|
Size: 2118
Comment:
|
Size: 3293
Comment:
|
| Deletions are marked like this. | Additions are marked like this. |
| Line 1: | Line 1: |
| = dns = | <<TableOfContents(2)>> = DNS = |
| Line 6: | Line 8: |
| * dig mx bitarus.allowed.org | {{{#!highlight sh dig mx bitarus.allowed.org }}} |
| Line 9: | Line 13: |
| * dig mx bitarus.allowed.org @ns.bitarus.allowed.org | {{{#!highlight sh dig mx bitarus.allowed.org @ns.bitarus.allowed.org }}} |
| Line 12: | Line 18: |
| * dig -x 54.68.9.58 | {{{#!highlight sh dig -x 54.68.9.58 }}} |
| Line 17: | Line 25: |
| == Dynamic DNS Raspeberry pi == {{{#!highlight bash |
== Dynamic DNS Raspberry pi == === In bind9 server === {{{#!highlight sh |
| Line 26: | Line 36: |
| # generates 2 files, one with extension .key and another with extension .private with the same symmetric key # it generates a symmetric key }}} |
|
| Line 27: | Line 40: |
| # secret contains the Key: value # vim /etc/bind/keys.conf |
=== /etc/bind/keys.conf === secret contains the Key: value in K<...>.private file generated by dnssec-keygen command {{{#!highlight sh |
| Line 33: | Line 47: |
| }}} | |
| Line 34: | Line 49: |
| # vim /etc/bind/named.conf | === /etc/bind/named.conf === {{{#!highlight sh |
| Line 41: | Line 57: |
| }}} | |
| Line 42: | Line 59: |
| #vim /etc/bind/bitarus.mooo.com.hosts | === /etc/bind/bitarus.mooo.com.hosts === Subdomain bitarus.mooo.com {{{#!highlight sh |
| Line 55: | Line 74: |
| TXT "keyx=valuex" | |
| Line 57: | Line 77: |
| }}} | |
| Line 58: | Line 79: |
| {{{#!highlight sh | |
| Line 62: | Line 84: |
| }}} | |
| Line 63: | Line 86: |
| # In raspberry pi | === In raspberry pi === {{{#!highlight sh |
| Line 71: | Line 95: |
| }}} | |
| Line 72: | Line 97: |
| #vim nsupdate-rpi.sh | === nsupdate-rpi.sh === {{{#!highlight sh logger "Running nsupdate-rpi.sh" |
| Line 86: | Line 113: |
=== Steps === {{{#!highlight sh chmod 755 nsupdate-rpi.sh crontab -e */10 * * * * /home/pi/scripts/nsupdate-rpi.sh }}} == chucknorris host == {{{#!highlight sh named-checkconf /etc/bind/named.conf named-checkzone bitarus.mooo.com /etc/bind/bitarus.mooo.com.hosts service named restart ping chucknorris.bitarus.mooo.com }}} == nslookup == {{{#!highlight sh nslookup > server x.example.org Default server: x.example.org Address: 1.2.3.4#53 > set type=any > x.example.com Server: x.example.org Address: 1.2.3.4#53 Name: x.example.com Address: 1.2.3.4 > exit }}} |
Contents
DNS
Domain name service
Check mail record with dig
1 dig mx bitarus.allowed.org
Check mail record with dig directly in name server
1 dig mx bitarus.allowed.org @ns.bitarus.allowed.org
Check reverse dns
1 dig -x 54.68.9.58
Ask for Reverse DNS for EC2 Elastic IP address
Dynamic DNS Raspberry pi
In bind9 server
1 # change apparmor in ubuntu
2 apt install apparmor-utils
3 sudo aa-complain /usr/sbin/named
4 service bind9 restart
5
6 cd /tmp # bind server
7 dnssec-keygen -a HMAC-SHA512 -b 512 -n USER rpi.dyn.bitarus.allowed.org.
8 # generates 2 files, one with extension .key and another with extension .private with the same symmetric key
9 # it generates a symmetric key
10
/etc/bind/keys.conf
secret contains the Key: value in K<...>.private file generated by dnssec-keygen command
/etc/bind/named.conf
/etc/bind/bitarus.mooo.com.hosts
Subdomain bitarus.mooo.com
1 $ORIGIN .
2 $TTL 604800 ; 1 week
3 bitarus.mooo.com IN SOA bitarus.mooo.com. root.bitarus.mooo.com. (
4 6 ; serial
5 604800 ; refresh (1 week)
6 86400 ; retry (1 day)
7 2419200 ; expire (4 weeks)
8 604800 ; minimum (1 week)
9 )
10 NS bitarus.mooo.com.
11 A 54.68.9.58
12 MX 5 mail.bitarus.mooo.com.
13 TXT "keyx=valuex"
14 $ORIGIN bitarus.mooo.com.
15 labs A 54.68.9.58
In raspberry pi
nsupdate-rpi.sh
1 logger "Running nsupdate-rpi.sh"
2 EXT_IP=$(wget -qO- http://ifconfig.co/ip)
3 KEY="/home/pi/rpiDdns/Krpi.dyn.bitarus.allowed.org.+165+55648.private"
4 echo "Key: $KEY"
5
6 cat <<EOF | nsupdate -k "$KEY"
7 server bitarus.allowed.org
8 zone bitarus.mooo.com
9 update delete rpi.bitarus.mooo.com. A
10 update add rpi.bitarus.mooo.com. 600 A $EXT_IP
11 show
12 send
13 EOF
Steps
chucknorris host