Pro DNS and BIND

Pro DNS and BIND Ron Aitchison Pro DNS and BIND Copyright (c) 2005 by Ron Aitchison All rights reserved. No part of this work may be reproduced or transmitted in any form or by any means, electronic or mechanical, including photocopying, recording, or by any information storage or retrieval system, without the prior written permission of the copyright owner and the publisher. ISBN (pbk): 1-59059-494-0 Library of Congress Cataloging-in-Publication data is available upon request. Printed and bound in the United States of America 9 8 7 6 5 4 3 2 1 Trademarked names may appear in this book. Rather than use a trademark symbol with every occurrence of a trademarked name, we use the names only in an editorial fashion and to the benefit of the trademark owner, with no intention of infringement of the trademark. Lead Editor: Jason Gilmore Technical Reviewer: Brian Wilson Editorial Board: Steve Anglin, Dan Appleman, Ewan Buckingham, Gary Cornell, Tony Davis, Jason Gilmore, Jonathan Hassell, Chris Mills, Dominic Shakeshaft, Jim Sumser Associate Publisher: Grace Wong Project Manager: Kylie Johnston Copy Edit Manager: Nicole LeClerc Copy Editor: Ami Knox, Susannah Pfalzer Assistant Production Director: Kari Brooks-Copony Production Editor: Ellie Fountain Compositor: Linda Weidemann, Wolf Creek Press Proofreader: Linda Seifert Indexer: Valerie Perry Artist: Kinetic Publishing Services, LLC Interior Designer: Van Winkle Design Group Cover Designer: Kurt Krames Manufacturing Manager: Tom Debolski Distributed to the book trade worldwide by Springer-Verlag New York, Inc., 233 Spring Street, 6th Floor, New York, NY 10013. Phone 1-800-SPRINGER, fax 201-348-4505, e-mail orders-ny@springer-sbm.com, or visit http://www.springeronline.com. For information on translations, please contact Apress directly at 2560 Ninth Street, Suite 219, Berkeley, CA 94710. Phone 510-549-5930, fax 510-549-5939, e-mail info@apress.com, or visit http://www.apress.com. The information in this book is distributed on an as is basis, without warranty. Although every precaution has been taken in the preparation of this work, neither the author(s) nor Apress shall have any liability to any person or entity with respect to any loss or damage caused or alleged to be caused directly or indirectly by the information contained in this work. The sample files and source code for this book is available to readers at http://www.apress.com in the Downloads section. Contents at a Glance About the Author ... xxi About the Technical Reviewer ... xxiii Acknowledgments ... xxv Introduction ... xxvii PART 1 Principles and Overview CHAPTER 1 An Introduction to DNS... 3 CHAPTER 2 Zone Files and Resource Records ... 21 CHAPTER 3 DNS Operations... 39 CHAPTER 4 DNS Types... 61 CHAPTER 5 DNS and IPv6... 77 PART 2 Get Something Running CHAPTER 6 Installing BIND... 95 CHAPTER 7 BIND Type Samples ... 121 CHAPTER 8 Common DNS Tasks ... 155 CHAPTER 9 DNS Diagnostics and Tools ... 183 PART 3 DNS Security CHAPTER 10 DNS Secure Configurations ... 235 CHAPTER 11 DNSSEC ... 283 PART 4 Reference CHAPTER 12 BIND Configuration Reference... 331 CHAPTER 13 Zone File Reference ... 405 iv CONTENTS AT A GLANCE v PART 5 Programming CHAPTER 14 BIND APIs and Resolver Libraries... 475 CHAPTER 15 DNS Messages and Records ... 507 PART 6 Appendixes APPENDIX A Domain Name Registration... 533 APPENDIX B DNS RFCs ... 541 INDEX ... 547