> Рано вам работать без панельки. Покупайте панельку и радуйтесь.
> По делу: прежде чем говорить о вторичных ns-ах, нужно настроить корректную отдачу
> с самого ВДС-а. И пока этого не сделаете - о вторичке
> даже не заикайтесь.
> В named.conf что? Банально, named перезагружали после добавления домена?в debian 8 перезагружается bind.
/etc/init.d/bind9 restart
----------------------------
cat /etc/bind/named.conf
// Managing acls
acl internals { 127.0.0.0/8; 185.12.95.0/24; };
// Load options
include "/etc/bind/named.conf.options";
// TSIG key used for the dynamic update
include "/etc/bind/ns-example-com_rndc-key";
// Configure the communication channel for Administrative BIND9 with rndc
// By default, they key is in the rndc.key file and is used by rndc and bind9
// on the localhost
controls {
inet 127.0.0.1 port 953 allow { 127.0.0.1; };
};
// prime the server with knowledge of the root servers
zone "." {
type hint;
file "/etc/bind/db.root";
};
include "/etc/bind/named.conf.default-zones";
include "/etc/bind/named.conf.local";
---------------------------------
cat /etc/bind/named.conf.options
//acl mynetwork {185.12.95.0/24; 127.0.0.1; };
options {
directory "/var/cache/bind";
// query-source address * port*;
// If there is a firewall between you and nameservers you want
// to talk to, you may need to fix the firewall to allow multiple
// ports to talk. See http://www.kb.cert.org/vuls/id/800113
// If your ISP provided one or more IP addresses for stable
// nameservers, you probably want to use them as forwarders.
// Uncomment the following block, and insert the addresses replacing
// the all-0's placeholder.
forward first;
forwarders {185.12.92.10; };
//===================================================================
// If BIND logs error messages about the root key being expired,
// you will need update your keys. See https://www.isc.org/bind-keys
//===================================================================
dnssec-validation auto;
auth-nxdomain no; # conform to RFC1035
listen-on-v6 { none; };
listen-on { 127.0.0.1; 185.12.95.222; };
//version "7";
allow-query { internals; };
allow-recursion { internals; };
//from ruweb
notify explicit;
also-notify { 207.99.125.191; 185.12.92.10; };
allow-transfer { 207.99.125.191; 185.12.92.10; 185.12.95.222; };
// version none;
};
--------------------------------------------
cat /etc/bind/named.conf.local
//
// Do any local configuration here
//
// Consider adding the 1918 zones here, if they are not used in your
// organization
//include "/etc/bind/zones.rfc1918";
zone "webkorona.ru" IN {
type master;
file "/etc/bind/db.webkorona.ru";
};
zone "afrobbswhow.ru" IN {
type master;
file "/etc/bind/db.afrobbshow.ru";
};
zone "95.12.185.in-addr.arpa" IN {
type master;
file "/etc/bind/95.12.185.in-addr.arpa.zone";
};
-----------------------------
cat 95.12.185.in-addr.arpa.zone
@ IN SOA webkorona.ru. admin.webkorona.ru. (
2016112701 ; Serial
1d ; Refresh
1h ; Retry
1w ; Expire
2h ; Negative Cache TTL
)
@ IN NS webkorona.ru.
IN NS ns1.webkorona.ru.
222 IN PTR webkorona.ru.
Вариант для распечатки
