// This settings is only for forwarding DNS Server
options {
        pid-file "/var/run/named/named.pid"; 
        forward only;            //u\ forward!
        forwarders {
                168.95.1.1;      //ڳǫϥ hinet  DNS I
                139.175.10.20;   //oӬO seednet  DNS I
        };
}; 
// ڳo̦]w pid-file AҥHonSO`NFI] pid-file 
// ҦbؿUA]NO /var/run/named ؿAڪ bind 
// ɵ{Ǫ֦H( `ӬO name oӨϥΪ )n
// gJI]NOA /var/run/named  owner 
// O named o user ~I 

[root@test root]# ls -al /var/run/named
total 12
drwxr-xr-x    2 named    named        4096 Dec  5 02:28 ./  
drwxr-xr-x   10 root     root         4096 Dec  5 02:01 ../
# `NW ./ ؿ̡֦I

[root@test root]# /etc/rc.d/init.d/named start
Starting named:                                        [  OK  ]

[root@test root]# netstat -utln
Active Internet connections (only servers)
Proto Recv-Q Send-Q Local Address        Foreign Address     State
tcp        0      0 192.168.1.2:53       0.0.0.0:*           LISTEN
tcp        0      0 127.0.0.1:53         0.0.0.0:*           LISTEN
udp        0      0 192.168.1.2:53       0.0.0.0:*
udp        0      0 127.0.0.1:53         0.0.0.0:*

[root@test root]# tail -n 15 /var/log/messages | grep named
Dec  5 02:33:33 test named[3010]: starting BIND 9.2.1 -u named
Dec  5 02:33:33 test named[3010]: using 1 CPU
Dec  5 02:33:33 test named[3015]: loading configuration from 
'/etc/named.conf'
Dec  5 02:33:33 test named[3015]: no IPv6 interfaces found
Dec  5 02:33:33 test named[3015]: listening on IPv4 interface lo, 
127.0.0.1#53
Dec  5 02:33:33 test named[3015]: listening on IPv4 interface eth0, 
192.168.1.2#53
Dec  5 02:33:33 test named[3015]: running
Dec  5 02:33:33 test named: named startup succeeded

[root@test root]# vi /etc/named.conf
// ]w骺DWIIb directory NqI
options {
        directory "/var/named"; 
//oӬObWwyڪϸɮשmؿz
        forwarders {
                168.95.1.1;     
//ޫ򻡡AʹNOw forwarder ]w
        };
        pid-file "/var/run/named/named.pid"; //CӪiೣPI
        allow-query { any; };    //O_\LHdߡHMաI
        allow-transfer { none; };
};    //Woӳ]wءADnw Master/Slave [cA
      //YO_\Ӧ slave ݪnDӴѾ zone ǰeI
      //~ӥѩ@ǦwʪDAҥHAo̧ڭ̫ijNL]w none 

// wqX . (root) o hint type ɮפeI
zone "." {                   //ݨFSIHoӴNOҿת zone աI
        type hint;           //ܪ type  hint (root . M)
        file "named.root";   //]wɮתɦWIw] named.root
};                           //ɭԤ]iO named.ca I

// AӫhOwqX localhost ϸѤFI²աINO 127.0.0.1 Ӥw
zone "localhost" {              //o zone ܳ]wɪw] domain
           //name  localhost NIo̽СySOzdMI
        type master;            //Dnb]wɡI
        file "named.localhost"; //ɦWIiHHۤvHKI
};
zone "0.0.127.in-addr.arpa" {  //ϸѪ IP qI in-addr.arpa O
                               //Tw IP qgkI
        type master;
        file "named.127.0.0";
};

// wqXڦۤvo@եϸѳ]wI
zone "vbird.tw" {            //ڪ zone  domain name  vbird.tw
        type master;
        file "named.vbird.tw";
};
zone "1.168.192.in-addr.arpa" {
        type master;
        file "named.192.168.1";
};

[root@test root]# ftp rs.internic.net
Connected to rs.internic.net.
Name (rs.internic.net:root): anonymous
331 Guest login ok, send your complete e-mail address as password.
Password: <==your password
230 User ftp logged in.  Access restrictions apply.
Remote system type is UNIX.
Using binary mode to transfer files.
ftp> cd domain
ftp> get named.root
ftp> bye

[root@test root]# vi named.root
; pAvŧiٲ
;
; formerly NS.INTERNIC.NET
;
.                        3600000  IN  NS    A.ROOT-SERVERS.NET.
A.ROOT-SERVERS.NET.      3600000      A     198.41.0.4
;
; formerly NS1.ISI.EDU
;
.                        3600000      NS    B.ROOT-SERVERS.NET.
B.ROOT-SERVERS.NET.      3600000      A     128.9.0.107
;
; formerly C.PSI.NET
;
; HUٲ

[root@test root]# cd /var/named
[root@test named]# vi named.localhost
$TTL    600                 ; oӸM cache ɶYIOI
@       IN      SOA     localhost.      root.localhost. (
                2002120601  ; Serial  P master  slave O_PBI
                     ; @ӨApGoӼƭܤjFA slave ~|PBsI
                28800       ; Refresh wqX slave h[|Dʪˬd serial 
                     ; ȡAHKDʪsƮwI
                14400   ; Retry   wqXApG slave SsW master DNS 
                     ; Dhh[|sADˬdI
                720000      ; Expire  pG@SsW mater AF
                     ; oӮɭslave N|ˬdʧ@FAAsI
                86400 )     ; Minimum oӨNO TTL աIpGzSwq 
                     ; TTL A TTL ȴNHoӨӳ]wI
; }l]wѪTeG
@               IN      NS      localhost. ; SOdN̫᭱ . I
localhost.      IN      A       127.0.0.1  
; A OѸ̭ hostname  IP лx

[root@test root]# cd /var/named
[root@test named]# vi named.127.0.0  
# oɮצW٬Ob /etc/named.conf ̭]w
$TTL    600
; This is about DNS server's settings
@       IN      SOA     localhost.      root.localhost. (
                2002120601      ; Serial
                28800           ; Refresh
                14400           ; Retry
                720000          ; Expire
                86400 )         ; Minimum
; The server's infomations
@               IN      NS      localhost.
1               IN      PTR     localhost.

[root@test root]# cd /var/named
[root@test named]# vi named.vbird.tw
# oɮצW٬Ob /etc/named.conf ̭]w
$TTL    600
; W쪺@ˡA]wD@ǰ򥻸TI
@       IN      SOA     mdk.vbird.tw.        root.mdk.vbird.tw.   (
                        2004102901      ; Serial
                        28800           ; Refresh
                        14400           ; Retry
                        720000          ; Expire
                        86400   )       ; minimum
; D]wѼƳ
@               IN      NS      mdk.vbird.tw.@
; o zone (vbird.tw) D
@               IN      MX 10   mdk.vbird.tw.@
; l໼DnlDI
mdk             IN      A       192.168.1.2
mdk             IN      TXT     "The testing DNS server"@
; ȬO
phorum          IN      CNAME   mdk@@@@@@
;`NoPU@檺gkI
www             IN      CNAME   mdk.vbird.tw.
; LD]wTW
win2k           IN      A       192.168.1.100
win2k           IN      HINFO   "AMD-K6-III""Windows 2000"
winxp           IN      A       192.168.1.200

[root@test root]# cd /var/named
[root@test named]# vi named.192.168.1
# oɮצW٬Ob /etc/named.conf ̭]w
$TTL    600
@       IN      SOA     mdk.vbird.tw.        root.mdk.vbird.tw.   (
                        2004102901      ; Serial
                        28800           ; Refresh
                        14400           ; Retry
                        720000          ; Expire
                        86400   )       ; minimum
; LDTI
@       IN      NS      mdk.vbird.tw.
2       IN      PTR     mdk.vbird.tw.
; The following is about other hosts
100     IN      PTR     win2k.vbird.tw.
200     IN      PTR     winxp.vbird.tw.

1. }lҰʡI
[root@test root]# /etc/rc.d/init.d/named start
Starting named:                  [  OK  ]

2.  port [G
[root@test root]# netstat -tuln | grep 53
tcp        0      0 192.168.1.2:53          0.0.0.0:*               LISTEN
tcp        0      0 127.0.0.1:53            0.0.0.0:*               LISTEN
udp        0      0 192.168.1.2:53          0.0.0.0:*
udp        0      0 127.0.0.1:53            0.0.0.0:*

3. TeI
[root@test root]# tail -n 15 /var/log/messages
Oct 29 17:30:33 test named[27159]: using 1 CPU
Oct 29 17:30:33 test named[27159]: loading configuration from 
'/etc/named.conf'
Oct 29 17:30:33 test named[27159]: listening on IPv4 interface 
lo, 127.0.0.1#53
Oct 29 17:30:33 test named[27159]: listening on IPv4 interface 
eth0, 192.168.1.2#53
Oct 29 17:30:33 test named[27159]: zone 0.0.127.in-addr.arpa/IN: 
loaded serial 2002120601
Oct 29 17:30:33 test named[27159]: zone 1.168.192.in-addr.arpa/IN: 
loaded serial 2004102901
Oct 29 17:30:33 test named[27159]: zone localhost/IN: loaded serial 
2002120601
Oct 29 17:30:33 test named[27159]: zone vbird.tw/IN: loaded serial 
2004102901
Oct 29 17:30:33 test named[27159]: running
Oct 29 17:30:33 test named[27159]: zone vbird.tw/IN: sending notifies 
(serial 2004102901)
Oct 29 17:30:33 test named: named start succeeded

Dec 10 11:34:21 test named[31185]: /etc/named.conf:18: missing ';' 
before '}'
Dec 10 11:34:21 test named[31185]: loading configuration: failure
Dec 10 11:34:21 test named[31185]: exiting (due to fatal error)
# o˪~NOoͦb /etc/named.conf a 18 AѰO[W ; 
# ŸFIhץYiI

Dec 10 11:37:20 test named[31236]: dns_rdata_fromtext: 
named.localhost:9: near eol: unexpected end of input
Dec 10 11:37:20 test named[31236]: zone localhost/IN: 
loading master file named.localhost: unexpected end of input
# o˪~q`NOoͦb named.localhost  9 BAhץݬݡA
# q`beXܦiO SOA ᭱ӼƦrSg]I

Dec 10 11:42:28 test named[31338]: dns_master_load: 
named.localhost:14: unexpected end of line
Dec 10 11:42:28 test named[31338]: dns_master_load: 
named.localhost:13: unexpected end of input
Dec 10 11:42:28 test named[31338]: zone localhost/IN: 
loading master file named.localhost: unexpected end of input
# P˪AiDzbɮ named.localhost DIЬdҡI

....()....
zone "vbird.tw" {
        type master;
        file "named.vbird.tw";
        allow-transfer { 192.168.1.21; };
};
zone "1.168.192.in-addr.arpa" {
        type master;
        file "named.192.168.1";
        allow-transfer { 192.168.1.21; };
};
....()....

[root@test2 root]# vi /etc/named.conf
....()....
zone "vbird.tw" {
        type slave;
        file "named.vbird.tw";
        masters { 192.168.1.2; };
};
zone "1.168.192.in-addr.arpa" {
        type slave;
        file "named.192.168.1";
        masters { 192.168.1.2; };
};
....()....

[root@test root]# cd /var/named
[root@test named]# vi named.vbird.tw
# AAoɮצW٬Ob /etc/named.conf ̭]w
$TTL    600
@       IN      SOA     mdk.vbird.tw.        root.mdk.vbird.tw.   (
                        2004100601      ; Serial
                        28800           ; Refresh
                        14400           ; Retry
                        720000          ; Expire
                        86400   )       ; minimum
; D]wѼƳ
@                  IN      NS      mdk.vbird.tw.
@                  IN      MX 10   mdk.vbird.tw.
mdk                IN      A       192.168.1.2
mdk                IN      TXT     "The testing DNS server"
phorum             IN      CNAME   mdk
www                IN      CNAME   mdk.vbird.tw.
; lΥXhLD޲zҤlI
win2k.vbird.tw.    IN      NS      win2k.vbird.tw.
win2k              IN      A       192.168.1.100
; WLD]wT譱
winxp              IN      A       192.168.1.200

[root@test root]# mkdir -p /var/named/keys; cd /var/named/keys
[root@test keys]# dnssec-keygen -a HMAC-MD5 -b 128 -n HOST web
# -a [KXtk]GoӰѼƫ᭱iHXؤPKXt觋A
#                    ]A RSAMD5, RSA, DSA, DH P HMAC-MD5 A
#                    bo̡AڪϥΤ`Ϊ HMAC-MD5 oӺtk
# -b [[K줸]  G[KKXפ]OiHIڥu 128 줸ӤwC
# -n [֦]    Go Key O Client Ψӧ@ HOST sΪ̬O 
#                    ZONE sH@ӻAڭ̶Ȥ\ΤݧsLۤv
#                    DAҥHun HOST vNnFI
# name             G̫ᵹo Key @ӦW١Aڳo̱No Key 
#                    W٭q web
Kweb.+157+29323
[root@test keys]# ls -l
total 8
-rw-------  1 root root 47 Oct 31 20:09 Kweb.+157+29323.key
-rw-------  1 root root 81 Oct 31 20:09 Kweb.+157+29323.private
# ̫|ͨɮסAOO Kxxx.key  Kxxx.privateA
# 𫟺A .key ODnΨӧ@ DDNS Dݳ]w_Ao Key e
# |Qƻs /etc/named.conf ̭i]wI
[root@test keys]# more Kweb.+157+29323.key
web. IN KEY 512 3 157 gxHUFoGGRE91YyAVuMBh+Q==
# SO`NAWXSr餤ANO Key eI
# oǸƬOgL[KA̫|Qƻs /etc/named.conf ̭I

[root@test keys]# vi /etc/named.conf
....()....
key "web" {
	algorithm hmac-md5;
	secret "gxHUFoGGRE91YyAVuMBh+Q==";
};
zone "vbird.tw" {
        type master;
        file "named.vbird.tw";
        update-policy {
                grant web name web.vbird.tw. A;
        };
};
....()....
# `NWY gran web name web.vbird.tw. A; @A
# gran ᭱NO key W١A]NOAڳo web  key 
# bo zone (vbird.tw) ̭iHקDW web.vbird.tw 
#  A лxAYOקD IP աIyk]NOG
# gran [key_name] name [hostname] 
# ]NOAڪ@ key iHhvIݱzpWdFC

[root@test keys]# mkdir /usr/local/ddns; cd /usr/local/ddns
# ]ɱzwgNɮ׵Lƻs즹ؿUFI
[root@test keys]# nsupdate -k Kweb.+157+29323.key
> server 192.168.1.2
> update delete web.vbird.tw
> update add web.vbird.tw 0 A 192.168.1.222
> send  ̫bU [ctrl]+D Yi
# Ъ`N update add web.vbird.tw 0 A 192.168.1.222 oA
# LNqOAsW@ơA ttl O 0 A A ҡA
#  192.168.1.222 N
# ܩ nsupdate -k ᭱[hOڭ̦b Server ݲͪ key ɮסI

[root@test root]# vi /usr/local/ddns/ddns_update.sh
#!/bin/bash
#
# Update your Dynamic IP by using BIND 9 's tools
#
###############################################
# History
# 2004/10/27    VBird   First time release
#
##############################################
PATH=/sbin:/bin:/usr/sbin:/usr/bin
export PATH

# 0. keyin your parameters
basedir="/usr/local/ddns"                # working directory
keyfile="$basedir"/"Kweb.+157+29323.key" # your ddns' key (filename)
ttl=600                                  # the ttl time ( 10 min. )
outif="ppp0"                             # Your interface (to internet)
hostname="web.vbird.tw"                  # Your hostname
servername="192.168.1.2"                 # The primary DNS server

# Get your new IP
newip=`ifconfig "$outif" | grep 'inet addr' | \
        awk '{print $2}' | sed -e "s/addr\://"`
checkip=`echo $newip | grep "^[0-9]"`
if [ "$checkip" == "" ]; then
        echo "$0: The interface can't connect internet...."
        exit 1
fi

# create the temporal file
tmpfile=$basedir/tmp.txt
cd $basedir
echo "server $servername"                       >  $tmpfile
echo "update delete $hostname A "               >> $tmpfile
echo "update add    $hostname $ttl A $newip"    >> $tmpfile
echo "send"                                     >> $tmpfile

# send your IP to server
nsupdate -k $keyfile -v $tmpfile