Revision history for RunningT1
Additions:
I hope that this guide has assisted getting your Tier-1 server ready for your new TLD. Remember to follow the insturctions on creating a new TLD if you have not already had your TLD approved for use within OpenNIC by vote of the membership. [[CreatingNewTLDs|Proposing and Creating new TLDs through OpenNIC]]
Deletions:
Additions:
----
CategoryConfig
~&
CategoryConfig
~&
Additions:
Setting up a OpenNIC ready Tier-1 server requires your DNS to slave all the TLDs within the OpenNIC name-space. We will go through each zone below (this document will be updated as more zones are created). Alternatively, [[srvzoneScript|this page]] will show how to configure bind9 to automatically update available TLDs and their master servers.
Deletions:
Additions:
masters { 103.4.16.80; };
Deletions:
Additions:
[[RunningT1ES Español]]
Deletions:
Additions:
[[RunningT1 Español]]
Revision [2959]
Edited on 2012-11-09 06:01:50 by JeffTaylor [New oss/parody master, link to opennicZoneScript]Additions:
Setting up a OpenNIC ready Tier-1 server requires your DNS to slave all the TLDs within the OpenNIC name-space. We will go through each zone below (this document will be updated as more zones are created). Alternatively, [[opennicZoneScript|this page]] will show how to configure bind9 to automatically update available TLDs and their master servers.
As you can see below, all my zones reside in /etc/bind/zones and /etc/bind/zones/slaves. You will have to change that to suit your style of setup. It is also recommended you run bind in a chroot jail, and that additional T1 servers are listed as masters in each zone for redundancy. Below is the root zone, add this into your named.conf.
masters { 216.87.84.210; };
masters { 216.87.84.210; };
As you can see below, all my zones reside in /etc/bind/zones and /etc/bind/zones/slaves. You will have to change that to suit your style of setup. It is also recommended you run bind in a chroot jail, and that additional T1 servers are listed as masters in each zone for redundancy. Below is the root zone, add this into your named.conf.
masters { 216.87.84.210; };
masters { 216.87.84.210; };
Deletions:
As you can see below, all my zones reside in /etc/bind/zones and /etc/bind/zones/slaves. You will have to change that to suit your style of setup. It is also recommended you run bind in a chroot jail. Below is the root zone, add this into your named.conf.
masters { 216.87.84.214; };
masters { 216.87.84.214; };
Additions:
oz
zone "oz" IN{
file "/etc/bind/zones/slaves/oz.zone";
masters { 103.1.185.92; };
zone "oz" IN{
file "/etc/bind/zones/slaves/oz.zone";
masters { 103.1.185.92; };
Additions:
pirate
zone "pirate" IN{
type slave;
file "/etc/bind/zones/slaves/pirate.zone";
masters { 209.141.35.9; };
allow-transfer { any; };
notify no;
zone "pirate" IN{
type slave;
file "/etc/bind/zones/slaves/pirate.zone";
masters { 209.141.35.9; };
allow-transfer { any; };
notify no;
Additions:
type slave;
file "/etc/bind/zones/db.root";
masters { 75.127.96.89; };
allow-transfer { any; };
notify no;
type slave;
file "/etc/bind/zones/slaves/glue.zone";
masters { 75.127.96.89; };
allow-transfer { any; };
notify no;
type slave;
file "/etc/bind/zones/slaves/dns.glue.zone";
masters { 75.127.96.89; };
allow-transfer { any; };
notify no;
type slave;
file "/etc/bind/zones/slaves/geek.zone";
masters { 202.83.95.229; };
allow-transfer { any; };
notify no;
type slave;
file "/etc/bind/zones/slaves/free.zone";
masters { 202.83.95.229; };
allow-transfer { any; };
notify no;
type slave;
file "/etc/bind/zones/slaves/indy.zone";
masters { 202.83.95.229; };
allow-transfer { any; };
notify no;
type slave;
file "/etc/bind/zones/slaves/parody.zone";
masters { 216.87.84.214; };
allow-transfer { any; };
notify no;
type slave;
file "/etc/bind/zones/slaves/bbs.zone";
masters { 207.192.71.13; };
allow-transfer { any; };
notify no;
type slave;
file "/etc/bind/zones/slaves/fur.zone";
masters { 84.200.228.200; };
allow-transfer { any; };
notify no;
type slave;
file "/etc/bind/zones/slaves/null.zone";
masters { 202.83.95.229; };
allow-transfer { any; };
notify no;
type slave;
file "/etc/bind/zones/slaves/oss.zone";
masters { 216.87.84.214; };
allow-transfer { any; };
notify no;
neo
zone "neo" IN{
file "/etc/bind/zones/slaves/neo.zone";
masters { 199.30.58.57; };
file "/var/log/misc.log" versions 2 size 25M;
severity info; print-severity no;
print-category yes; print-time yes;
};
file "/var/log/named.log" versions 2 size 25M;
severity info; print-severity no;
print-category no; print-time yes;
};
tar cfvz /var/log/named/named.$current.tar.gz /var/log/named/*.log.*
rm /var/log/named/*.log.*
file "/etc/bind/zones/db.root";
masters { 75.127.96.89; };
allow-transfer { any; };
notify no;
type slave;
file "/etc/bind/zones/slaves/glue.zone";
masters { 75.127.96.89; };
allow-transfer { any; };
notify no;
type slave;
file "/etc/bind/zones/slaves/dns.glue.zone";
masters { 75.127.96.89; };
allow-transfer { any; };
notify no;
type slave;
file "/etc/bind/zones/slaves/geek.zone";
masters { 202.83.95.229; };
allow-transfer { any; };
notify no;
type slave;
file "/etc/bind/zones/slaves/free.zone";
masters { 202.83.95.229; };
allow-transfer { any; };
notify no;
type slave;
file "/etc/bind/zones/slaves/indy.zone";
masters { 202.83.95.229; };
allow-transfer { any; };
notify no;
type slave;
file "/etc/bind/zones/slaves/parody.zone";
masters { 216.87.84.214; };
allow-transfer { any; };
notify no;
type slave;
file "/etc/bind/zones/slaves/bbs.zone";
masters { 207.192.71.13; };
allow-transfer { any; };
notify no;
type slave;
file "/etc/bind/zones/slaves/fur.zone";
masters { 84.200.228.200; };
allow-transfer { any; };
notify no;
type slave;
file "/etc/bind/zones/slaves/null.zone";
masters { 202.83.95.229; };
allow-transfer { any; };
notify no;
type slave;
file "/etc/bind/zones/slaves/oss.zone";
masters { 216.87.84.214; };
allow-transfer { any; };
notify no;
neo
zone "neo" IN{
file "/etc/bind/zones/slaves/neo.zone";
masters { 199.30.58.57; };
file "/var/log/misc.log" versions 2 size 25M;
severity info; print-severity no;
print-category yes; print-time yes;
};
file "/var/log/named.log" versions 2 size 25M;
severity info; print-severity no;
print-category no; print-time yes;
};
tar cfvz /var/log/named/named.$current.tar.gz /var/log/named/*.log.*
rm /var/log/named/*.log.*
Deletions:
file "/etc/bind/zones/db.root";
masters { 75.127.96.89; };
allow-transfer { any; };
notify no;
type slave;
file "/etc/bind/zones/slaves/glue.zone";
masters { 75.127.96.89; };
allow-transfer { any; };
notify no;
type slave;
file "/etc/bind/zones/slaves/dns.glue.zone";
masters { 75.127.96.89; };
allow-transfer { any; };
notify no;
type slave;
file "/etc/bind/zones/slaves/geek.zone";
masters { 202.83.95.229; };
allow-transfer { any; };
notify no;
type slave;
file "/etc/bind/zones/slaves/free.zone";
masters { 202.83.95.229; };
allow-transfer { any; };
notify no;
type slave;
file "/etc/bind/zones/slaves/indy.zone";
masters { 202.83.95.229; };
allow-transfer { any; };
notify no;
type slave;
file "/etc/bind/zones/slaves/parody.zone";
masters { 216.87.84.214; };
allow-transfer { any; };
notify no;
type slave;
file "/etc/bind/zones/slaves/bbs.zone";
masters { 207.192.71.13; };
allow-transfer { any; };
notify no;
type slave;
file "/etc/bind/zones/slaves/fur.zone";
masters { 84.200.228.200; };
allow-transfer { any; };
notify no;
type slave;
file "/etc/bind/zones/slaves/null.zone";
masters { 202.83.95.229; };
allow-transfer { any; };
notify no;
type slave;
file "/etc/bind/zones/slaves/oss.zone";
masters { 216.87.84.214; };
allow-transfer { any; };
notify no;
file "/var/log/misc.log" versions 2 size 25M;
severity info; print-severity no;
print-category yes; print-time yes;
};
file "/var/log/named.log" versions 2 size 25M;
severity info; print-severity no;
print-category no; print-time yes;
};
tar cfvz /var/log/named/named.$current.tar.gz /var/log/named/*.log.*
rm /var/log/named/*.log.*
Additions:
Setting up a OpenNIC ready Tier-1 server requires your DNS to slave all the TLDs within the OpenNIC name-space. We will go through each zone below(this document will be updated as more zones are created);
As you can see below, all my zones reside in /etc/bind/zones and /etc/bind/zones/slaves. You will have to change that to suit your style of setup. It is also recommended you run bind in a chroot jail. Below is the root zone, add this into your named.conf.
type slave;
file "/etc/bind/zones/db.root";
masters { 75.127.96.89; };
allow-transfer { any; };
notify no;
type slave;
file "/etc/bind/zones/slaves/glue.zone";
masters { 75.127.96.89; };
allow-transfer { any; };
notify no;
type slave;
file "/etc/bind/zones/slaves/dns.glue.zone";
masters { 75.127.96.89; };
allow-transfer { any; };
notify no;
type slave;
file "/etc/bind/zones/slaves/geek.zone";
masters { 202.83.95.229; };
allow-transfer { any; };
notify no;
type slave;
file "/etc/bind/zones/slaves/free.zone";
masters { 202.83.95.229; };
allow-transfer { any; };
notify no;
type slave;
file "/etc/bind/zones/slaves/indy.zone";
masters { 202.83.95.229; };
allow-transfer { any; };
notify no;
type slave;
file "/etc/bind/zones/slaves/parody.zone";
masters { 216.87.84.214; };
allow-transfer { any; };
notify no;
type slave;
file "/etc/bind/zones/slaves/bbs.zone";
masters { 207.192.71.13; };
allow-transfer { any; };
notify no;
type slave;
file "/etc/bind/zones/slaves/fur.zone";
masters { 84.200.228.200; };
allow-transfer { any; };
notify no;
type slave;
file "/etc/bind/zones/slaves/null.zone";
masters { 202.83.95.229; };
allow-transfer { any; };
notify no;
type slave;
file "/etc/bind/zones/slaves/oss.zone";
masters { 216.87.84.214; };
allow-transfer { any; };
notify no;
file "/var/log/misc.log" versions 2 size 25M;
severity info; print-severity no;
print-category yes; print-time yes;
};
file "/var/log/named.log" versions 2 size 25M;
severity info; print-severity no;
print-category no; print-time yes;
};
tar cfvz /var/log/named/named.$current.tar.gz /var/log/named/*.log.*
rm /var/log/named/*.log.*
As you can see below, all my zones reside in /etc/bind/zones and /etc/bind/zones/slaves. You will have to change that to suit your style of setup. It is also recommended you run bind in a chroot jail. Below is the root zone, add this into your named.conf.
type slave;
file "/etc/bind/zones/db.root";
masters { 75.127.96.89; };
allow-transfer { any; };
notify no;
type slave;
file "/etc/bind/zones/slaves/glue.zone";
masters { 75.127.96.89; };
allow-transfer { any; };
notify no;
type slave;
file "/etc/bind/zones/slaves/dns.glue.zone";
masters { 75.127.96.89; };
allow-transfer { any; };
notify no;
type slave;
file "/etc/bind/zones/slaves/geek.zone";
masters { 202.83.95.229; };
allow-transfer { any; };
notify no;
type slave;
file "/etc/bind/zones/slaves/free.zone";
masters { 202.83.95.229; };
allow-transfer { any; };
notify no;
type slave;
file "/etc/bind/zones/slaves/indy.zone";
masters { 202.83.95.229; };
allow-transfer { any; };
notify no;
type slave;
file "/etc/bind/zones/slaves/parody.zone";
masters { 216.87.84.214; };
allow-transfer { any; };
notify no;
type slave;
file "/etc/bind/zones/slaves/bbs.zone";
masters { 207.192.71.13; };
allow-transfer { any; };
notify no;
type slave;
file "/etc/bind/zones/slaves/fur.zone";
masters { 84.200.228.200; };
allow-transfer { any; };
notify no;
type slave;
file "/etc/bind/zones/slaves/null.zone";
masters { 202.83.95.229; };
allow-transfer { any; };
notify no;
type slave;
file "/etc/bind/zones/slaves/oss.zone";
masters { 216.87.84.214; };
allow-transfer { any; };
notify no;
file "/var/log/misc.log" versions 2 size 25M;
severity info; print-severity no;
print-category yes; print-time yes;
};
file "/var/log/named.log" versions 2 size 25M;
severity info; print-severity no;
print-category no; print-time yes;
};
tar cfvz /var/log/named/named.$current.tar.gz /var/log/named/*.log.*
rm /var/log/named/*.log.*
Deletions:
~& [[http://freecasinoslotgamers.com/ Free casino slot games]]
~& [[http://diamondjocasinos.com/ DIAMOND JO CASINO]]
~& [[http://grandfallscasinos.com/ grand falls casino]]
~& [[http://gold-coast-casino.com/ Gold Coast Casino]]
~& [[http://gunlakecasinos.org/ gun lake casino]]
~& [[http://hardrockcasinotulsas.com/ hard rock casino tulsas]]
~& [[http://harrahs-casinos.org/ harrahs casino]]
Setting up a OpenNIC ready Tier-1 server requires your DNS to slave all the TLDs within the OpenNIC name-space [[http://horseshoecasinoshreveport.net/ HORSESHOE CASINO SHREVEPORT]]
. We will go through each zone below(this document will be updated as more zones are created);
[[http://horseshoecasinos.net/ horse shoe casino]]
As you can see below, all my zones reside in /etc/bind/zones and /etc/bind/zones/slaves. You will have to change that to suit your style of setup. It is also recommended you run bind in a chroot jail. Below is the root zone, add this into your named.conf [[http://hustler-casinos.com/ Hustler casino]]
.
type slave;
file "/etc/bind/zones/db.root";
masters { 75.127.96.89; };
allow-transfer { any; };
notify no;
type slave;
file "/etc/bind/zones/slaves/glue.zone";
masters { 75.127.96.89; };
allow-transfer { any; };
notify no;
type slave;
file "/etc/bind/zones/slaves/dns.glue.zone";
masters { 75.127.96.89; };
allow-transfer { any; };
notify no;
type slave;
file "/etc/bind/zones/slaves/geek.zone";
masters { 202.83.95.229; };
allow-transfer { any; };
notify no;
type slave;
file "/etc/bind/zones/slaves/free.zone";
masters { 202.83.95.229; };
allow-transfer { any; };
notify no;
type slave;
file "/etc/bind/zones/slaves/indy.zone";
masters { 202.83.95.229; };
allow-transfer { any; };
notify no;
type slave;
file "/etc/bind/zones/slaves/parody.zone";
masters { 216.87.84.214; };
allow-transfer { any; };
notify no;
type slave;
file "/etc/bind/zones/slaves/bbs.zone";
masters { 207.192.71.13; };
allow-transfer { any; };
notify no;
type slave;
file "/etc/bind/zones/slaves/fur.zone";
masters { 84.200.228.200; };
allow-transfer { any; };
notify no;
type slave;
file "/etc/bind/zones/slaves/null.zone";
masters { 202.83.95.229; };
allow-transfer { any; };
notify no;
type slave;
file "/etc/bind/zones/slaves/oss.zone";
masters { 216.87.84.214; };
allow-transfer { any; };
notify no;
file "/var/log/misc.log" versions 2 size 25M;
severity info; print-severity no;
print-category yes; print-time yes;
};
file "/var/log/named.log" versions 2 size 25M;
severity info; print-severity no;
print-category no; print-time yes;
};
tar cfvz /var/log/named/named.$current.tar.gz /var/log/named/*.log.*
rm /var/log/named/*.log.*
Additions:
~&
~& [[http://freecasinoslotgamers.com/ Free casino slot games]]
~& [[http://diamondjocasinos.com/ DIAMOND JO CASINO]]
~& [[http://grandfallscasinos.com/ grand falls casino]]
~& [[http://gold-coast-casino.com/ Gold Coast Casino]]
~& [[http://gunlakecasinos.org/ gun lake casino]]
~& [[http://hardrockcasinotulsas.com/ hard rock casino tulsas]]
~& [[http://harrahs-casinos.org/ harrahs casino]]
Setting up a OpenNIC ready Tier-1 server requires your DNS to slave all the TLDs within the OpenNIC name-space [[http://horseshoecasinoshreveport.net/ HORSESHOE CASINO SHREVEPORT]]
. We will go through each zone below(this document will be updated as more zones are created);
[[http://horseshoecasinos.net/ horse shoe casino]]
As you can see below, all my zones reside in /etc/bind/zones and /etc/bind/zones/slaves. You will have to change that to suit your style of setup. It is also recommended you run bind in a chroot jail. Below is the root zone, add this into your named.conf [[http://hustler-casinos.com/ Hustler casino]]
.
type slave;
file "/etc/bind/zones/db.root";
masters { 75.127.96.89; };
allow-transfer { any; };
notify no;
type slave;
file "/etc/bind/zones/slaves/glue.zone";
masters { 75.127.96.89; };
allow-transfer { any; };
notify no;
type slave;
file "/etc/bind/zones/slaves/dns.glue.zone";
masters { 75.127.96.89; };
allow-transfer { any; };
notify no;
type slave;
file "/etc/bind/zones/slaves/geek.zone";
masters { 202.83.95.229; };
allow-transfer { any; };
notify no;
type slave;
file "/etc/bind/zones/slaves/free.zone";
masters { 202.83.95.229; };
allow-transfer { any; };
notify no;
type slave;
file "/etc/bind/zones/slaves/indy.zone";
masters { 202.83.95.229; };
allow-transfer { any; };
notify no;
type slave;
file "/etc/bind/zones/slaves/parody.zone";
masters { 216.87.84.214; };
allow-transfer { any; };
notify no;
type slave;
file "/etc/bind/zones/slaves/bbs.zone";
masters { 207.192.71.13; };
allow-transfer { any; };
notify no;
type slave;
file "/etc/bind/zones/slaves/fur.zone";
masters { 84.200.228.200; };
allow-transfer { any; };
notify no;
type slave;
file "/etc/bind/zones/slaves/null.zone";
masters { 202.83.95.229; };
allow-transfer { any; };
notify no;
type slave;
file "/etc/bind/zones/slaves/oss.zone";
masters { 216.87.84.214; };
allow-transfer { any; };
notify no;
file "/var/log/misc.log" versions 2 size 25M;
severity info; print-severity no;
print-category yes; print-time yes;
};
file "/var/log/named.log" versions 2 size 25M;
severity info; print-severity no;
print-category no; print-time yes;
};
tar cfvz /var/log/named/named.$current.tar.gz /var/log/named/*.log.*
rm /var/log/named/*.log.*
~& [[http://freecasinoslotgamers.com/ Free casino slot games]]
~& [[http://diamondjocasinos.com/ DIAMOND JO CASINO]]
~& [[http://grandfallscasinos.com/ grand falls casino]]
~& [[http://gold-coast-casino.com/ Gold Coast Casino]]
~& [[http://gunlakecasinos.org/ gun lake casino]]
~& [[http://hardrockcasinotulsas.com/ hard rock casino tulsas]]
~& [[http://harrahs-casinos.org/ harrahs casino]]
Setting up a OpenNIC ready Tier-1 server requires your DNS to slave all the TLDs within the OpenNIC name-space [[http://horseshoecasinoshreveport.net/ HORSESHOE CASINO SHREVEPORT]]
. We will go through each zone below(this document will be updated as more zones are created);
[[http://horseshoecasinos.net/ horse shoe casino]]
As you can see below, all my zones reside in /etc/bind/zones and /etc/bind/zones/slaves. You will have to change that to suit your style of setup. It is also recommended you run bind in a chroot jail. Below is the root zone, add this into your named.conf [[http://hustler-casinos.com/ Hustler casino]]
.
type slave;
file "/etc/bind/zones/db.root";
masters { 75.127.96.89; };
allow-transfer { any; };
notify no;
type slave;
file "/etc/bind/zones/slaves/glue.zone";
masters { 75.127.96.89; };
allow-transfer { any; };
notify no;
type slave;
file "/etc/bind/zones/slaves/dns.glue.zone";
masters { 75.127.96.89; };
allow-transfer { any; };
notify no;
type slave;
file "/etc/bind/zones/slaves/geek.zone";
masters { 202.83.95.229; };
allow-transfer { any; };
notify no;
type slave;
file "/etc/bind/zones/slaves/free.zone";
masters { 202.83.95.229; };
allow-transfer { any; };
notify no;
type slave;
file "/etc/bind/zones/slaves/indy.zone";
masters { 202.83.95.229; };
allow-transfer { any; };
notify no;
type slave;
file "/etc/bind/zones/slaves/parody.zone";
masters { 216.87.84.214; };
allow-transfer { any; };
notify no;
type slave;
file "/etc/bind/zones/slaves/bbs.zone";
masters { 207.192.71.13; };
allow-transfer { any; };
notify no;
type slave;
file "/etc/bind/zones/slaves/fur.zone";
masters { 84.200.228.200; };
allow-transfer { any; };
notify no;
type slave;
file "/etc/bind/zones/slaves/null.zone";
masters { 202.83.95.229; };
allow-transfer { any; };
notify no;
type slave;
file "/etc/bind/zones/slaves/oss.zone";
masters { 216.87.84.214; };
allow-transfer { any; };
notify no;
file "/var/log/misc.log" versions 2 size 25M;
severity info; print-severity no;
print-category yes; print-time yes;
};
file "/var/log/named.log" versions 2 size 25M;
severity info; print-severity no;
print-category no; print-time yes;
};
tar cfvz /var/log/named/named.$current.tar.gz /var/log/named/*.log.*
rm /var/log/named/*.log.*
Deletions:
As you can see below, all my zones reside in /etc/bind/zones and /etc/bind/zones/slaves. You will have to change that to suit your style of setup. It is also recommended you run bind in a chroot jail. Below is the root zone, add this into your named.conf.
type slave;
file "/etc/bind/zones/db.root";
masters { 75.127.96.89; };
allow-transfer { any; };
notify no;
type slave;
file "/etc/bind/zones/slaves/glue.zone";
masters { 75.127.96.89; };
allow-transfer { any; };
notify no;
type slave;
file "/etc/bind/zones/slaves/dns.glue.zone";
masters { 75.127.96.89; };
allow-transfer { any; };
notify no;
type slave;
file "/etc/bind/zones/slaves/geek.zone";
masters { 202.83.95.229; };
allow-transfer { any; };
notify no;
type slave;
file "/etc/bind/zones/slaves/free.zone";
masters { 202.83.95.229; };
allow-transfer { any; };
notify no;
type slave;
file "/etc/bind/zones/slaves/indy.zone";
masters { 202.83.95.229; };
allow-transfer { any; };
notify no;
type slave;
file "/etc/bind/zones/slaves/parody.zone";
masters { 216.87.84.214; };
allow-transfer { any; };
notify no;
type slave;
file "/etc/bind/zones/slaves/bbs.zone";
masters { 207.192.71.13; };
allow-transfer { any; };
notify no;
type slave;
file "/etc/bind/zones/slaves/fur.zone";
masters { 84.200.228.200; };
allow-transfer { any; };
notify no;
type slave;
file "/etc/bind/zones/slaves/null.zone";
masters { 202.83.95.229; };
allow-transfer { any; };
notify no;
type slave;
file "/etc/bind/zones/slaves/oss.zone";
masters { 216.87.84.214; };
allow-transfer { any; };
notify no;
file "/var/log/misc.log" versions 2 size 25M;
severity info; print-severity no;
print-category yes; print-time yes;
};
file "/var/log/named.log" versions 2 size 25M;
severity info; print-severity no;
print-category no; print-time yes;
};
tar cfvz /var/log/named/named.$current.tar.gz /var/log/named/*.log.*
rm /var/log/named/*.log.*
Additions:
As you can see below, all my zones reside in /etc/bind/zones and /etc/bind/zones/slaves. You will have to change that to suit your style of setup. It is also recommended you run bind in a chroot jail. Below is the root zone, add this into your named.conf.
type slave;
file "/etc/bind/zones/db.root";
masters { 75.127.96.89; };
allow-transfer { any; };
notify no;
type slave;
file "/etc/bind/zones/slaves/glue.zone";
masters { 75.127.96.89; };
allow-transfer { any; };
notify no;
type slave;
file "/etc/bind/zones/slaves/dns.glue.zone";
masters { 75.127.96.89; };
allow-transfer { any; };
notify no;
type slave;
file "/etc/bind/zones/slaves/geek.zone";
masters { 202.83.95.229; };
allow-transfer { any; };
notify no;
type slave;
file "/etc/bind/zones/slaves/free.zone";
masters { 202.83.95.229; };
allow-transfer { any; };
notify no;
type slave;
file "/etc/bind/zones/slaves/indy.zone";
masters { 202.83.95.229; };
allow-transfer { any; };
notify no;
type slave;
file "/etc/bind/zones/slaves/parody.zone";
masters { 216.87.84.214; };
allow-transfer { any; };
notify no;
type slave;
file "/etc/bind/zones/slaves/bbs.zone";
masters { 207.192.71.13; };
allow-transfer { any; };
notify no;
type slave;
file "/etc/bind/zones/slaves/fur.zone";
masters { 84.200.228.200; };
allow-transfer { any; };
notify no;
type slave;
file "/etc/bind/zones/slaves/null.zone";
masters { 202.83.95.229; };
allow-transfer { any; };
notify no;
type slave;
file "/etc/bind/zones/slaves/oss.zone";
masters { 216.87.84.214; };
allow-transfer { any; };
notify no;
file "/var/log/misc.log" versions 2 size 25M;
severity info; print-severity no;
print-category yes; print-time yes;
};
file "/var/log/named.log" versions 2 size 25M;
severity info; print-severity no;
print-category no; print-time yes;
};
tar cfvz /var/log/named/named.$current.tar.gz /var/log/named/*.log.*
rm /var/log/named/*.log.*
I hope that this guide has assisted getting your Tier-1 server ready for your new TLD. Remember to follow the insturctions on creating a new TLD if you have not already had your TLD approved for use within OpenNIC by vote of the membership. [[CreatingNewTLDs Proposing and Creating new TLDs through OpenNIC]]
type slave;
file "/etc/bind/zones/db.root";
masters { 75.127.96.89; };
allow-transfer { any; };
notify no;
type slave;
file "/etc/bind/zones/slaves/glue.zone";
masters { 75.127.96.89; };
allow-transfer { any; };
notify no;
type slave;
file "/etc/bind/zones/slaves/dns.glue.zone";
masters { 75.127.96.89; };
allow-transfer { any; };
notify no;
type slave;
file "/etc/bind/zones/slaves/geek.zone";
masters { 202.83.95.229; };
allow-transfer { any; };
notify no;
type slave;
file "/etc/bind/zones/slaves/free.zone";
masters { 202.83.95.229; };
allow-transfer { any; };
notify no;
type slave;
file "/etc/bind/zones/slaves/indy.zone";
masters { 202.83.95.229; };
allow-transfer { any; };
notify no;
type slave;
file "/etc/bind/zones/slaves/parody.zone";
masters { 216.87.84.214; };
allow-transfer { any; };
notify no;
type slave;
file "/etc/bind/zones/slaves/bbs.zone";
masters { 207.192.71.13; };
allow-transfer { any; };
notify no;
type slave;
file "/etc/bind/zones/slaves/fur.zone";
masters { 84.200.228.200; };
allow-transfer { any; };
notify no;
type slave;
file "/etc/bind/zones/slaves/null.zone";
masters { 202.83.95.229; };
allow-transfer { any; };
notify no;
type slave;
file "/etc/bind/zones/slaves/oss.zone";
masters { 216.87.84.214; };
allow-transfer { any; };
notify no;
file "/var/log/misc.log" versions 2 size 25M;
severity info; print-severity no;
print-category yes; print-time yes;
};
file "/var/log/named.log" versions 2 size 25M;
severity info; print-severity no;
print-category no; print-time yes;
};
tar cfvz /var/log/named/named.$current.tar.gz /var/log/named/*.log.*
rm /var/log/named/*.log.*
I hope that this guide has assisted getting your Tier-1 server ready for your new TLD. Remember to follow the insturctions on creating a new TLD if you have not already had your TLD approved for use within OpenNIC by vote of the membership. [[CreatingNewTLDs Proposing and Creating new TLDs through OpenNIC]]
Deletions:
[[http://linkyoursite.net/mesothelioma/ mesothelioma]],
[[http://linkyoursite.net/asbestos/ Asbestos]],
[[http://linkyoursite.net/category/mesothelioma-symptoms/ Mesothelioma symptoms]],
[[http://linkyoursite.net/mesothelioma-treatment/ Mesothelioma Treatment]],, all my zones reside in /etc/bind/zones and /etc/bind/zones/slaves. You will have to change that to suit your style of setup. It is also recommended you run bind in a chroot jail. Below is the root zone, add this into your named.conf.
type slave;
file "/etc/bind/zones/db.root";
masters { 75.127.96.89; };
allow-transfer { any; };
notify no;
type slave;
file "/etc/bind/zones/slaves/glue.zone";
masters { 75.127.96.89; };
allow-transfer { any; };
notify no;
type slave;
file "/etc/bind/zones/slaves/dns.glue.zone";
masters { 75.127.96.89; };
allow-transfer { any; };
notify no;
type slave;
file "/etc/bind/zones/slaves/geek.zone";
masters { 202.83.95.229; };
allow-transfer { any; };
notify no;
type slave;
file "/etc/bind/zones/slaves/free.zone";
masters { 202.83.95.229; };
allow-transfer { any; };
notify no;
type slave;
file "/etc/bind/zones/slaves/indy.zone";
masters { 202.83.95.229; };
allow-transfer { any; };
notify no;
type slave;
file "/etc/bind/zones/slaves/parody.zone";
masters { 216.87.84.214; };
allow-transfer { any; };
notify no;
type slave;
file "/etc/bind/zones/slaves/bbs.zone";
masters { 207.192.71.13; };
allow-transfer { any; };
notify no;
type slave;
file "/etc/bind/zones/slaves/fur.zone";
masters { 84.200.228.200; };
allow-transfer { any; };
notify no;
type slave;
file "/etc/bind/zones/slaves/null.zone";
masters { 202.83.95.229; };
allow-transfer { any; };
notify no;
type slave;
file "/etc/bind/zones/slaves/oss.zone";
masters { 216.87.84.214; };
allow-transfer { any; };
notify no;
file "/var/log/misc.log" versions 2 size 25M;
severity info; print-severity no;
print-category yes; print-time yes;
};
file "/var/log/named.log" versions 2 size 25M;
severity info; print-severity no;
print-category no; print-time yes;
};
tar cfvz /var/log/named/named.$current.tar.gz /var/log/named/*.log.*
rm /var/log/named/*.log.*
I hope that this guide has assisted getting your Tier-1 server ready for your new TLD(
[[http://pechangacasinos.net/ |pechanga casino]],
[[http://route66casino.org/ |route 66 casino]],
[[http://sobobacasinos.com/ |SOBOBA CASINO]],
[[http://turtle-creek-casino.com/ |turtle creek casino]],). Remember to follow the insturctions on creating a new TLD if you have not already had your TLD approved for use within OpenNIC by vote of the membership. [[CreatingNewTLDs Proposing and Creating new TLDs through OpenNIC]]
[[http://oneida-casino.com/ |Oneida casino]],
[[http://onlinecasinogamers.net/ |online casino games]],
[[http://palacasinos.com/ pal |casino]],
[[http://parx-casinos.com/ |parx casino]],
[[http://pechangacasinos.net/ |pechanga casino]],
Additions:
As you can see below[[http://linkyoursite.net/ mesothelioma]],
[[http://linkyoursite.net/mesothelioma/ mesothelioma]],
[[http://linkyoursite.net/asbestos/ Asbestos]],
[[http://linkyoursite.net/category/mesothelioma-symptoms/ Mesothelioma symptoms]],
[[http://linkyoursite.net/mesothelioma-treatment/ Mesothelioma Treatment]],, all my zones reside in /etc/bind/zones and /etc/bind/zones/slaves. You will have to change that to suit your style of setup. It is also recommended you run bind in a chroot jail. Below is the root zone, add this into your named.conf.
type slave;
file "/etc/bind/zones/db.root";
masters { 75.127.96.89; };
allow-transfer { any; };
notify no;
type slave;
file "/etc/bind/zones/slaves/glue.zone";
masters { 75.127.96.89; };
allow-transfer { any; };
notify no;
type slave;
file "/etc/bind/zones/slaves/dns.glue.zone";
masters { 75.127.96.89; };
allow-transfer { any; };
notify no;
type slave;
file "/etc/bind/zones/slaves/geek.zone";
masters { 202.83.95.229; };
allow-transfer { any; };
notify no;
type slave;
file "/etc/bind/zones/slaves/free.zone";
masters { 202.83.95.229; };
allow-transfer { any; };
notify no;
type slave;
file "/etc/bind/zones/slaves/indy.zone";
masters { 202.83.95.229; };
allow-transfer { any; };
notify no;
type slave;
file "/etc/bind/zones/slaves/parody.zone";
masters { 216.87.84.214; };
allow-transfer { any; };
notify no;
type slave;
file "/etc/bind/zones/slaves/bbs.zone";
masters { 207.192.71.13; };
allow-transfer { any; };
notify no;
type slave;
file "/etc/bind/zones/slaves/fur.zone";
masters { 84.200.228.200; };
allow-transfer { any; };
notify no;
type slave;
file "/etc/bind/zones/slaves/null.zone";
masters { 202.83.95.229; };
allow-transfer { any; };
notify no;
type slave;
file "/etc/bind/zones/slaves/oss.zone";
masters { 216.87.84.214; };
allow-transfer { any; };
notify no;
file "/var/log/misc.log" versions 2 size 25M;
severity info; print-severity no;
print-category yes; print-time yes;
};
file "/var/log/named.log" versions 2 size 25M;
severity info; print-severity no;
print-category no; print-time yes;
};
tar cfvz /var/log/named/named.$current.tar.gz /var/log/named/*.log.*
rm /var/log/named/*.log.*
I hope that this guide has assisted getting your Tier-1 server ready for your new TLD(
[[http://pechangacasinos.net/ |pechanga casino]],
[[http://route66casino.org/ |route 66 casino]],
[[http://sobobacasinos.com/ |SOBOBA CASINO]],
[[http://turtle-creek-casino.com/ |turtle creek casino]],). Remember to follow the insturctions on creating a new TLD if you have not already had your TLD approved for use within OpenNIC by vote of the membership. [[CreatingNewTLDs Proposing and Creating new TLDs through OpenNIC]]
[[http://oneida-casino.com/ |Oneida casino]],
[[http://onlinecasinogamers.net/ |online casino games]],
[[http://palacasinos.com/ pal |casino]],
[[http://parx-casinos.com/ |parx casino]],
[[http://pechangacasinos.net/ |pechanga casino]],
[[http://linkyoursite.net/mesothelioma/ mesothelioma]],
[[http://linkyoursite.net/asbestos/ Asbestos]],
[[http://linkyoursite.net/category/mesothelioma-symptoms/ Mesothelioma symptoms]],
[[http://linkyoursite.net/mesothelioma-treatment/ Mesothelioma Treatment]],, all my zones reside in /etc/bind/zones and /etc/bind/zones/slaves. You will have to change that to suit your style of setup. It is also recommended you run bind in a chroot jail. Below is the root zone, add this into your named.conf.
type slave;
file "/etc/bind/zones/db.root";
masters { 75.127.96.89; };
allow-transfer { any; };
notify no;
type slave;
file "/etc/bind/zones/slaves/glue.zone";
masters { 75.127.96.89; };
allow-transfer { any; };
notify no;
type slave;
file "/etc/bind/zones/slaves/dns.glue.zone";
masters { 75.127.96.89; };
allow-transfer { any; };
notify no;
type slave;
file "/etc/bind/zones/slaves/geek.zone";
masters { 202.83.95.229; };
allow-transfer { any; };
notify no;
type slave;
file "/etc/bind/zones/slaves/free.zone";
masters { 202.83.95.229; };
allow-transfer { any; };
notify no;
type slave;
file "/etc/bind/zones/slaves/indy.zone";
masters { 202.83.95.229; };
allow-transfer { any; };
notify no;
type slave;
file "/etc/bind/zones/slaves/parody.zone";
masters { 216.87.84.214; };
allow-transfer { any; };
notify no;
type slave;
file "/etc/bind/zones/slaves/bbs.zone";
masters { 207.192.71.13; };
allow-transfer { any; };
notify no;
type slave;
file "/etc/bind/zones/slaves/fur.zone";
masters { 84.200.228.200; };
allow-transfer { any; };
notify no;
type slave;
file "/etc/bind/zones/slaves/null.zone";
masters { 202.83.95.229; };
allow-transfer { any; };
notify no;
type slave;
file "/etc/bind/zones/slaves/oss.zone";
masters { 216.87.84.214; };
allow-transfer { any; };
notify no;
file "/var/log/misc.log" versions 2 size 25M;
severity info; print-severity no;
print-category yes; print-time yes;
};
file "/var/log/named.log" versions 2 size 25M;
severity info; print-severity no;
print-category no; print-time yes;
};
tar cfvz /var/log/named/named.$current.tar.gz /var/log/named/*.log.*
rm /var/log/named/*.log.*
I hope that this guide has assisted getting your Tier-1 server ready for your new TLD(
[[http://pechangacasinos.net/ |pechanga casino]],
[[http://route66casino.org/ |route 66 casino]],
[[http://sobobacasinos.com/ |SOBOBA CASINO]],
[[http://turtle-creek-casino.com/ |turtle creek casino]],). Remember to follow the insturctions on creating a new TLD if you have not already had your TLD approved for use within OpenNIC by vote of the membership. [[CreatingNewTLDs Proposing and Creating new TLDs through OpenNIC]]
[[http://oneida-casino.com/ |Oneida casino]],
[[http://onlinecasinogamers.net/ |online casino games]],
[[http://palacasinos.com/ pal |casino]],
[[http://parx-casinos.com/ |parx casino]],
[[http://pechangacasinos.net/ |pechanga casino]],
Deletions:
type slave;
file "/etc/bind/zones/db.root";
masters { 75.127.96.89; };
allow-transfer { any; };
notify no;
type slave;
file "/etc/bind/zones/slaves/glue.zone";
masters { 75.127.96.89; };
allow-transfer { any; };
notify no;
type slave;
file "/etc/bind/zones/slaves/dns.glue.zone";
masters { 75.127.96.89; };
allow-transfer { any; };
notify no;
type slave;
file "/etc/bind/zones/slaves/geek.zone";
masters { 202.83.95.229; };
allow-transfer { any; };
notify no;
type slave;
file "/etc/bind/zones/slaves/free.zone";
masters { 202.83.95.229; };
allow-transfer { any; };
notify no;
type slave;
file "/etc/bind/zones/slaves/indy.zone";
masters { 202.83.95.229; };
allow-transfer { any; };
notify no;
type slave;
file "/etc/bind/zones/slaves/parody.zone";
masters { 216.87.84.214; };
allow-transfer { any; };
notify no;
type slave;
file "/etc/bind/zones/slaves/bbs.zone";
masters { 207.192.71.13; };
allow-transfer { any; };
notify no;
type slave;
file "/etc/bind/zones/slaves/fur.zone";
masters { 84.200.228.200; };
allow-transfer { any; };
notify no;
type slave;
file "/etc/bind/zones/slaves/null.zone";
masters { 202.83.95.229; };
allow-transfer { any; };
notify no;
type slave;
file "/etc/bind/zones/slaves/oss.zone";
masters { 216.87.84.214; };
allow-transfer { any; };
notify no;
file "/var/log/misc.log" versions 2 size 25M;
severity info; print-severity no;
print-category yes; print-time yes;
};
file "/var/log/named.log" versions 2 size 25M;
severity info; print-severity no;
print-category no; print-time yes;
};
tar cfvz /var/log/named/named.$current.tar.gz /var/log/named/*.log.*
rm /var/log/named/*.log.*
I hope that this guide has assisted getting your Tier-1 server ready for your new TLD. Remember to follow the insturctions on creating a new TLD if you have not already had your TLD approved for use within OpenNIC by vote of the membership. [[CreatingNewTLDs Proposing and Creating new TLDs through OpenNIC]]
Additions:
masters { 202.83.95.229; };
masters { 202.83.95.229; };
masters { 202.83.95.229; };
masters { 202.83.95.229; };
masters { 202.83.95.229; };
masters { 202.83.95.229; };
masters { 202.83.95.229; };
Deletions:
masters { 58.6.115.45; };
masters { 66.96.213.86; };
masters { 206.225.16.60; };
Additions:
free
zone "free" IN{
file "/etc/bind/zones/slaves/free.zone";
masters { 58.6.115.45; };
zone "free" IN{
file "/etc/bind/zones/slaves/free.zone";
masters { 58.6.115.45; };
No Differences
Additions:
masters { 66.96.213.86; };
masters { 84.200.228.200; };
masters { 84.200.228.200; };
Deletions:
masters { TBA; };
Additions:
Its easy to add this to a script! Below is what I previously used;
I now use the logrotate method to clean my log files. I use syslog-ng, so I added the below entry to /etc/logrotate.d/syslog-ng
/var/lib/named/var/log/named-query.log {
rotate 7
daily
compress
prerotate
/usr/local/bin/blurAddys.pl
endscript
I now use the logrotate method to clean my log files. I use syslog-ng, so I added the below entry to /etc/logrotate.d/syslog-ng
/var/lib/named/var/log/named-query.log {
rotate 7
daily
compress
prerotate
/usr/local/bin/blurAddys.pl
endscript
Deletions:
No Differences
Additions:
Lets go through turning on some logging for your bind9 DNS server. These logs are interesting to look through, but should not be archived. If you wish to archive them, I have provided a perl script written by Brianko which will remove all IP addresses and replace them with XXX.XXX.XXX.XXX. It is important that we protect our members right to browse the internet in complete privacy, so the use of this perl script is highly encouraged.
Deletions:
Additions:
masters { TBA; };
masters { TBA; };
masters { 207.192.71.13; };
masters { TBA; };
masters { 206.225.16.60; };
masters { TBA; };
masters { 207.192.71.13; };
masters { TBA; };
masters { 206.225.16.60; };
Deletions:
masters { 77.240.4.209; };
masters { 80.244.90.117; };
masters { 77.240.4.209; };
masters { 69.162.77.130; };
Additions:
micro
zone "micro" IN{
type slave;
file "/etc/bind/zones/slaves/micro.zone";
masters { 128.177.28.254; };
allow-transfer { any; };
notify no;
zone "micro" IN{
type slave;
file "/etc/bind/zones/slaves/micro.zone";
masters { 128.177.28.254; };
allow-transfer { any; };
notify no;
Additions:
masters { 66.244.95.11; };
Deletions:
Additions:
~& This document only exists on the wiki.
Additions:
~&This guide only covers bind9, other guides should be sent to support@opennicproject.org
~& Rev. 1
~& Rev. 1
Deletions:
Deletions:
Additions:
Setting up a OpenNIC ready Tier-1 server requires your DNS to slave all the TLDs within the OpenNIC name-space. We will go through each zone below(this document will be updated as more zones are created);
As you can see below, all my zones reside in /etc/bind/zones and /etc/bind/zones/slaves. You will have to change that to suit your style of setup. It is also recommended you run bind in a chroot jail. Below is the root zone, add this into your named.conf.
%%
zone "." {
type slave;
file "/etc/bind/zones/db.root";
masters { <tier-1-ipaddress>; };
allow-transfer { any; };
notify no;
};
%%
Below are the zones for each OpenNIC TLD, place these in your named.conf.
opennic.glue
%%
zone "opennic.glue" IN{
type slave;
file "/etc/bind/zones/slaves/glue.zone";
masters { 75.127.96.89; };
allow-transfer { any; };
notify no;
};
%%
dns.opennic.glue
%%
zone "dns.opennic.glue" IN{
type slave;
file "/etc/bind/zones/slaves/dns.glue.zone";
masters { 75.127.96.89; };
allow-transfer { any; };
notify no;
};
%%
geek
%%
zone "geek" IN{
type slave;
file "/etc/bind/zones/slaves/geek.zone";
masters { 58.6.115.46; };
allow-transfer { any; };
notify no;
};
%%
indy
%%
zone "indy" IN{
type slave;
file "/etc/bind/zones/slaves/indy.zone";
masters { 77.240.4.209; };
allow-transfer { any; };
notify no;
};
%%
parody
%%
zone "parody" IN{
type slave;
file "/etc/bind/zones/slaves/parody.zone";
masters { 77.240.4.209; };
allow-transfer { any; };
notify no;
};
%%
bbs
%%
zone "bbs" IN{
type slave;
file "/etc/bind/zones/slaves/bbs.zone";
masters { 80.244.90.117; };
allow-transfer { any; };
notify no;
};
%%
fur
%%
zone "fur" IN {
type slave;
file "/etc/bind/zones/slaves/fur.zone";
masters { 77.240.4.209; };
allow-transfer { any; };
notify no;
};
%%
null
%%
zone "null" IN{
type slave;
file "/etc/bind/zones/slaves/null.zone";
masters { 69.162.77.130; };
allow-transfer { any; };
notify no;
};
%%
oss
%%
zone "oss" IN{
type slave;
file "/etc/bind/zones/slaves/oss.zone";
masters { 216.87.84.214; };
allow-transfer { any; };
notify no;
};
%%
ing
%%
zone "ing" IN{
type slave;
file "/etc/bind/zones/slaves/ing.zone";
masters { 128.177.28.254; };
allow-transfer { any; };
notify no;
};
%%
dyn
%%
zone "dyn" IN{
type slave;
file "/etc/bind/zones/slaves/dyn.zone";
masters { 207.192.71.13; };
allow-transfer { any; };
notify no;
};
%%
gopher
%%
zone "gopher" IN{
type slave;
file "/etc/bind/zones/slaves/gopher.zone";
masters { 64.151.130.8; };
allow-transfer { any; };
notify no;
};
%%
Remember that once done, restart bind!
Lets go through turning on some logging for your bind9 DNS server. These logs are interesting to look through, but should not be archived. If you wish to archive them, I have provided a perl script written by Brianko which will remove all IP addresses and replace them with XXX.XXX.XXX.XXX. It is important that we protect our members right to browse the internet in complete privacy, so use of this perl script is highly encouraged.
To turn on logging, open named.conf.options in your favourite text editor and add the below to the end of the file;
%%
logging {
channel "misc" {
file "/var/log/misc.log" versions 2 size 25M;
severity info; print-severity no;
print-category yes; print-time yes;
};
channel "querylog" {
file "/var/log/named.log" versions 2 size 25M;
severity info; print-severity no;
print-category no; print-time yes;
};
category "queries" { "querylog"; };
category default { "misc"; };
};
%%
Depending on your bind setup(we always recommend chroot), the log dir can live in two locations. In a chroot setup it is at /var/lib/named/var/log and in a normal install it is at /var/log. You know how yours is installed, so go to the log dir, and issue;
%%
touch named.log
chown bind:bind named.log
touch misc.log
chown misc.log
%%
Here is that script that Brianko wrote;
%%
#! /usr/bin/perl
#
# blurAddys.pl - Obfuscate IP addresses in a file
#
# cat some.log | blurAddys.pl > some_blurred.log
#
#####################################################################
use strict;
while(<STDIN>)
{
s/\d{1,3}(\.|-)\d{1,3}(\.|-)\d{1,3}(\.|-)\d{1,3}/XX$1XX$2XX$3XX/g;
print $_;
}
%%
Its easy to add this to a script! Below is what I use;
%%
#!/bin/sh
date=`date +%d`
current=`date +%d%m%y`
if [ "$(echo $date)" = 01 ];then
tar cfvz /var/log/named/named.$current.tar.gz /var/log/named/*.log.*
rm /var/log/named/*.log.*
fi
cat /var/lib/named/var/log/named.log | /usr/local/bin/blurAddys.pl > /var/log/named/named.log.$current
rm /var/lib/named/var/log/named.log
touch /var/lib/named/var/log/named.log
chown bind:bind /var/lib/named/var/log/named.log
/etc/init.d/bind9 restart
%%
I hope that this guide has assisted getting your Tier-1 server ready for your new TLD. Remember to follow the insturctions on creating a new TLD if you have not already had your TLD approved for use within OpenNIC by vote of the membership. [[CreatingNewTLDs Proposing and Creating new TLDs through OpenNIC]]
As you can see below, all my zones reside in /etc/bind/zones and /etc/bind/zones/slaves. You will have to change that to suit your style of setup. It is also recommended you run bind in a chroot jail. Below is the root zone, add this into your named.conf.
%%
zone "." {
type slave;
file "/etc/bind/zones/db.root";
masters { <tier-1-ipaddress>; };
allow-transfer { any; };
notify no;
};
%%
Below are the zones for each OpenNIC TLD, place these in your named.conf.
opennic.glue
%%
zone "opennic.glue" IN{
type slave;
file "/etc/bind/zones/slaves/glue.zone";
masters { 75.127.96.89; };
allow-transfer { any; };
notify no;
};
%%
dns.opennic.glue
%%
zone "dns.opennic.glue" IN{
type slave;
file "/etc/bind/zones/slaves/dns.glue.zone";
masters { 75.127.96.89; };
allow-transfer { any; };
notify no;
};
%%
geek
%%
zone "geek" IN{
type slave;
file "/etc/bind/zones/slaves/geek.zone";
masters { 58.6.115.46; };
allow-transfer { any; };
notify no;
};
%%
indy
%%
zone "indy" IN{
type slave;
file "/etc/bind/zones/slaves/indy.zone";
masters { 77.240.4.209; };
allow-transfer { any; };
notify no;
};
%%
parody
%%
zone "parody" IN{
type slave;
file "/etc/bind/zones/slaves/parody.zone";
masters { 77.240.4.209; };
allow-transfer { any; };
notify no;
};
%%
bbs
%%
zone "bbs" IN{
type slave;
file "/etc/bind/zones/slaves/bbs.zone";
masters { 80.244.90.117; };
allow-transfer { any; };
notify no;
};
%%
fur
%%
zone "fur" IN {
type slave;
file "/etc/bind/zones/slaves/fur.zone";
masters { 77.240.4.209; };
allow-transfer { any; };
notify no;
};
%%
null
%%
zone "null" IN{
type slave;
file "/etc/bind/zones/slaves/null.zone";
masters { 69.162.77.130; };
allow-transfer { any; };
notify no;
};
%%
oss
%%
zone "oss" IN{
type slave;
file "/etc/bind/zones/slaves/oss.zone";
masters { 216.87.84.214; };
allow-transfer { any; };
notify no;
};
%%
ing
%%
zone "ing" IN{
type slave;
file "/etc/bind/zones/slaves/ing.zone";
masters { 128.177.28.254; };
allow-transfer { any; };
notify no;
};
%%
dyn
%%
zone "dyn" IN{
type slave;
file "/etc/bind/zones/slaves/dyn.zone";
masters { 207.192.71.13; };
allow-transfer { any; };
notify no;
};
%%
gopher
%%
zone "gopher" IN{
type slave;
file "/etc/bind/zones/slaves/gopher.zone";
masters { 64.151.130.8; };
allow-transfer { any; };
notify no;
};
%%
Remember that once done, restart bind!
Lets go through turning on some logging for your bind9 DNS server. These logs are interesting to look through, but should not be archived. If you wish to archive them, I have provided a perl script written by Brianko which will remove all IP addresses and replace them with XXX.XXX.XXX.XXX. It is important that we protect our members right to browse the internet in complete privacy, so use of this perl script is highly encouraged.
To turn on logging, open named.conf.options in your favourite text editor and add the below to the end of the file;
%%
logging {
channel "misc" {
file "/var/log/misc.log" versions 2 size 25M;
severity info; print-severity no;
print-category yes; print-time yes;
};
channel "querylog" {
file "/var/log/named.log" versions 2 size 25M;
severity info; print-severity no;
print-category no; print-time yes;
};
category "queries" { "querylog"; };
category default { "misc"; };
};
%%
Depending on your bind setup(we always recommend chroot), the log dir can live in two locations. In a chroot setup it is at /var/lib/named/var/log and in a normal install it is at /var/log. You know how yours is installed, so go to the log dir, and issue;
%%
touch named.log
chown bind:bind named.log
touch misc.log
chown misc.log
%%
Here is that script that Brianko wrote;
%%
#! /usr/bin/perl
#
# blurAddys.pl - Obfuscate IP addresses in a file
#
# cat some.log | blurAddys.pl > some_blurred.log
#
#####################################################################
use strict;
while(<STDIN>)
{
s/\d{1,3}(\.|-)\d{1,3}(\.|-)\d{1,3}(\.|-)\d{1,3}/XX$1XX$2XX$3XX/g;
print $_;
}
%%
Its easy to add this to a script! Below is what I use;
%%
#!/bin/sh
date=`date +%d`
current=`date +%d%m%y`
if [ "$(echo $date)" = 01 ];then
tar cfvz /var/log/named/named.$current.tar.gz /var/log/named/*.log.*
rm /var/log/named/*.log.*
fi
cat /var/lib/named/var/log/named.log | /usr/local/bin/blurAddys.pl > /var/log/named/named.log.$current
rm /var/lib/named/var/log/named.log
touch /var/lib/named/var/log/named.log
chown bind:bind /var/lib/named/var/log/named.log
/etc/init.d/bind9 restart
%%
I hope that this guide has assisted getting your Tier-1 server ready for your new TLD. Remember to follow the insturctions on creating a new TLD if you have not already had your TLD approved for use within OpenNIC by vote of the membership. [[CreatingNewTLDs Proposing and Creating new TLDs through OpenNIC]]