BIND : Configure for External Network2026/04/25

	Install BIND to Configure DNS (Domain Name System) Server to provide Name or Address Resolution service for Clients.
[1]	Install BIND.

root@dlp:~#

apt -y install bind9 bind9utils

[2]	On this example, Configure BIND for External Network. The example follows is for the case that External network is [172.16.0.80/29], Domain name is [srv.world], Replace them to your own environment. ( Actually, [172.16.0.80/29] is for private IP addresses, though. )

root@dlp:~#

vi /etc/bind/named.conf

include "/etc/bind/named.conf.options";
include "/etc/bind/named.conf.local";
include "/etc/bind/named.conf.root-hints";
// add
include "/etc/bind/named.conf.external-zones";

root@dlp:~#

vi /etc/bind/named.conf.options

options {
        directory "/var/cache/bind";

        // add : receive queries from all hosts
        allow-query { any; };
        // network range you allow to transfer zone files to clients
        // add secondary DNS servers if it exist
        allow-transfer { localhost; };
        // add : not allow recursion
        recursion no;
        dnssec-validation auto;
        listen-on port 53 { any; };
        // if not listen IPV6, change [any] to [none]
        listen-on-v6 { any; };
};

root@dlp:~#

vi /etc/bind/named.conf.external-zones

// create new
// add zones for your network and domain name
zone "srv.world" IN {
        type primary;
        file "/etc/bind/srv.world.wan";
        allow-update { none; };
};
zone "0.16.172.in-addr.arpa" IN {
        type primary;
        file "/etc/bind/0.16.172.db";
        allow-update { none; };
};

root@dlp:~#

vi /etc/default/named

# if you don't use IPv6 and also suppress logs for IPv6 related, possible to change
# set BIND to use only IPv4

OPTIONS="-u bind

-4

[3]	Next, Configure Zone Files for each Zone you set in [named.conf] above. To Configure Zone Files, refer to here.

Matched Content