-
Notifications
You must be signed in to change notification settings - Fork 67
/
Copy path0QuickStart
96 lines (64 loc) · 3.05 KB
/
0QuickStart
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
This guide is for experienced UNIX/Linux/BSD users who just
want to quickly try out MaraDNS
MaraDNS acts as an authoritative DNS server. Recursion is
handled by the included "Deadwood" program.
To try out Deadwood as a recursive nameserver:
* Compile MaraDNS and Deadwood. Type in './configure; make'
in the top-level MaraDNS directory. Note: No need to
compile if you downloaded a binary RPM or Debian package.
* The the file deadwood-{version number}/src/Deadwood and
place it in /usr/local/sbin
* Take the file server/maradns and place it in
/usr/local/sbin
* Take the file tools/duende and place it in
/usr/local/sbin
* Create an empty directory called /etc/maradns
* Create a dwood3rc file. This file only needs to be three
lines long on systems with a /dev/urandom file.
Here is a sample dwood3rc file:
ipv4_bind_addresses = "127.0.0.1"
chroot_dir = "/etc/maradns"
recursive_acl = "127.0.0.1"
This dwood3rc file says that MaraDNS will have the ip
"127.0.0.1" (this is the bind_address), run from the
directory /etc/maradns (the chroot_dir value), and only
allow the ip "127.0.0.1" to make DNS queries (the
recursive_acl value).
* Place the dwood3rc file in the location /etc/dwood3rc on
your system.
* Run Deadwood as a non-daemon:
/usr/local/sbin/Deadwood
Since Deadwood needs to bind to a privileged port (port
53), it needs to start up running as root. Deadwood is
designed with security in mind, and will drop root
privileges before being visible to the public internet.
* Test Deadwood in another window or virtual terminal
dig @127.0.0.1 www.yahoo.com
* In order to make the duende daemonizing tool usable,
create a directory named /etc/maradns/logger/
mkdir /etc/maradns/logger
* If this works, make Deadwood run as a daemon:
/usr/local/sbin/duende /usr/local/sbin/Deadwood
duende is a tool that daemonizes maradns; the daemonizer
is a separate program.
* If this all works, install MaraDNS and Deadwood:
make install
It is also possible to set up the program "maradns" as an
authoritative name server:
* Here is the MaraRC file:
ipv4_bind_addresses = "127.0.0.1"
chroot_dir = "/etc/maradns"
csv2 = {}
csv2["example.com."] = "db.example.com"
* Have a zone file named db.example.com in the chroot_dir
(/etc/maradns above) that looks like this:
example.com. 10.1.2.3
(Yes, experienced DNS admins, you can have SOA, NS, MX,
SRV, and any other kind of DNS data stored in a csv2 zone
file. Read the csv2 man page for details)
* Queries for example.com will resolve to 10.1.2.3
* Any other name.example.com query will return a "this host
does not exist" DNS reply.
Look in doc (in particular, the tutorial), or read the
relevant man pages for more information on how to set up
Deadwood and MaraDNS.