Dns and Bind

DNS and BIND is about one of the Internet's fundamental building blocks: the distributed host information database that's responsible for translating names into addresses, routing mail to its proper destination, and many other services. As the authors say in the preface, if you're using the Internet, you're already using DNS - even if you don't know it. This edition brings readers up to date on the new 9.3 version of BIND.

Cricket Liu graduated from the University of California, Berkeley, that great bastion of free speech, unencumbered Unix, and cheap pizza. He joined Hewlett-Packard after graduation and worked for HP for nine years.

Cricket began managing the hp.com zone after the Loma Prieta earthquake forcibly transferred the zone's management from HP Labs to HP's Corporate Offices (by cracking a sprinkler main and flooding a Labs computer room). Cricket was hostmaster@hp.com for over three years, and then joined HP's Professional Services Organization to co-found HP's Internet Consulting Program.

Cricket left HP in 1997 to form Acme Byte & Wire, a DNS consulting and training company, with his friend Matt Larson. Network Solutions acquired Acme in June 2000, and later the same day merged with VeriSign. Cricket worked for a year as Director of DNS Product Management for VeriSign Global Registry Services.

Cricket joined Infoblox, a company that develops DNS and DHCP appliances, in March, 2003. He is currently their Vice President of Architecture.

Cricket, his wife, Paige, their son, Walt, and daughter, Greta, live in California with their two Siberian Huskies, Annie and Dakota.

Paul Albitz is a software engineer at Hewlett-Packard. Paul earned a Bachelor of Science degree from the University of Wisconsin, LaCrosse, and a Master of Science degree from Purdue University.

Paul worked on BIND for the HP-UX 7.0 and 8.0 releases. During this time he developed the tools used to run the hp.com domain. Since then Paul has worked on various HP products during his 19 year career: HP JetDirect software, HP OfficeJet fax firmware, HPPhoto web site, and HP Photosmart Premier software.

Paul and his wife Katherine live in San Diego California with their two cats, Gracie and Tiffany.

Preface

xi

Background

1

(10)

A (Very) Brief History of the Internet

1

(1)

On the Internet and Internets

2

(2)

The Domain Name System, in a Nutshell

4

(5)

The History of BIND

9

(1)

Must I Use DNS?

9

(2)

How Does DNS Work?

11

(26)

The Domain Namespace

11

(6)

The Internet Domain Namespace

17

(4)

Delegation

21

(1)

Nameservers and Zones

22

(4)

Resolvers

26

(1)

Resolution

27

(7)

Caching

34

(3)

Where Do I Start?

37

(16)

Getting BIND

37

(4)

Choosing a Domain Name

41

(12)

Setting Up BIND

53

(36)

Our Zone

53

(1)

Setting Up Zone Data

54

(11)

Setting Up a BIND Configuration File

65

(3)

Abbreviations

68

(3)

Hostname Checking

71

(2)

Tools

73

(1)

Running a Primary Nameserver

74

(7)

Running a Slave Nameserver

81

(7)

Adding More Zones

88

(1)

What's Next?

88

(1)

DNS and Electronic Mail

89

(11)

MX Records

90

(2)

Movie.edu's Mail Server

92

(1)

What's a Mail Exchanger, Again?

92

(2)

The MX Algorithm

94

(2)

DNS and Email Authentication

96

(4)

Configuring Hosts

100

(27)

The Resolver

100

(1)

Resolver Configuration

101

(11)

Sample Resolver Configurations

112

(2)

Minimizing Pain and Suffering

114

(5)

Additional Configuration Files

119

(1)

The Windows XP Resolver

120

(7)

Maintaining BIND

127

(50)

Controlling the Nameserver

127

(9)

Updating Zone Datafiles

136

(7)

Organizing Your Files

143

(4)

Changing System File Locations

147

(1)

Logging

148

(10)

Keeping Everything Running Smoothly

158

(19)

Growing Your Domain

177

(24)

How Many Nameservers?

177

(8)

Adding More Nameservers

185

(4)

Registering Nameservers

189

(3)

Changing TTLs

192

(3)

Planning for Disasters

195

(3)

Coping with Disaster

198

(3)

Parenting

201

(25)

When to Become a Parent

202

(1)

How Many Children?

202

(1)

What to Name Your Children

203

(1)

How to Become a Parent: Creating Subdomains

204

(10)

Subdomains of in-addr.arpa Domains

214

(6)

Good Parenting

220

(3)

Managing the Transition to Subdomains

223

(2)

The Life of a Parent

225

(1)

Advanced Features

226

(56)

Address Match Lists and ACLs

226

(2)

DNS Dynamic Update

228

(7)

DNS NOTIFY (Zone Change Notification)

235

(5)

Incremental Zone Transfer (IXFR)

240

(4)

Forwarding

244

(3)

Views

247

(3)

Round-Robin Load Distribution

250

(3)

Nameserver Address Sorting

253

(2)

Preferring Nameservers on Certain Networks

255

(1)

A Nonrecursive Nameserver

256

(1)

Avoiding a Bogus Nameserver

257

(1)

System Tuning

258

(9)

Compatibility

267

(1)

The ABCs of IPv6 Addressing

268

(2)

Addresses and Ports

270

(12)

Security

282

(67)

TSIG

283

(4)

Securing Your Nameserver

287

(13)

DNS and Internet Firewalls

300

(22)

The DNS Security Extensions

322

(27)

nslookup and dig

349

(27)

Is nslookup a Good Tool?

349

(2)

Interactive Versus Noninteractive

351

(1)

Option Settings

352

(3)

Avoiding the Search List

355

(1)

Common Tasks

355

(3)

Less Common Tasks

358

(8)

Troubleshooting nslookup Problems

366

(4)

Best of the Net

370

(1)

Using dig

371

(5)

Reading BIND Debugging Output

376

(20)

Debugging Levels

376

(3)

Turning On Debugging

379

(1)

Reading Debugging Output

380

(13)

The Resolver Search Algorithm and Negative Caching (BIND 8)

393

(1)

The Resolver Search Algorithm and Negative Caching (BIND 9)

394

(1)

Tools

395

(1)

Troubleshooting DNS and BIND

396

(42)

Is NIS Really Your Problem?

396

(1)

Troubleshooting Tools and Techniques

397

(12)

Potential Problem List

409

(17)

Transition Problems

426

(1)

Interoperability and Version Problems

427

(4)

TSIG Errors

431

(1)

Problem Symptoms

432

(6)

Programming with the Resolver and Nameserver Library Routines

438

(36)

Shell Script Programming with nslookup

438

(7)

C Programming with the Resolver Library Routines

445

(25)

Perl Programming with Net::DNS

470

(4)

Architecture

474

(9)

External, Authoritative DNS Infrastructure

474

(4)

Forwarder Infrastructure

478

(2)

Internal DNS Infrastructure

480

(1)

Operations

481

(1)

Keeping Up with DNS and BIND

482

(1)

Miscellaneous

483

(34)

Using CNAME Records

483

(5)

Wildcards

488

(1)

A Limitation of MX Records

489

(1)

Dial-up Connections

489

(5)

Network Names and Numbers

494

(2)

Additional Resource Records

496

(5)

ENUM

501

(3)

Internationalized Domain Names

504

(2)

DNS and WINS

506

(2)

DNS, Windows, and Active Directory

508

(9)

DNS Message Format and Resource Records

517

(20)

BIND Compatibility Matrix

537

(1)

Compiling and Installing BIND on Linux

538

(5)

Top-Level Domains

543

(5)

BIND Nameserver and Resolver Configuration

548

(41)

Index

589

What is included with this book?

The New copy of this book will include any supplemental materials advertised. Please check the title of the book to determine if it should include any access cards, study guides, lab manuals, CDs, etc.

The Used, Rental and eBook copies of this book are not guaranteed to include any supplemental materials. Typically, only the book itself is included. This is true even if the title states it includes any access cards, study guides, lab manuals, CDs, etc.

FREE SHIPPING

Amazon no longer offers textbook rentals. We do!

Summary

Author Biography

Table of Contents

Supplemental Materials