Saturday, 10 August 2013

Dynamic DNS only for internal network with BIND9 and ISC-DHCP-Server

Dynamic DNS only for internal network with BIND9 and ISC-DHCP-Server

We would like to set up Dynamic DNS using BIND9 and the ISC DHCP Server.
Everything is ok for the all the forward lookup zones. But we just want
the reverse zone to be updated and some aspects of the forward lookup
zone.
As example: we have an private network in the 10.0.0.0/8 range and would
like that only the DNS names linked to this IP range be updated. Our real
IP address should not be changed due client or DHCP requests.
Here are some configuration snippets that we use:
/etc/dhcp/dhcpd.conf
ddns-updates on;
ddns-update-style interim;
ignore client-updates;
update-static-leases off;
key DHCP_UPDATER {
algorithm hmac-md5;
secret oursupersecretkey;
}
zone real.internet.domain.com. {
primary xxx.yyy.zzz.1;
key DHCP_UPDATER;
}
zone 0.0.10.in-addr.arpa. {
primary xxx.yyy.zzz.1;
key DHCP_UPDATER;
}
zone zzz.yyy.xxx.in-addr.arpa. {
primary xxx.yyy.zzz.1;
key DHCP_UPDATER;
}
/etc/bind/named.conf.local
key DHCP_UPDATER {
algorithm hmac-md5;
secret oursupersecretkey;
}
zone "real.internet.domain.com" {
type master;
file "/var/lib/bind/real.internet.domain.com.db";
notify yes;
check-names ignore;
allow-transfer {
intnameservers;
extnameservers;
};
allow-update {
# key "DHCP_UPDATER";
domaincontrollers;
};
};
zone "0.0.10.in-addr.arpa" {
type master;
file "/var/lib/bind/10.0.0.rev";
notify no;
check-names ignore;
allow-transfer {
intnameservers;
};
allow-update { key "DHCP_UPDATER"; };
};
zone "zzz.yyy.xxx.in-addr.arpa" {
type master;
file "/var/lib/bind/xxx.yyy.zzz.rev";
notify yes;
check-names ignore;
allow-transfer {
intnameservers;
extnameservers;
};
# allow-update { key "DHCP_UPDATER"; };
};
Thanks in advance,

No comments:

Post a Comment