{"id":26,"date":"2012-01-17T18:48:06","date_gmt":"2012-01-17T18:48:06","guid":{"rendered":"http:\/\/www.linuxauthority.com\/wordpress\/?p=26"},"modified":"2012-03-21T18:25:51","modified_gmt":"2012-03-21T18:25:51","slug":"dns-checlist","status":"publish","type":"post","link":"https:\/\/www.linuxauthority.com\/wordpress\/?p=26","title":{"rendered":"DNS configuration checklist"},"content":{"rendered":"\n<!-- ALL ADSENSE ADS DISABLED -->\n<p>BIND has always been a dark art. Recent configuration nuances made in the name of improving security have made things all the more fun.<\/p>\n<p>Here is a simple checklist that can avoid trouble and downed websites. Note that on RHEL6\/CentOS\/ and clones the \/var\/named\/chroot structure has been made obsolete.<\/p>\n<ul>\n<li>Before starting cp \/etc\/named.conf \/root\u00a0 # pick any location but not \/tmp because Linux cron cleans that up.<\/li>\n<li>After adding new zones, run named-checkconf on your newly edited file. Do NOT edit the original.<\/li>\n<li>Copy the names of new zone files into the named.conf file using cut and paste to avoid spelling errors.<\/li>\n<li>chown named:named &lt;filename&gt; newly created zone files. Failure to do so will result in a completely meaningless and impossible to fathom error message when you restart the named daemon.<\/li>\n<li>Use named-checkzone to check syntax in manually edited zone files. Consider using ISPCONFIG3 GUI to maintain these records.<\/li>\n<li>Use the same back up policy as above for named.conf when working on zone files.<\/li>\n<li>Update serial number in the zone file to insure fast propagation of DNS changes.<\/li>\n<\/ul>\n<p>Follow this simple checklist to avoid a lot of unnecessary pain.<\/p>\n<p>&nbsp;<\/p>\n","protected":false},"excerpt":{"rendered":"<p>BIND has always been a dark art. Recent configuration nuances made in the name of improving security have made things all the more fun. Here is a simple checklist that can avoid trouble and downed websites. Note that on RHEL6\/CentOS\/ and clones the \/var\/named\/chroot structure has been made obsolete. Before starting cp \/etc\/named.conf \/root\u00a0 # [&hellip;]<\/p>\n<a role=\"link\" class=\"rtp-readmore\" title=\"Read more on DNS configuration checklist\" href=\"https:\/\/www.linuxauthority.com\/wordpress\/?p=26\" rel=\"nofollow\">Read More &rarr;<\/a>","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[8,21],"tags":[15,17,16],"class_list":["post-26","post","type-post","status-publish","format-standard","hentry","category-networking","category-systems-administration","tag-bind","tag-checklist","tag-dns"],"_links":{"self":[{"href":"https:\/\/www.linuxauthority.com\/wordpress\/index.php?rest_route=\/wp\/v2\/posts\/26"}],"collection":[{"href":"https:\/\/www.linuxauthority.com\/wordpress\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.linuxauthority.com\/wordpress\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.linuxauthority.com\/wordpress\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.linuxauthority.com\/wordpress\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=26"}],"version-history":[{"count":4,"href":"https:\/\/www.linuxauthority.com\/wordpress\/index.php?rest_route=\/wp\/v2\/posts\/26\/revisions"}],"predecessor-version":[{"id":39,"href":"https:\/\/www.linuxauthority.com\/wordpress\/index.php?rest_route=\/wp\/v2\/posts\/26\/revisions\/39"}],"wp:attachment":[{"href":"https:\/\/www.linuxauthority.com\/wordpress\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=26"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.linuxauthority.com\/wordpress\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=26"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.linuxauthority.com\/wordpress\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=26"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}