Chapter 12 - Advance Bind Features

Question 1

List and describe the 4 named address match lists that are predefined in BIND.

Answer 1

1. None – matches no hosts
2. Any – matches all hosts
3. Localhost – matches the ipv4 addresses of all local interfaces on the system
4. Localnets – matches the subnet of the ipv4 nw for which the system has an interface

Question 2

How would you implement the predefined named address match lists (use localnets)?

Answer 2

allow‐query { localnets; };

Question 3

Who does the allow-query setting restrict to query your DNS server?

Answer 3

allow‐query; from which hosts iterative queries will be serviced – default is on

Question 4

Who does the allow-query-on setting restrict to query your DNS server?

Answer 4

allow‐query‐on; which local addresses can accept iterative queries – default is all

Question 5

Who does the allow-query-cache setting restrict to query your DNS server?

Answer 5

allow‐query‐cache; which hosts can get answers form cache. no default value

Question 6

Who does the allow-recursion setting restrict to query your DNS server?

Answer 6

allow‐recursion; from which hosts recursive queries will be serviced – default localnets localhost

Question 7

Who does the allow-recursion-on setting restrict to query your DNS server?

Answer 7

allow‐recursion‐on; which local addresses can accept recursive queries

Question 8

Who does the allow-update setting restrict to query your DNS server?

Answer 8

allow‐update; from which hosts are DDNS updates accepted – default is all

Question 9

Who does the blackhole setting restrict to query your DNS server?

Answer 9

blackhole; address the server will not accept queries from or sent queries to – default is no

Question 10

What method of security can you use to restrict processes to a directory so that it will be seen as the root of the file system hierarchy and why would you use this method?

Answer 10

use a chroot env – if the bind daemon is compromised it will not have the ability to access or read other parts of the filesystem.

Question 11

What file and what command within the file will invoke a chroot environment?

Answer 11

/etc/sysconfig/named

Question 12

What RPM sets up the chroot environment?

Answer 12

bind-chrootenv

Question 13

What version of BIND is required to support SRV records?

Answer 13

BIND v 8.2.2 or later

Question 14

What command should be used to modify records in a zone that allows DDNS updates?

Answer 14

nsupdate