Thursday, October 11, 2012

Installing BIND9 on FreeBSD 9



http://4.bp.blogspot.com/_5OgNcVc62bM/TJD3Jg6jNMI/AAAAAAAAARQ/GvqnSrJclic/s1600/image0.png
pkg_add -r wget

mkdir /usr/tmp

cd /usr/tmp

pkg_add -v -r perl

wget ftp://ftp.isc.org/isc/bind9/9.9.1-P3/bind-9.9.1-P3.tar.gz

gzip bind-9.9.1-P3.tar.gz

tar -xfv bind-9.9.1-P3.tar

cd bind-9.9.1-P3.tar.gz

./configure

make

make install

pkg_add -r nano

ln -s /usr/local/bin/nano /usr/bin/nano

/var/named/etc/namedb/

nano named.conf



TO DO: Post named.conf example and zone files for my simple DNS server

TO DO: Add IPV6 AAAA Records 
TO DO: Look into DNSSEC

GRE between Vyatta Core & pfSense

Vyatta:

vyatta@vyatta1-site1:~$ show configuration
interfaces {
    ethernet eth0 {
        address 192.168.1.1/24
        duplex auto
        hw-id 00:0c:29:00:a3:d7
        smp_affinity auto
        speed auto
    }
    ethernet eth1 {
        address dhcp
        duplex auto
        hw-id 00:0c:29:00:a3:e1
        smp_affinity auto
        speed auto
    }
    loopback lo {
    }
    tunnel tun0 {
        address 192.168.10.1/30
        description "GRE TUNNEL TO SITE2"
        encapsulation gre
        local-ip 10.1.1.2
        multicast enable
        remote-ip 10.2.2.3
        ttl 255
    }
}
protocols {
    ospf {
        log-adjacency-changes {
        }
        parameters {
            abr-type cisco
            rfc1583-compatibility
            router-id 2.2.2.2
        }
    }
    static {
        route 0.0.0.0/0 {
            next-hop 10.1.1.1 {
            }
        }
    }
}
service {
    nat {
        rule 1 {
            outbound-interface eth1
            source {
                address 192.168.1.0/24
            }
            type masquerade
        }
    }

 

pfSense:




 
TO DO:
Secure tunnels with IPSEC + Firewall rules on both sides
Enable dynamic routing between sites.