HowtoForge Forums | HowtoForge - Linux Howtos and Tutorials

HowtoForge Forums | HowtoForge - Linux Howtos and Tutorials (http://www.howtoforge.com/forums/index.php)
-   Tips/Tricks/Mods (http://www.howtoforge.com/forums/forumdisplay.php?f=29)
-   -   ISPConfig3 OK - Using DNS server to server local LAN (http://www.howtoforge.com/forums/showthread.php?t=47168)

MrCompTech 10th July 2010 06:02
ISPConfig3 OK - Using DNS server to server local LAN
 
Follwed the How-To "The Perfect Server - Fedora 13 x86_64 [ISPConfig 3]
"

Within ISPConfig3 webadmin:
Changed admin password
Set IP address of server
Set GW IP address
Set DNS of server as the server itself - if the server cannot resolve to an IP it will use the public DNS servers listed in the /etc/resolv.conf file.

To use this DNS server with a local LAN address of 192.168.1.10 to server DNS requests from LAN clients edit the /etc/named.conf file.

Change:
listen-on port 53 { 127.0.0.1; }
To:
listen-on port 53 { 127.0.0.1; 192.168.1.10; }

Also change:
allow-query { localhost; }
To:
allow-query { localhost; 192.168.1.0/24; }

The "/24" matches the subnet for my network settings of 255.255.255.0 which can be found by running system-config-network it is the 'subnetmask'.

Turbanator 29th July 2010 02:45
If I may ask, how can this be done following the Perfect Debian Lenny x64 setup? I don't think it uses BIND.

MrCompTech 29th July 2010 22:43
But what if I'm using MyDNS instead of BIND?
 
Hi Turbanator,

You didn't provide a link to the specific 'How-To' that you used.

Is this the one you followed ?:
Code:
http://howtoforge.com/perfect-server-debian-lenny-ispconfig3
On page 4 of the this How-To you should have installed MyDNS. So your correct your not using BIND.

You should have installed software that is required by MyDNS
Code:
apt-get install g++ libc6 gcc gawk make texinfo libmysqlclient15-dev
Then downloaded the source code and build MyDNS for your specific system
Code:
cd /tmp
wget http://heanet.dl.sourceforge.net/sourceforge/mydns-ng/mydns-1.2.8.25.tar.gz
tar xvfz mydns-1.2.8.25.tar.gz
cd mydns-1.2.8
./configure
make
make install
The next part of the installation of MyDNS is to create the startup script. The script, if created by the 'make install' above should be located at
Code:
/etc/init.d/mydns
You can use this command to see if it already exists
Code:
ls -l /etc/init.d/mydns
If you start the vi editor with the command
Code:
vi /etc/init.d/mydns
and have typed the path and file name correctly you should be viewing the file. If the file is empty, that means that the file does not exist and you need to type in the commands one line at a time. Any time I use braces, {}, I am referring to a key on the keyboard. To get 'vi' into 'insert' mode press {i}. When done editing press, one key at a time, {ESC}{:}{w}{q}. The Escape key will take you out of edit/insert mode, {:} indicates that you are going to input a "vi" command, the {w} writes the file and {q} quits "vi".

Alternatively you could use a different computer and copy and paste the code from the How-To into a plain text file then transfer it to the target server using a USB flash drive. A few moments after the USB drive has been plugged into the server at the command prompt enter "fdisk -l" the last line of the output will show were to mount the USB drive at:

EXAMPLE:
Code:
  Device Boot      Start        End      Blocks  Id  System
/dev/sdb1              16        7748    1979456    e  W95 FAT16 (LBA)
To mount the drive:
Code:
mount /dev/sdb1 /mnt
Then you can run "cd /mnt" to see the file. Use the "cp" command to copy the file. To get help on these command you can at the command prompt type "man {name of command}". When NOT in the /mnt directory unmount the USB drive using "umount /mnt".

Next is to change the permissions on the file so that the operating system will allow it to be executed:
Code:
chmod +x /etc/init.d/mydns
update-rc.d mydns defaults
If you done all the above steps and rebooted your system then your DNS server should be running, but that doesn't mean that it is working the way you need it to.

Let's find out if it's running, if MyDNS is installed you should see it in the process list by running the command:
Code:
ps -A
This will probably scroll by too fast so you should pipe this throught the more command:
Code:
ps -A | more
You can press "q" to quit the "more" command without having to view all pages. Use the spacebar to advance on screen/page at a time. Pressing {enter} will advance the screen one row/line at a time.

If you have "Grep" installed, find out by typing "grep" and pressing return and view results, you should be able to see it in the process list using this:
Code:
ps -A | grep -i mydns
This just tells us if MyDNS is running, it doesn't tell us if everything is properly configured for MyDNS. The way I usually check something like this is to restart the service using the command prompt and see if any errors are displayed.

For me, since I am using BIND I do this with:
Code:
/etc/init.d/named restart
Looking at the How-To that I think you followed, you should run the command:
Code:
/etc/init.d/mydns restart
If the service restarts without error then 'things' are basically OK.

Some info I found by Googling says that MyDNS uses the config file /etc/mydns.conf

This would be the file you want to change similarly to my previous post.

If the config file isn't in "/etc" one way you maybe able to find it is to run this:
Code:
updatedb
locate mydns
You can create a "mydns.conf" file by running:
Code:
mydns --dump-config > /etc/mydns.conf
I found this at http://mydns.bboy.net/doc/html/mydns_7.html#SEC7

You should have an "/etc/resolv.conf" file that was created during the network part of the setup. In this file should be listed the DNS servers of your Internet Service Provider (ISP).

Example:
nameserver:192.168.x.x
nameserver:xxx.xxx.xxx.xxx

The first line should be the local IP address of the network adapter that your server uses to access the Internet. This didn't show up in my resolv.conf until after I configured my server within ISPConfig. If your isn't listed here yet I don't think that shoudl matter.

The second line is your ISP DNS server, there maybe two listed here.

Assuming you have more than one computer on your local LAN and you want your ISPConfig3 server to be the DNS server...

The way DNS is going to work is:
On your server your Network Interface Card's (NIC) first DNS server shoudl be the IP address of your server. When your server needs an IP address, like say when you are updating software on your system, say using YUM, the request will go to the first DNS server listed in your NIC settings. If your DNS server doesn't have the DNS information then MyDNS will look at the resolve.conf file to see what other DNS servers it can use to resolve the URL to an IP address.

The way to test whether or not your DNS server is working use either the "nslookup" or "dig" commands, like so:
Code:
dig ohio.org 192.168.1.10
NOTE: Replace "192.168.1.10" with the LAN IP address of your servers NIC.

If this is successfull you will get a result such as:
Code:
[root@prl-ofc-s01 ~]# dig ohio.org 192.168.1.10

; <<>> DiG 9.7.1-P2-RedHat-9.7.1-2.P2.fc13 <<>> ohio.org 192.168.1.10
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 13050
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 0

;; QUESTION SECTION:
;ohio.org.                      IN      A

;; ANSWER SECTION:
ohio.org.              86316  IN      A      74.117.116.80

;; AUTHORITY SECTION:
ohio.org.              86316  IN      NS      ns1.parked.com.
ohio.org.              86316  IN      NS      ns2.parked.com.

;; Query time: 0 msec
;; SERVER: 192.168.1.10#53(192.168.1.10)
;; WHEN: Thu Jul 29 16:16:45 2010
;; MSG SIZE  rcvd: 88

;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 53917
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;192.168.1.10.                  IN      A

;; AUTHORITY SECTION:
.                      10716  IN      SOA    a.root-servers.net. nstld.verisign-grs.com. 2010072900 1800 900 604800 86400

;; Query time: 0 msec
;; SERVER: 192.168.1.10#53(192.168.1.10)
;; WHEN: Thu Jul 29 16:16:45 2010
;; MSG SIZE  rcvd: 105
More info on MyDNS can be found at:http://mydns.bboy.net/doc/html/mydns...l#SEC_Contents

Turbanator 29th July 2010 23:03
MrCompTech...wow! great reply! Sorry I didn't provide more clear info in my post to save you so much trouble.

I am following the standard howto for perfect serve debian lenny with isp3 and mydns.

My main question was ony about getting the local lan to recogize the domains on that server.

my resolv.conf shows only my ISP dns servers. So you're saying I should put the local internal ip of the server as my first dns and the isp dns server as the next 2, correct?

OR
should I only make the change to mydns.conf as you had in the original post.

OR
both?

jwarnier 7th August 2010 02:21
Quote:
Originally Posted by MrCompTech (Post 235129)
Hi Turbanator,

You didn't provide a link to the specific 'How-To' that you used.

Is this the one you followed ?:
Code:
http://howtoforge.com/perfect-server-debian-lenny-ispconfig3
On page 4 of the this How-To you should have installed MyDNS. So your correct your not using BIND.

You should have installed software that is required by MyDNS
Code:
apt-get install g++ libc6 gcc gawk make texinfo libmysqlclient15-dev
Then downloaded the source code and build MyDNS for your specific system
Code:
cd /tmp
wget http://heanet.dl.sourceforge.net/sourceforge/mydns-ng/mydns-1.2.8.25.tar.gz
tar xvfz mydns-1.2.8.25.tar.gz
cd mydns-1.2.8
./configure
make
make install
The next part of the installation of MyDNS is to create the startup script. The script, if created by the 'make install' above should be located at
Code:
/etc/init.d/mydns
You can use this command to see if it already exists
Code:
ls -l /etc/init.d/mydns
If you start the vi editor with the command
Code:
vi /etc/init.d/mydns
and have typed the path and file name correctly you should be viewing the file. If the file is empty, that means that the file does not exist and you need to type in the commands one line at a time. Any time I use braces, {}, I am referring to a key on the keyboard. To get 'vi' into 'insert' mode press {i}. When done editing press, one key at a time, {ESC}{:}{w}{q}. The Escape key will take you out of edit/insert mode, {:} indicates that you are going to input a "vi" command, the {w} writes the file and {q} quits "vi".

Alternatively you could use a different computer and copy and paste the code from the How-To into a plain text file then transfer it to the target server using a USB flash drive. A few moments after the USB drive has been plugged into the server at the command prompt enter "fdisk -l" the last line of the output will show were to mount the USB drive at:

EXAMPLE:
Code:
  Device Boot      Start        End      Blocks  Id  System
/dev/sdb1              16        7748    1979456    e  W95 FAT16 (LBA)
To mount the drive:
Code:
mount /dev/sdb1 /mnt
Then you can run "cd /mnt" to see the file. Use the "cp" command to copy the file. To get help on these command you can at the command prompt type "man {name of command}". When NOT in the /mnt directory unmount the USB drive using "umount /mnt".

Next is to change the permissions on the file so that the operating system will allow it to be executed:
Code:
chmod +x /etc/init.d/mydns
update-rc.d mydns defaults
If you done all the above steps and rebooted your system then your DNS server should be running, but that doesn't mean that it is working the way you need it to.
Those using Debian and who know how to build a source package might be interested to know that I seriously improved the unofficial MyDNS Debian package from the related Debian Bug (http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=517790), to the point it is near official Debian quality and put the sources here:
http://apt.bxlug.be/sources/
This package then makes it particularly easy to install MyDNS (no need to create an initscript or a configuration file) on your server, for later use by ISPconfig for example.

Quote:
Originally Posted by MrCompTech (Post 235129)
Let's find out if it's running, if MyDNS is installed you should see it in the process list by running the command:
Code:
ps -A
This will probably scroll by too fast so you should pipe this throught the more command:
Code:
ps -A | more
You can press "q" to quit the "more" command without having to view all pages. Use the spacebar to advance on screen/page at a time. Pressing {enter} will advance the screen one row/line at a time.

If you have "Grep" installed, find out by typing "grep" and pressing return and view results, you should be able to see it in the process list using this:
Code:
ps -A | grep -i mydns
This just tells us if MyDNS is running, it doesn't tell us if everything is properly configured for MyDNS. The way I usually check something like this is to restart the service using the command prompt and see if any errors are displayed.

For me, since I am using BIND I do this with:
Code:
/etc/init.d/named restart
Looking at the How-To that I think you followed, you should run the command:
Code:
/etc/init.d/mydns restart
If the service restarts without error then 'things' are basically OK.

Some info I found by Googling says that MyDNS uses the config file /etc/mydns.conf

This would be the file you want to change similarly to my previous post.

If the config file isn't in "/etc" one way you maybe able to find it is to run this:
Code:
updatedb
locate mydns
You can create a "mydns.conf" file by running:
Code:
mydns --dump-config > /etc/mydns.conf
I found this at http://mydns.bboy.net/doc/html/mydns_7.html#SEC7

You should have an "/etc/resolv.conf" file that was created during the network part of the setup. In this file should be listed the DNS servers of your Internet Service Provider (ISP).

Example:
nameserver:192.168.x.x
nameserver:xxx.xxx.xxx.xxx

The first line should be the local IP address of the network adapter that your server uses to access the Internet. This didn't show up in my resolv.conf until after I configured my server within ISPConfig. If your isn't listed here yet I don't think that shoudl matter.

The second line is your ISP DNS server, there maybe two listed here.

Assuming you have more than one computer on your local LAN and you want your ISPConfig3 server to be the DNS server...

The way DNS is going to work is:
On your server your Network Interface Card's (NIC) first DNS server shoudl be the IP address of your server. When your server needs an IP address, like say when you are updating software on your system, say using YUM, the request will go to the first DNS server listed in your NIC settings. If your DNS server doesn't have the DNS information then MyDNS will look at the resolve.conf file to see what other DNS servers it can use to resolve the URL to an IP address.

The way to test whether or not your DNS server is working use either the "nslookup" or "dig" commands, like so:
Code:
dig ohio.org 192.168.1.10
NOTE: Replace "192.168.1.10" with the LAN IP address of your servers NIC.

If this is successfull you will get a result such as:
Code:
[root@prl-ofc-s01 ~]# dig ohio.org 192.168.1.10

; <<>> DiG 9.7.1-P2-RedHat-9.7.1-2.P2.fc13 <<>> ohio.org 192.168.1.10
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 13050
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 0

;; QUESTION SECTION:
;ohio.org.                      IN      A

;; ANSWER SECTION:
ohio.org.              86316  IN      A      74.117.116.80

;; AUTHORITY SECTION:
ohio.org.              86316  IN      NS      ns1.parked.com.
ohio.org.              86316  IN      NS      ns2.parked.com.

;; Query time: 0 msec
;; SERVER: 192.168.1.10#53(192.168.1.10)
;; WHEN: Thu Jul 29 16:16:45 2010
;; MSG SIZE  rcvd: 88

;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 53917
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;192.168.1.10.                  IN      A

;; AUTHORITY SECTION:
.                      10716  IN      SOA    a.root-servers.net. nstld.verisign-grs.com. 2010072900 1800 900 604800 86400

;; Query time: 0 msec
;; SERVER: 192.168.1.10#53(192.168.1.10)
;; WHEN: Thu Jul 29 16:16:45 2010
;; MSG SIZE  rcvd: 105
More info on MyDNS can be found at:http://mydns.bboy.net/doc/html/mydns...l#SEC_Contents
MyDNS-NG is recommended over plain old MyDNS (which is no longer maintained for a long time), and this URL points to the latter.

Hope it helps

Turbanator 16th September 2010 02:43
Sorry to bring this one up again but I still cannot get local users to resolv the domains on my ispc3 box.

firewall (dhcp showing ispc3 as dns server) -> ispc3 debian x64 perfect -> lan users.

Everything works great for people outside the network.
Local users cannot get to domains on the ispc3.

debian x64 is running mydns not bind.

/etc/resolv.conf:
nameserver 192.168.1.10
nameserver isp1.isp1.isp1.isp1
nameserver isp2.isp2.isp2.isp2


/etc/mydns.conf already has
listen = *
vs listen-on port 53 { 127.0.0.1; 192.168.1.10; }
which is in the bind example.

There is no entry for
allow-query

Questions:

is allow-query valid for mydns and is that the missing link?
should I change listen = * to what the bind notation shows?

thank you.

jwarnier 16th September 2010 10:19
I can't help you with this, or rather, I would have to search myself, which you can probably do better than me as you have the bad-behaving system at hand.

falko 16th September 2010 14:27
Does your router support loopbacks into your local network?

Quote:
Originally Posted by Turbanator (Post 239389)
is allow-query valid for mydns and is that the missing link?
should I change listen = * to what the bind notation shows?
No, this won't work.

Turbanator 16th September 2010 16:05
I need to research if my router suppports loopback (smoothwall). With guessing at what that means, I'll say it's not turned on even if it is....since anybody on the local network cannot access other public side ip's tied to the same netwrok (I know that wasn't expained well).

Turbanator 1st October 2010 18:54
Update:
I opted to split the locals off via switch onto another IP and basic router. Now they are treated as Remote like everyone else and everything works perfectly.

Thank you for jogging my brain Falko.


All times are GMT +2. The time now is 06:48.

Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2013, vBulletin Solutions, Inc.