🖥️ Cómo Configurar un Servidor DNS con BIND9 en Debian 12 ✅ [Guía Completa Paso a Paso]
How to Configure a DNS Server
Introduction to DNS Configuration
- The video introduces the topic of configuring a DNS server, emphasizing its importance for generating a local network DNS and improving performance and security.
- The target audience includes students, system administrators, and anyone interested in learning Linux.
Setting Up Network Adapters
- Two network cards are required: one in bridge mode for downloading dependencies and another on an internal network in promiscuous mode to simulate internet connectivity.
- The internal network setup allows clients to connect to the DNS server being configured.
Checking IP Address
- The command
ipais used to check the current IP configuration, identifying the static IP address (192.168.100) that will serve as the DNS IP.
Installing Bind
- Users must log in as superusers before installing Bind using the command
apt install bind9 nsutils.
- If Bind is already installed, it will indicate so; otherwise, it prompts for installation confirmation.
Configuring Direct and Reverse Zones
- The configuration file located at
/etc/bind/named.localis opened with nano for setting up direct and reverse zones.
- A direct zone example is provided with "sonmaterror.com," which manages domain searches; this includes specifying where the DNS will be hosted.
Understanding Reverse Lookup Zone
- A reverse lookup zone translates an IP address back into a domain name; it uses part of the static IP (192.168.1.100).
- Proper configuration ensures that queries from an IP return the correct domain name associated with it.
Saving Configuration Files
- After editing configurations, users save changes using Control + X followed by Enter.
Forward Search Area Configuration
- The forward search area file (
/etc/bind/db.materror.com) contains all configurations related to direct searches.
Key Parameters Explained
- TTL: Time-to-live indicates how long cache entries are stored.
- SOA: Start of Authority specifies domain details including admin contact information.
- Serial Number: Increments with each change made to ensure updates are recognized by servers.
DNS Configuration and Validation Process
Setting Up Forward Lookup Zone
- The first step involves making requests to the static IP, which is essential for identifying the name server as
máderror.com.
- The type of record being set is an "A" record pointing to the static IP address
192.168.1, indicating where the server is located.
- An optional email configuration can also be included, with mail directed to
mail.com, establishing a forward lookup area.
- It's crucial to change both the DNS name and the corresponding IP in your configuration file before saving it.
Configuring Reverse Lookup Zone
- The reverse lookup zone file is located in
/etc/bindand named according to the IP address (e.g.,db.192).
- Parameters from the forward lookup area are mirrored here, but adjustments must be made for specific names and addresses relevant to your setup.
- A PTR pointer will translate an IP address back into a domain name, ensuring proper resolution from IP to hostname.
Validating Configuration Files
- Use
named-checkconfcommand to validate if there are any errors in your configuration files; errors indicate issues that need addressing.
- For reverse lookup validation, use
named-checkzonefollowed by your DNS name and path to confirm correct setup.
Restarting DNS Server
- After successful validation, restart the DNS server using
systemctl restart bind9, followed by enabling it with appropriate commands based on system requirements.
- If encountering issues during enabling, switch from
bind9to usingnamedfor activation.
Testing Connectivity
- Add your server's IP address into
/etc/resolv.conf, linking it with its respective name server for connectivity testing.
DNS Configuration and Reverse Lookup
Understanding DNS Requests
- The discussion begins with a request related to a specific IP address, 192.198.100, indicating that the domain wwmadderror.com is making this request.
- The speaker emphasizes the importance of performing a reverse search for the given IP address to gather more information about its configuration.
Performing Reverse Lookup
- To conduct a reverse lookup, the command
dig -xfollowed by the IP address is introduced as an essential tool in DNS management.
- The response from the reverse lookup reveals that the name server associated with this IP is materror.com, confirming proper DNS server configuration.
Next Steps in Client Requests