DokuWiki

Using Xen, create the host on the command line as follows.

   xen-create-image --hostname=dns \
   --vcpus=1 \
   --pygrub

If a second interface needs to be added, modify /etc/xen/dns.cfg to look as follows:

   vif    = ['mac=00:16:3E:5A:B6:6D,bridge=inetbr0', 'mac=00:16:3E:5A:B7:6D,bridge=xenbr0' ]

Start the vm and connect to it to continue configuration

   xm create /etc/xen/dns.cfg
   xm console dns

Debian Initial Config TODO: UPDATE (sudo, vim, tcpdump, dns-utils) (ssh configuration)

If a second VIF was added, edit /etc/network/interfaces to apply correctly and bring up the second interface.

Install the bind service.

   apt-get install bind9

named.conf

// Maintained by: shareef12 admin@twelvetacos.com
 
acl self { 10.1.1.5; 127.0.0.1; };
acl dmz {};
acl internal_dns { 10.24.24.5; };
acl evil {};
 
controls {};
 
options {
    hostname none;
    version "burninator 5.0";
    listen-on port 53 { self; };
    directory "/var/named";
    dump-file 	"/var/named/data/cache_dump.db";
        statistics-file "/var/named/data/named_stats.txt";
        memstatistics-file "/var/named/data/named_mem_stats.txt";
    recursion yes;
    allow-recursion { self; internal_dns; dmz; };
    allow-query-cache { self, internal_dns; dmz; };
 
    allow-update { none; };
    allow-transfer { none; };
    blackhole { evil; };
 
    minimal-responses yes;
    querylog yes
    notify no;
 
    //TODO: Configure DNSSEC
};
 
// log to /var/log/named/example.log all events from 
// info UP in severity (no debug)
// defaults to use 3 files in rotation
// failure messages up to this point are in (syslog) 
// typically /var/log/messages
//
logging {
    channel dns_log {
        file "/var/log/named/example.log" versions 3 size 2m;
        severity info;
        print-severity yes;
        print-time yes;
        print-category yes;
    };
    category default {
        example_log;
    };
};
 
// required zone for recursive queries
zone "." {
    type hint;
    file "root.servers";
};
 
zone "twelvetacos.com" in {
    type master;
    file "twelvetacos.com";
};
 
zone "localhost" in {
    type master;
    file "localhost";
    allow-update{none;};
};
 
zone "0.0.127.in-addr.arpa" in {
    type master;
    file "localhost.rev";
    allow-update{none;};
};