| 1 | BIND LOGGING (BITACORA) |
|---|
| 2 | ----------------------- |
|---|
| 3 | |
|---|
| 4 | Por defecto, los logs de named se envan a /var/log/messages via Syslog |
|---|
| 5 | |
|---|
| 6 | Configuremos BIND para que haga logging de manera ms detallada. |
|---|
| 7 | |
|---|
| 8 | En AUTH1 (auth1.grpX): |
|---|
| 9 | |
|---|
| 10 | 1. Cree el directorio log: |
|---|
| 11 | |
|---|
| 12 | # mkdir -p /etc/namedb/log |
|---|
| 13 | # chown bind /etc/namedb/log |
|---|
| 14 | |
|---|
| 15 | 2. Edite /etc/rc.conf, y active named (BIND), en caso de que no lo haya |
|---|
| 16 | hecho ya: |
|---|
| 17 | |
|---|
| 18 | # ee /etc/rc.conf |
|---|
| 19 | |
|---|
| 20 | named_chrootdir="" |
|---|
| 21 | named_enable="YES" |
|---|
| 22 | |
|---|
| 23 | Guarde el fichero y salga |
|---|
| 24 | |
|---|
| 25 | 3. Edite /etc/namedb/named.conf |
|---|
| 26 | |
|---|
| 27 | En la seccin "options", busque y *ELIMINE* la lnea "listen-on": |
|---|
| 28 | |
|---|
| 29 | |
|---|
| 30 | options { |
|---|
| 31 | ... |
|---|
| 32 | listen-on { 127.0.0.1; }; // <- borre esta lnea! |
|---|
| 33 | ... |
|---|
| 34 | }; |
|---|
| 35 | |
|---|
| 36 | |
|---|
| 37 | Ahora vaya al final del fichero, y cree la seccin "logging": |
|---|
| 38 | |
|---|
| 39 | // - - - - - - - - - - - - - - - corte abajo - - - - - - - - - - - - - - - |
|---|
| 40 | |
|---|
| 41 | logging { |
|---|
| 42 | // Channels |
|---|
| 43 | |
|---|
| 44 | channel transfers { |
|---|
| 45 | file "/etc/namedb/log/transfers" versions 3 size 10M; |
|---|
| 46 | print-time yes; |
|---|
| 47 | severity info; |
|---|
| 48 | }; |
|---|
| 49 | channel notify { |
|---|
| 50 | file "/etc/namedb/log/notify" versions 3 size 10M; |
|---|
| 51 | print-time yes; |
|---|
| 52 | severity info; |
|---|
| 53 | }; |
|---|
| 54 | channel dnssec { |
|---|
| 55 | file "/etc/namedb/log/dnssec" versions 3 size 10M; |
|---|
| 56 | print-time yes; |
|---|
| 57 | severity info; |
|---|
| 58 | }; |
|---|
| 59 | channel query { |
|---|
| 60 | file "/etc/namedb/log/query" versions 5 size 10M; |
|---|
| 61 | print-time yes; |
|---|
| 62 | severity info; |
|---|
| 63 | }; |
|---|
| 64 | channel general { |
|---|
| 65 | file "/etc/namedb/log/general" versions 3 size 10M; |
|---|
| 66 | print-time yes; |
|---|
| 67 | severity info; |
|---|
| 68 | }; |
|---|
| 69 | |
|---|
| 70 | // Categories |
|---|
| 71 | |
|---|
| 72 | category xfer-out { transfers; }; |
|---|
| 73 | category xfer-in { transfers; }; |
|---|
| 74 | category notify { notify; }; |
|---|
| 75 | |
|---|
| 76 | category lame-servers { general; }; |
|---|
| 77 | category config { general; }; |
|---|
| 78 | category default { general; }; |
|---|
| 79 | category security { general; }; |
|---|
| 80 | category dnssec { dnssec; }; |
|---|
| 81 | |
|---|
| 82 | // category queries { query; }; |
|---|
| 83 | |
|---|
| 84 | }; |
|---|
| 85 | |
|---|
| 86 | // - - - - - - - - - - - - - - - corte arriba - - - - - - - - - - - - - - - |
|---|
| 87 | |
|---|
| 88 | |
|---|
| 89 | Guarde el fichero, y PRUEBE que funciona: |
|---|
| 90 | |
|---|
| 91 | # named-checkconf /etc/namedb/named.conf |
|---|
| 92 | |
|---|
| 93 | Note note que la cateogora "queries" est comentada. Esto es a propsito |
|---|
| 94 | ya que en muchos servidores, este fichero podra llenarse muy rpidamente. |
|---|
| 95 | |
|---|
| 96 | 4. Ahora recargue o reinicie BIND: |
|---|
| 97 | |
|---|
| 98 | # rndc reconfig |
|---|
| 99 | |
|---|
| 100 | - Busque en /etc/namedb/log/, y compruebe que los ficheros se hayan |
|---|
| 101 | creado. |
|---|
| 102 | |
|---|
| 103 | Si no funciona: |
|---|
| 104 | |
|---|
| 105 | - revise los permisos en /etc/namedb/log |
|---|
| 106 | - reinicie named (/etc/rc.d/named restart) |
|---|
| 107 | |
|---|
| 108 | 5. Haga una transferencia de su propio dominio: |
|---|
| 109 | |
|---|
| 110 | # dig @auth1.grpX.ws.nsrc.org AXFR MITLD |
|---|
| 111 | ... |
|---|
| 112 | |
|---|
| 113 | - Verifique que hay un mensaje sobre la transferencia en |
|---|
| 114 | /etc/namedb/log/transfers: |
|---|
| 115 | |
|---|
| 116 | 17-Feb-2011 11:18:15.331 client 127.0.0.1#61235: transfer of 'MITLD/IN': AXFR started |
|---|
| 117 | 17-Feb-2011 11:18:15.331 client 127.0.0.1#61235: transfer of 'MITLD/IN': AXFR ended |
|---|
| 118 | |
|---|
| 119 | 6. Actualice el nmero de serie en su zona: |
|---|
| 120 | |
|---|
| 121 | # vi /etc/namedb/master/MITLD |
|---|
| 122 | |
|---|
| 123 | Incremente el nmero en 1 y guarde el fichero. |
|---|
| 124 | |
|---|
| 125 | # rndc reload MITLD |
|---|
| 126 | |
|---|
| 127 | En el log de notify debera haber una lnea como la siguiente: |
|---|
| 128 | |
|---|
| 129 | # cat /etc/namedb/log/notify |
|---|
| 130 | |
|---|
| 131 | 22-Feb-2012 23:43:48.647 zone MITLD/IN: sending notifies (serial 2012022306) |
|---|