Discussion:
Email sever and DNS
(too old to reply)
George at Clug
2024-08-03 03:30:02 UTC
Permalink
I pruned my inbox a bit too much.


Thanks to who ever it was who recommended it !     I have placed an
order:
https://www.tiltedwindmillpress.com/product/ryoms-preorder/


When it is released, I will see how useful it is.



It has been a long time since I purchased a book on a topic, as all to
frequently the books never covered the detail I needed, and I had
found it more effective to do Internet searches and summarise the
information I was needing.



https://www.postfix.org/documentation.html


Does anyone have any recommendations on detailed books on Bind9 for
authoritative servers which would also include DNSSEC?


If anyone has knowledge in this area, I could do a few posts. 
Someone recommended a Bind9 email list, which I forgot to capture, so
please repost that link, if you read this.


I did find this web site that seems to give a good overview:
https://www.neatcode.org/dns/




George.
George at Clug
2024-08-03 05:10:01 UTC
Permalink
Post by George at Clug
I pruned my inbox a bit too much.
Thanks to who ever it was who recommended it !     I have placed an
https://www.tiltedwindmillpress.com/product/ryoms-preorder/
When it is released, I will see how useful it is.
It has been a long time since I purchased a book on a topic, as all to
frequently the books never covered the detail I needed, and I had
found it more effective to do Internet searches and summarise the
information I was needing.
https://www.postfix.org/documentation.html
Does anyone have any recommendations on detailed books on Bind9 for
authoritative servers which would also include DNSSEC?
If anyone has knowledge in this area, I could do a few posts. 
Someone recommended a Bind9 email list, which I forgot to capture, so
please repost that link, if you read this.
That would have been:
https://lists.isc.org/mailman/listinfo/bind-users
Post by George at Clug
https://www.neatcode.org/dns/
George.
jeremy ardley
2024-08-03 06:40:01 UTC
Permalink
Post by George at Clug
Does anyone have any recommendations on detailed books on Bind9 for
authoritative servers which would also include DNSSEC?
I'm not sure about books but there are many tutorials.

The first issue though is that bind directory layout varies between
distributions, so a tutorial for one distro will have to be adapted to
run on another.

This site is fairly comprehensive about how to do it on Debian 11 and 12.

https://wiki.debian.org/DNSSEC%20Howto%20for%20BIND%209.9+

However on reading it, I see that most directories are the same as what
I have but there are some small differences.

The main problem areas you will find are initial key generation and then
subsequent automatic signing of zones when you have made a modification.

It's a really good idea to check that the changes have actually been
taken up and made their way into the signed zone records. I always check
the syslogs to see if the zone transfers are of the signed records and
have the new SOA Serial Number.
Walt E
2024-08-03 06:40:01 UTC
Permalink
BIND is a system as old as internet.
You could read the book ‘DNS and BIND’ by oreily.

https://www.ubuy.com.gh/product/14R0U15K-dns-and-bind-5th-edition

Thanks
Post by George at Clug
I pruned my inbox a bit too much.
Thanks to who ever it was who recommended it !     I have placed an
https://www.tiltedwindmillpress.com/product/ryoms-preorder/
When it is released, I will see how useful it is.
It has been a long time since I purchased a book on a topic, as all to
frequently the books never covered the detail I needed, and I had
found it more effective to do Internet searches and summarise the
information I was needing.
https://www.postfix.org/documentation.html
Does anyone have any recommendations on detailed books on Bind9 for
authoritative servers which would also include DNSSEC?
If anyone has knowledge in this area, I could do a few posts. 
Someone recommended a Bind9 email list, which I forgot to capture, so
please repost that link, if you read this.
https://www.neatcode.org/dns/
George.
George at Clug
2024-08-03 09:00:02 UTC
Permalink
Post by Walt E
BIND is a system as old as internet.
You could read the book ‘DNS and BIND’ by oreily.
https://www.ubuy.com.gh/product/14R0U15K-dns-and-bind-5th-edition
Yes, thanks, that is a great book, I was trying to think of its name since the topics of DNS has reawaken my interest.

I am pleased it covers DNSSEC.

https://www.amazon.com.au/DNS-BIND-5e-Cricket-Liu/dp/0596100574
The fifth edition covers BIND 9.3.2,
Setting up name servers
Using MX records to route mail
The DNS Security Extensions (DNSSEC) and Transaction Signatures (TSIG)

George.
Post by Walt E
Thanks
Post by George at Clug
I pruned my inbox a bit too much.
Thanks to who ever it was who recommended it !     I have placed an
https://www.tiltedwindmillpress.com/product/ryoms-preorder/
When it is released, I will see how useful it is.
It has been a long time since I purchased a book on a topic, as all to
frequently the books never covered the detail I needed, and I had
found it more effective to do Internet searches and summarise the
information I was needing.
https://www.postfix.org/documentation.html
Does anyone have any recommendations on detailed books on Bind9 for
authoritative servers which would also include DNSSEC?
If anyone has knowledge in this area, I could do a few posts. 
Someone recommended a Bind9 email list, which I forgot to capture, so
please repost that link, if you read this.
https://www.neatcode.org/dns/
George.
Loading...