ριиg σr ρσиg ? Côté obscur
Publié : lun. 12 juil. 2010 20:09
Il est fou 
pong

pong
pense bêtepong
@Kaly, 127.0.0.1 correspond au loopback. Bind se résouds lui-même donc utilise la 127.0.0.1 qui est une interface virtuelle.
Voici une conf que j'utilise en prod (j'ai adapté avec ta zone), c'est la conf du serveur DNS. N'oublies pas de donner en DNS primaire sur les clients l'ip nakkan (.115)
Le plus simple est de le configurer au niveau du serveur DHCP (DNS primaire : .115, DNS secondaire : FAI ou DNS de réplication)Code : Tout sélectionner
------------------------------------------------------------------------------------------------------------- - fichier db.0 ; ; BIND reverse data file for broadcast zone ; $TTL 604800 @ IN SOA localhost. root.localhost. ( 1 ; Serial 604800 ; Refresh 86400 ; Retry 2419200 ; Expire 604800 ) ; Negative Cache TTL ; @ IN NS localhost. ` - fichier db.127 ; ; BIND reverse data file for local loopback interface ; $TTL 604800 @ IN SOA localhost. root.localhost. ( 1 ; Serial 604800 ; Refresh 86400 ; Retry 2419200 ; Expire 604800 ) ; Negative Cache TTL ; @ IN NS localhost. 1.0.0 IN PTR localhost. ------------------------------------------------------------------------------------------------------------- - fichier db 192.168.100.inv $TTL 604800 @ IN SOA unnati.lan. root.unnati.lan. ( 2009111102 ;Serial 8H ;Refresh 2H ;Retry 1W ;Expire 2D ) ;Minimum ;** Self conf IN NS ns.unnati.lan. IN NS ns2.unnati.lan. 141 IN PTR nakka.unnati.lan. ;** Aliases ------------------------------------------------------------------------------------------------------------- - fichier db.255 ; ; BIND reverse data file for broadcast zone ; $TTL 604800 @ IN SOA localhost. root.localhost. ( 1 ; Serial 604800 ; Refresh 86400 ; Retry 2419200 ; Expire 604800 ) ; Negative Cache TTL ; @ IN NS localhost. - fichier db.empty ; BIND reverse data file for empty rfc1918 zone ; ; DO NOT EDIT THIS FILE - it is used for multiple zones. ; Instead, copy it, edit named.conf, and use that copy. ; $TTL 86400 @ IN SOA localhost. root.localhost. ( 1 ; Serial 604800 ; Refresh 86400 ; Retry 2419200 ; Expire 86400 ) ; Negative Cache TTL ; @ IN NS localhost. ------------------------------------------------------------------------------------------------------------- - fichier db.unnati.lan $TTL 3600 unnati.lan. IN SOA ns.unnati.lan. root.unnati.lan. ( 2009111106 ;Serial 1H ;Refresh 15m ;Retry 1W ;Expire 1D ) ;Minimum ;** Self conf $TTL 1D @ IN NS ns.unnati.lan. @ IN NS ns2.unnati.lan. @ IN A 192.168.100.115 ;** Records ns IN A 192.168.100.115 ns2 IN A 192.168.100.116 ; Pour la réplication nakkan IN A 192.168.100.115 ;** Aliases ------------------------------------------------------------------------------------------------------------- - fichiers db.local ; ; BIND data file for local loopback interface ; $TTL 604800 @ IN SOA localhost. root.localhost. ( 2 ; Serial 604800 ; Refresh 86400 ; Retry 2419200 ; Expire 604800 ) ; Negative Cache TTL ; @ IN NS localhost. @ IN A 127.0.0.1 @ IN AAAA ::1 ------------------------------------------------------------------------------------------------------------- - fichier named.conf.local // // Do any local configuration here // // Consider adding the 1918 zones here, if they are not used in your // organization //include "/etc/bind/zones.rfc1918"; //include "/etc/bind/named.conf.log" zone "unnati.lan" IN { type master; file "/etc/bind/db.unnati.lan"; allow-update {none;}; }; zone "1000.168.192.in-addr.arpa" { type master; file "/etc/bind/db.192.168.100.inv"; forwarders {}; }; ------------------------------------------------------------------------------------------------------------- - fichier named.conf.options options { directory "/var/cache/bind"; // If there is a firewall between you and nameservers you want // to talk to, you may need to fix the firewall to allow multiple // ports to talk. See http://www.kb.cert.org/vuls/id/800113 // If your ISP provided one or more IP addresses for stable // nameservers, you probably want to use them as forwarders. // Uncomment the following block, and insert the addresses replacing // the all-0's placeholder. forwarders { 212.99.2.8; }; auth-nxdomain no; # conform to RFC1035 listen-on-v6 { any; }; allow-transfer { 192.168.0.85; }; }; ------------------------------------------------------------------------------------------------------------- - ficier tomv/db.192.168.100.inv $TTL 604800 @ IN SOA unnati.lan. root.unnati.lan. ( 2009111010 ;Serial 604800 ;Refresh 86400 ;Retry 2419200 ;Expire 604800 ) ;Minimum ;** Self conf IN NS ns.unnati.lan. 141 IN PTR nakkan.unnati.lan. ;** Aliases ------------------------------------------------------------------------------------------------------------- - fichier tomv/db.unnati.lan $TTL 604800 kerberos.lan. IN SOA ns.unnati.lan. root.unnati.lan. ( 2009111015 ;Serial 604800 ;Refresh 86400 ;Retry 2419200 ;Expire 604800 ) ;Minimum ;** Self conf @ IN NS ns.unnati.lan. @ IN A 192.168.0.141 ;** Records ns IN A 192.168.100.115 nakkan IN A 192.168.100.115 ;** Aliases ------------------------------------------------------------------------------------------------------------- - fichier /etc/resolv.conf nameserer 127.0.0.1 nameserver 192.168.100.115 nameserver DNS-FAIT search unnati.lan ------------------------------------------------------------------------------------------------------------- $ hostname : nakka