Bonour à toutes et à tous,
J'ai un soucis de DNS sur Ubuntu 18.04, avec configuraton interface via netplan
Ma config netplan
network:
ethernets:
enp0s3:
addresses:
- 10.0.100.201/29
dhcp4: false
dhcp6: false
nameservers:
search: [chris.lan]
addresses: [10.0.100.201, 8.8.8.8]
ici ma configuration named.conf.options:
acl "trusted" {
10.0.100.201; # ns1 - can be set to localhost
10.0.100.206; # ns2
10.0.10.2; # host1
};
options {
directory "/var/cache/bind";
recursion yes; # enables resursive queries
allow-recursion { trusted; }; # allows recursive queries from "trusted" clients
listen-on { 10.0.100.201; }; # ns1 private IP address - listen on private network only
allow-transfer { none; }; # disable zone transfers by default
forwarders {
8.8.8.8;
# 8.8.4.4;
};
// If there is a firewall between you and nameservers you want
// to talk to, you may need to fix the firewall to allow multiple
// ports to talk. See http://www.kb.cert.org/vuls/id/800113
// If your ISP provided one or more IP addresses for stable
// nameservers, you probably want to use them as forwarders.
// Uncomment the following block, and insert the addresses replacing
// the all-0's placeholder.
# // forwarders {
# // 0.0.0.0;
# // };
//========================================================================
// If BIND logs error messages about the root key being expired,
// If there is a firewall between you and nameservers you want
// to talk to, you may need to fix the firewall to allow multiple
// ports to talk. See http://www.kb.cert.org/vuls/id/800113
// If your ISP provided one or more IP addresses for stable
// nameservers, you probably want to use them as forwarders.
// Uncomment the following block, and insert the addresses replacing
// the all-0's placeholder.
# // forwarders {
# // 0.0.0.0;
# // };
//========================================================================
// If BIND logs error messages about the root key being expired,
// you will need to update your keys. See https://www.isc.org/bind-keys
//========================================================================
dnssec-validation auto;
auth-nxdomain no; # conform to RFC1035
listen-on-v6 { any; };
};
et ici ma configuration dans /etc/bind/zones/db.chris.lan
;
; BIND data file for local loopback interface
;
$TTL 604800
@ IN SOA ns1.chris.lan. admin.chris.lan. (
3 ; Serial
604800 ; Refresh
86400 ; Retry
2419200 ; Expire
604800 ) ; Negative Cache TTL
;
IN NS ns1.chris.lan.
IN NS ns2.chris.lan.
ns1.chris.lan. IN A 10.0.100.201
ns2.chris.lan. IN A 10.0.200.206
host1.chris.lan IN A 10.0.10.2
et ma configuration named.conf.local
//
// Do any local configuration here
//
// Consider adding the 1918 zones here, if they are not used in your
// organization
//include "/etc/bind/zones.rfc1918";
zone "chris.lan" {
type master;
file "/etc/bind/zones/db.nyc3.example.com"; # zone file path
allow-transfer { 10.0.100.206; }; # ns2 private IP address - secondary
};
voila une fois le serveur bind9 restart si j'édite la commande named-checkconf je n'ai aucune sortie
losque j'édite la commande named-checkzone chris.lan db.chris.lan, voici la sortie de commande:
named-checkzone chris.lan db.chris.lan
zone chris.lan/IN: loaded serial 3
OK
maintenant le problème est ici lorsque je fais un nslookup ns1.chris.lan la sortie est:
nslookup ns1.chris.lan
Server: 8.8.8.8
Address: 8.8.8.8#53
** server can't find ns1.chris.lan: NXDOMAIN
Voila sortie identique avec la commande nslookup chris.lan, je ne sais pas où j'ai fait une erreur en attendant je suis bloqué un peut de lumière m'avancerais, merci par avance
