Homework 03 - Hint DNS. Computer Center, CS, NCTU 2 Architecture ns.a.nctucs.net 140.113.a.a...

6
Homework 03 - Hint DNS

Transcript of Homework 03 - Hint DNS. Computer Center, CS, NCTU 2 Architecture ns.a.nctucs.net 140.113.a.a...

Page 1: Homework 03 - Hint DNS. Computer Center, CS, NCTU 2 Architecture ns.a.nctucs.net 140.113.a.a 192.168.1.0/24 ns.b.nctucs.net 140.113.b.b 192.168.2.0/24.

Homework 03 - Hint

DNS

Page 2: Homework 03 - Hint DNS. Computer Center, CS, NCTU 2 Architecture ns.a.nctucs.net 140.113.a.a 192.168.1.0/24 ns.b.nctucs.net 140.113.b.b 192.168.2.0/24.

Com

pu

ter C

en

ter, C

S, N

CTU

2

Architecture

ns.a.nctucs.net140.113.a.a192.168.1.0/24

ns.b.nctucs.net140.113.b.b192.168.2.0/24

slave

delegation

demo.b.nctucs.net192.168.2.100

demo.a.nctucs.net192.168.1.100

Page 3: Homework 03 - Hint DNS. Computer Center, CS, NCTU 2 Architecture ns.a.nctucs.net 140.113.a.a 192.168.1.0/24 ns.b.nctucs.net 140.113.b.b 192.168.2.0/24.

Com

pu

ter C

en

ter, C

S, N

CTU

3

What you really need

A DNS Server A machine in private network You need a Windows machine to test Samba AD You don’t need machines for each A record

Page 4: Homework 03 - Hint DNS. Computer Center, CS, NCTU 2 Architecture ns.a.nctucs.net 140.113.a.a 192.168.1.0/24 ns.b.nctucs.net 140.113.b.b 192.168.2.0/24.

Com

pu

ter C

en

ter, C

S, N

CTU

4

Slave DNS Server

If the master server shutdown, DNS service for your domain should still work

TTL don’t set too large for demo (for sync test)

Page 5: Homework 03 - Hint DNS. Computer Center, CS, NCTU 2 Architecture ns.a.nctucs.net 140.113.a.a 192.168.1.0/24 ns.b.nctucs.net 140.113.b.b 192.168.2.0/24.

Com

pu

ter C

en

ter, C

S, N

CTU

5

My DNS port has been banned…

If you and/or your teammate can’t access each other’s DNS server1. Put two server in the same subnet in the dorm network.

2. Get a VPS Github Student Developer Pack – DigitalOcean $100 credit for free

3. Use VPN If you don’t have public IP, use some like 10.x.x.x

• Case 1 and Case3 with private ip will have a special demo Only allow AXFR request from 140.113.235.0/24 choose whatever ip range you want (but don’t use 192.168.x.x) You need to show:

– The client in ip range can do AXFR request and normal DNS query– The client out of ip range can’t do AXFR request but can do normal DNS

query

Page 6: Homework 03 - Hint DNS. Computer Center, CS, NCTU 2 Architecture ns.a.nctucs.net 140.113.a.a 192.168.1.0/24 ns.b.nctucs.net 140.113.b.b 192.168.2.0/24.

Com

pu

ter C

en

ter, C

S, N

CTU

6

Help

IRC channel #nctuNASAon freenode BBS bs2.to board CS-SysAdmin Email [email protected] Goto CSCC to ask professional 3F at office hour!

It is welcome to email us for asking special way to demo But please don’t just say “what should I do?” Orz