home *** CD-ROM | disk | FTP | other *** search
- This is my solution to a couple of problems we had with DNS at Deakin
- University, namely:
-
- - Remembering always to update the SOA serial number is just not
- possible, especially if you want to allow half a dozen or more
- people, of various experience, to edit your DNS.
-
- - Changing NS records for 198 zones can take a bit of time,
- expecially if you are using RCS.
-
- - Changing MX records for 400 zones is not any easier.
-
- Basically, all of the above were solved by using BIND's "$INCLUDE"
- feature. For the latter two, it just meant deciding to use this
- feature for all NS and MX records. For the first problem, it meant
- also "$INCLUDE"-ing a file containing the SOA record, and updating
- that file automatically when any files for that zone are updated
- (including other "$INCLUDE"-ed files).
-
- The whole system is run (from the point of view of your DNS
- administrators) using two simple tools; "make" and RCS (but see below
- if you hate RCS). Your DNS administrator simply checks out the file
- they wish to change, makes the change, checks in the file and does a
- "make configure" (or "make install" if they just want to update the
- production DNS files, but not reload named). If any file containing
- data for a zone is updated, the .SOA file for that zone (and it's
- serial number) is re-generated. There is also a "make-depend" program
- to keep dependencies in the Makefile up-to-date.
-
- The re-generation of SOA serial numbers uses the RCS "Id" header.
- This means you need to use RCS for the maintenance of _ALL_ your DNS
- files. However, if you really hate RCS, you could probably modify
- "make-SOA" so that it uses file modification times instead.
-
- The two programs which update the .SOA files (make-SOA) and the
- Makefile (make-depend) require Perl version 4, and you will need to
- customise make-SOA, the Makefile and, of course, your domain files.
-
- I can't think of any more details to mention here. There are some
- comments in the files, and your DNS administrators should read the
- TIPS file (it is actually the README file in our DNS source area),
- which covers a couple of important things other than SOA serial
- numbers that can get overlooked.
-
- Even if you aren't interested in the software here, peruse the data.
- I have configured an "example" DNS zone, which might contain just
- enough hints to get you started in configuring your own zone(s).
-
- I recommend the other DNS tools that come with BIND. There is nothing
- better than using a computer to do your administrivia.
-
- --
- Tim Cook
- Systems Engineer
- Deakin University
- <tim@deakin.edu.au>
- 2 Nov 1994
-