{"id":9764,"date":"2019-07-17T09:30:24","date_gmt":"2019-07-17T09:30:24","guid":{"rendered":"http:\/\/blog.bachi.net\/?p=9764"},"modified":"2019-08-06T20:50:41","modified_gmt":"2019-08-06T20:50:41","slug":"freebsd-12-bind-914","status":"publish","type":"post","link":"https:\/\/blog.bachi.net\/?p=9764","title":{"rendered":"FreeBSD 12 & BIND 914"},"content":{"rendered":"

FreeBSD: Install an authoritative DNS server (BIND)<\/a> (with DNSSEC)<\/p>\n

\r\npkg install bind914\r\nUpdating FreeBSD repository catalogue...\r\nFreeBSD repository is up to date.\r\nAll repositories are up to date.\r\nThe following 13 package(s) will be affected (of 0 checked):\r\n\r\nNew packages to be INSTALLED:\r\n        bind914: 9.14.3\r\n        libxml2: 2.9.9\r\n        libidn2: 2.2.0\r\n        libunistring: 0.9.10_1\r\n        bind-tools: 9.14.3\r\n        python36: 3.6.9\r\n        readline: 8.0.0\r\n        libffi: 3.2.1_3\r\n        py36-ply: 3.11\r\n        py36-setuptools: 41.0.1\r\n        libedit: 3.1.20190324,1\r\n        json-c: 0.13.1\r\n        lmdb: 0.9.23,1\r\n[...]\r\nMessage from python36-3.6.9:\r\n\r\n===========================================================================\r\n\r\nNote that some standard Python modules are provided as separate ports\r\nas they require additional dependencies. They are available as:\r\n\r\npy36-gdbm       databases\/py-gdbm@py36\r\npy36-sqlite3    databases\/py-sqlite3@py36\r\npy36-tkinter    x11-toolkits\/py-tkinter@py36\r\n\r\n===========================================================================\r\nMessage from bind914-9.14.3:\r\n\r\nBIND requires configuration of rndc, including a "secret"\r\nkey.  The easiest, and most secure way to configure rndc is\r\nto run 'rndc-confgen -a' to generate the proper conf file,\r\nwith a new random key, and appropriate file permissions.\r\n\r\nThe \/usr\/local\/etc\/rc.d\/named script will do that for you.\r\n\r\nIf using syslog to log the BIND9 activity, and using a\r\nchroot'ed installation, you will need to tell syslog to install\r\na log socket in the BIND9 chroot by running:\r\n\r\n  # sysrc altlog_proglist+=named\r\n\r\nAnd then restarting syslogd with: service syslogd restart\r\n<\/pre>\n
Test \/ Analyzer<\/h3>\n
MX Toolbox – SuperTool<\/a>
\nDNS Checker<\/a>
\nVerisign Labs – DNSSEC Analyzer<\/a><\/p>\n
\r\n$ ls \/usr\/local\/etc\/namedb\r\nnamedb -> \/var\/named\/etc\/namedb\r\n\r\n$ ls -la \/var\/named\r\ndev\r\netc\r\nusr\r\nvar\r\n\r\n$ ls -la \/var\/named\/etc\/namedb\r\nbind.keys\r\ndynamic\r\nmaster\r\nnamed.conf\r\nnamed.root\r\nrndc.key\r\nslave\r\nworking\r\n\r\n$ cat \/etc\/fstab\r\n# Device        Mountpoint      FStype    Options           Dump    Pass#\r\n\/dev\/ada0p2     \/               ufs       rw                1       1\r\n\/dev\/ada0p3     none            swap      sw                0       0\r\n\/dev\/ada0p4     \/var            ufs       rw                2       2\r\n\/dev\/ada0p5     \/tmp            ufs       rw                2       2\r\n\/dev\/ada0p6     \/usr            ufs       rw                2       2\r\nfdesc           \/dev\/fd         fdescfs   rw                0       0\r\ndevfs           \/var\/named\/dev  devfs     rw,ruleset=4      0       0\r\n<\/pre>\n
\r\n$ \/usr\/local\/sbin\/named -fg -t \/var\/named -u bind -c \/usr\/local\/etc\/namedb\/named.conf\r\n<\/pre>\n","protected":false},"excerpt":{"rendered":"
FreeBSD: Install an authoritative DNS server (BIND) (with DNSSEC) pkg install bind914 Updating FreeBSD repository catalogue… FreeBSD repository is up to date. All repositories are up to date. The following 13 package(s) will be affected (of 0 checked): New packages to be INSTALLED: bind914: 9.14.3 libxml2: 2.9.9 libidn2: 2.2.0 libunistring: 0.9.10_1 bind-tools: 9.14.3 python36: 3.6.9 […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-9764","post","type-post","status-publish","format-standard","hentry","category-uncategorized"],"_links":{"self":[{"href":"https:\/\/blog.bachi.net\/index.php?rest_route=\/wp\/v2\/posts\/9764","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blog.bachi.net\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.bachi.net\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.bachi.net\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.bachi.net\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=9764"}],"version-history":[{"count":6,"href":"https:\/\/blog.bachi.net\/index.php?rest_route=\/wp\/v2\/posts\/9764\/revisions"}],"predecessor-version":[{"id":9845,"href":"https:\/\/blog.bachi.net\/index.php?rest_route=\/wp\/v2\/posts\/9764\/revisions\/9845"}],"wp:attachment":[{"href":"https:\/\/blog.bachi.net\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=9764"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.bachi.net\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=9764"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.bachi.net\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=9764"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}