DNS Setup - Network Administration - Lecture Slides, Slides of Network and System Administration

Download DNS Setup - Network Administration - Lecture Slides and more Slides Network and System Administration in PDF only on Docsity!

DNS Setup

DNS CONFIGURATION

DNS Configuration

DNS Setup

named daemon is used

A DNS Server may be caching/master/slave server

The named.ca file has information of all Root Servers.

There is a Forward Zone file and a Reverse Zone file for every domain.

Configuration file:

/var/named/chroot/etc/named.conf

Forward Zone File:

/var/named/chroot/var/named/<forward_zone_file>

Reverse Zone File:

/var/named/chroot/var/named/<reverse_zone_file> Docsity.com

Sample Forward Zone File

DNS Setup

$TTL 86400 @ IN SOA ns1.iitk.ac.in. root.ns1.iitk.ac.in. ( 200605091 ; Serial 10800 ; Refresh - 3 hours 3600 ; Retry - 1 hour 1209600 ;Expire - 1 week 43200 ) ; Minimum TTL for negative answers - 12 hours IN NS ns1.iitk.ac.in. IN NS ns2.iitk.ac.in. IN MX 5 mail0.iitk.ac.in. IN MX 10 mail1.iitk.ac.in. IN MX 20 mail2.iitk.ac.in.

$ORIGIN iitk.ac.in. ns1 IN A 203.200.95. mail0 IN A 203.200.95. proxy IN CNAME mail

Sample Reverse Zone File

DNS Setup

$TTL 86400 $ORIGIN 200.203.in-addr.arpa. 95 IN SOA ns1.iitk.ac.in. root.ns1.iitk.ac.in. ( 200605091 ; Serial 10800 ; Refresh - 5 minutes 3600 ; Retry - 1 minute 1209600 ; Expire - 1 weeks 43200 ) ; Minimum TTL for negative answers - 12 hours IN NS ns1.iitk.ac.in. IN NS ns2.iitk.ac.in.

$ORIGIN 95.200.203.in-addr.arpa. ; ; 142 IN PTR ns1.iitk.ac.in. 144 IN PTR mail0.iitk.ac.in.

Test DNS

DNS Setup

nslookup

host

dig

Test your DNS with the following DNS diagnostics web site: dnsstuff.com

Apache Setup

APACHE SETUP

Files used by Apache

Web Server Setup

Configuration file: /etc/httpd/conf/httpd.conf

Log files: /var/log/httpd/access_log and /var/log/httpd/error_log

Modules /etc/httpd/modules

Default Document Root /var/www/html

Default CGI Root /var/www/cgi-bin

Apache Configuration Directives

Web Server Setup

Server Name

Min and Max Servers

Document Root

CGI Enable/Disable User Directory

Directory Index Mime Types

Modules Access Restrictions

Secure Server Virtual Hosting Docsity.com

Virtual Hosting

Web Server Setup

*NameVirtualHost :

*<VirtualHost :80> ServerName server-name DocumentRoot path-to-virtual-document-root

*<VirtualHost :80> ServerName server-name DocumentRoot path-to-virtual-document-root

Squid Setup

SQUID SETUP

Basic Settings

Squid Setup

Edit the /etc/squid/squid.conf file to configure squid

Configuration options:

Disk Cache size and location Authentication

Allowed Hosts Any other access restrictions (sites, content, size, time of access etc.) using ACL

service squid start/stop/restart

Disc Requirements

Squid Setup

Squid makes very heavy use of disc because of heavy read/write in cache

Needs discs with low seek times

SCSI is better

Can spread cache over 2 or more discs

Raid not recommended

Cached data is not critical

Squid.conf Basic Configuration

Squid Setup

cache_dir ufs /var/spool/squid/cache 100 16 256

auth_param basic program /usr/lib/squid/ncsa_auth /etc/shadow

acl sidbiusers proxy_auth required

http_access allow sidbiusers

acl our_network src 172.28.250.0/

http_access allow our_network

(Note: use squid –z for the first time to create the cache directory and its subdirectories)

Sendmail Setup

SENDMAIL SETUP