Librenix
Headlines | Linux | Apps | Coding | BSD | Admin | News
Information for Linux System Administration 

Configure DNSSEC on BIND9 on Debian 6, Ubuntu 11.10

Up
vote
Down

This guide explains how you can configure DNSSEC on BIND9 on Debian Squeeze and Ubuntu 11.10. It covers how to enable DNSSEC on authoritative nameservers (master and slave) and on resolving nameservers, creation of keys (KSKs and ZSKs), signing of zones, key rolling with rollerd, zone file checking with donuts, creation of trust anchors, using DLV (DNSSEC look-aside validation), and getting your DS records into the parent's zone. read more...
permapage | score:8096 | -falko, April 19, 2012

Tutorial: A MySQL based DNS Server: MyDNS

Up
vote
Down

In this tutorial I will describe how to install and configure MyDNS, a DNS server that uses a MySQL database as backend instead of configuration files like, for example, Bind or djbdns. This has the advantage that you can easily use web-based frontends to administrate your DNS records. You could even write your own frontend, e.g. using PHP, to interact with the MyDNS database. MyDNS simply reads the records from the database, and it does not have to be restarted/reloaded when DNS records change or zones are created/edited/deleted! This is a major advantage.

I will also show how to set up a secondary DNS server, but I will not use normal zone transfers to get the records from the primary to the secondary DNS server; instead, I will use MySQL database replication. I will simply replicate the data from the primary to the secondary server.

There are multiple web frontends to MyDNS. Of course, you can use phpMyAdmin for the MyDNS administration, or you can use the web frontend that comes with MyDNS (which is not for beginners because it lacks the field descriptions), or you can use MyDNSConfig, a tool written by myself. I will show how to install each of them. read more...
mail this link | permapage | score:8039 | -falko, January 23, 2006

Tutorial: Build a DNS server with ISC BIND

Up
vote
Down

This tutorial from dW shows you how to leverage Linux to get the most from your network. Specifically, it describes how to set up DNS with Internet Systems Consortium (ISC) BIND. Sample code and configuration files are provided throughout to aid understanding. read more...
permapage | score:8009 | -Idean Momtaheni, November 24, 2004

Patch BIND9 against DNS cache poisoning on Linux

Up
vote
Down

Dan Kaminsky earlier this month announced a massive, multi-vendor issue with DNS that could allow attackers to compromise any name server - clients, too. These two articles explain how you can fix a BIND9 nameserver on Debian Etch and Fedora/CentOS so that it is not vulnerable anymore to DNS cache poisoning. read more...
mail this link | permapage | score:7994 | -falko, July 29, 2008

OpenVZ Tutorial: Build virtual host with Web, MySQL, Email, DNS servers on Debian 6

Up
vote
Down

This tutorial describes how you can set up a single dedicated server as a virtual multiserver environment using OpenVZ with dedicated Web & MySQL, Email and DNS servers on Debian Squeeze. Also, you will learn how to maintain all these servers. As an addition, you will learn how to install some very useful packages on all of them, how to protect them and how to monitor them. At the end you will have a fully functional virtual multiserver environment, ready for shared hosting. read more...
permapage | score:7992 | -falko, May 26, 2012

Tutorial: Install MyDNS-NG, MyDNSConfig 3 on Debian

Up
vote
Down

In this tutorial I will describe how to install and configure MyDNS-NG and MyDNSConfig 3 on Debian Lenny. MyDNS-NG is a DNS server that uses a MySQL database as backend instead of configuration files like, for example, Bind or djbdns. MyDNSConfig is an easy to use web-based interface to MyDNS-NG. MyDNSConfig can create all types of DNS records that are available in MyDNS and adds features like user management and access privileges. read more...
permapage | score:7898 | -falko, April 10, 2009

Tutorial: Configuring Secondary DNS

Up
vote
Down

This is the easy part.
A master DNS server contains the zone files which dictate the IP addresses and hostnames for a zone. A slave DNS server contains the same information, but must obtain its information from a master DNS server. For example, when a primary name server starts, it reads the zone information from files on the disk. However, when a slave name server starts, it asks the primary for the information.
read more...
permapage | score:7874 | -Alex, July 27, 2000 (Updated: June 23, 2003)

How to set up a caching DNS server

Up
vote
Down

Eliminate lots of DNS queries to make your connection seem faster...
You can run a DNS cache on your computer. This will speed up the process of looking up domain names when browsing. The difference is about 30-60 ms for me. Multiply that difference by the number of websites you visit a day for an approximate estimate of the speed improvement. Of course, all this would be worth it if it weren’t for the fact that setting this up is way too easy.
read more...
permapage | score:7833 | -Ray, August 8, 2006

Install PowerDNS, MySQL, Poweradmin on Debian

Up
vote
Down

This article shows how you can install the PowerDNS nameserver (with MySQL backend) and the Poweradmin control panel for PowerDNS on a Debian Lenny system. PowerDNS is a high-performance, authoritative-only nameserver - in the setup described here it will read the DNS records from a MySQL database (similar to MyDNS), although other backends such as PostgreSQL are supported as well. Poweradmin is a web-based control panel for PowerDNS. read more...
permapage | score:7817 | -falko, July 17, 2010

Tutorial: Run DNS Servers on Debian 6

Up
vote
Down

This tutorial shows how you can run your own DNS servers (primary and secondary) with ISPConfig 3. To do this, you need two servers with two different public IP addresses and with ISPConfig 3 installed. I will use Debian Squeeze for both DNS servers here to demonstrate the base system setup process and ISPConfig 3 installation, but once you have ISPConfig 3 installed on your servers, the configuration inside ISPConfig 3 is identical, no matter what distribution you use. read more...
permapage | score:7777 | -falko, July 21, 2011

Determine DNS nameserver versions remotely with fingeprinting tool

Up
vote
Down

By hiding your DNS server version number you can improve server security. fpdns is a program that remotely determines DNS server versions. It does this by sending a series of borderline DNS queries which are compared against a table of responses and server versions. (just like nmap command's remote OS detection facility).

A nameserver basically responds to a query. Interoperability is an obvious requirement here. The standard protocol behavior of different DNS implementations is expected to be the same. read more...
mail this link | permapage | score:7736 | -nixcraft, December 21, 2007

Tutorial: Set up MyDNS on Ubuntu with MyDNSConfig

Up
vote
Down

In this tutorial I will describe how to install and configure MyDNS and MyDNSConfig. MyDNS is a DNS server that uses a MySQL database as backend instead of configuration files like, for example, Bind or djbdns. The advantage is that MyDNS simply reads the records from the database, and it does not have to be restarted/reloaded when DNS records change or zones are created/edited/deleted. A secondary nameserver can be easily set up by installing a second instance of MyDNS that accesses the same database or, to be more redundant, uses the MySQL master / slave replication features to replicate the data to the secondary nameserver. read more...
mail this link | permapage | score:7725 | -falko, March 12, 2007

Tutorial: Install MyDNS, MyDNSConfig 3 on Fedora 10

Up
vote
Down

In this tutorial I will describe how to install and configure MyDNS and MyDNSConfig 3 on Fedora 10. MyDNS is a DNS server that uses a MySQL database as backend instead of configuration files like, for example, Bind or djbdns. MyDNSConfig is an easy to use web-based interface to MyDNS. MyDNSConfig can create all types of DNS records that are available in MyDNS and adds features like user management and access privileges. read more...
permapage | score:7643 | -falko, May 24, 2009

Using the Domain Name Service (DNS)

Up
vote
Down

You know my name, look up my number...
...it's estimated that more than 50,000 new domain names are registered each day. The Domain Name Service (DNS, also often referred to as the Domain Name System) was created to help solve this problem. DNS is essentially a huge conga line of servers (called name servers) snaking through the Internet. For any computer connected to the Net, a given DNS server can provide you with that computer's host name and IP address information itself, or the server knows how to find other name servers that will have that information.

In this story we give a general overview of the DNS system, how it's implemented on Linux, and how to configure it. We describe the files that hold the configuration information and host database and where they're located. Sample configuration files are also included to get you started with your own DNS setup.
read more...
mail this link | permapage | score:7585 | -Ray, December 5, 2000 (Updated: August 27, 2003)

Install PowerDNS and Poweradmin on Ubuntu 8.10

Up
vote
Down

This article shows how you can install the PowerDNS nameserver (with MySQL backend) and the Poweradmin control panel for PowerDNS on an Ubuntu 8.10 system. PowerDNS is a high-performance, authoritative-only nameserver - in the setup described here it will read the DNS records from a MySQL database (similar to MyDNS), although other backends such as PostgreSQL are supported as well. Poweradmin is a web-based control panel for PowerDNS. read more...
permapage | score:7526 | -falko, January 30, 2009

Install PowerDNS and Poweradmin on Fedora Linux

Up
vote
Down

This article shows how you can install the PowerDNS nameserver (with MySQL backend) and the Poweradmin control panel for PowerDNS on a Fedora 10 system. PowerDNS is a high-performance, authoritative-only nameserver - in the setup described here it will read the DNS records from a MySQL database (similar to MyDNS), although other backends such as PostgreSQL are supported as well. Poweradmin is a web-based control panel for PowerDNS. read more...
permapage | score:7486 | -falko, February 13, 2009

Install PowerDNS, MySQL, Poweradmin on Fedora 12

Up
vote
Down

This article shows how you can install the PowerDNS nameserver (with MySQL backend) and the Poweradmin control panel for PowerDNS on a Fedora 12 system. PowerDNS is a high-performance, authoritative-only nameserver - in the setup described here it will read the DNS records from a MySQL database (similar to MyDNS), although other backends such as PostgreSQL are supported as well. Poweradmin is a web-based control panel for PowerDNS. read more...
permapage | score:7358 | -falko, June 21, 2010

Safer, faster browsing with OpenDNS

Up
vote
Down

Free services and extra security added on top of DNS with OpenDNS...
"OpenDNS runs a really big, smart cache, so every OpenDNS user benefits from the activities of the broader OpenDNS user base," says Allison Rhodes, community manager of OpenDNS. She says OpenDNS runs a high-performance network that is geographically distributed and serviced by several redundant connections.
read more...
permapage | score:7358 | -Ray, February 1, 2007

Security: Understanding DNS Attacks

Up
vote
Down

Minimizing the vulnerabilities of the Domain Name System...
Understanding the mechanics behind DNS is important when securing your DNS server. DNS is robust and full featured; understanding what resources each DNS action requires will allow administrators to disable unnecessary features, therefore achieving a minimalist and secure DNS server. This section reviews the basics of DNS mechanics. Domain name information is stored in flat text files called zone files. User requests and server replies are simple text-file searches and take very few system resources. Some newer DNS technologies allow for write access to update record data and other configurations remotely. However, unless write access is explicitly enabled, from an end user perspective DNS should be referred to as a read-only service. DNS is mechanically broken up into records, servers, and their respective chains of authority from the root servers...
read more...
mail this link | permapage | score:7353 | -Ray, May 17, 2004

Simple DNS-based ad blocking for Linux, BSD

Up
vote
Down

Since most of the more annoying web advertisements come from only a very few sources, this clever solution is easy to implement and quite effective. Of course, this technique will work for any operating system on which running a DNS server is convenient.
People who use the Web these days have probably developed extremely good "mental filters" that allow them to ignore the blizzard of banner ads, pop-ups, and other chaff, which seem to make up the majority of the content on many major Web sites. But one day the flashing, jumping, singing, whiz-bangy-ness of it all got to me and I decided to do something to reduce the amount of visual noise I had to deal with when surfing the Web. The bonus was that once I was able to eliminate 90% of the advertising from the sites I was visiting, my Web browsing sped up enormously.

Let me preface my solution by stating that it requires that you run your own local DNS servers, as I do on my home-office network.
read more...
mail this link | permapage | score:7276 | -Ray, January 20, 2004
More articles...
Buy Large Wall Art Prints

Recent headlines

Tutorial: Webcam streaming your desktop plus audio with ffmpeg, crtmpserver, Flowplayer

Tutorial: Install Piwigo Gallery on Nginx (Debian 7)

Tutorial: Replace Windows with Ubuntu 13.04

The Debate OS Project

Tutorial: Install Apache2, PHP5, MySQL on OpenSUSE 12.3

Google Reader axed. Is FeedBurner next?

The Coming HTML 5 Revolution in Linux

Multiboot Linux distributions from one USB key

Tutorial: PrestaShop 1.5.x on Nginx (Debian 7/Ubuntu 12.10

Install Apache2, PHP5, MySQL on CentOS 5.7

Riak Cloud Storage released under Apache 2 license

Kali Linux 1.0 review

OpenBSD Tutorial: Configure Ralink USB Wireless Adapter

Tutorial: Multiple PHP Versions (Ubuntu 12.10)

Infotainment systems: The next generation

Fedora 16 security features

Fedora 16 KDE review

tmux: terminal multiplexer

Virtual Hosting with PureFTPd, MySQL on CentOS 6.4

Deploy Piwik Web Analytics on OpenShift Online

VPS: Xen vs. OpenVZ

Tutorial: Replace Windows with Pinguy OS 11.10

Tutorial: Build a CentOS 6.4 x86_64 Server

Tutorial: Run ActiveCollab 3 on Nginx (LEMP) on Debian 7/Ubuntu 12.10

Pissed Off Penguins: A Free Game Project

Tutorial: mod_spdy with Apache2 on CentOS 6.4

vsftpd: Local, Virtual users with bash script maintainance

Linux Iptables Examples

Run Headless VirtualBox 4.2 on Fedora 18

Dual-boot Windows 7 and Ubuntu 12.04 on a PC with UEFI board, SSD and HDD

PDNSD HowTo: A DNS Caching Personal Server

VirtualBox 4.2.10 released and ubuntu installation instructions included

Tutorial: Glx-Dock/Cairo-Dock on Ubuntu 12.04

Kali Linux is now available for download

Top Tools For Linux / Unix Forensics Memory Analysis

Arronax: Nautilus Plugin to create and modify Application Launchers

webOS: The latest Linux distribution

Tutorial: OpenSUSE 12.3 Samba Server with tdbsam

LibreOffice migration guide

Tutorial: Use Amazon Cloudfront To Speed Up Wordpress Based Site

 

Firefox sidebar

Site map

Site info

News feed

Features

Login
(to post)

Search

 
Articles are owned by their authors.   © 2000-2012 Ray Yeargin