Rndc; Using Rndc - Red Hat ENTERPRISE LINUX 3 Reference Manual

Chapter 12. Berkeley Internet Name Domain (BIND)
$ORIGIN 1.0.10.in-addr.arpa
$TTL 86400
@ IN SOA
IN NS
IN NS
20 IN PTR
21 IN PTR
22 IN PTR
23 IN PTR
24 IN PTR
25 IN PTR
This zone file would be called into service with a
similar to the following:
zone "1.0.10.in-addr.arpa" IN {
type master;
file "example.com.rr.zone";
allow-update { none; };
};
There is very little difference between this example and a standard
zone name. Note that a reverse name resolution zone requires the first three blocks of the IP address
reversed followed by
name resolution zone file to be associated with the zone.
12.4. Using

rndc

BIND includes a utility called
from the localhost or from a remote host.
In order to prevent unauthorized access to the
thentication method to grant privileges to hosts. This means an identical key must be present in both
/etc/named.conf
12.4.1. Configuring
In order for to connect to a
rndc
server's
/etc/named.conf
The statement, shown in the following example, allows
controls
controls {
inet 127.0.0.1 allow { localhost; } keys {
};
This statement tells
named
commands coming from the localhost, if the proper key is given. The
rndc
a name in the statement within the
key
statement.
key
dns1.example.com.
2001062501 ; serial
21600 ; refresh after 6 hours
3600 ; retry after 1 hour
604800 ; expire after 1 week
86400 ) ; minimum TTL of 1 day
dns1.example.com.
dns2.example.com.
alice.example.com.
betty.example.com.
charlie.example.com.
doug.example.com.
ernest.example.com.
fanny.example.com.
. This allows the single block of IP numbers used in the reverse
.in-addr.arpa
which allows command line administration of the
rndc
and the configuration file,
rndc
/etc/named.conf
named
file.
to listen on the default TCP port 953 of the loopback address and allow
/etc/named.conf
hostmaster.example.com. (
statement in the
zone
daemon, BIND uses a shared secret key au-
named
/etc/rndc.conf
service, there must a
key-name ; };
file. The next example illustrates a sample
file which looks
named.conf
statement, except for the
zone
named
statement in the BIND
controls
to connect from the localhost.
rndc
key-name
193
daemon
specifies