Difference between revisions of "NAD710 Lab 5 Answers"

From CDOT Wiki
Jump to: navigation, search
 
(One intermediate revision by the same user not shown)
Line 25: Line 25:
 
Answer:
 
Answer:
  
 +
*Package bind-utils - Utilities for querying DNS name servers                               
 +
/usr/bin/dig
 +
/usr/bin/host
 +
/usr/bin/nslookup
 +
/usr/bin/nsupdate
 +
 +
*Package bind - Berkeley Internet Name Domain (BIND) DNS (Domain Name System) server
 +
/etc/logrotate.d/named - log file
 +
/usr/sbin/dns-keygen                                                                 
 +
/usr/sbin/dnssec-keygen                                                             
 +
/usr/sbin/dnssec-signzone                                                           
 +
/usr/sbin/lwresd                                                                     
 +
/usr/sbin/named-bootconf                                                             
 +
/usr/sbin/named-checkconf                                                           
 +
/usr/sbin/named-checkzone                                                           
 +
/usr/sbin/named-compilezone                                                         
 +
/usr/sbin/rndc                                                                       
 +
/usr/sbin/rndc-confgen
 +
 +
*Package bind-chroot - A chroot runtime environment for the ISC BIND DNS server
  
  
Line 54: Line 74:
 
server is up and running
 
server is up and running
 
named (pid 13308) is running...
 
named (pid 13308) is running...
 
  
  
Line 68: Line 87:
  
 
   8. The SOA resource record in a zone file contains 5 numbers, what is the usage of the last one?
 
   8. The SOA resource record in a zone file contains 5 numbers, what is the usage of the last one?
Name:
+
Name: Milton Paiva
  
 
Answer:
 
Answer:
 +
 +
''source: DNS and BIND, 5th Edition''
 +
 +
movie.edu. IN SOA toystory.movie.edu. al.movie.edu. (
 +
                          1        ; Serial
 +
                          3h      ; Refresh after 3 hours
 +
                          1h      ; Retry after 1 hour
 +
                          1w      ; Expire after 1 week
 +
                          '''1h )    ; Negative caching TTL of 1 hour'''
 +
 +
This is how long a remote nameserver can cache negative responses about the zone, answers that say that a particular domain name or the type of data sought for a particular domain name doesn't exist.

Latest revision as of 17:27, 6 October 2008

Questions

  1. What is the version number of the installed BIND package?

Name: Mohak Vyas

Answer: The version number of the installed BIND package is 9.5.0-P2. After starting the name server, when you give the command service named status, it prints the version number.


  2. What is bind tool called "named-checkconf" use for?

Name: Nestor the Guy who Paste all the questions...

Answer: The bind tool "Named-checkconf" is to used for checking the syntax of a named configuration file. But it will not check semantics.


  3. What is bind tool called "named-checkzone" use for?

Name: Mohak Vyas

Answer: The zone file should be checked for format consistency. Named-checkzone checks the syntax and integrity on the zone file.


  4. What are the names of all the other tools in the bind package?

Name: Milton Paiva

Answer:

  • Package bind-utils - Utilities for querying DNS name servers
/usr/bin/dig
/usr/bin/host
/usr/bin/nslookup
/usr/bin/nsupdate
  • Package bind - Berkeley Internet Name Domain (BIND) DNS (Domain Name System) server
/etc/logrotate.d/named - log file
/usr/sbin/dns-keygen                                                                  
/usr/sbin/dnssec-keygen                                                               
/usr/sbin/dnssec-signzone                                                             
/usr/sbin/lwresd                                                                      
/usr/sbin/named-bootconf                                                              
/usr/sbin/named-checkconf                                                             
/usr/sbin/named-checkzone                                                             
/usr/sbin/named-compilezone                                                           
/usr/sbin/rndc                                                                        
/usr/sbin/rndc-confgen 
  • Package bind-chroot - A chroot runtime environment for the ISC BIND DNS server


  5. We have used the dig and nslookup bind utilities in this lab, what are the other two bind utilities and what are they for?

Name: Mohak Vyas

Answer: The other two utilities are host and nsupdate.

host: A utility for performing DNS lookups, normally used to convert names to IP address and vice-versa.

nsupdate: A utility to update a DNS zone, adding or deleting any type of DNS record the name server supports.


  6. What is the information provided by the "service named status" command?

Name: Mohak Vyas

Answer:

version: 9.5.0-P2 number of zones: 15 debug level: 0 xfers running: 0 xfers deferred: 0 soa queries in progress: 0 query logging is OFF recursive clients: 0/0/1000 tcp clients: 0/100 server is up and running named (pid 13308) is running...


  7. Will the "version" statement in the "/etc/named.conf" file change the output of the "service named status" command?

Name: Mohak Vyas

Answer: No, it still gives the version number but in version number is shows txt and chaos is disabled.

version: 9.5.0-P2 (version.bind/txt/ch disabled)


  8. The SOA resource record in a zone file contains 5 numbers, what is the usage of the last one?

Name: Milton Paiva

Answer:

source: DNS and BIND, 5th Edition

movie.edu. IN SOA toystory.movie.edu. al.movie.edu. (
                         1        ; Serial
                         3h       ; Refresh after 3 hours
                         1h       ; Retry after 1 hour
                         1w       ; Expire after 1 week
                         1h )     ; Negative caching TTL of 1 hour

This is how long a remote nameserver can cache negative responses about the zone, answers that say that a particular domain name or the type of data sought for a particular domain name doesn't exist.