My own name servers

[ColdDoT]

Hallo
i've have posted here a thread about it before but i can't find it :S
So wat i reali like to have is my own name server without any other dns hosters or whaterver

is there a way to do that?

greets kevin

[falko]

Yes, have a look here:
http://www.howtoforge.com/forums/sho...92&postcount=4
http://www.howtoforge.com/traditional_dns_howto

[sjau]

Yes there is, I have done it myself but I think there are better ways.

What I first did was creating nameserver entries at my host for my domain.

I use directnic.com and they allow me for each domain to make nameserver entries.

So I created ns1.roleplayer.org and ns2.roleplayer.org (both pointing to the same IP as I have only one server... I don't need redundance there because if the server is down, then an alternate nameserver won't help either ^^).

After that I installed bind9 (apt-get install bind9) on debian and chrooted it. I think Falko has a tut on how to do that (http://www.howtoforge.com/howto_bind_chroot_debian). It took me quite a while until I accomplished that as I did not find any tut that worked for me.

I just see that there are a few tuts here on howtoforge.com but I haven't read them.
Well, once you have setup your chrooted bind and created nameserver entries at your registrar then you only need to proper setup the domain name records.

I mostly copy and pasted them from a little book that I bought. When I'm home I can give you the entries I used. I know, they are far from being perfect but hey, the work ^^

Well, here's the DNS report for my domain:
http://www.dnsreport.com/tools/dnsre...roleplayer.org

As you can see there are some red error messages, I don't really know what they mean but everything seems to work perfectly with my setup

P.S.: Dammit, I was too slow typing all of this and Timme bet me by pasting two URLs ^^

[ColdDoT]

Thx
So there is no way i can skip the other domein regestration?
To bad thx.
(sjau i like your respons better and helpfuler)
(Falko )

sjau after you have maded the 2 nameserver entry's can you change it afterwards?
Greets

[ColdDoT]

The whole thing what i want is get rid of the 3 party things
so that i don't have to use some ones other serverice.
because i have now free nameservers and they go sometimes offline:s

greets

[sjau]

HOw do you to change the nameserver entries afterwards?
What you need to do is at your domain registrar tell, that www.domain.com or ns1.domain.com or ns2.domain.com or whatever.domain.com is to be treated as a nameserver. I think they call that glue record but I'm no DNS pro ^^

Then have bind installed (and chrooted) and then you need some config files...

I'll post mine here (although they aren't probably the best ones out there ^^)

db.0

;
; BIND reverse data file for broadcast zone
;
$TTL 604800
@ IN SOA localhost. root.localhost. (
1 ; Serial
604800 ; Refresh
86400 ; Retry
2419200 ; Expire
604800 ) ; Negative Cache TTL
;
@ IN NS localhost.

db.127

;
; BIND reverse data file for local loopback interface
;
$TTL 604800
@ IN SOA localhost. root.localhost. (
1 ; Serial
604800 ; Refresh
86400 ; Retry
2419200 ; Expire
604800 ) ; Negative Cache TTL
;
@ IN NS localhost.
1.0.0 IN PTR localhost.

db.255

;
; BIND reverse data file for broadcast zone
;
$TTL 604800
@ IN SOA localhost. root.localhost. (
1 ; Serial
604800 ; Refresh
86400 ; Retry
2419200 ; Expire
604800 ) ; Negative Cache TTL
;
@ IN NS localhost.

db.empty

; BIND reverse data file for empty rfc1918 zone
;
; DO NOT EDIT THIS FILE - it is used for multiple zones.
; Instead, copy it, edit named.conf, and use that copy.
;
$TTL 86400
@ IN SOA localhost. root.localhost. (
1 ; Serial
604800 ; Refresh
86400 ; Retry
2419200 ; Expire
86400 ) ; Negative Cache TTL
;
@ IN NS localhost.

db.local

;
; BIND data file for local loopback interface
;
$TTL 604800
@ IN SOA localhost. root.localhost. (
1 ; Serial
604800 ; Refresh
86400 ; Retry
2419200 ; Expire
604800 ) ; Negative Cache TTL
;
@ IN NS localhost.
@ IN A 127.0.0.1

db.root

; <<>> DiG 9.2.3 <<>> ns . @a.root-servers.net.
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 18944
;; flags: qr aa rd; QUERY: 1, ANSWER: 13, AUTHORITY: 0, ADDITIONAL: 13

;; QUESTION SECTION:
;. IN NS

;; ANSWER SECTION:
. 518400 IN NS A.ROOT-SERVERS.NET.
. 518400 IN NS B.ROOT-SERVERS.NET.
. 518400 IN NS C.ROOT-SERVERS.NET.
. 518400 IN NS D.ROOT-SERVERS.NET.
. 518400 IN NS E.ROOT-SERVERS.NET.
. 518400 IN NS F.ROOT-SERVERS.NET.
. 518400 IN NS G.ROOT-SERVERS.NET.
. 518400 IN NS H.ROOT-SERVERS.NET.
. 518400 IN NS I.ROOT-SERVERS.NET.
. 518400 IN NS J.ROOT-SERVERS.NET.
. 518400 IN NS K.ROOT-SERVERS.NET.
. 518400 IN NS L.ROOT-SERVERS.NET.
. 518400 IN NS M.ROOT-SERVERS.NET.

;; ADDITIONAL SECTION:
A.ROOT-SERVERS.NET. 3600000 IN A 198.41.0.4
B.ROOT-SERVERS.NET. 3600000 IN A 192.228.79.201
C.ROOT-SERVERS.NET. 3600000 IN A 192.33.4.12
D.ROOT-SERVERS.NET. 3600000 IN A 128.8.10.90
E.ROOT-SERVERS.NET. 3600000 IN A 192.203.230.10
F.ROOT-SERVERS.NET. 3600000 IN A 192.5.5.241
G.ROOT-SERVERS.NET. 3600000 IN A 192.112.36.4
H.ROOT-SERVERS.NET. 3600000 IN A 128.63.2.53
I.ROOT-SERVERS.NET. 3600000 IN A 192.36.148.17
J.ROOT-SERVERS.NET. 3600000 IN A 192.58.128.30
K.ROOT-SERVERS.NET. 3600000 IN A 193.0.14.129
L.ROOT-SERVERS.NET. 3600000 IN A 198.32.64.12
M.ROOT-SERVERS.NET. 3600000 IN A 202.12.27.33

;; Query time: 81 msec
;; SERVER: 198.41.0.4#53(a.root-servers.net.)
;; WHEN: Sun Feb 1 11:27:14 2004
;; MSG SIZE rcvd: 436

default.zone

$TTL 60
@ IN SOA ns root (
2003022502 ; serial
60 ; refresh
60 ; retry
60 ; expiry
60) ; minimum

IN NS ns
IN NS ns1.roleplayer.org.
IN NS ns2.roleplayer.org.
IN MX 80 mail

IN A 83.133.126.175
IN MX 80 mail

* IN A 83.133.126.175
IN MX 80 mail

ns IN A 83.133.126.175
; Fuer die Subdomain NS wird kein MX Eintrag angelegt !

mail IN A 83.133.126.175
IN MX 80 mail

named.conf

// This is the primary configuration file for the BIND DNS server named.
//
// Please read /usr/share/doc/bind9/README.Debian.gz for information on the
// structure of BIND configuration files in Debian, *BEFORE* you customize
// this configuration file.
//
// If you are just adding zones, please do that in /etc/bind/named.conf.local

include "/etc/bind/named.conf.options";

// prime the server with knowledge of the root servers
zone "." {
type hint;
file "/etc/bind/db.root";
};

// be authoritative for the localhost forward and reverse zones, and for
// broadcast zones as per RFC 1912

zone "localhost" {
type master;
file "/etc/bind/db.local";
};

zone "127.in-addr.arpa" {
type master;
file "/etc/bind/db.127";
};

zone "0.in-addr.arpa" {
type master;
file "/etc/bind/db.0";
};

zone "255.in-addr.arpa" {
type master;
file "/etc/bind/db.255";
};

// zone "com" { type delegation-only; };
// zone "net" { type delegation-only; };

// From the release notes:
// Because many of our users are uncomfortable receiving undelegated answers
// from root or top level domains, other than a few for whom that behaviour
// has been trusted and expected for quite some length of time, we have now
// introduced the "root-delegations-only" feature which applies delegation-only
// logic to all top level domains, and to the root domain. An exception list
// should be specified, including "MUSEUM" and "DE", and any other top level
// domains from whom undelegated responses are expected and trusted.
// root-delegation-only exclude { "DE"; "MUSEUM"; };

include "/etc/bind/named.conf.local";

## Domains
Include "/etc/bind/named.domains";

named.conf.local

//
// Do any local configuration here
//

// Consider adding the 1918 zones here, if they are not used in your
// organization
//include "/etc/bind/zones.rfc1918";

named.conf.options

options {
directory "/var/cache/bind";

// If there is a firewall between you and nameservers you want
// to talk to, you might need to uncomment the query-source
// directive below. Previous versions of BIND always asked
// questions using port 53, but BIND 8.1 and later use an unprivileged
// port by default.

// query-source address * port 53;

// If your ISP provided one or more IP addresses for stable
// nameservers, you probably want to use them as forwarders.
// Uncomment the following block, and insert the addresses replacing
// the all-0's placeholder.

// forwarders {
// 0.0.0.0;
// };

auth-nxdomain no; # conform to RFC1035

recursion no;

};

named.domains

zone "ferronet.de" {
type master;
file "/etc/bind/ferronet.de.zone";
};

zone "notkeriana.ch" {
type master;
file "/etc/bind/notkeriana.ch.zone";
};

zone "regenmacher.ch" {
type master;
file "/etc/bind/regenmacher.ch.zone";
};

zone "roleplayer.org" {
type master;
file "/etc/bind/roleplayer.org.zone";
};

zone "montepacis.com" {
type master;
file "/etc/bind//montepacis.com.zone";
};

zones.rfc.1918

zone "10.in-addr.arpa" { type master; file "/etc/bind/db.empty"; };

zone "16.172.in-addr.arpa" { type master; file "/etc/bind/db.empty"; };
zone "17.172.in-addr.arpa" { type master; file "/etc/bind/db.empty"; };
zone "18.172.in-addr.arpa" { type master; file "/etc/bind/db.empty"; };
zone "19.172.in-addr.arpa" { type master; file "/etc/bind/db.empty"; };
zone "20.172.in-addr.arpa" { type master; file "/etc/bind/db.empty"; };
zone "21.172.in-addr.arpa" { type master; file "/etc/bind/db.empty"; };
zone "22.172.in-addr.arpa" { type master; file "/etc/bind/db.empty"; };
zone "23.172.in-addr.arpa" { type master; file "/etc/bind/db.empty"; };
zone "24.172.in-addr.arpa" { type master; file "/etc/bind/db.empty"; };
zone "25.172.in-addr.arpa" { type master; file "/etc/bind/db.empty"; };
zone "26.172.in-addr.arpa" { type master; file "/etc/bind/db.empty"; };
zone "27.172.in-addr.arpa" { type master; file "/etc/bind/db.empty"; };
zone "28.172.in-addr.arpa" { type master; file "/etc/bind/db.empty"; };
zone "29.172.in-addr.arpa" { type master; file "/etc/bind/db.empty"; };
zone "30.172.in-addr.arpa" { type master; file "/etc/bind/db.empty"; };
zone "31.172.in-addr.arpa" { type master; file "/etc/bind/db.empty"; };

zone "168.192.in-addr.arpa" { type master; file "/etc/bind/db.empty"; };

roleplayer.org.zone

$TTL 86400
@ IN SOA ns root (
2006010203 ; serial
600 ; refresh
600 ; retry
600 ; expiry
600) ; minimum

IN NS ns.roleplayer.org.
IN NS ns1.roleplayer.org.
IN NS ns2.roleplayer.org.
IN MX 80 mail


IN A 83.133.126.175
IN MX 80 mail

* IN A 83.133.126.175
IN MX 80 mail

ns IN A 83.133.126.175
ns1 IN A 83.133.126.175
ns2 IN A 83.133.126.175
; Fuer die Subdomain NS wird kein MX Eintrag angelegt !

mail IN A 83.133.126.175
IN MX 80 mail

[sjau]

montepacis.com.zone

$TTL 86400
@ IN SOA ns root (
2003022502 ; serial
8H ; refresh
2H ; retry
1W ; expiry
11h) ; minimum

IN NS ns
IN NS ns1.roleplayer.org.
IN NS ns2.roleplayer.org.
IN MX 80 mail

IN A 83.133.126.175
IN MX 80 mail

* IN A 83.133.126.175
IN MX 80 mail

ns IN A 83.133.126.175
; Fuer die Subdomain NS wird kein MX Eintrag angelegt !

mail IN A 83.133.126.175
IN MX 80 mail

*.zone

....

Generally you can make your default zone what you normally like and point domains there from the named.domains file. Only if you want to use seperate settings for a domain you need to create a new zone.

Well, that's my config. It works but I'm sure there are better solutions out there.

[falko]

This link might also be helpful: http://en.wikipedia.org/wiki/Dns
(it explains glue records).

[ColdDoT]

Thx you2 for the helpfull info.
sjau you meen the company that i say that they must register the domain colddot.nl?

[falko]

Originally Posted by ColdDoT

sjau you meen the company that i say that they must register the domain colddot.nl?

Yes, that's right.