diff --git a/README.md b/README.md index 2be120e..218a676 100644 --- a/README.md +++ b/README.md @@ -51,7 +51,7 @@ allow-query-cache { 127.0.0.1; 103.23.20.70; any ;}; ( masukan ip server bind ) ``` -Kemudian masukan konfigurasi Zona Master pada file konfigurasi BIND9 +Kemudian masukan konfigurasi Zone Master pada file konfigurasi named.conf > ``` zone "padiakse.my.id" { @@ -64,7 +64,7 @@ }; ``` -Setelah itu buat File Zone sesuai dengan penempatan file Zona pada file konfigurasi Bind +Setelah itu buat File Zone sesuai dengan penempatan file Zona pada file konfigurasi named.conf > ```# vi /var/named/for.dns``` @@ -87,7 +87,7 @@ bind IN A 117.53.47.189 ``` -Setelah file Zona selesai kita enable konfigurasi Bind9 Server dan menjalankan servicenya +Setelah file Zone selesai kita enable konfigurasi Bind9 Server dan menjalankan servicenya > ``` # systemctl enable named @@ -135,7 +135,7 @@ > ```# cp /etc/named.conf /etc/named.conf.ori``` -Lakukan perubahan konfigurasi named.conf dari sisi Master +Lakukan perubahan konfigurasi named.conf dari sisi Slave > ```# vi /etc/named.conf``` @@ -148,7 +148,7 @@ allow-query-cache { 127.0.0.1; 117.53.47.189; any ;}; ( masukan ip server bind ) ``` -Kemudian masukan konfigurasi Zona Master pada file konfigurasi BIND9 +Kemudian masukan konfigurasi Zone Slave pada file konfigurasi named.conf > ``` zone "padiakse.my.id" { @@ -162,7 +162,7 @@ }; ``` -Setelah file Zona selesai kita enable konfigurasi Bind9 Server dan menjalankan servicenya +Setelah file Zone selesai kita enable konfigurasi Bind9 Server dan menjalankan servicenya > ``` # systemctl enable named @@ -183,3 +183,168 @@ CGroup: /system.slice/named.service └─16851 /usr/sbin/named -u named -c /etc/named.conf ``` + +## Memastikan Konfigurasi Master-Slave Bind9 +#### Step 1: Lakukan Pengecekan pada file Zone dari sisi SLave +Sesuai dengan file konfigurasi zone named.conf bahwa file zone akan diletakan pada folder /var/named/slaves/ maka kita harus masuk ke folder tersebut untuk memastikan + +> ```# cd /var/named/slaves/``` + +Setelah itu lihat isi dari folder slaves + +> ``` +[slaves]# ls +for.dns +``` + +Apabila file tersebut tidak ada mohon pastikan lagi penempatan file zone pada sisi slave. + +Jika sudah ditemukan kemudian kita lihat isi konfigurasi record DNS pada file Zone tersebut. + +> ```# cat for.dns +$ORIGIN . +$TTL 86400 ; 1 day +padiakse.my.id IN SOA padiakse.my.id. root.padiakse.my.id. ( + 2403202148 ; serial + 3600 ; refresh (1 hour) + 1800 ; retry (30 minutes) + 604800 ; expire (1 week) + 86400 ; minimum (1 day) + ) + NS binds1.padiakse.my.id. + NS binds2.padiakse.my.id. + A 103.23.20.70= +$ORIGIN padiakse.my.id. +bind A 117.53.47.189 +binds1 A 103.23.20.70 +binds2 A 117.53.47.189 +``` + +#### Step 2: Lakukan Pengecekan dengan melakukan penambahan record dari sisi master +Lakukan penambahan record pada file zona sisi master + +> ```# vi /var/named/for.dns``` + +Berikut isi dari file zona Tersebut. + +> ``` +$TTL 86400 +@ IN SOA padiakse.my.id. root.padiakse.my.id. ( + 2403202149 ;Serial yyMMddhhmm + 3600 ;Refresh + 1800 ;Retry + 604800 ;Expire + 86400 ;Minimum TTL +) +@ IN NS binds1.padiakse.my.id. +@ IN NS binds2.padiakse.my.id. +@ IN A 103.23.20.70 +binds1 IN A 103.23.20.70 +binds2 IN A 117.53.47.189 +bind IN A 117.53.47.189 +www IN CNAME padiakse.my.id. +@ IN MX 10 mail.padiakse.my.id. +@ IN TXT "v=spf1 a mx -all" +mail IN A 117.53.47.189 +ftp IN CNAME padiakse.my.id. +``` + +Setelah file Zone selesai kita enable konfigurasi Bind9 Server dan menjalankan servicenya + +> ``` +# systemctl restart named +``` + +Jalankan perintah berikut untuk melakukan pengecekan zona + +> ``` +# named-checkzone padiakse.my.id /var/named/for.dns +zone padiakse.my.id/IN: loaded serial 2403202149 +OK +``` + +Lakukan pengecekan status pada sisi master. + +> ``` +# # systemctl status named +● named.service - Berkeley Internet Name Domain (DNS) + Loaded: loaded (/usr/lib/systemd/system/named.service; enabled; vendor preset: disabled) + Active: active (running) since Wed 2020-03-25 13:43:41 WIB; 1min 41s ago + Process: 8440 ExecStop=/bin/sh -c /usr/sbin/rndc stop > /dev/null 2>&1 || /bin/kill -TERM $MAINPID (code=exited, status=0/SUCCESS) + Process: 7386 ExecReload=/bin/sh -c /usr/sbin/rndc reload > /dev/null 2>&1 || /bin/kill -HUP $MAINPID (code=exited, status=0/SUCCESS) + Process: 8451 ExecStart=/usr/sbin/named -u named -c ${NAMEDCONF} $OPTIONS (code=exited, status=0/SUCCESS) + Process: 8449 ExecStartPre=/bin/bash -c if [ ! "$DISABLE_ZONE_CHECKING" == "yes" ]; then /usr/sbin/named-checkconf -z "$NAMEDCONF"; else echo "Checking of zone files is disabled"; fi (code=exited, status=0/SUCCESS) + Main PID: 8452 (named) + CGroup: /system.slice/named.service + └─8452 /usr/sbin/named -u named -c /etc/named.conf +Mar 25 13:43:41 pdns.padiakse.my.id named[8452]: network unreachable resolving './NS/IN': 2001:503:ba3e::2:30#53 +Mar 25 13:43:41 pdns.padiakse.my.id named[8452]: network unreachable resolving './DNSKEY/IN': 2001:500:a8::e#53 +Mar 25 13:43:41 pdns.padiakse.my.id named[8452]: network unreachable resolving './NS/IN': 2001:500:a8::e#53 +Mar 25 13:43:41 pdns.padiakse.my.id named[8452]: network unreachable resolving './DNSKEY/IN': 2001:500:2::c#53 +Mar 25 13:43:41 pdns.padiakse.my.id named[8452]: network unreachable resolving './NS/IN': 2001:500:2::c#53 +Mar 25 13:43:41 pdns.padiakse.my.id named[8452]: client @0x7f62c40b7800 117.53.47.189#34914 (padiakse.my.id): transfer of 'padiakse.my.id/IN': AXFR-style IXF...03202149) +Mar 25 13:43:41 pdns.padiakse.my.id named[8452]: client @0x7f62c40b7800 117.53.47.189#34914 (padiakse.my.id): transfer of 'padiakse.my.id/IN': AXFR-style IXFR ended +Mar 25 13:43:41 pdns.padiakse.my.id named[8452]: client @0x7f62c40a9060 117.53.47.189#41904: received notify for zone 'padiakse.my.id' +Mar 25 13:43:42 pdns.padiakse.my.id named[8452]: managed-keys-zone: Key 20326 for zone . acceptance timer complete: key now trusted +Mar 25 13:43:42 pdns.padiakse.my.id named[8452]: resolver priming query complete +Hint: Some lines were ellipsized, use -l to show in full. +``` + +Setelah itu lakukan restart service dari sisi slave + +> ``` +# systemctl restart named +``` + +Kemudian cek file zone pada sisi slave. + +> ```# cat for.dns +$ORIGIN . +$TTL 86400 ; 1 day +padiakse.my.id IN SOA padiakse.my.id. root.padiakse.my.id. ( + 2403202149 ; serial + 3600 ; refresh (1 hour) + 1800 ; retry (30 minutes) + 604800 ; expire (1 week) + 86400 ; minimum (1 day) + ) + NS binds1.padiakse.my.id. + NS binds2.padiakse.my.id. + A 103.23.20.70 + MX 10 mail.padiakse.my.id. + TXT "v=spf1 a mx -all" +$ORIGIN padiakse.my.id. +bind A 117.53.47.189 +binds1 A 103.23.20.70 +binds2 A 117.53.47.189 +ftp CNAME padiakse.my.id. +mail A 117.53.47.189 +www CNAME padiakse.my.id. +``` + +Cek status dari bind slave + +> ``` +# systemctl status named +● named.service - Berkeley Internet Name Domain (DNS) + Loaded: loaded (/usr/lib/systemd/system/named.service; enabled; vendor preset: disabled) + Active: active (running) since Wed 2020-03-25 13:48:05 WIB; 7s ago + Process: 17340 ExecStop=/bin/sh -c /usr/sbin/rndc stop > /dev/null 2>&1 || /bin/kill -TERM $MAINPID (code=exited, status=0/SUCCESS) + Process: 17352 ExecStart=/usr/sbin/named -u named -c ${NAMEDCONF} $OPTIONS (code=exited, status=0/SUCCESS) + Process: 17350 ExecStartPre=/bin/bash -c if [ ! "$DISABLE_ZONE_CHECKING" == "yes" ]; then /usr/sbin/named-checkconf -z "$NAMEDCONF"; else echo "Checking of zone files is disabled"; fi (code=exited, status=0/SUCCESS) + Main PID: 17354 (named) + CGroup: /system.slice/named.service + └─17354 /usr/sbin/named -u named -c /etc/named.conf +Mar 25 13:48:05 imam.localhost named[17354]: network unreachable resolving './DNSKEY/IN': 2001:500:2::c#53 +Mar 25 13:48:05 imam.localhost named[17354]: network unreachable resolving './NS/IN': 2001:500:2::c#53 +Mar 25 13:48:05 imam.localhost named[17354]: network unreachable resolving './DNSKEY/IN': 2001:500:9f::42#53 +Mar 25 13:48:05 imam.localhost named[17354]: network unreachable resolving './NS/IN': 2001:500:9f::42#53 +Mar 25 13:48:05 imam.localhost named[17354]: network unreachable resolving './DNSKEY/IN': 2001:500:12::d0d#53 +Mar 25 13:48:05 imam.localhost named[17354]: network unreachable resolving './NS/IN': 2001:500:12::d0d#53 +Mar 25 13:48:05 imam.localhost named[17354]: network unreachable resolving './DNSKEY/IN': 2001:500:2f::f#53 +Mar 25 13:48:05 imam.localhost named[17354]: network unreachable resolving './NS/IN': 2001:500:2f::f#53 +Mar 25 13:48:06 imam.localhost named[17354]: managed-keys-zone: Key 20326 for zone . acceptance timer complete: key now trusted +Mar 25 13:48:06 imam.localhost named[17354]: resolver priming query complete +``` + +#### Step 3: Add Glue record dan cek dari luar server DNS