 0cm 8pt;line-height:107%;font-size:11pt;font-family:&quot;Calibri&quot;,sans-serif">; ZONE file for example.home.<br>;<br>$TTL 604800<br>@ IN SOA ns2.example.home. hostmaster.
    example.home. (<br> 2 ; Serial<br> 604800 ; Refresh 1week<br> 86400 ; Retry<br> 2419200 ; Expire 28days<br> 604800 ; Negative Cache TTL<br>)<br>;; name servers (NS)<br>;; only authoritative servers<br>@     IN NS ns2.example.home.<br>
    ns2 IN A 192.168.14.20<br>;; hosts (A)<br>ns1         IN  A   192.168.14.10<br>c1          IN  A   192.168.14.1<br><br>;; alias (CNAME)<br>client IN CNAME c1</p><p class="MsoNormal" style="margin:0cm 0cm 8pt;line-height:107%;font-size:
    11pt;font-family:&quot;Calibri&quot;,sans-serif"><br></p><p class="MsoNormal" style="margin:0cm 0cm 8pt;line-height:107%;font-size:11pt;font-family:&quot;Calibri&quot;,sans-serif">; ZONE file for 14.168.192.in-addr.arpa.<br>;<br>$TTL 604800<br>@ IN SOA
    ns2.example.home. hostmaster.example.home. (<br> 1   ; Serial<br> 604800 ; Refresh 1week<br> 86400 ; Retry<br> 2419200 ; Expire 28days<br> 604800 ; Negative Cache TTL<br>)<br>;; name servers (NS)<br>;; only authoritative servers<br>@  
    IN NS ns2.example.home.<br>20  IN PTR ns2.example.home.<br>;; pointer records (PTR)<br>1   IN  PTR c1.example.home.<br>10  IN  PTR ns1.example.home.</p>



    </div>

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Weeltin@21:1/5 to Mark Andrews on Mon Jul 20 17:20:52 2020
    [continued from previous message]

    &gt; zone &quot;14.168.192.in-addr.arpa&quot; {<br>
    &gt;   type master;<br>
    &gt;   file &quot;/etc/bind/db.14.168.192.zone&quot;;<br>
    &gt; };<br>
    &gt; <br>
    &gt; <br>
    &gt; <br>
    &gt; ; ZONE file for example.home.<br>
    &gt; ;<br>
    &gt; $TTL  604800<br>
    &gt; @     IN      SOA     ns2.example.home. hostmaster.example.home. (<br>
    &gt; 2     ; Serial<br>
    &gt; 604800        ; Refresh 1week<br>
    &gt; 86400 ; Retry<br>
    &gt; 2419200       ; Expire 28days<br>
    &gt; 604800        ; Negative Cache TTL<br>
    &gt; )<br>
    &gt; ;; name servers (NS)<br>
    &gt; ;; only authoritative servers<br>
    &gt; @             IN      NS      ns2.example.home.<br>
    &gt; ns2   IN      A       192.168.14.20<br>
    &gt; ;; hosts (A)<br>
    &gt; ns1         IN  A   192.168.14.10<br>
    &gt; c1          IN  A   192.168.14.1<br>
    &gt; <br>
    &gt; ;; alias (CNAME)<br>
    &gt; client IN     CNAME   c1<br>
    &gt; <br>
    &gt; <br>
    &gt; <br>
    &gt; ; ZONE file for 14.168.192.in-addr.arpa.<br>
    &gt; ;<br>
    &gt; $TTL  604800<br>
    &gt; @     IN      SOA     ns2.example.home. hostmaster.example.home. (<br>
    &gt; 1   ; Serial<br>
    &gt; 604800        ; Refresh 1week<br>
    &gt; 86400 ; Retry<br>
    &gt; 2419200       ; Expire 28days<br>
    &gt; 604800        ; Negative Cache TTL<br>
    &gt; )<br>
    &gt; ;; name servers (NS)<br>
    &gt; ;; only authoritative servers<br>
    &gt; @   IN        NS      ns2.example.home.<br>
    &gt; 20  IN        PTR     ns2.example.home.<br>
    &gt; ;; pointer records (PTR)<br>
    &gt; 1   IN  PTR   c1.example.home.<br>
    &gt; 10  IN  PTR   ns1.example.home.<br>
    &gt; <br>
    &gt; _______________________________________________<br>
    &gt; Please visit <a href="https://lists.isc.org/mailman/listinfo/bind-users" rel="noreferrer" target="_blank">https://lists.isc.org/mailman/listinfo/bind-users</a> to unsubscribe from this list<br>
    &gt; <br>
    &gt; ISC funds the development of this software with paid support subscriptions. Contact us at <a href="https://www.isc.org/contact/" rel="noreferrer" target="_blank">https://www.isc.org/contact/</a> for more information.<br>
    &gt; <br>
    &gt; <br>
    &gt; bind-users mailing list<br>
    &gt; <a href="mailto:bind-users@lists.isc.org" target="_blank">bind-users@lists.isc.org</a><br>
    &gt; <a href="https://lists.isc.org/mailman/listinfo/bind-users" rel="noreferrer" target="_blank">https://lists.isc.org/mailman/listinfo/bind-users</a><br>

    -- <br>
    Mark Andrews, ISC<br>
    1 Seymour St., Dundas Valley, NSW 2117, Australia<br>
    PHONE: +61 2 9871 4742              INTERNET: <a href="mailto:marka@isc.org" target="_blank">marka@isc.org</a><br>

    </blockquote></div>

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)