|
Size: 2118
Comment:
|
Size: 2826
Comment:
|
| Deletions are marked like this. | Additions are marked like this. |
| Line 1: | Line 1: |
| = dns = | <<TableOfContents(2)>> = DNS = |
| Line 6: | Line 8: |
| * dig mx bitarus.allowed.org | {{{#!highlight sh dig mx bitarus.allowed.org }}} |
| Line 9: | Line 13: |
| * dig mx bitarus.allowed.org @ns.bitarus.allowed.org | {{{#!highlight sh dig mx bitarus.allowed.org @ns.bitarus.allowed.org }}} |
| Line 12: | Line 18: |
| * dig -x 54.68.9.58 | {{{#!highlight sh dig -x 54.68.9.58 }}} |
| Line 17: | Line 25: |
| == Dynamic DNS Raspeberry pi == {{{#!highlight bash |
== Dynamic DNS Raspberry pi == {{{#!highlight sh |
| Line 62: | Line 70: |
| }}} | |
| Line 63: | Line 72: |
| # In raspberry pi | === In raspberry pi === {{{#!highlight sh |
| Line 73: | Line 83: |
| logger "Running nsupdate-rpi.sh" | |
| Line 85: | Line 96: |
chmod 755 nsupdate-rpi.sh crontab -e */10 * * * * /home/pi/scripts/nsupdate-rpi.sh |
|
| Line 86: | Line 101: |
== chucknorris host == {{{#!highlight sh named-checkconf /etc/bind/named.conf named-checkzone bitarus.mooo.com /etc/bind/bitarus.mooo.com.hosts service named restart ping chucknorris.bitarus.mooo.com }}} == nslookup == {{{#!highlight sh nslookup > server x.example.org Default server: x.example.org Address: 1.2.3.4#53 > set type=any > x.example.com Server: x.example.org Address: 1.2.3.4#53 Name: x.example.com Address: 1.2.3.4 > exit }}} |
Contents
DNS
Domain name service
Check mail record with dig
1 dig mx bitarus.allowed.org
Check mail record with dig directly in name server
1 dig mx bitarus.allowed.org @ns.bitarus.allowed.org
Check reverse dns
1 dig -x 54.68.9.58
Ask for Reverse DNS for EC2 Elastic IP address
Dynamic DNS Raspberry pi
1 # change apparmor in ubuntu
2 apt install apparmor-utils
3 sudo aa-complain /usr/sbin/named
4 service bind9 restart
5
6 cd /tmp # bind server
7 dnssec-keygen -a HMAC-SHA512 -b 512 -n USER rpi.dyn.bitarus.allowed.org.
8
9 # secret contains the Key: value
10 # vim /etc/bind/keys.conf
11 key rpi.dyn.bitarus.allowed.org. {
12 algorithm HMAC-SHA512;
13 secret "???????";
14 };
15
16 # vim /etc/bind/named.conf
17 include "/etc/bind/keys.conf";
18 zone "bitarus.mooo.com" IN {
19 type master;
20 file "/etc/bind/bitarus.mooo.com.hosts";
21 allow-update { key "rpi.dyn.bitarus.allowed.org."; };
22 };
23
24 #vim /etc/bind/bitarus.mooo.com.hosts
25 $ORIGIN .
26 $TTL 604800 ; 1 week
27 bitarus.mooo.com IN SOA bitarus.mooo.com. root.bitarus.mooo.com. (
28 6 ; serial
29 604800 ; refresh (1 week)
30 86400 ; retry (1 day)
31 2419200 ; expire (4 weeks)
32 604800 ; minimum (1 week)
33 )
34 NS bitarus.mooo.com.
35 A 54.68.9.58
36 MX 5 mail.bitarus.mooo.com.
37 $ORIGIN bitarus.mooo.com.
38 labs A 54.68.9.58
39
40 sudo chgrp bind /etc/bind
41 sudo chmod g+w /etc/bind
42 sudo chown -R bind:bind /etc/bind
43 service bind9 restart
In raspberry pi
1 cd /tmp
2 scp user@bitarus.allowed.org:/tmp/K*dyn* .
3 mkdir ~/rpiDdns
4 mv Kr* ~/rpiDdns/
5 cd ~/rpiDdns/
6 chmod 0400 Krp*
7 sudo apt update
8
9 #vim nsupdate-rpi.sh
10 logger "Running nsupdate-rpi.sh"
11 EXT_IP=$(wget -qO- http://ifconfig.co/ip)
12 KEY="/home/pi/rpiDdns/Krpi.dyn.bitarus.allowed.org.+165+55648.private"
13 echo "Key: $KEY"
14
15 cat <<EOF | nsupdate -k "$KEY"
16 server bitarus.allowed.org
17 zone bitarus.mooo.com
18 update delete rpi.bitarus.mooo.com. A
19 update add rpi.bitarus.mooo.com. 600 A $EXT_IP
20 show
21 send
22 EOF
23
24 chmod 755 nsupdate-rpi.sh
25 crontab -e
26 */10 * * * * /home/pi/scripts/nsupdate-rpi.sh
chucknorris host