Keith Smith via PLUG-discuss said on Sat, 29 Oct 2022 08:07:03 -0700
>Hi,
>
>For some reason .local popped into my head this morning. From what I
>read it appears I may be able to create an Intranet that has a private
>domain name such as MyBusiness.local, on a private IP, and I am
>thinking I can run BIND and make a zone file for this Intranet.
For the last 20 years the LAN in my house has TLD .cxm. I chose .cxm
specifically because there's no such TLD in the global DNS.
I use unbound instead of bind. The following is my unbound.conf:
##########################################################
### BE SURE to use unbound-checkconf
### before enabling a changed conf file!
#FORWARD-ZONE SECTION!!!!!!!!!!!!!!!!
# The following is how you query google DNS instead of root servers
# I chose to query the root servers and commented it out.
#forward-zone:
#name: "."
#forward-addr: 8.8.8.8
#forward-addr: 8.8.4.4
#REMOTE-CONTROL SECTION!!!!!!!!!!!!!!
# Enable use of unbound-control
# Remote control is very, very useful
# Use judgement re security
# Use doublequotes on filenames, unbound should read them
# from /etc/unbound
# Create keys and certs by running unbound-control-setup
remote-control:
control-enable: yes
control-use-cert: yes
server-key-file: "unbound_server.key"
server-key-file: "unbound_server.key"
server-cert-file: "unbound_server.pem"
control-key-file: "unbound_control.key"
control-cert-file: "unbound_control.pem"
#SERVER SECTION!!!!!!!!!!!!!!!!!!!!!!
server:
use-syslog: yes
# Use 192.168.0.2 so whole WAN can use it
ip-address: 192.168.0.102
# Guard against future default changes: no systemd ever!
use-systemd: no
# Speed UDP
so-reuseport: yes
# use all CPU cores, I have 1 CPU with 2 cores
num-threads: 2
# power of 2 close to num-threads
msg-cache-slabs: 2
rrset-cache-slabs: 2
infra-cache-slabs: 2
key-cache-slabs: 2
# more cache memory, rrset=msg*2
rrset-cache-size: 100m
msg-cache-size: 50m
# more outgoing connections
# depends on number of cores: 1024/cores - 50
outgoing-range: 450
# Larger socket buffer.
# OS may need config, so I don't use it
#so-rcvbuf: 4m
#so-sndbuf: 4m
# Faster UDP with multithreading (only on Linux).
so-reuseport: yes
# ROOT HINTS STUFF TO FIND ROOT DNS SERVERS
# /etc/unbound/root.hints refreshed by following command
# Update every six months
# No (default) or old root-hints make slow lookups
# curl -o /etc/unbound/root.hints \
#
https://www.internic.net/domain/named.cache
root-hints: /etc/unbound/root.hints
### AUTH DNS on subnet, no separate AUTH srvr needed
local-zone: "cxm." static
local-data: "littlinks.cxm. IN A 192.168.0.2"
local-data-ptr: "192.168.0.2 littlinks.cxm"
local-data: "robert.cxm. IN A 192.168.0.2"
local-data-ptr: "192.168.0.2 robert.cxm"
local-data: "litt.cxm. IN A 192.168.0.2"
local-data-ptr: "192.168.0.2 litt.cxm"
local-data: "troubleshooters.cxm. IN A 192.168.0.2"
local-data-ptr: "192.168.0.2 troubleshooters.cxm"
local-zone: "littlinks.cxm." static
local-data: "
www.littlinks.cxm. IN A 192.168.0.2"
local-data-ptr: "192.168.0.2
www.littlinks.cxm"
local-data: "cz3.littlinks.cxm. IN A 192.168.0.2"
local-data-ptr: "192.168.0.2 cz3.littlinks.cxm"
local-data: "stylz.cxm. IN A 192.168.0.2"
local-data-ptr: "192.168.0.2 stylz.cxm"
local-zone: "stylz.cxm." static
local-data: "
www.stylz.cxm. IN A 192.168.0.2"
local-data-ptr: "192.168.0.2
www.stylz.cxm"
local-zone: "troubleshooters.cxm." static
local-data: "
www.troubleshooters.cxm. IN A 192.168.0.2"
local-data-ptr: "192.168.0.2
www.troubleshooters.cxm"
# Other stuff, see
#
https://www.tecmint.com/setup-dns-cache-server-in-centos-7/
# Enable dig command with allow_snoop
#access-control: 0.0.0.0/0 allow_snoop
access-control: 0.0.0.0/0 deny
# access-control: 192.168.0.236/30 allow
access-control: 192.168.0.0/24 allow
access-control: 127.0.0.0/8 allow
local-zone: "168.192.in-addr.arpa." nodefault #FANTASTIC MAGIC!
stub-zone:
name: "mydesk."
stub-addr: 192.168.0.2
stub-zone:
name: "home.lan"
stub-addr: 192.168.0.2
stub-zone:
name: "0.168.192.in-addr.arpa."
stub-addr: 192.168.0.2
##########################################################
The preceding works but I think it has has a lot of unnecessary stuff
and non-customary ways of doing things, but it gives you the flavor of
what I'm doing with .cxm. As long as the global system doesn't contain
a .local, I'm sure you can use .local the same way I use .cxm. I chose
.cxm because it looks a lot like .com. I write technical books and
wanted examples that are glancible but cannot hit real servers on
the Internet.
SteveT
Steve Litt
Summer 2022 featured book: Thriving in Tough Times
http://www.troubleshooters.com/bookstore/thrive.htm
---------------------------------------------------
PLUG-discuss mailing list:
PLUG-discuss@lists.phxlinux.org
To subscribe, unsubscribe, or to change your mail settings:
https://lists.phxlinux.org/mailman/listinfo/plug-discuss
(text/plain)