4 Installation Of Split DNS

This part of installation is working off of the assumption that you are behind a firewall. If you are not behind a firewall (not recommended) you can skip this part of the installation.

I need to give credit where it is due. The chroot portion of this tutorial is adapted from Sebastien Wains. His CentOS Bind Chroot tutorial can be found at http://www.wains.be/index.php/2007/12/13/centos-5-chroot-dns-with-bind/. The Split DNS tutorial is adapted from the Zimbra Wiki and can be found at http://wiki.zimbra.com/index.php?title=Split_dns.

yum install bind bind-chroot bind-libs bind-utils

REMINDER: Be sure to use the ip address and hostname/FQDN that is appropriate for your installation.

Create the /var/named/chroot/etc/named.conf file:

vim /var/named/chroot/etc/named.conf

options {
       directory "/var/named";
       dump-file "/var/named/data/cache_dump.db";
       statistics-file "/var/named/data/named_stats.txt";
forwarders { 192.168.0.10 ; };
};
include "/etc/rndc.key";
// We are the master server for mail.geekdept.com
zone "mail.geekdept.com" {
    type master;
    file "db.mail.geekdept.com";
};

The ip address for forwarders should be the ip address of your dns server.

Now you need to create your /var/named/chroot/var/named/db.mail.geekdept.com file

vim /var/named/chroot/var/named/db.mail.geekdept.com

;
;       Addresses and other host information.
;
@       IN      SOA     mail.geekdept.com. hostmaster.mail.geekdept.com. (
                               10118      ; Serial
                               43200      ; Refresh
                               3600       ; Retry
                               3600000    ; Expire
                               2592000 )  ; Minimum
;       Define the nameservers and the mail servers
               IN      NS      192.168.0.45
               IN      A       192.168.0.45
               IN      MX      10 mail.geekdept.com.

Change your resolv.conf to use your mail server's IP address as it's primary DNS.

vim /etc/resolv.conf

search geekdept.com
nameserver 192.168.0.45

Start named on your server

/etc/init.d/named start

Enable autostart for named.

chkconfig named on

To verify that it is working do the following:

nslookup mail.geekdept.com

It should return something similar to this:

Server:         192.168.0.45
Address:        192.168.0.45#53
Name:   mail.geekdept.com
Address: 192.168.0.45

Notice that the ip address returned is the same as the local machine. That means success.

Now we can move on to installing ZCS.