[366e29e1] | 1 | <sect2>
|
---|
| 2 | <title>Configuration command explanations</title>
|
---|
[7319b78] | 3 | <para><screen><userinput>groupadd -g 200 named
|
---|
[14951df] | 4 | useradd -m -g named -u 200 -s /bin/false named
|
---|
| 5 | cd /home/named
|
---|
| 6 | mkdir -p dev etc/namedb/slave var/run
|
---|
| 7 | mknod /home/named/dev/null c 1 3
|
---|
| 8 | mknod /home/named/dev/random c 1 8
|
---|
| 9 | chmod 666 /home/named/dev/{null,random}
|
---|
| 10 | mkdir /home/named/etc/namedb/pz
|
---|
| 11 | cp /etc/localtime /home/named/etc : </userinput></screen>
|
---|
[366e29e1] | 12 |
|
---|
| 13 | Create the unprivileged user and group named, along with device files
|
---|
| 14 | that named will need access to inside the chroot jail.</para>
|
---|
| 15 |
|
---|
| 16 | <para><userinput>
|
---|
[14951df] | 17 | cat > /home/named/etc/named.conf << "EOF" :</userinput>
|
---|
[366e29e1] | 18 | Create the BIND configuration file, from which named will read the
|
---|
| 19 | location of zone files, root nameservers and secure DNS keys.</para>
|
---|
| 20 | <para><userinput>
|
---|
[14951df] | 21 | cat > /home/named/etc/namedb/pz/127.0.0 << "EOF" :</userinput>
|
---|
[366e29e1] | 22 | Create a single zone file.</para>
|
---|
| 23 | <para><userinput>
|
---|
[fe3b285] | 24 | cat > /home/named/etc/namedb/root.hints << "EOF" :</userinput>
|
---|
[366e29e1] | 25 | The root.hints file is a list of root nameservers. This file must be
|
---|
| 26 | updated periodically with the dig utility. Consult the BIND 9
|
---|
| 27 | Administrator Reference Manual for details.</para>
|
---|
| 28 | <para><userinput>
|
---|
[fe3b285] | 29 | cat > /etc/rndc.conf << "EOF" :</userinput>
|
---|
[f702cfc] | 30 | The rndc.conf file contains information for controlling named
|
---|
[366e29e1] | 31 | operations with the rndc utility.</para>
|
---|
| 32 |
|
---|
| 33 | <para><userinput>
|
---|
[fe3b285] | 34 | cat > /etc/resolv.conf << "EOF" :</userinput>
|
---|
[366e29e1] | 35 | The resolv.conf file will specify the local host(127.0.0.1) as the
|
---|
| 36 | nameserver.</para>
|
---|
| 37 |
|
---|
| 38 | <para><userinput>
|
---|
[fe3b285] | 39 | cat > /etc/rc.d/init.d/bind << "EOF" :</userinput>
|
---|
[366e29e1] | 40 | Create the boot script for BIND 9, used to start and stop the name
|
---|
| 41 | server daemon, named.</para>
|
---|
| 42 |
|
---|
| 43 |
|
---|
| 44 |
|
---|
| 45 | </sect2>
|
---|
| 46 |
|
---|