Debian 10 Buster
Sponsored Link

BIND : Configure Slave DNS Server2019/07/16

 
Configure BIND as a Slave DNS Server.
The following example shows an environment that master DNS is [172.16.0.82], Slave DNS is [slave.example.host].
[1] Configure DNS master server.
root@dlp:~#
vi /etc/bind/named.conf.options
options {
        directory "/var/cache/bind";

        // If there is a firewall between you and nameservers you want
        // to talk to, you may need to fix the firewall to allow multiple
        // ports to talk.  See http://www.kb.cert.org/vuls/id/800113

        // If your ISP provided one or more IP addresses for stable
        // nameservers, you probably want to use them as forwarders.
        // Uncomment the following block, and insert the addresses replacing
        // the all-0's placeholder.

        // forwarders {
        //      0.0.0.0;
        // };
        allow-query { localhost; 10.0.0.0/24; };
        # add a range you allow to transfer zone files
        allow-transfer { localhost; 10.0.0.0/24; 172.16.0.80/29; };
        allow-recursion { localhost; 10.0.0.0/24; };
        //========================================================================
        // If BIND logs error messages about the root key being expired,
        // you will need to update your keys.  See https://www.isc.org/bind-keys
        //========================================================================
        dnssec-validation auto;

        auth-nxdomain no;    # conform to RFC1035
        listen-on-v6 { any; };
};

root@dlp:~#
rndc reload

server reload successful
[2] Configure DNS slave server.
root@slave:~#
vi /etc/bind/named.conf.external-zones
# add settings like follows

        zone "srv.world" {
                type slave;
                masters { 172.16.0.82; };
                file "/etc/bind/slaves/srv.world.wan";
        };

root@slave:~#
mkdir /etc/bind/slaves

root@slave:~#
chown bind. /etc/bind/slaves

root@slave:~#
rndc reload

server reload successful
root@slave:~#
ls /etc/bind/slaves

srv.world.wan    
# zone files in master DNS has been just transfered
Matched Content