| Part 2 |
|
Part 2
|
BIND
|
| Chapter 6 |
|
6
|
Configuring and Managing BIND Version 9
|
|
6.1
|
Key Concepts
|
|
6.1.1
|
How the Resolver and Name Server Work Together
|
|
6.1.2
|
Common BIND Configurations
|
|
6.1.2.1
|
Master Servers
|
|
6.1.2.2
|
Slave Servers
|
|
6.1.2.3
|
Caching-Only Servers
|
|
6.1.2.4
|
Forwarder Servers
|
|
6.2
|
Security Considerations
|
|
6.2.1
|
Access Control Lists
|
|
6.2.2
|
Dynamic Update Security
|
|
6.2.3
|
TSIG
|
|
6.2.4
|
TKEY
|
|
6.2.5
|
SIG(0)
|
|
6.2.6
|
DNSSEC
|
|
6.2.6.1
|
DNSSEC Restrictions
|
|
6.3
|
Migrating from BIND Version 4 to BIND Version 9
|
|
6.3.1
|
Navigating Two Different BIND Environments
|
|
6.4
|
BIND Service Startup and Shutdown
|
|
6.5
|
Configuring the BIND Server
|
|
6.5.1
|
Configuration File Elements
|
|
6.5.2
|
Address Match Lists
|
|
6.5.3
|
Configuration File Format
|
|
6.5.3.1
|
The ACL Statement
|
|
6.5.3.2
|
The CONTROLS Statement
|
|
6.5.3.3
|
The INCLUDE Statement
|
|
6.5.3.4
|
The KEY Statement
|
|
6.5.3.5
|
The LOGGING Statement
|
|
6.5.3.5.1
|
The Channel Phrase
|
|
6.5.3.5.2
|
The Category Phrase
|
|
6.5.3.6
|
The MASTERS Statement
|
|
6.5.3.7
|
The OPTIONS Statement
|
|
6.5.3.7.1
|
Boolean Options
|
|
6.5.3.7.2
|
Forwarding Options
|
|
6.5.3.7.3
|
Dual-stack Servers
|
|
6.5.3.7.4
|
Access Control Options
|
|
6.5.3.7.5
|
Interfaces Options
|
|
6.5.3.7.6
|
The Query Address Options
|
|
6.5.3.7.7
|
Zone Transfer Options
|
|
6.5.3.7.8
|
Bad UDP Port Lists
|
|
6.5.3.7.9
|
Server Resource Limits
|
|
6.5.3.7.10
|
Periodic Task Intervals Options
|
|
6.5.3.7.11
|
The TOPOLOGY Statement
|
|
6.5.3.7.12
|
The SORTLIST Statement
|
|
6.5.3.7.13
|
RRset Ordering
|
|
6.5.3.7.14
|
Tuning Options
|
|
6.5.3.7.15
|
Built-in Server Information Zone
|
|
6.5.3.7.16
|
The Statistics File
|
|
6.5.3.8
|
The SERVER Statement
|
|
6.5.3.9
|
The TRUSTED-KEYS Statement
|
|
6.5.3.10
|
The VIEW Statement
|
|
6.5.3.11
|
The ZONE Statement
|
|
6.5.3.11.1
|
Type of Zone
|
|
6.5.3.11.2
|
The Zone Class
|
|
6.5.3.11.3
|
Zone Options
|
|
6.5.4
|
IPv6 Support in BIND Version 9
|
|
6.5.4.1
|
Address Lookups Using AAAA Records
|
|
6.5.4.2
|
Address-to-Name Lookups Using Nibble Format
|
|
6.5.5
|
DNS Notify
|
|
6.5.6
|
Incremental Zone Transfers (IXFR)
|
|
6.5.7
|
Dynamic Updates
|
|
6.5.7.1
|
The Journal File
|
|
6.5.7.2
|
Dynamic Update Policies
|
|
6.5.7.3
|
Creating Updates Manually
|
|
6.5.8
|
Configuring Cluster Failover and Redundancy
|
|
6.5.8.1
|
Changing the BIND Database
|
|
6.6
|
Populating the BIND Server Databases
|
|
6.6.1
|
Using Existing Databases
|
|
6.6.2
|
Manually Editing Zone Files
|
|
6.6.2.1
|
Setting TTLs
|
|
6.6.2.2
|
Zone File Directives
|
|
6.6.3
|
Saving Backup Copies of Zone Data
|
|
6.6.4
|
Sample Database Files
|
|
6.6.4.1
|
Local Loopback
|
|
6.6.4.2
|
Hint File
|
|
6.6.4.3
|
Forward Translation File
|
|
6.6.4.4
|
Reverse Translation File
|
|
6.7
|
Examining Name Server Statistics
|
|
6.8
|
Configuring BIND with the SET CONFIGURATION Command
|
|
6.8.1
|
Setting Up a Master Name Server
|
|
6.8.2
|
Setting Up a Secondary (Slave) Name Server
|
|
6.8.3
|
Setting Up a Cache-Only Server
|
|
6.8.4
|
Setting Up a Forwarder Name Server
|
|
6.9
|
Configuring the BIND Resolver
|
|
6.9.1
|
Changing the Default Configuration Using the TCP/IP Management Command Interface
|
|
6.9.2
|
Examples
|
|
6.9.3
|
Configuring the Resolver Using RESOLV.CONF
|
|
6.9.3.1
|
Specifying Nameservers With IPv6 Addresses
|
|
6.9.3.2
|
Resolver Default Retry and Timeout
|
|
6.9.4
|
Resolver Default Search Behavior
|
|
6.9.5
|
Resolver Search Behavior in Earlier Releases
|
|
6.9.6
|
Setting the Resolver's Domain Search List
|
|
6.9.6.1
|
Setting the Search List with TCP/IP Management Commands
|
|
6.9.6.2
|
Setting the Search List with TCP/IP Management Commands
|
|
6.10
|
BIND Server Administrative Tools
|
|
Command 1
|
bind_checkconf
|
|
Command 2
|
bind_checkzone
|
|
Command 3
|
dnssec_keygen
|
|
Command 4
|
dnssec_signzone
|
|
Command 5
|
rndc
|
|
Command 6
|
rndc_confgen
|
|
Command 7
|
nsupdate
|
|
6.11
|
BIND Version 9 Restrictions
|
|
6.12
|
Solving Bind Server Problems
|
|
6.12.1
|
BIND Server Diagnostic Tools
|
|
Command 8
|
dig
|
|
Command 9
|
host
|
|
6.12.2
|
Using NSLOOKUP to Query a Name Server
|
|
6.12.3
|
Solving Specific Name Server Problems
|
|
6.12.3.1
|
Server Not Responding
|
