Alright, Here is where I went. Instead of changing my current DNS setup to allow for web traffic to different zones.
I've decided to run Bind9 on a second server. I've configured bind9 as Authoritative for the express purpose of resolving incoming HTTP/ HTTPS/ FTP/ names to the correct httpd/vsftpd host.
Bind9 is running and I have recursion restricted to the localhost and dig shows that It's working properly.
Returns satisfactory results.
I'm still having resolution problems to my local hosts.
DNS Server IP: 192.168.10.3
Domain name:
http://www.nbseven.info --> 192.168.10.3
Domain name:
http://www.josephmurphy.online --> 192.168.1.14
Domain name: ftp.sqeely.club --> 192.168.1.14
the /etc/named.conf file:
Code: Select all
[root@svr2 ~]# cat /etc/named.conf
//
// named.conf
//
// Provided by Red Hat bind package to configure the ISC BIND named(8) DNS
// server as a caching only nameserver (as a localhost DNS resolver only).
//
// See /usr/share/doc/bind*/sample/ for example named configuration files.
//
acl "allowed-queries" {
any;
};
acl "allowed-recursion" {
127.0.0.1;
::1;
};
options {
listen-on port 53 { any; };
listen-on-v6 port 53 { any; };
directory "/var/named";
dump-file "/var/named/data/cache_dump.db";
statistics-file "/var/named/data/named_stats.txt";
memstatistics-file "/var/named/data/named_mem_stats.txt";
allow-query { "allowed-queries"; };
recursion yes;
allow-recursion { "allowed-recursion"; };
dnssec-enable yes;
dnssec-validation yes;
/* Path to ISC DLV key */
bindkeys-file "/etc/named.iscdlv.key";
managed-keys-directory "/var/named/dynamic";
};
logging {
channel default_debug {
file "data/named.run";
severity dynamic;
};
};
zone "." IN {
type hint;
file "named.ca";
};
include "/etc/named.rfc1912.zones";
include "/etc/named.root.key";
include "/etc/zones.conf";
the /etc/zones.conf:
Code: Select all
[root@svr2 ~]# cat /etc/named.conf
//
// named.conf
//
// Provided by Red Hat bind package to configure the ISC BIND named(8) DNS
// server as a caching only nameserver (as a localhost DNS resolver only).
//
// See /usr/share/doc/bind*/sample/ for example named configuration files.
//
acl "allowed-queries" {
any;
};
acl "allowed-recursion" {
127.0.0.1;
::1;
};
options {
listen-on port 53 { any; };
listen-on-v6 port 53 { any; };
directory "/var/named";
dump-file "/var/named/data/cache_dump.db";
statistics-file "/var/named/data/named_stats.txt";
memstatistics-file "/var/named/data/named_mem_stats.txt";
allow-query { "allowed-queries"; };
recursion yes;
allow-recursion { "allowed-recursion"; };
dnssec-enable yes;
dnssec-validation yes;
/* Path to ISC DLV key */
bindkeys-file "/etc/named.iscdlv.key";
managed-keys-directory "/var/named/dynamic";
};
logging {
channel default_debug {
file "data/named.run";
severity dynamic;
};
};
zone "." IN {
type hint;
file "named.ca";
};
include "/etc/named.rfc1912.zones";
include "/etc/named.root.key";
include "/etc/zones.conf";
[root@svr2 ~]# cat /etc/zones.conf
zone "nbseven.info" in {
type master;
file "fwd-zones/nbseven.info.zone";
allow-transfer { none; };
};
zone "josephmurphy.online" in {
type master;
file "fwd-zones/josephmurphy.online.zone";
allow-transfer { none; };
};
zone "sqeely.club" in {
type master;
file "fwd-zones/sqeely.club.zone";
allow-transfer { none; };
};
/var/named/fwd-zones/nbseven.info.zone
Code: Select all
[root@svr2 ~]# cat /var/named/fwd-zones/nbseven.info.zone
; zone file for nbseven.info
$TTL 14400
$ORIGIN nbseven.info.
@ IN SOA svr2.nbseven.info. root.nbseven.info. (
2017051400
12h
15m
3w
3h
)
@ IN NS svr2.nbseven.info.
www IN A 127.0.0.1
/var/named/fwd-zones/josephmurphy.online.zone
Code: Select all
[root@svr2 ~]# cat /var/named/fwd-zones/josephmurphy.online.zone
; zone file for josephmurphy.online
$TTL 14400
$ORIGIN josephmurphy.online.
;; SOA Resource Record
@ IN SOA svr2.nbseven.info. hostmaster.nbseven.info. (
2017051400
12h
15m
3w
3h
)
;; Name Servers
@ IN NS svr2.nbseven.info.
www IN A 192.168.1.14
/var/named/fwd-zones/sqeely.club.zone
Code: Select all
[root@svr2 ~]# cat /var/named/fwd-zones/sqeely.club.zone
; zone file for sqeely.club
$TTL 14400
$ORIGIN sqeely.club.
;; SOA Resource Record
@ IN SOA svr2.nbseven.info. hostmaster.nbseven.info. (
2017051400
12h
15m
3w
3h
)
;; Name Servers
@ IN NS svr2.nbseven.info.
ftp IN A 192.168.1.14
I kept the whole thing very basic. Once I get the configuration working, I can add more function.
I know I'm close, but missing something small. What do you guys think?
thank for the help any input is appreciated.