Tutorial ilmukomputer Copyright © 2006
[email protected]
Konfigurasi DNS Server di FreeBSD Iwan Setiawan
[email protected] http://student.eepis-its.edu/~eone/ DNS (Domain Name System) adalah server yang bertugas memetakan hostname ke IP dan juga sebaliknya dari IP ke hostname. Secara default pada FreeBSD telah terinstall DNS server BIND9 (Berkeley Internet Name Domain). mulai konfigurasi BIND9 dalam contoh ini konfigurasi ethernet yang dipakai : # ifconfig lnc0 lnc0: flags=108843
mtu 1500 inet 192.168.0.100 netmask 0xffffff00 broadcast 192.168.0.255 inet6 fe80::20c:29ff:fe2d:d138%lnc0 prefixlen 64 scopeid 0x1 ether 00:0c:29:2d:d1:38
aktifkan BIND9 saat booting dengan menambah konfigurasi named_enable=”YES” pada file /etc/rc.conf $ su paswoord: # vi /etc/rc.conf /etc/rc.conf sshd_enable="YES" named_enable="YES" ifconfig_lnc0="inet 192.168.0.100 hostname="iwan.eone.org"
netmask 255.255.255.0"
konfigurasi name.conf tambahkan zona baru # cd /etc/namedb/ # cp named.conf named.conf.old # vi named.conf /etc/namedb/named.conf options { directory pid-file dump-file statistics-file // listen-on // listen-on-v6 /*
"/etc/namedb"; "/var/run/named/pid"; "/var/dump/named_dump.db"; "/var/stats/named.stats"; { 127.0.0.1; }; { ::1; };
1
Tutorial ilmukomputer Copyright © 2006 [email protected] forwarders { 127.0.0.1; }; */ }; zone "." { type hint; file "named.root"; }; zone "0.0.127.IN-ADDR.ARPA" { type master; file "master/localhost.rev"; }; // RFC 3152 zone "1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.IP6 .ARPA" { type master; file "master/localhost-v6.rev"; }; // RFC 1886 -- deprecated zone "1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.IP6 .INT" { type master; file "master/localhost-v6.rev"; }; zone "eone.org" { type master; file "master/eone.zone"; }; zone "168.192.in-addr.arpa" { type master; file "master/eone.rev"; };
bangkitkan file localhost.rev dengan menjalankan make-localhost. Kemudian buat file eone.rev # # # #
sh cd cp vi
make-localhost master localhost.rev eone.rev eone.rev
edit eone.rev , Serial disesuaikan waktu sekarang misal jam 23:30 tgl 11-09-2006 -> 0609112330
2
Tutorial ilmukomputer Copyright © 2006 [email protected] /etc/namedb/master/eone.rev $TTL 3600 @
IN
SOA
100.0
IN IN
NS PTR
eone.org. root.eone.org. ( 0609112330 ; Serial 3600 ; Refresh 900 ; Retry 3600000 ; Expire 3600 ) ; Minimum eone.org. ns.
Buat file eone.zone # cp eone.rev eone.zone # vi eone.zone /etc/namedb/master/eone.zone $TTL 3600 @
IN
SOA
ns mail
IN IN IN IN
NS MX A CNAME
eone.org. root.eone.org. ( 0609112330 ; Serial 3600 ; Refresh 900 ; Retry 3600000 ; Expire 3600 ) ; Minimum ns.eone.org. 10 mail.eone.org. 192.168.0.100 ns
bangkitkan rndc.conf # rndc-confgen > rndc.conf /etc/namedb/rndc.conf key "rndc-key" { algorithm hmac-md5; secret "l2wc2DlvXJk/ZtB0N1P3wg=="; }; options { default-key "rndc-key"; default-server 127.0.0.1; default-port 953; }; # End of rndc.conf # Use with the following in named.conf, adjusting the allow list as needed: # key "rndc-key" { # algorithm hmac-md5; # secret "l2wc2DlvXJk/ZtB0N1P3wg=="; # };
3
Tutorial ilmukomputer Copyright © 2006 [email protected] # # controls { # inet 127.0.0.1 port 953 # allow { 127.0.0.1; } keys { "rndc-key"; }; # }; # End of named.conf
dalam rndc.conf terdapat konfigurasi untuk file named.conf yang tidak diaktifkan (# comment) tambahkan pada named.conf # cat rndc.conf >> named.conf # vi named.conf
/etc/namedb/named.conf options { directory pid-file dump-file statistics-file
"/etc/namedb"; "/var/run/named/pid"; "/var/dump/named_dump.db"; "/var/stats/named.stats";
//
listen-on
{ 127.0.0.1; };
//
listen-on-v6
{ ::1; };
/* forwarders { 127.0.0.1; }; */ }; zone "." { type hint; file "named.root"; }; zone "0.0.127.IN-ADDR.ARPA" { type master; file "master/localhost.rev"; }; // RFC 3152 zone "1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.IP6 .ARPA" { type master; file "master/localhost-v6.rev"; }; // RFC 1886 -- deprecated zone "1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.IP6 .INT" { type master;
4
Tutorial ilmukomputer Copyright © 2006 [email protected] file "master/localhost-v6.rev"; }; zone "eone.org" { type master; file "master/eone.zone"; }; zone "168.192.in-addr.arpa" { type master; file "master/eone.rev"; }; key "rndc-key" { algorithm hmac-md5; secret "l2wc2DlvXJk/ZtB0N1P3wg=="; }; controls { inet 127.0.0.1 port 953 allow { 127.0.0.1; } keys { "rndc-key"; }; }; # End of named.conf
konfigurasi selesai saatnya menjalankan DNS # /etc/rc.d/named start Strating named
Ujicoba, jika output sama dengan dibawah ini maka DNS berhasil. # nslookup > ns Server: Address:
192.168.0.100 192.168.0.100#53
Name: ns.eone.org Address: 192.168.0.100 > 192.168.0.100 Server: 192.168.0.100 Address: 192.168.0.100#53 100.0.168.192.in-addr.arpa name = ns. > mail Server: 192.168.0.100 Address: 192.168.0.100#53 mail.eone.org canonical name = ns.eone.org. Name: ns.eone.org Address: 192.168.0.100 > exit
semoga tutorial ini bermanfaat. 5
