Re-configuring BIND DNS Servers for CentOS Web Panel Web Hosting Control Panel on Amazon AWS Cloud
Turritopsis Dohrnii Teo En Ming <[email protected]> Thu, 27 Feb 2020 14:27:14 +0000
| Newsgroups | gmane.linux.lfs.general |
|---|---|
| Message-ID | <SG2PR01MB21417D0D57CEAC9442BD66A887EB0@SG2PR01MB2141.apcprd01.prod.exchangelabs.com> |
--===============4329076197748810781== Content-Language: en-US Content-Type: multipart/alternative; boundary="_000_SG2PR01MB21417D0D57CEAC9442BD66A887EB0SG2PR01MB2141apcp_" --_000_SG2PR01MB21417D0D57CEAC9442BD66A887EB0SG2PR01MB2141apcp_ Content-Type: text/plain; charset="Windows-1252" Content-Transfer-Encoding: quoted-printable Subject: Re-configuring BIND DNS Servers for CentOS Web Panel Web Hosting C= ontrol Panel on Amazon AWS Cloud Author: Mr. Turritopsis Dohrnii Teo En Ming, Singapore Date: 27 Feb 2020 Thursday Rationale for Re-configuration of BIND DNS Servers for CentOS Web Panel =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D I have originally followed the approach for cPanel where there are 2 DNS-ON= LY servers and one or more cPanel webservers. However, CentOS Web Panel implements DNS Clusters differently. Hence I have to re-configure BIND DNS = Servers for CentOS Web Panel web hosting control panel. PREREQUISITES =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D Part 1 of the series: Mr. Teo En Ming's Guide to Deploying CentOS Web Panel= (CWP) Web Hosting Control Panel on Amazon AWS Cloud Redundant Blogger and Wordpress blog links: [1] https://tdtemcerts.blogspot.com/2020/02/mr-teo-en-mings-guide-to-deploy= ing.html [2] https://tdtemcerts.wordpress.com/2020/02/23/mr-teo-en-mings-guide-to-de= ploying-centos-web-panel-cwp-web-hosting-control-panel-on-amazon-aws-cloud/ Part 2 of the series: Setting Up Mail Server Operation for CentOS Web Panel= Web Hosting Control Panel on Amazon AWS Cloud Redundant Blogger and Wordpress blog links: [1] https://tdtemcerts.blogspot.com/2020/02/setting-up-mail-server-operatio= n-for.html [2] https://tdtemcerts.wordpress.com/2020/02/25/setting-up-mail-server-oper= ation-for-centos-web-panel-web-hosting-control-panel-on-amazon-aws-cloud/ THIS guide is Part 3 of the series. EXTREMELY DETAILED INSTRUCTIONS OF TEO EN MING'S GUIDE =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D Login to Amazon AWS Console. Setting Up Secondary/Slave DNS Server =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D On the EC2 Dashboard, click Instances. Click Launch Instance. Search for centos in the AWS Markpetplace. Select CentOS 7 (x86_64) - with Updates HVM (free tier eligible). Click Continue. Select t2.micro (free tier eligible). Click Next: Configure Instance Details. Network: Teo En Ming VPC Subnet: Public subnet | us-east-2a Click Protect against accidental termination. Click Next: Add Storage Size (GiB): 8 Click Next: Add Tags Key =3D Name Value =3D slave Click Next: Configure Security Group Click Select an existing security group Select NameServers Click Review and Launch. Click Launch. Select Choose an existing key pair. Key pair name: cwp Click Launch Instances. Click Instances. Select slave, right click and select Networking > Manage IP Addresses. Click Allocate an elastic IP to this instance. Click Allocate. Click Associate this Elastic IP Address. Instance: slave Click Associate. IPv4 address of Secondary/Slave DNS server is 3.12.224.179 $ ssh -i cwp.pem [email protected] $ sudo passwd $ su - # yum -y update && yum -y install wget # hostnamectl set-hostname ns2.teo-en-ming.com # cd /usr/local/src && wget http://centos-webpanel.com/cwp-el7-latest && sh= cwp-el7-latest Started installing CentOS Web Panel at 9:00 PM on 26 Feb 2020 Wed. Completed installing CentOS Web Panel at 9:05 PM on 26 Feb 2020 Wed. Total duration: 5 mins. ############################# # CWP Installed # ############################# Go to CentOS WebPanel Admin GUI at http://SERVER_IP:2030/ http://3.12.224.179:2030 SSL: https://3.12.224.179:2031 --------------------- Username: root Password: ssh server root password MySQL root Password: ######################################################### CentOS Web Panel MailServer Installer ######################################################### SSL Cert name (hostname): ns2.teo-en-ming.com SSL Cert file location /etc/pki/tls/ private|certs ######################################################### Visit for help: www.centos-webpanel.com Write down login details and press ENTER for server reboot! Please reboot the server! Reboot command: shutdown -r now # reboot REFERENCE =3D=3D=3D=3D=3D=3D=3D=3D=3D Guide: Slave DNS Server & Manager - DNS Cluster Link: https://wiki.centos-webpanel.com/slave-dns-server-manager-dns-cluster REFERENCE =3D=3D=3D=3D=3D=3D=3D=3D=3D Guide: Slave DNS Server & Manager download version Link: https://wiki.centos-webpanel.com/slave-dns-server-manager-download-ve= rsion Login to the CentOS Web Panel Admin Panel on the Slave. From the left menu, click on CWP Settings, then select Edit Settings. Admin Email: [email protected] Check Activate NAT-ed network configuration. Click Save Changes. Create a New Account on the Secondary/Slave DNS Server =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D From the left menu, click User Accounts, then click New Account. Domain name: teo-en-ming.com Username: slave Package: default Click Create. Download Slave DNS Manager and upload it to public_html folder on the Secon= dary/Slave DNS Server =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D ssh -i cwp.pem [email protected] su - cd /home/slave/public_html wget http://dl1.centos-webpanel.com/files/cwp/addons/cwp-slave_dns.zip unzip cwp-slave_dns.zip mv slave_dns/* . rm -f index.html Fix file permissions on the Slave DNS Server =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D chown -R slave.slave /home/slave/public_html/* MySQL: Create User and Database on the Slave DNS Server =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D From the left menu, click SQL Services, then click MySQL Manager. Click Create Database and User. New Database for user: slave Database Name: slave Click Create Database. Edit file /home/slave/public_html/inc/db_conn.php.sample and enter your dat= abase connection details # nano /home/slave/public_html/inc/db_conn.php.sample # mv inc/db_conn.php.sample inc/db_conn.php # mysql slave_slave < sql/slave_dns.sql # nano /etc/sudoers.d/slave slave ALL=3D NOPASSWD: /bin/systemctl start named slave ALL=3D NOPASSWD: /bin/systemctl stop named slave ALL=3D NOPASSWD: /bin/systemctl restart named slave ALL=3D NOPASSWD: /bin/systemctl reload named slave ALL=3D NOPASSWD: /bin/systemctl status named slave ALL=3D NOPASSWD: /bin/systemctl is-active named # touch /etc/named/slave.conf # chmod 771 /etc/named # usermod -a -G named slave # chown slave.named /etc/named/slave.conf # mkdir /var/named/slave # chown named.named /var/named/slave Edit File: /etc/named.conf and add this in options section before closing } masterfile-format text; Add after options{} where other include lines are specifed //Slave dns configuration include "/etc/named/slave.conf"; Now you can login to Slave DNS Manager GUI by using a domain link of the ac= count you have created. Go to http://3.12.224.179/~slave/index.php?login Default login for Slave DNS Manager GUI admin/root Username: root Password: FX8QKxvQ * Please change the default password after the first login Adding WebServers to Slave DNS Manager =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D - On Slave DNS manager GUI create a new user for each server or use a singl= e for all webservers if you plan to transfer accounts from one to another w= ebserver. Click Add New User. Username: Password: Email: API Key: API Secret: Domain Limit: 1000000 Click Save. - On Master CentOS Web Panel WebServer go to DNS Functions -> Slave DNS Man= ager Buy CWPPro license first. It is only USD$1.49 compared to USD$20 for the li= cense of cPanel. I can't afford to buy the license for cPanel, hence I have to settle for CentOS Web Panel. Then ssh into your Master CentOS Web Panel Webserver. # sh /scripts/update_cwp You have successfully upgraded to CWPpro. On the Master CentOS Web Panel, Go to DNS Functions -> Slave DNS Manager API Key: Secret Key: Base URL: http://3.12.224.179/~slave Master Server IP's: 3.21.30.127 Click Submit. Master CentOS Web Panel WebServer configuration =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D Edit File: /etc/named.conf and add this in options section before closing } //Slave dns configuration allow-transfer {3.12.224.179;}; allow-recursion {3.12.224.179;}; also-notify {3.12.224.179;}; masterfile-format text; # named-checkconf # systemctl restart named REFERENCE =3D=3D=3D=3D=3D=3D=3D=3D=3D Guide: How to setup DNS cluster on CWP 1 =96 Install DNS Manager Link: https://opentechy.com/how-to-setup-dns-cluster-on-cwp/ REFERENCE =3D=3D=3D=3D=3D=3D=3D=3D=3D Guide: How to setup DNS cluster on CWP 2 =96 Add webservers to DNS cluster Link: https://opentechy.com/how-to-setup-dns-cluster-on-cwp-2-add-webserver= s-to-dns-cluster/ CONFIGURING CUSTOM NAME SERVERS AT YOUR DOMAIN REGISTRAR =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D Go to Advanced Features > Hostnames Host: ns1 IP Addresses: 3.21.30.127 Host: ns2 IP Addresses: 3.12.224.179 Nameservers: Using custom nameservers ns1.teo-en-ming.com ns2.teo-en-ming.com CONFIGURING NAME SERVERS ON THE MASTER CENTOS WEB PANEL WEBSERVER =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D From the left menu, click DNS Functions, then click Edit Nameservers IPs. Name Server 1: ns1.teo-en-ming.com 3.21.30.127 Name Server 2: ns2.teo-en-ming.com 3.12.224.179 Click Save changes. # systemctl restart named BIND DNS CONFIGURATION ON THE MASTER CENTOS WEB PANEL WEBSERVER =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D File /etc/named.conf: // // named.conf // // Provided by Red Hat bind package to configure the ISC BIND named(8) DNS // server as a caching only nameserver (as a any DNS resolver only). // // See /usr/share/doc/bind*/sample/ for example named configuration files. // // See the BIND Administrator's Reference Manual (ARM) for details about th= e // configuration located in /usr/share/doc/bind-{version}/Bv9ARM.html options { listen-on port 53 { any; }; listen-on-v6 port 53 { ::1; }; directory "/var/named"; dump-file "/var/named/data/cache_dump.db"; statistics-file "/var/named/data/named_stats.txt"; memstatistics-file "/var/named/data/named_mem_stats.txt"; recursing-file "/var/named/data/named.recursing"; secroots-file "/var/named/data/named.secroots"; allow-query { any; }; /* - If you are building an AUTHORITATIVE DNS server, do NOT enable recursion. - If you are building a RECURSIVE (caching) DNS server, you need to enable recursion. - If your recursive DNS server has a public IP address, you MUST enable acc= ess control to limit queries to your legitimate users. Failing to do so will cause your server to become part of large scale DNS amplification attacks. Implementing BCP38 within your network would greatly reduce such attack surface */ // recursion no; dnssec-enable yes; dnssec-validation yes; /* Path to ISC DLV key */ bindkeys-file "/etc/named.root.key"; managed-keys-directory "/var/named/dynamic"; pid-file "/run/named/named.pid"; session-keyfile "/run/named/session.key"; //Slave dns configuration allow-transfer {3.12.224.179;}; allow-recursion {3.12.224.179;}; also-notify {3.12.224.179;}; masterfile-format text; }; logging { channel default_debug { file "data/named.run"; severity dynamic; }; }; zone "." IN { type hint; file "named.ca"; }; include "/etc/named.rfc1912.zones"; include "/etc/named.root.key"; zone "ns1.teo-en-ming.com" {type master;file "/var/named/ns1.teo-en-ming.co= m.db";}; zone "ns2.teo-en-ming.com" {type master;file "/var/named/ns2.teo-en-ming.co= m.db";}; // zone teo-en-ming.com zone "teo-en-ming.com" {type master; file "/var/named/teo-en-ming.com.db";}= ; // zone_end teo-en-ming.com File /var/named/ns1.teo-en-ming.com.db: ; Panel %version% ; Zone file for ns1.teo-en-ming.com $TTL 14400 ns1.teo-en-ming.com. 86400 IN SOA ns1.teo-en-ming.com. = info.centos-webpanel.com. ( 2013071600 ;serial, todays date+todays 86400 ;refresh, seconds 7200 ;retry, seconds 3600000 ;expire, seconds 86400 ;minimum, seconds ) ns1.teo-en-ming.com. 86400 IN NS ns1.teo-en-ming.com. ns1.teo-en-ming.com. 86400 IN NS ns2.teo-en-ming.com. ns1.teo-en-ming.com. 14400 IN A 3.21.30.127 File /var/named/ns2.teo-en-ming.com.db: ; Panel %version% ; Zone file for ns2.teo-en-ming.com $TTL 14400 ns2.teo-en-ming.com. 86400 IN SOA ns1.teo-en-ming.com. = info.centos-webpanel.com. ( 2013071600 ;serial, todays date+todays 86400 ;refresh, seconds 7200 ;retry, seconds 3600000 ;expire, seconds 86400 ;minimum, seconds ) ns2.teo-en-ming.com. 86400 IN NS ns1.teo-en-ming.com. ns2.teo-en-ming.com. 86400 IN NS ns2.teo-en-ming.com. ns2.teo-en-ming.com. 14400 IN A 3.12.224.179 File /var/named/teo-en-ming.com.db: ; Generated by CWP ; Zone file for teo-en-ming.com $TTL 14400 @ 86400 IN SOA ns1.teo-en-ming.com. ceo.teo-en-ming-corp= .com. ( 2020022453 ; serial, todays date+todays 3600 ; refresh, seconds 7200 ; retry, seconds 1209600 ; expire, seconds 86400 ) ; minimum, seconds @ 86400 IN NS ns1.teo-en-ming.com. @ 86400 IN NS ns2.teo-en-ming.com. @ IN A 3.21.30.127 localhost.teo-en-ming.com. IN A 127.0.0.1 @ IN MX 0 teo-en-ming.com. mail 14400 IN CNAME teo-en-ming.com. smtp 14400 IN CNAME teo-en-ming.com. pop 14400 IN CNAME teo-en-ming.com. pop3 14400 IN CNAME teo-en-ming.com. imap 14400 IN CNAME teo-en-ming.com. webmail 14400 IN A 3.21.30.127 cpanel 14400 IN A 3.21.30.127 cwp 14400 IN A 3.21.30.127 www 14400 IN CNAME teo-en-ming.com. ftp 14400 IN CNAME teo-en-ming.com. _dmarc 14400 IN TXT "v=3DDMARC1; p=3Dnone" @ 14400 IN TXT "v=3Dspf1 +a +mx +ip4:3.21.30.127 ~all" ns1.teo-en-ming.com. 14400 IN A 3.21.30.127 ns2.teo-en-ming.com. 14400 IN A 3.12.224.179 default._domainkey 14400 IN TXT "v=3DDKIM1; k=3Drsa; p=3DMIGfMA0GCSqGSIb3DQ= EBAQUAA4GNADCBiQKBgQDEXk5wQIfKJPjTkkj0yHGX8yIJOOrsOsvAqbqVaEBFBWhRlF7YxyGzc= haAdWEVQkozcsWPIL5DgJ7vWBoJIGqfNOT7vO/lStqNcXC+2hYVIF7MTB8i6tBW1/UDEuL8oamm= KWDq8P9Fpduk6JppV7rtKXeFzrYj35ydIhDIKUABcwIDAQAB" BIND DNS CONFIGURATION ON THE SLAVE DNS MANAGER =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D File /etc/named.conf: // // named.conf // // Provided by Red Hat bind package to configure the ISC BIND named(8) DNS // server as a caching only nameserver (as a any DNS resolver only). // // See /usr/share/doc/bind*/sample/ for example named configuration files. // // See the BIND Administrator's Reference Manual (ARM) for details about th= e // configuration located in /usr/share/doc/bind-{version}/Bv9ARM.html options { listen-on port 53 { any; }; listen-on-v6 port 53 { ::1; }; directory "/var/named"; dump-file "/var/named/data/cache_dump.db"; statistics-file "/var/named/data/named_stats.txt"; memstatistics-file "/var/named/data/named_mem_stats.txt"; recursing-file "/var/named/data/named.recursing"; secroots-file "/var/named/data/named.secroots"; allow-query { any; }; /* - If you are building an AUTHORITATIVE DNS server, do NOT enable recursion. - If you are building a RECURSIVE (caching) DNS server, you need to enable recursion. - If your recursive DNS server has a public IP address, you MUST enable acc= ess control to limit queries to your legitimate users. Failing to do so will cause your server to become part of large scale DNS amplification attacks. Implementing BCP38 within your network would greatly reduce such attack surface */ recursion no; dnssec-enable yes; dnssec-validation yes; /* Path to ISC DLV key */ bindkeys-file "/etc/named.root.key"; managed-keys-directory "/var/named/dynamic"; pid-file "/run/named/named.pid"; session-keyfile "/run/named/session.key"; masterfile-format text; }; logging { channel default_debug { file "data/named.run"; severity dynamic; }; }; zone "." IN { type hint; file "named.ca"; }; include "/etc/named.rfc1912.zones"; include "/etc/named.root.key"; // zone teo-en-ming.com // zone "teo-en-ming.com" {type master; file "/var/named/teo-en-ming.com.db= ";}; // zone_end teo-en-ming.com //Slave dns configuration include "/etc/named/slave.conf"; File /var/named/teo-en-ming.com.db (WRONG, DON'T USE): ; Generated by CWP ; Zone file for teo-en-ming.com $TTL 14400 @ 86400 IN SOA ns1.centos-webpanel.com. ceo.teo-en-ming-= corp.com. ( 2020022660 ; serial, todays date+todays 3600 ; refresh, seconds 7200 ; retry, seconds 1209600 ; expire, seconds 86400 ) ; minimum, seconds @ 86400 IN NS ns1.centos-webpanel.com. @ 86400 IN NS ns2.centos-webpanel.com. @ IN A 3.12.224.179 localhost.teo-en-ming.com. IN A 127.0.0.1 @ IN MX 0 teo-en-ming.com. mail 14400 IN CNAME teo-en-ming.com. smtp 14400 IN CNAME teo-en-ming.com. pop 14400 IN CNAME teo-en-ming.com. pop3 14400 IN CNAME teo-en-ming.com. imap 14400 IN CNAME teo-en-ming.com. webmail 14400 IN A 3.12.224.179 cpanel 14400 IN A 3.12.224.179 cwp 14400 IN A 3.12.224.179 www 14400 IN CNAME teo-en-ming.com. ftp 14400 IN CNAME teo-en-ming.com. _dmarc 14400 IN TXT "v=3DDMARC1; p=3Dnone" @ 14400 IN TXT "v=3Dspf1 +a +mx +ip4:3.12.224.179 ~all" default._domainkey 14400 IN TXT "v=3DDKIM1; k=3Drsa; p=3DMIGfMA0GCSqGSIb3DQ= EBAQUAA4GNADCBiQKBgQCktDYpEtFO7dyJeErMbjHvyfJYU8RqDeS7WVqQnjH4fP42JSqPmxEFX= +QytFTlGqd6ndlz9Tjqi1iZsD0ajB/+0Pkwq/KtL6NVo2TIqnXj8VebV9+FEcx+FGvLA/b5zz+H= fn0Bf+w/2T2bSwUm+tJoHilmANCFGlcGmpO9/lXvAwIDAQAB" File /etc/named/slave.conf: zone "teo-en-ming.com" { type slave; file "slave/db.teo-en-ming.com"; maste= rs { 3.21.30.127; };}; //username:enming That's all folks! -----BEGIN EMAIL SIGNATURE----- The Gospel for all Targeted Individuals (TIs): [The New York Times] Microwave Weapons Are Prime Suspect in Ills of U.S. Embassy Workers Link: https://www.nytimes.com/2018/09/01/science/sonic-attack-cuba-microwav= e.html ***************************************************************************= ***************** Singaporean Mr. Turritopsis Dohrnii Teo En Ming's Academic Qualifications as at 14 Feb 2019 and refugee seeking attempts at the United= Nations Refugee Agency Bangkok (21 Mar 2017), in Taiwan (5 Aug 2019) and A= ustralia (25 Dec 2019 to 9 Jan 2020): [1] https://tdtemcerts.wordpress.com/ [2] https://tdtemcerts.blogspot.sg/ [3] https://www.scribd.com/user/270125049/Teo-En-Ming -----END EMAIL SIGNATURE----- --_000_SG2PR01MB21417D0D57CEAC9442BD66A887EB0SG2PR01MB2141apcp_ Content-Type: text/html; charset="Windows-1252" Content-Transfer-Encoding: quoted-printable <html> <head> <meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3DWindows-1= 252"> <style type=3D"text/css" style=3D"display:none;"> P {margin-top:0;margin-bo= ttom:0;} </style> </head> <body dir=3D"ltr"> <div style=3D"font-family: Calibri, Arial, Helvetica, sans-serif; font-size= : 12pt; color: rgb(0, 0, 0);"> <span>Subject: Re-configuring BIND DNS Servers for CentOS Web Panel Web Hos= ting Control Panel on Amazon AWS Cloud<br> </span> <div><br> </div> <div>Author: Mr. Turritopsis Dohrnii Teo En Ming, Singapore<br> </div> <div>Date: 27 Feb 2020 Thursday<br> </div> <div><br> </div> <div>Rationale for Re-configuration of BIND DNS Servers for CentOS Web Pane= l<br> </div> <div>=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D<br> </div> <div><br> </div> <div>I have originally followed the approach for cPanel where there are 2 D= NS-ONLY servers and one or more cPanel webservers. However, CentOS Web Pane= l <br> </div> <div>implements DNS Clusters differently. Hence I have to re-configure BIND= DNS Servers for CentOS Web Panel web hosting control panel.<br> </div> <div><br> </div> <div>PREREQUISITES<br> </div> <div>=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D<br> </div> <div><br> </div> <div>Part 1 of the series: Mr. Teo En Ming's Guide to Deploying CentOS Web = Panel (CWP) Web Hosting Control Panel on Amazon AWS Cloud<br> </div> <div><br> </div> <div>Redundant Blogger and Wordpress blog links:<br> </div> <div><br> </div> <div>[1] https://tdtemcerts.blogspot.com/2020/02/mr-teo-en-mings-guide-to-d= eploying.html<br> </div> <div><br> </div> <div>[2] https://tdtemcerts.wordpress.com/2020/02/23/mr-teo-en-mings-guide-= to-deploying-centos-web-panel-cwp-web-hosting-control-panel-on-amazon-aws-c= loud/<br> </div> <div><br> </div> <div>Part 2 of the series: Setting Up Mail Server Operation for CentOS Web = Panel Web Hosting Control Panel on Amazon AWS Cloud<br> </div> <div><br> </div> <div>Redundant Blogger and Wordpress blog links:<br> </div> <div><br> </div> <div>[1] https://tdtemcerts.blogspot.com/2020/02/setting-up-mail-server-ope= ration-for.html<br> </div> <div><br> </div> <div>[2] https://tdtemcerts.wordpress.com/2020/02/25/setting-up-mail-server= -operation-for-centos-web-panel-web-hosting-control-panel-on-amazon-aws-clo= ud/<br> </div> <div><br> </div> <div>THIS guide is Part 3 of the series.<br> </div> <div><br> </div> <div>EXTREMELY DETAILED INSTRUCTIONS OF TEO EN MING'S GUIDE<br> </div> <div>=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D<br> </div> <div><br> </div> <div>Login to Amazon AWS Console.<br> </div> <div><br> </div> <div>Setting Up Secondary/Slave DNS Server<br> </div> <div>=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D<br> </div> <div><br> </div> <div>On the EC2 Dashboard, click Instances.<br> </div> <div><br> </div> <div>Click Launch Instance.<br> </div> <div><br> </div> <div>Search for centos in the AWS Markpetplace.<br> </div> <div><br> </div> <div>Select CentOS 7 (x86_64) - with Updates HVM (free tier eligible).<br> </div> <div><br> </div> <div>Click Continue.<br> </div> <div><br> </div> <div>Select t2.micro (free tier eligible).<br> </div> <div><br> </div> <div>Click Next: Configure Instance Details.<br> </div> <div><br> </div> <div>Network: Teo En Ming VPC<br> </div> <div><br> </div> <div>Subnet: Public subnet | us-east-2a<br> </div> <div><br> </div> <div>Click Protect against accidental termination.<br> </div> <div><br> </div> <div>Click Next: Add Storage<br> </div> <div><br> </div> <div>Size (GiB): 8<br> </div> <div><br> </div> <div>Click Next: Add Tags<br> </div> <div><br> </div> <div>Key =3D Name<br> </div> <div><br> </div> <div>Value =3D slave<br> </div> <div><br> </div> <div>Click Next: Configure Security Group<br> </div> <div><br> </div> <div>Click Select an existing security group<br> </div> <div><br> </div> <div>Select NameServers<br> </div> <div><br> </div> <div>Click Review and Launch.<br> </div> <div><br> </div> <div>Click Launch.<br> </div> <div><br> </div> <div>Select Choose an existing key pair.<br> </div> <div><br> </div> <div>Key pair name: cwp<br> </div> <div><br> </div> <div>Click Launch Instances.<br> </div> <div><br> </div> <div>Click Instances.<br> </div> <div><br> </div> <div>Select slave, right click and select Networking > Manage IP Address= es.<br> </div> <div><br> </div> <div>Click Allocate an elastic IP to this instance.<br> </div> <div><br> </div> <div>Click Allocate.<br> </div> <div><br> </div> <div>Click Associate this Elastic IP Address.<br> </div> <div><br> </div> <div>Instance: slave<br> </div> <div><br> </div> <div>Click Associate.<br> </div> <div><br> </div> <div>IPv4 address of Secondary/Slave DNS server is 3.12.224.179<br> </div> <div><br> </div> <div>$ ssh -i cwp.pem [email protected]<br> </div> <div><br> </div> <div>$ sudo passwd<br> </div> <div><br> </div> <div>$ su -<br> </div> <div><br> </div> <div># yum -y update && yum -y install wget<br> </div> <div><br> </div> <div># hostnamectl set-hostname ns2.teo-en-ming.com<br> </div> <div><br> </div> <div># cd /usr/local/src && wget http://centos-webpanel.com/cwp-el7= -latest && sh cwp-el7-latest<br> </div> <div><br> </div> <div>Started installing CentOS Web Panel at 9:00 PM on 26 Feb 2020 Wed.<br> </div> <div><br> </div> <div>Completed installing CentOS Web Panel at 9:05 PM on 26 Feb 2020 Wed.<b= r> </div> <div><br> </div> <div>Total duration: 5 mins.<br> </div> <div><br> </div> <div>#############################<br> </div> <div># CWP Installed #<br> </div> <div>#############################<br> </div> <div><br> </div> <div>Go to CentOS WebPanel Admin GUI at http://SERVER_IP:2030/<br> </div> <div><br> </div> <div>http://3.12.224.179:2030<br> </div> <div>SSL: https://3.12.224.179:2031<br> </div> <div>---------------------<br> </div> <div>Username: root<br> </div> <div>Password: ssh server root password<br> </div> <div>MySQL root Password: <br> </div> <div><br> </div> <div>#########################################################<br> </div> <div> CentOS Web Panel MailServer Install= er <br> </div> <div>#########################################################<br> </div> <div>SSL Cert name (hostname): ns2.teo-en-ming.com<br> </div> <div>SSL Cert file location /etc/pki/tls/ private|certs<br> </div> <div>#########################################################<br> </div> <div><br> </div> <div>Visit for help: www.centos-webpanel.com<br> </div> <div>Write down login details and press ENTER for server reboot!<br> </div> <div>Please reboot the server!<br> </div> <div>Reboot command: shutdown -r now<br> </div> <div><br> </div> <div># reboot<br> </div> <div><br> </div> <div>REFERENCE<br> </div> <div>=3D=3D=3D=3D=3D=3D=3D=3D=3D<br> </div> <div><br> </div> <div>Guide: Slave DNS Server & Manager - DNS Cluster<br> </div> <div><br> </div> <div>Link: https://wiki.centos-webpanel.com/slave-dns-server-manager-dns-cl= uster<br> </div> <div><br> </div> <div>REFERENCE<br> </div> <div>=3D=3D=3D=3D=3D=3D=3D=3D=3D<br> </div> <div><br> </div> <div>Guide: Slave DNS Server & Manager download version<br> </div> <div><br> </div> <div>Link: https://wiki.centos-webpanel.com/slave-dns-server-manager-downlo= ad-version<br> </div> <div><br> </div> <div>Login to the CentOS Web Panel Admin Panel on the Slave.<br> </div> <div><br> </div> <div>From the left menu, click on CWP Settings, then select Edit Settings.<= br> </div> <div><br> </div> <div>Admin Email: [email protected]<br> </div> <div><br> </div> <div>Check Activate NAT-ed network configuration.<br> </div> <div><br> </div> <div>Click Save Changes.<br> </div> <div><br> </div> <div>Create a New Account on the Secondary/Slave DNS Server<br> </div> <div>=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D<br> </div> <div><br> </div> <div>From the left menu, click User Accounts, then click New Account.<br> </div> <div><br> </div> <div>Domain name: teo-en-ming.com<br> </div> <div><br> </div> <div>Username: slave<br> </div> <div><br> </div> <div>Package: default<br> </div> <div><br> </div> <div>Click Create.<br> </div> <div><br> </div> <div>Download Slave DNS Manager and upload it to public_html folder on the = Secondary/Slave DNS Server<br> </div> <div>=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D<br> </div> <div><br> </div> <div>ssh -i cwp.pem [email protected]<br> </div> <div><br> </div> <div>su -<br> </div> <div><br> </div> <div>cd /home/slave/public_html<br> </div> <div><br> </div> <div>wget http://dl1.centos-webpanel.com/files/cwp/addons/cwp-slave_dns.zip= <br> </div> <div><br> </div> <div>unzip cwp-slave_dns.zip<br> </div> <div><br> </div> <div>mv slave_dns/* .<br> </div> <div><br> </div> <div>rm -f index.html<br> </div> <div><br> </div> <div>Fix file permissions on the Slave DNS Server<br> </div> <div>=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D<br> </div> <div><br> </div> <div>chown -R slave.slave /home/slave/public_html/*<br> </div> <div><br> </div> <div>MySQL: Create User and Database on the Slave DNS Server<br> </div> <div>=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D<br> </div> <div><br> </div> <div>From the left menu, click SQL Services, then click MySQL Manager.<br> </div> <div><br> </div> <div>Click Create Database and User.<br> </div> <div><br> </div> <div>New Database for user: slave<br> </div> <div><br> </div> <div>Database Name: slave<br> </div> <div><br> </div> <div>Click Create Database.<br> </div> <div><br> </div> <div>Edit file /home/slave/public_html/inc/db_conn.php.sample and enter you= r database connection details<br> </div> <div><br> </div> <div># nano /home/slave/public_html/inc/db_conn.php.sample<br> </div> <div><br> </div> <div># mv inc/db_conn.php.sample inc/db_conn.php<br> </div> <div><br> </div> <div># mysql slave_slave < sql/slave_dns.sql<br> </div> <div><br> </div> <div># nano /etc/sudoers.d/slave<br> </div> <div><br> </div> <div>slave ALL=3D NOPASSWD: /bin/systemctl start named<br> </div> <div>slave ALL=3D NOPASSWD: /bin/systemctl stop named<br> </div> <div>slave ALL=3D NOPASSWD: /bin/systemctl restart named<br> </div> <div>slave ALL=3D NOPASSWD: /bin/systemctl reload named<br> </div> <div>slave ALL=3D NOPASSWD: /bin/systemctl status named<br> </div> <div>slave ALL=3D NOPASSWD: /bin/systemctl is-active named<br> </div> <div><br> </div> <div><br> </div> <div># touch /etc/named/slave.conf<br> </div> <div><br> </div> <div># chmod 771 /etc/named<br> </div> <div><br> </div> <div># usermod -a -G named slave<br> </div> <div><br> </div> <div># chown slave.named /etc/named/slave.conf<br> </div> <div><br> </div> <div># mkdir /var/named/slave<br> </div> <div><br> </div> <div># chown named.named /var/named/slave<br> </div> <div><br> </div> <div>Edit File: /etc/named.conf and add this in options section before clos= ing }<br> </div> <div><br> </div> <div>masterfile-format text;<br> </div> <div><br> </div> <div>Add after options{} where other include lines are specifed<br> </div> <div><br> </div> <div>//Slave dns configuration<br> </div> <div>include "/etc/named/slave.conf";<br> </div> <div><br> </div> <div>Now you can login to Slave DNS Manager GUI by using a domain link of t= he account you have created.<br> </div> <div><br> </div> <div>Go to http://3.12.224.179/~slave/index.php?login<br> </div> <div><br> </div> <div>Default login for Slave DNS Manager GUI admin/root<br> </div> <div>Username: root<br> </div> <div>Password: FX8QKxvQ<br> </div> <div>* Please change the default password after the first login<br> </div> <div><br> </div> <div>Adding WebServers to Slave DNS Manager<br> </div> <div>=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D<br> </div> <div><br> </div> <div>- On Slave DNS manager GUI create a new user for each server or use a = single for all webservers if you plan to transfer accounts from one to anot= her webserver.<br> </div> <div><br> </div> <div>Click Add New User.<br> </div> <div><br> </div> <div>Username:<br> </div> <div><br> </div> <div>Password:<br> </div> <div><br> </div> <div>Email:<br> </div> <div><br> </div> <div>API Key:<br> </div> <div><br> </div> <div>API Secret:<br> </div> <div><br> </div> <div>Domain Limit: 1000000<br> </div> <div><br> </div> <div>Click Save.<br> </div> <div><br> </div> <div>- On Master CentOS Web Panel WebServer go to DNS Functions -> Slave= DNS Manager<br> </div> <div><br> </div> <div>Buy CWPPro license first. It is only USD$1.49 compared to USD$20 for t= he license of cPanel. I can't afford to buy the license for cPanel, hence <br> </div> <div>I have to settle for CentOS Web Panel.<br> </div> <div><br> </div> <div>Then ssh into your Master CentOS Web Panel Webserver.<br> </div> <div><br> </div> <div># sh /scripts/update_cwp<br> </div> <div><br> </div> <div>You have successfully upgraded to CWPpro.<br> </div> <div><br> </div> <div>On the Master CentOS Web Panel, Go to DNS Functions -> Slave DNS Ma= nager<br> </div> <div><br> </div> <div>API Key:<br> </div> <div><br> </div> <div>Secret Key:<br> </div> <div><br> </div> <div>Base URL: http://3.12.224.179/~slave<br> </div> <div><br> </div> <div>Master Server IP's: 3.21.30.127<br> </div> <div><br> </div> <div>Click Submit.<br> </div> <div><br> </div> <div>Master CentOS Web Panel WebServer configuration<br> </div> <div>=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D<br= > </div> <div><br> </div> <div>Edit File: /etc/named.conf and add this in options section before clos= ing }<br> </div> <div><br> </div> <div>//Slave dns configuration<br> </div> <div>allow-transfer {3.12.224.179;};<br> </div> <div>allow-recursion {3.12.224.179;};<br> </div> <div>also-notify {3.12.224.179;};<br> </div> <div>masterfile-format text;<br> </div> <div><br> </div> <div># named-checkconf<br> </div> <div><br> </div> <div># systemctl restart named<br> </div> <div><br> </div> <div>REFERENCE<br> </div> <div>=3D=3D=3D=3D=3D=3D=3D=3D=3D<br> </div> <div><br> </div> <div>Guide: How to setup DNS cluster on CWP 1 =96 Install DNS Manager<br> </div> <div><br> </div> <div>Link: https://opentechy.com/how-to-setup-dns-cluster-on-cwp/<br> </div> <div><br> </div> <div>REFERENCE<br> </div> <div>=3D=3D=3D=3D=3D=3D=3D=3D=3D<br> </div> <div><br> </div> <div>Guide: How to setup DNS cluster on CWP 2 =96 Add webservers to DNS clu= ster<br> </div> <div><br> </div> <div>Link: https://opentechy.com/how-to-setup-dns-cluster-on-cwp-2-add-webs= ervers-to-dns-cluster/<br> </div> <div><br> </div> <div>CONFIGURING CUSTOM NAME SERVERS AT YOUR DOMAIN REGISTRAR<br> </div> <div>=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D<br> </div> <div><br> </div> <div>Go to Advanced Features > Hostnames<br> </div> <div><br> </div> <div>Host: ns1 IP Addresses: 3.21.30.127<br> </div> <div>Host: ns2 IP Addresses: 3.12.224.179<br> </div> <div><br> </div> <div>Nameservers: Using custom nameservers<br> </div> <div><br> </div> <div>ns1.teo-en-ming.com<br> </div> <div><br> </div> <div>ns2.teo-en-ming.com<br> </div> <div><br> </div> <div>CONFIGURING NAME SERVERS ON THE MASTER CENTOS WEB PANEL WEBSERVER<br> </div> <div>=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D<br> </div> <div><br> </div> <div>From the left menu, click DNS Functions, then click Edit Nameservers I= Ps.<br> </div> <div><br> </div> <div>Name Server 1: ns1.teo-en-ming.com 3.21.30.127<br> </div> <div><br> </div> <div>Name Server 2: ns2.teo-en-ming.com 3.12.224.179<br> </div> <div><br> </div> <div>Click Save changes.<br> </div> <div><br> </div> <div># systemctl restart named<br> </div> <div><br> </div> <div>BIND DNS CONFIGURATION ON THE MASTER CENTOS WEB PANEL WEBSERVER<br> </div> <div>=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D<br> </div> <div><br> </div> <div>File /etc/named.conf:<br> </div> <div><br> </div> <div>//<br> </div> <div>// named.conf<br> </div> <div>//<br> </div> <div>// Provided by Red Hat bind package to configure the ISC BIND named(8)= DNS<br> </div> <div>// server as a caching only nameserver (as a any DNS resolver only).<b= r> </div> <div>//<br> </div> <div>// See /usr/share/doc/bind*/sample/ for example named configuration fi= les.<br> </div> <div>//<br> </div> <div>// See the BIND Administrator's Reference Manual (ARM) for details abo= ut the<br> </div> <div>// configuration located in /usr/share/doc/bind-{version}/Bv9ARM.html<= br> </div> <div><br> </div> <div>options {<br> </div> <div>listen-on port 53 { any; };<br> </div> <div>listen-on-v6 port 53 { ::1; };<br> </div> <div>directory "/var/named";<br> </div> <div>dump-file "/var/named/data/cache_dump.db";<br> </div> <div>statistics-file "/var/named/data/named_stats.txt";<br> </div> <div>memstatistics-file "/var/named/data/named_mem_stats.txt";<br= > </div> <div>recursing-file "/var/named/data/named.recursing";<br> </div> <div>secroots-file "/var/named/data/named.secroots";<br> </div> <div>allow-query { any; };<br> </div> <div><br> </div> <div>/* <br> </div> <div>- If you are building an AUTHORITATIVE DNS server, do NOT enable recur= sion.<br> </div> <div>- If you are building a RECURSIVE (caching) DNS server, you need to en= able <br> </div> <div> recursion. <br> </div> <div>- If your recursive DNS server has a public IP address, you MUST enabl= e access <br> </div> <div> control to limit queries to your legitimate users. Failing to d= o so will<br> </div> <div> cause your server to become part of large scale DNS amplificati= on <br> </div> <div> attacks. Implementing BCP38 within your network would greatly<b= r> </div> <div> reduce such attack surface <br> </div> <div>*/<br> </div> <div>// recursion no;<br> </div> <div><br> </div> <div>dnssec-enable yes;<br> </div> <div>dnssec-validation yes;<br> </div> <div><br> </div> <div>/* Path to ISC DLV key */<br> </div> <div>bindkeys-file "/etc/named.root.key";<br> </div> <div><br> </div> <div>managed-keys-directory "/var/named/dynamic";<br> </div> <div><br> </div> <div>pid-file "/run/named/named.pid";<br> </div> <div>session-keyfile "/run/named/session.key";<br> </div> <div><br> </div> <div>//Slave dns configuration<br> </div> <div>allow-transfer {3.12.224.179;};<br> </div> <div>allow-recursion {3.12.224.179;};<br> </div> <div>also-notify {3.12.224.179;};<br> </div> <div>masterfile-format text;<br> </div> <div>};<br> </div> <div><br> </div> <div>logging {<br> </div> <div> channel default_debug {<br> </div> <div> file "dat= a/named.run";<br> </div> <div> severity dynam= ic;<br> </div> <div> };<br> </div> <div>};<br> </div> <div><br> </div> <div>zone "." IN {<br> </div> <div>type hint;<br> </div> <div>file "named.ca";<br> </div> <div>};<br> </div> <div><br> </div> <div>include "/etc/named.rfc1912.zones";<br> </div> <div>include "/etc/named.root.key";<br> </div> <div><br> </div> <div><br> </div> <div>zone "ns1.teo-en-ming.com" {type master;file "/var/name= d/ns1.teo-en-ming.com.db";};<br> </div> <div>zone "ns2.teo-en-ming.com" {type master;file "/var/name= d/ns2.teo-en-ming.com.db";};<br> </div> <div><br> </div> <div>// zone teo-en-ming.com<br> </div> <div>zone "teo-en-ming.com" {type master; file "/var/named/t= eo-en-ming.com.db";};<br> </div> <div>// zone_end teo-en-ming.com<br> </div> <div><br> </div> <div>File /var/named/ns1.teo-en-ming.com.db:<br> </div> <div><br> </div> <div><br> </div> <div>; Panel %version%<br> </div> <div>; Zone file for ns1.teo-en-ming.com<br> </div> <div>$TTL 14400<br> </div> <div>ns1.teo-en-ming.com. 86400 IN = SOA ns1.teo-en-ming.com. &nb= sp; info.centos-webpanel.com. (<br> </div> <div> 2013071600 ;serial, todays date+todays<br> </div> <div> 86400 ;refresh, seconds<br> </div> <div> 7200 ;retry, seconds<br> </div> <div> 3600000 ;expire, seconds<br> </div> <div> 86400 ;minimum, seconds<br> </div> <div> )<br> </div> <div>ns1.teo-en-ming.com. 86400 IN NS ns1.teo-en-ming.com.<br> </div> <div>ns1.teo-en-ming.com. 86400 IN NS ns2.teo-en-ming.com.<br> </div> <div>ns1.teo-en-ming.com. 14400 IN A 3.21.30.127<br> </div> <div><br> </div> <div>File /var/named/ns2.teo-en-ming.com.db:<br> </div> <div><br> </div> <div><br> </div> <div>; Panel %version%<br> </div> <div>; Zone file for ns2.teo-en-ming.com<br> </div> <div>$TTL 14400<br> </div> <div>ns2.teo-en-ming.com. 86400 IN = SOA ns1.teo-en-ming.com. &nb= sp; info.centos-webpanel.com. (<br> </div> <div> 2013071600 ;serial, todays date+todays<br> </div> <div> 86400 ;refresh, seconds<br> </div> <div> 7200 ;retry, seconds<br> </div> <div> 3600000 ;expire, seconds<br> </div> <div> 86400 ;minimum, seconds<br> </div> <div> )<br> </div> <div>ns2.teo-en-ming.com. 86400 IN NS ns1.teo-en-ming.com.<br> </div> <div>ns2.teo-en-ming.com. 86400 IN NS ns2.teo-en-ming.com.<br> </div> <div>ns2.teo-en-ming.com. 14400 IN A 3.12.224.179<br> </div> <div><br> </div> <div>File /var/named/teo-en-ming.com.db:<br> </div> <div><br> </div> <div>; Generated by CWP<br> </div> <div>; Zone file for teo-en-ming.com<br> </div> <div>$TTL 14400<br> </div> <div>@ 86400 IN  = ;SOA ns1.teo-en-ming.com. ceo.teo-en-ming-corp.com. (<br> </div> <div>2020022453 ; serial, todays date+todays<br> </div> <div>3600 ; refresh, seconds<br> </div> <div>7200 ; retry, seconds<br> </div> <div>1209600 ; expire, seconds<br> </div> <div>86400 ) ; minimum, seconds<br> </div> <div>@ 86400 IN NS ns1.teo-en-ming.com.<br> </div> <div>@ 86400 IN NS ns2.teo-en-ming.com.<br> </div> <div>@ IN A 3.21.30.127<br> </div> <div>localhost.teo-en-ming.com. IN A 127.0.0.1<br> </div> <div>@ IN MX 0 teo-en-ming.com.<br> </div> <div>mail 14400 IN CNAME teo-en-ming.com.<br> </div> <div>smtp 14400 IN CNAME teo-en-ming.com.<br> </div> <div>pop 14400 IN CNAME teo-en-ming.com.<br> </div> <div>pop3 14400 IN CNAME teo-en-ming.com.<br> </div> <div>imap 14400 IN CNAME teo-en-ming.com.<br> </div> <div>webmail 14400 IN A 3.21.30.127<br> </div> <div>cpanel 14400 IN A 3.21.30.127<br> </div> <div>cwp 14400 IN A 3.21.30.127<br> </div> <div>www 14400 IN CNAME teo-en-ming.com.<br> </div> <div>ftp 14400 IN CNAME teo-en-ming.com.<br> </div> <div>_dmarc 14400 IN TXT "v=3DDMARC1; p=3Dnone"<br> </div> <div>@ 14400 IN TXT "v=3Dspf1 +a +mx +ip4:3.21.30.127 ~all= "<br> </div> <div>ns1.teo-en-ming.com. 14400 IN A 3.21.30.127<br> </div> <div>ns2.teo-en-ming.com. 14400 IN A 3.12.224.179<br> </div> <div>default._domainkey 14400 IN TXT "v=3DDKIM1; k=3Drsa; p=3DMIGfMA0G= CSqGSIb3DQEBAQUAA4GNADCBiQKBgQDEXk5wQIfKJPjTkkj0yHGX8yIJOOrsOsvAqbqVaEBFBWh= RlF7YxyGzchaAdWEVQkozcsWPIL5DgJ7vWBoJIGqfNOT7vO/lStqNcXC+2hYVIF7MTB8i6t= BW1/UDEuL8oammKWDq8P9Fpduk6JppV7rtKXeFzrYj35ydIhDIKUABcwIDAQAB"<br> </div> <div><br> </div> <div>BIND DNS CONFIGURATION ON THE SLAVE DNS MANAGER<br> </div> <div>=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D<br= > </div> <div><br> </div> <div>File /etc/named.conf:<br> </div> <div><br> </div> <div>//<br> </div> <div>// named.conf<br> </div> <div>//<br> </div> <div>// Provided by Red Hat bind package to configure the ISC BIND named(8)= DNS<br> </div> <div>// server as a caching only nameserver (as a any DNS resolver only).<b= r> </div> <div>//<br> </div> <div>// See /usr/share/doc/bind*/sample/ for example named configuration fi= les.<br> </div> <div>//<br> </div> <div>// See the BIND Administrator's Reference Manual (ARM) for details abo= ut the<br> </div> <div>// configuration located in /usr/share/doc/bind-{version}/Bv9ARM.html<= br> </div> <div><br> </div> <div>options {<br> </div> <div>listen-on port 53 { any; };<br> </div> <div>listen-on-v6 port 53 { ::1; };<br> </div> <div>directory "/var/named";<br> </div> <div>dump-file "/var/named/data/cache_dump.db";<br> </div> <div>statistics-file "/var/named/data/named_stats.txt";<br> </div> <div>memstatistics-file "/var/named/data/named_mem_stats.txt";<br= > </div> <div>recursing-file "/var/named/data/named.recursing";<br> </div> <div>secroots-file "/var/named/data/named.secroots";<br> </div> <div>allow-query { any; };<br> </div> <div><br> </div> <div>/* <br> </div> <div>- If you are building an AUTHORITATIVE DNS server, do NOT enable recur= sion.<br> </div> <div>- If you are building a RECURSIVE (caching) DNS server, you need to en= able <br> </div> <div> recursion. <br> </div> <div>- If your recursive DNS server has a public IP address, you MUST enabl= e access <br> </div> <div> control to limit queries to your legitimate users. Failing to d= o so will<br> </div> <div> cause your server to become part of large scale DNS amplificati= on <br> </div> <div> attacks. Implementing BCP38 within your network would greatly<b= r> </div> <div> reduce such attack surface <br> </div> <div>*/<br> </div> <div>recursion no;<br> </div> <div><br> </div> <div>dnssec-enable yes;<br> </div> <div>dnssec-validation yes;<br> </div> <div><br> </div> <div>/* Path to ISC DLV key */<br> </div> <div>bindkeys-file "/etc/named.root.key";<br> </div> <div><br> </div> <div>managed-keys-directory "/var/named/dynamic";<br> </div> <div><br> </div> <div>pid-file "/run/named/named.pid";<br> </div> <div>session-keyfile "/run/named/session.key";<br> </div> <div><br> </div> <div>masterfile-format text;<br> </div> <div>};<br> </div> <div><br> </div> <div>logging {<br> </div> <div> channel default_debug {<br> </div> <div> file "dat= a/named.run";<br> </div> <div> severity dynam= ic;<br> </div> <div> };<br> </div> <div>};<br> </div> <div><br> </div> <div>zone "." IN {<br> </div> <div>type hint;<br> </div> <div>file "named.ca";<br> </div> <div>};<br> </div> <div><br> </div> <div>include "/etc/named.rfc1912.zones";<br> </div> <div>include "/etc/named.root.key";<br> </div> <div><br> </div> <div><br> </div> <div>// zone teo-en-ming.com<br> </div> <div>// zone "teo-en-ming.com" {type master; file "/var/name= d/teo-en-ming.com.db";};<br> </div> <div>// zone_end teo-en-ming.com<br> </div> <div><br> </div> <div>//Slave dns configuration<br> </div> <div>include "/etc/named/slave.conf";<br> </div> <div><br> </div> <div>File /var/named/teo-en-ming.com.db (WRONG, DON'T USE):<br> </div> <div><br> </div> <div>; Generated by CWP<br> </div> <div>; Zone file for teo-en-ming.com<br> </div> <div>$TTL 14400<br> </div> <div>@ 86400 IN  = ;SOA ns1.centos-webpanel.com. ceo.teo-en-ming-corp.com. (<br> </div> <div>2020022660 ; serial, todays date+todays<br> </div> <div>3600 ; refresh, seconds<br> </div> <div>7200 ; retry, seconds<br> </div> <div>1209600 ; expire, seconds<br> </div> <div>86400 ) ; minimum, seconds<br> </div> <div>@ 86400 IN NS ns1.centos-webpanel.com.<br> </div> <div>@ 86400 IN NS ns2.centos-webpanel.com.<br> </div> <div>@ IN A 3.12.224.179<br> </div> <div>localhost.teo-en-ming.com. IN A 127.0.0.1<br> </div> <div>@ IN MX 0 teo-en-ming.com.<br> </div> <div>mail 14400 IN CNAME teo-en-ming.com.<br> </div> <div>smtp 14400 IN CNAME teo-en-ming.com.<br> </div> <div>pop 14400 IN CNAME teo-en-ming.com.<br> </div> <div>pop3 14400 IN CNAME teo-en-ming.com.<br> </div> <div>imap 14400 IN CNAME teo-en-ming.com.<br> </div> <div>webmail 14400 IN A 3.12.224.179<br> </div> <div>cpanel 14400 IN A 3.12.224.179<br> </div> <div>cwp 14400 IN A 3.12.224.179<br> </div> <div>www 14400 IN CNAME teo-en-ming.com.<br> </div> <div>ftp 14400 IN CNAME teo-en-ming.com.<br> </div> <div>_dmarc 14400 IN TXT "v=3DDMARC1; p=3Dnone"<br> </div> <div>@ 14400 IN TXT "v=3Dspf1 +a +mx +ip4:3.12.224.179 ~al= l"<br> </div> <div>default._domainkey 14400 IN TXT "v=3DDKIM1; k=3Drsa; p=3DMIGfMA0G= CSqGSIb3DQEBAQUAA4GNADCBiQKBgQCktDYpEtFO7dyJeErMbjHvyfJYU8RqDeS7WVqQnjH4fP4= 2JSqPmxEFX+QytFTlGqd6ndlz9Tjqi1iZsD0ajB/+0Pkwq/KtL6NVo2TIqnXj8VebV9= +FEcx+FGvLA/b5zz+Hfn0Bf+w/2T2bSwUm+tJoHilmANCFGlcGmpO9/= lXvAwIDAQAB"<br> </div> <div><br> </div> <div>File /etc/named/slave.conf:<br> </div> <div><br> </div> <div>zone "teo-en-ming.com" { type slave; file "slave/db.teo= -en-ming.com"; masters { 3.21.30.127; };}; //username:enming<br> </div> <div><br> </div> <div>That's all folks!</div> <div><br> </div> <div><br> </div> <div><br> </div> <div><br> </div> <div><br> </div> <div><br> </div> <div><br> </div> <span></span><br> </div> <div style=3D"font-family: Calibri, Arial, Helvetica, sans-serif; font-size= : 12pt; color: rgb(0, 0, 0);"> <br> </div> <div id=3D"Signature"> <div></div> <div></div> <div id=3D"divtagdefaultwrapper" dir=3D"ltr" style=3D"font-size:12pt; color= :#000000; font-family:Calibri,Helvetica,sans-serif"> <p style=3D"margin-top:0px; margin-bottom:0px; margin-top:0; margin-bottom:= 0"></p> <pre style=3D"font-family:"courier new",courier,monospace; font-s= ize:16px"><b><span id=3D"ms-rterangepaste-start"></span></b><div style=3D""= ><span style=3D"font-family:Arial,Helvetica,sans-serif; font-size:12pt"><b>= -----BEGIN EMAIL SIGNATURE-----</b></span></div><div style=3D""><b><br></b>= </div><div style=3D""><span style=3D"font-family:Arial,Helvetica,sans-serif= ; font-size:12pt"><b>The Gospel for all Targeted Individuals (TIs):</b></sp= an></div><div style=3D""><b><br></b></div><div style=3D""><span style=3D"fo= nt-family:Arial,Helvetica,sans-serif; font-size:12pt"><b>[The New York Time= s] Microwave Weapons Are Prime Suspect in Ills of</b></span></div><div styl= e=3D""><span style=3D"font-family:Arial,Helvetica,sans-serif; font-size:12p= t"><b>U.S. Embassy Workers</b></span></div><div style=3D""><b><br></b></div= ><div style=3D""><span style=3D"font-family:Arial,Helvetica,sans-serif; fon= t-size:12pt"><b>Link: https://www.nytimes.com/2018/09/01/science/sonic-atta= ck-cuba-microwave.html</b></span></div><div style=3D""><b><br></b></div><di= v style=3D""><span style=3D"font-family:Arial,Helvetica,sans-serif; font-si= ze:12pt"><b>***************************************************************= *****************************</b></span></div><div style=3D""><b><br></b></= div><div style=3D""><b><br></b></div><div style=3D""><span style=3D"font-fa= mily:Arial,Helvetica,sans-serif; font-size:12pt"><b></b></span></div><b><sp= an style=3D"font-family:Arial,Helvetica,sans-serif">Singaporean Mr. Turrito= psis Dohrnii Teo En Ming's Academic</span><span><br></span><span style=3D"f= ont-family:Arial,Helvetica,sans-serif">Qualifications as at 14 Feb 2019 and= refugee seeking attempts at the United Nations Refugee Agency Bangkok (21 = Mar 2017), in Taiwan (5 Aug 2019) and Australia (25 Dec 2019 to 9 Jan 2020)= :</span></b><div style=3D""><b><span style=3D"font-size:12pt; font-family:A= rial,Helvetica,sans-serif"></span></b></div><div style=3D""><b><br></b></di= v><div style=3D""><span style=3D"font-family:Arial,Helvetica,sans-serif; fo= nt-size:12pt"><b>[1] https://tdtemcerts.wordpress.com/</b></span></div><div= style=3D""><b><br></b></div><div style=3D""><span style=3D"font-family:Ari= al,Helvetica,sans-serif; font-size:12pt"><b>[2] https://tdtemcerts.blogspot= .sg/</b></span></div><div style=3D""><b><br></b></div><div style=3D""><span= style=3D"font-family:Arial,Helvetica,sans-serif; font-size:12pt"><b>[3] ht= tps://www.scribd.com/user/270125049/Teo-En-Ming</b></span></div><div style= =3D""><b><br></b></div><div style=3D""><span style=3D"font-family:Arial,Hel= vetica,sans-serif; font-size:12pt"><b>-----END EMAIL SIGNATURE-----</b></sp= an></div><b><span id=3D"ms-rterangepaste-end"></span><br></b></pre> <p style=3D"margin-top:0px; margin-bottom:0px"></p> </div> </div> </body> </html> --_000_SG2PR01MB21417D0D57CEAC9442BD66A887EB0SG2PR01MB2141apcp_-- --===============4329076197748810781== Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 Content-Disposition: inline LS0gCmh0dHA6Ly9saXN0cy5saW51eGZyb21zY3JhdGNoLm9yZy9saXN0aW5mby9sZnMtY2hhdApG QVE6IGh0dHA6Ly93d3cubGludXhmcm9tc2NyYXRjaC5vcmcvYmxmcy9mYXEuaHRtbApVbnN1YnNj cmliZTogU2VlIHRoZSBhYm92ZSBpbmZvcm1hdGlvbiBwYWdlCg== --===============4329076197748810781==--