Starting and Testing the Caching Name Server

Using the Berkeley Internet Domain Name (BIND) System

Most UNIX systems, including CentOS Linux, come with the BIND system-a well-known implementation of DNS. The BIND software is installed during CentOS Linux installation, as long as you select the DNS Name Server package group when selecting the packages for installation.

To see which version of BIND is installed on your CentOS Linux system, type the following command:

rpm -q bind
bind-9.2.1-16

As the output shows, BIND Version 9.2.1 is installed on my system.

BIND includes three major components:

• The named daemon-the name server- that responds to queries about hostnames and IP addresses

• A resolver library that applications can use to resolve hostnames into IP addresses and vice versa

• Command-line DNS utility programs (DNS clients), such as dig (Domain Internet Groper) and host, that users can use to query DNS

The next few sections describe these components of BIND. Later sections describe how to configure the resolver and the name server.

Understanding named-the BIND Name Server

The named daemon is the name server that responds to queries about hostnames and IP addresses. Based on the configuration files and the local DNS database, named either provides answers to queries or asks other servers and caches their responses. The named server also performs a function referred to as zone transfer, which involves copying data among the name servers in a domain.

To run a name server on your CentOS Linux system, you have to run named with the appropriate configuration files. Later in this chapter, you learn about the configuration files and data files that control how the name server operates.

Understanding Resolver Library

Finding an IP address for a hostname is referred to as resolving the hostname. Network-aware applications, such as a Web browser or an FTP client, use a resolver library to perform the conversion from the name to an IP address. Depending on the settings in the /etc/host.conf file, the resolver library consults the /etc/hosts file or makes a DNS query to resolve a hostname to its IP address. The resolver library queries the name servers listed in the /etc/resolv.conf file.

You do not need to learn much about the resolver library unless you are writing network-aware applications. To run Internet services properly, all you need to learn is how to configure the resolver. Subsequent sections in this chapter show you how to configure this and other aspects of DNS.

Using DNS Utility Programs

You can use the DNS utility programs-dig and host-to try out DNS from the shell prompt interactively. These utility programs are DNS clients. You can use them to query the DNS database and debug any name server you might set up on your system. By default, these programs query the name server listed in your system's /etc/resolv.conf file.

Using dig

You can use dig, the Domain Internet Groper program, to look up IP addresses for a domain name or vice versa. For example, to look up the IP address of addlab.nws .noaa.gov, type:

dig addlab.nws.noaa.gov

dig prints the results of the DNS query with a great amount of detail. Here's the output of that dig command on my CentOS Linux system:

; <<>> DiG 9.2.1 <<>> addlab.nws.noaa.gov
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 18561
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 6, ADDITIONAL: 6
;; QUESTION SECTION:
;addlab.nws.noaa.gov.           IN      A
;; ANSWER SECTION:
addlab.nws.noaa.gov.    86400   IN      A       140.90.141.131
;; AUTHORITY SECTION:
nws.noaa.gov.           86400   IN      NS      netinfo.hqnoc.noaa.gov.
nws.noaa.gov.           86400   IN      NS      ns3.noc.noaa.gov.
nws.noaa.gov.           86400   IN      NS      nwrns.noaa.gov.
nws.noaa.gov.           86400   IN      NS      serns.noaa.gov.
nws.noaa.gov.           86400   IN      NS      merns.noaa.gov.
nws.noaa.gov.           86400   IN      NS      mwrns.noaa.gov.
;; ADDITIONAL SECTION:
netinfo.hqnoc.noaa.gov. 86400   IN      A       140.90.148.33
ns3.noc.noaa.gov.       86400   IN      A       140.90.143.33
nwrns.noaa.gov.         67000   IN      A       161.55.32.3
serns.noaa.gov.         69806   IN      A       192.111.123.245
merns.noaa.gov.         68814   IN      A       192.94.173.133
mwrns.noaa.gov.         68801   IN      A       140.172.253.1
;; Query time: 50 msec
;; SERVER: 192.168.0.1#53(192.168.0.1)
;; WHEN: Sun Feb 16 17:59:12 2003
;; MSG SIZE  rcvd: 279

The answer you are looking for-the IP address of the host-is in the in the part of the output labeled ANSWER SECTION:. Here's what that section looks like for this sample query:

;; ANSWER SECTION:
addlab.nws.noaa.gov.    86400   IN      A       140.90.141.131

Thus, the IP address of addlab.nws.noaa.gov is 140.90.141.131. The other sections in dig's output shows details such as the server it queried, the authoritative name servers for the hostname it queried, the time it took to perform the query, and so on. In this example, the SERVER line near the end of dig's output shows that dig queries the name server at the IP address 192.168.0.1-that's the first name server listed in my system's /etc/resolv .conf file.

Reverse lookups (finding hostnames for IP addresses) are also easy with dig. All you have to do is use dig with the -x option. For example, to find the hostname corresponding to the IP address 140.90.141.131, type the following:

dig -x 140.90.141.131

On my system, the output from this query looks like this:

; <<>> DiG 9.2.1 <<>> -x 140.90.141.131
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 22285
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 6, ADDITIONAL: 6
;; QUESTION SECTION:
;131.141.90.140.in-addr.arpa.   IN      PTR
;; ANSWER SECTION:
131.141.90.140.in-addr.arpa. 86400 IN   PTR     addlab.nws.noaa.gov.
;; AUTHORITY SECTION:
141.90.140.in-addr.arpa. 86400  IN      NS      merns.noaa.gov.
141.90.140.in-addr.arpa. 86400  IN      NS      mwrns.noaa.gov.
141.90.140.in-addr.arpa. 86400  IN      NS      nwrns.noaa.gov.
141.90.140.in-addr.arpa. 86400  IN      NS      serns.noaa.gov.
141.90.140.in-addr.arpa. 86400  IN      NS      netinfo.hqnoc.noaa.gov.
141.90.140.in-addr.arpa. 86400  IN      NS      ns3.noc.noaa.gov.
;; ADDITIONAL SECTION:
ns3.noc.noaa.gov.       86400   IN      A       140.90.143.33
merns.noaa.gov.         86400   IN      A       192.94.173.133
mwrns.noaa.gov.         86400   IN      A       140.172.253.1
nwrns.noaa.gov.         86400   IN      A       161.55.32.3
serns.noaa.gov.         86400   IN      A       192.111.123.245
netinfo.hqnoc.noaa.gov. 86400   IN      A       140.90.148.33
;; Query time: 56 msec
;; SERVER: 192.168.0.1#53(192.168.0.1)
;; WHEN: Sun Feb 16 18:03:06 2003
;; MSG SIZE  rcvd: 304

As you can see, dig prints a lot of information in addition to the result. The answer you want comes right after the label ANSWER SECTION:, which in this case shows the hostname to be addlab.nws.noaa.gov.

You can use dig to query other types of DNS records than name-to-address and address-to-name lookups. For example, DNS also contains mail exchanger (record type MX) to enable delivery of mail to a specific doman. The MX record instructs querying computers where to send messages meant for a domain. To look up an MX record for a host, simply prefix the hostname with the record type. Here is an example that queries the MX record for the domain name comcast.net:

dig MX comcast.net

Here's the resulting output on my system:

; <<>> DiG 9.2.1 <<>> MX comcast.net
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 34566
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 3
;; QUESTION SECTION:
;comcast.net.                   IN      MX
;; ANSWER SECTION:
comcast.net.            229297  IN      MX      0 mx00.comcast.net.
;; AUTHORITY SECTION:
comcast.net.            12924   IN      NS      NS01.JDC01.PA.comcast.net.
comcast.net.            12924   IN      NS      NS02.JDC01.PA.comcast.net.
;; ADDITIONAL SECTION:
mx00.comcast.net.       5742    IN      A       24.153.64.1
NS01.JDC01.PA.comcast.net. 6437 IN      A       66.45.25.71
NS02.JDC01.PA.comcast.net. 2332 IN      A       66.45.25.72
;; Query time: 1459 msec
;; SERVER: 192.168.0.1#53(192.168.0.1)
;; WHEN: Sun Feb 16 18:05:21 2003
;; MSG SIZE  rcvd: 145

Again, the ANSWER SECTION shows the MX record, which says that mail addressed to comcast.net should be sent to mx00.comcast.net.

Using the host Command

You can also query DNS by using the host command. The host program produces output in a compact format. For example, here's a typical use of host to look up information about a host:

host www.gao.gov
www.gao.gov has address 161.203.16.2

By default, host prints the IP address and any MX record (these records list the names of mail handlers for the host).

For a reverse lookup, use the -t ptr option, along with the IP address as an argument, as follows:

host -t ptr 161.203.16.2
2.16.203.161.in-addr.arpa. domain name pointer www.gao.gov.

In this case, host prints the PTR record that shows the hostname corresponding to the specified IP address.

You can also try other types of records, such as CNAME (for canonical name), as follows:

host -t cname www.ee.umd.edu
www.ee.umd.edu. is an alias for www.ece.umd.edu.

This indicates that the canonical name for www.ee.umd.edu is www.ece.umd.edu.

Configuring DNS

You configure DNS by using a number of configuration files. The exact set of files depends on whether or not you are running a name server and, if so, the type of name server-caching or primary. Some configuration files are needed whether you run a name server or not.

Configuring the Resolver

You do not need a name server running on your system to use the DNS clients-dig and host. You can use them to query one of your domain's name servers. Typically, your ISP provides you with this information. You have to list the IP addresses of these name servers in the /etc/resolv.conf file-the resolver library reads this file to determine how to resolve hostnames. The format of this file is

domain your-domain.com
search your-domain.com
nameserver A.B.C.D
nameserver X.Y.Z.W

where A.B.C.D and X.Y.Z.W are the IP addresses (dotted-decimal IP addresses, such as 192.168.0.1) of the primary and secondary name servers your ISP provides you.

Another important configuration file is /etc/host.conf-this file tells the resolver what to do when attempting to resolve a hostname. A typical /etc/host/conf file contains the following line:

order hosts,bind 

This tells the resolver to consult the /etc/hosts file first and, if that fails, to query the name server listed in the /etc/resolv.conf file. As explained in Chapter 6, the /etc/hosts file associates IP addresses to hostnames. A typical line from the /etc/hosts file looks like the following:

127.0.0.1    lnbp200  localhost.localdomain  localhost

This line says that the IP address 127.0.0.1 is assigned to the hostnames lnbp200, localhost.localdomain, and localhost.

hosts:      files nisplus dns

Configuring a Caching Name Server

A simple, but useful name server is one that finds answers to hostname queries by using other name servers and then remembers the answer (by saving it in a cache) the next time you need it. This can shorten the time it takes to access hosts you have accessed recently because the answer is already in the cache.

When you install the DNS Name Server package group during CentOS Linux installation, the configuration files for a caching name server are also installed. That means you can start running the caching name server without much work on your part. This section describes the configuration files and what you have to do to start the caching name server.

Examining the /etc/named.conf File

The first configuration file you need is /etc/named.conf. The named server reads this configuration file when it starts. You already have this file if you have installed the DNS Name Server when you installed CentOS Linux in Chapter 2. Here's what the default /etc/named.conf file contains:

// generated by named-bootconf.pl
options {
        directory "/var/named";
        /*
         * If there is a firewall between you and nameservers you want
         * to talk to, you might need to uncomment the query-source
         * directive below.  Previous versions of BIND always asked
         * questions using port 53, but BIND 8.1 uses an unprivileged
         * port by default.
         */
        // query-source address * port 53;
};
//
// a caching only nameserver config
//
controls {
        inet 127.0.0.1 allow { localhost; } keys { rndckey; };
};
zone "." IN {
        type hint;
        file "named.ca";
};
zone "localhost" IN {
        type master;
        file "localhost.zone";
        allow-update { none; };
};
zone "0.0.127.in-addr.arpa" IN {
        type master;
        file "named.local";
        allow-update { none; };
};
include "/etc/rndc.key";

Comments are C-style (/* ... */) or C++-style (start with //). The file contains block statements enclosed in curly braces ({...}) and terminated by a semicolon (;). A block statement, in turn, contains other statements, each ending with a semicolon.

This /etc/named.conf file begins with an options block statement with a number of option statements. The directory option statement tells named where to look for all other files that appear on file lines in the configuration file. In this case, named looks for the files in the /var/named directory.

inet 127.0.0.1 allow { localhost; } keys { rndckey; };

After the options and controls statements, the /etc/named.conf file contains several zone statements, each enclosed in curly braces and terminated by a semicolon. Each zone statement defines a zone. The first zone is named "." (root zone); it's a hint zone that specifies the root name servers.

The next two zone statements in /etc/named.conf are master zones. The syntax for a master zone statement for an Internet class zone (indicated by the IN keyword) is as follows:

zone "zone-name" IN {
        type master;
        file "zone-file";
        [...other optional statements...]
};

The zone-name is the name of the zone, and zone-file is the zone file that contains the resource records (RR)-the database entries-for that zone.

The /etc/named.conf file ends with an include statement:

include "/etc/rndc.key";

This statement inserts the contents of the /etc/rndc.key file into the /etc/named.conf file. This enables you to place sensitive configuration data (such as encryption keys) in a separate file with appropriate permissions to prevent nonroot users from accessing it. In this case, the /etc/rndc.key file contains the key named rndc, which was referenced in the options statement eariler in the /etc/named.conf file. Here is what the key definition looks like:

key "rndckey" {
        algorithm       hmac-md5;
        secret "AbigLongEncryptionKey";
};

The algorithm option specifies the type of algorithm, which can be dsa or hmac-md5. The secret option specifies the encryption key.

dnssec-keygen -a hmac-md5 -b 128 -n HOST yourhost.domain.

Understanding the Zone File Format

The zone file typically starts with a number of directives, each of which begins with a dollar sign ($) followed by a keyword. Two commonly used directives are $TTL and $ORIGIN.

For example, the line

$TTL    86400

uses the $TTL directive to set the default time to live (TTL) for subsequent records with undefined TTLs. The value is in seconds, and the valid TTLs are in the range 0 to 2147483647 seconds. In this case, the directive sets the default TTL as 86400 seconds (or one day). The time specified in the time-to-live directive indicates how long the information in that record should be considered valid.

The $ORIGIN directive sets the domain name that will be appended to any unqualified records. For example, the following $ORIGIN directive sets the domain name to localhost:

$ORIGIN localhost.

After the directives, the zone file contains one or more resource records. These records follow a specific format, which is outlined in the next section.

Understanding Resource Record (RR) Format

You have to understand the format of the resource records before you can understand and intelligently work with zone files. Each resource record has the following format (the optional fields are shown in square brackets):

[domain] [ttl] [class] type data [;comment]

You should learn to read the resource records, at least the ones of type SOA, NS, A, PTR, and MX, which are some of the most commonly used. The next few sections briefly describe these records, illustrating each record type through an example.

SOA Record

A typical SOA record has the following format:

@     1D IN SOA       @ root (
                      42              ; serial 
                      3H              ; refresh -- 3 hours
                      15M             ; retry -- 15 minutes
                      1W              ; expiry -- 1 week
                      1D )            ; minimum -- 1 day

The first field specifies the domain as an @, which means the current domain (by default, the zone name, as shown in the /etc/named.conf file). The next field specifies a TTL of one day for this record. The class field is set to IN, which means that the record is for Internet. The type field specifies the record type as SOA. The rest of the fields constitute the data for the SOA record. The data includes the name of the primary name server (in this case, @, or the current domain), the email address of the technical contact, and five different times enclosed in parentheses.

NS Record

The NS record specifies the authoritative name servers for a zone. A typical NS record looks like the following:

.                        3600000  IN  NS    A.ROOT-SERVERS.NET.

In this case, the NS record lists the authoritative name server for the root zone (notice that the name of the first field is a single dot). The TTL field specifies the record to be valid for 1,000 hours (3600000 seconds). The class is IN, for Internet, and the record type is NS. The final field lists the name of the name server (A.ROOT-SERVERS.NET.), which ends with a dot.

A Record

An A record specifies the address corresponding to a name. For example, the following A record shows the address of A.ROOT-SERVERS.NET. as 198.41.0.4:

A.ROOT-SERVERS.NET.      3600000      A     198.41.0.4

In this case, the network class is not specified because the field is optional, and the default is IN.

PTR Record

PTR records are used for reverse mapping-converting an address to a name. Consider the following example:

1       IN      PTR     localhost.

This record comes from a file for a zone named 0.0.127.in-addr.arpa. Therefore, this record says that the name associated with the address 127.0.0.1 is localhost.

MX Record

An MX record specifies the name of a host that accepts mail on behalf of a specific domain. For example, here's a typical MX record:

naba    IN    MX    10    mailhub.lnbsoft.com.

This says that mail addressed to the hostnamed naba in the current domain should be sent to mailhub.lnbsoft.com (this host is called a mail exchanger). The number 10 is the preference value. For a list of multiple MX records with different preference values, the ones with lower preference values are tried first.

Now that you know a bit about resource records, you can go through the zone files for the caching name server.

Understanding the /var/named/named.ca File

Information about the root name servers is in the file /var/named/named.ca, as specified in the zone statement for the root zone in the /etc/named.conf file. The following listing shows the /var/named/named.ca file from a CentOS Linux system:

;       This file holds the information on root name servers needed to
;       initialize cache of Internet domain name servers
;       (e.g. reference this file in the "cache  .  <file>"
;       configuration file of BIND domain name servers).
;
;       This file is made available by InterNIC
;       under anonymous FTP as
;           file                /domain/named.cache
;           on server           FTP.INTERNIC.NET
;
;       last update:    Nov 5, 2002
;       related version of root zone:   2002110501
;
;
; formerly NS.INTERNIC.NET
;
.                        3600000  IN  NS    A.ROOT-SERVERS.NET.
A.ROOT-SERVERS.NET.      3600000      A     198.41.0.4
;
; formerly NS1.ISI.EDU
;
.                        3600000      NS    B.ROOT-SERVERS.NET.
B.ROOT-SERVERS.NET.      3600000      A     128.9.0.107
;
; formerly C.PSI.NET
;
.                        3600000      NS    C.ROOT-SERVERS.NET.
C.ROOT-SERVERS.NET.      3600000      A     192.33.4.12
;
; formerly TERP.UMD.EDU
;
.                        3600000      NS    D.ROOT-SERVERS.NET.
D.ROOT-SERVERS.NET.      3600000      A     128.8.10.90
;
; formerly NS.NASA.GOV
;
.                        3600000      NS    E.ROOT-SERVERS.NET.
E.ROOT-SERVERS.NET.      3600000      A     192.203.230.10
;
; formerly NS.ISC.ORG
;
.                        3600000      NS    F.ROOT-SERVERS.NET.
F.ROOT-SERVERS.NET.      3600000      A     192.5.5.241
;
; formerly NS.NIC.DDN.MIL
;
.                        3600000      NS    G.ROOT-SERVERS.NET.
G.ROOT-SERVERS.NET.      3600000      A     192.112.36.4
;
; formerly AOS.ARL.ARMY.MIL
;
.                        3600000      NS    H.ROOT-SERVERS.NET.
H.ROOT-SERVERS.NET.      3600000      A     128.63.2.53
;
; formerly NIC.NORDU.NET
;
.                        3600000      NS    I.ROOT-SERVERS.NET.
I.ROOT-SERVERS.NET.      3600000      A     192.36.148.17
;
; operated by VeriSign, Inc.
;
.                        3600000      NS    J.ROOT-SERVERS.NET.
J.ROOT-SERVERS.NET.      3600000      A     192.58.128.30
;
; housed in LINX, operated by RIPE NCC
;
.                        3600000      NS    K.ROOT-SERVERS.NET.
K.ROOT-SERVERS.NET.      3600000      A     193.0.14.129
;
; operated by IANA
;
.                        3600000      NS    L.ROOT-SERVERS.NET.
L.ROOT-SERVERS.NET.      3600000      A     198.32.64.12
;
; housed in Japan, operated by WIDE
;
.                        3600000      NS    M.ROOT-SERVERS.NET.
M.ROOT-SERVERS.NET.      3600000      A     202.12.27.33
; End of File

This file contains NS and A resource records that specify the names of authoritative name servers and their addresses for the root zone (indicated by the '.' in the first field of each NS record).

The comment lines in the file begin with a semicolon. These comments give you hints about the location of the root name servers. There are 13 root name servers for the Internet, most of the root servers are located in the United States. This file is a necessity for any name server because the name server has to be able to reach at least one root name server.

Understanding the /var/named/localhost.zone File

The /etc/named.conf file includes a zone statement for the localhost zone that specifies the zone file as localhost.zone. That file is located in the /var/named directory of your CentOS Linux system. The /var/named/localhost.zone file contains the following resource records:

$TTL    86400
$ORIGIN localhost.
@           1D IN SOA       @ root (
                            42              ; serial (d. adams)
                            3H              ; refresh
                            15M             ; retry
                            1W              ; expiry
                            1D )            ; minimum
            1D IN NS        @
            1D IN A         127.0.0.1   

This zone file starts with a $TTL directive that sets the default TTL to one day (86400 seconds) for subsequent records with undefined TTLs. Next, a $ORIGIN directive sets the domain name to localhost.

After these two directives, the /var/named/localhost.zone file contains three resource records (RRs): an SOA record, an NS record, and an A record. The SOA and the NS record specify the localhost as the primary authoritative name server for the zone. The A record specifies the address of localhost as 127.0.0.1.

Understanding the /var/named/named.local File

The third zone in the /etc/named.conf file specifies a reverse-mapping zone named 0.0.127.in-addr.arpa. For this zone, the zone file is /var/named/named.local, which contains the following:

$TTL    86400
@       IN      SOA     localhost. root.localhost.  (
                                      1997022700 ; Serial
                                      28800      ; Refresh
                                      14400      ; Retry
                                      3600000    ; Expire
                                      86400 )    ; Minimum
        IN      NS      localhost.
1       IN      PTR     localhost.

The SOA and NS records specify localhost as the primary name server.

Starting and Testing the Caching Name Server

Now that you have studied the configuration files for the caching name server, you can start the name server and see it in operation. To start the name server, log in as root and type the following command at the shell prompt:

service named start

This starts named-the name server daemon.

chkconfig --level 35 named on

The named server writes diagnostic log messages in the /var/log/messages file. After you start named, you can check the log messages by opening /var/log/messages in a text editor. Following are some typical log messages from named when started on my CentOS Linux system:

Feb 14 18:02:09 localhost named[16400]: starting BIND 9.2.1 -u named
Feb 14 18:02:09 localhost named[16400]: using 1 CPU
Feb 14 18:02:10 localhost named[16400]: loading configuration from '/etc/named.conf'
Feb 14 18:02:10 localhost named: named startup succeeded
Feb 14 18:02:10 localhost named[16400]: no IPv6 interfaces found
Feb 14 18:02:10 localhost named[16400]: listening on IPv4 interface lo, 127.0.0.1#53
Feb 14 18:02:10 localhost named[16400]: listening on IPv4 interface eth1, 192.168.0.7#53
Feb 14 18:02:10 localhost named[16400]: command channel listening on 127.0.0.1#953
Feb 14 18:02:10 localhost named[16400]: zone 0.0.127.in-addr.arpa/IN: loaded serial 1997022700
Feb 14 18:02:10 localhost named[16400]: zone localhost/IN: loaded serial 42
Feb 14 18:02:10 localhost named[16400]: running

If there are no error messages from named, you can proceed to test the name server.

Now, you can use the host command to test the name server. For example, to look up the IP address of www.gao.gov by using the caching name server on localhost, type the following command:

host www.gao.gov localhost
Using domain server:
Name: localhost
Address: 127.0.0.1#53
Aliases:
www.gao.gov has address 161.203.16.2

As the output shows, the host command uses localhost as the DNS server and returns the IP address of www.gao.gov.

nameserver 127.0.0.1

Configuring a Primary Name Server

The best way to configure a primary name server is to start by configuring a caching name server, as explained in the previous sections. Then, add master zones for the domains for which you want this to be the primary name server. For example, suppose that I want to define a primary name server for the naba.net domain. Here are the steps I go through to configure that primary name server (after I log in as root):

1. Add the following zone statements to /etc/named.conf file:

   zone "naba.net" IN {
       type master;
       file "naba.zone";
   };
   zone "0.168.192.in-addr.arpa" IN {
       type master;
       file "0.168.192.zone";
   };

2. Create the zone file var/named/naba.zone with the following lines in it:

   $TTL    86400
   $ORIGIN naba.net.
   @           1D IN SOA       @ root.naba.net (
                               100             ; serial 
                               3H              ; refresh
                               15M             ; retry
                               1W              ; expiry
                               1D )            ; minimum
               1D IN NS        @
               1D IN A         192.168.0.7
   wxp    IN    A    192.168.0.2 

3. Create the zone file var/named/0.168.192.zone with the following lines in it:

   $TTL    86400
   ; Remember zone name is: 0.168.192.in-addr.arpa
   @       IN      SOA     naba.net. root.naba.net  (
                                         1         ; Serial
                                         28800      ; Refresh
                                         14400      ; Retry
                                         3600000    ; Expire
                                         86400 )    ; Minimum
           IN      NS      naba.net.
   7       IN      PTR     naba.net.
   2       IN      PTR    wxp.naba.net.
   

To test the new configuration, restart the named server with the following command:

service named restart

Now, use dig or host to query the DNS server. For example, here's how I use host to check the address of the host wxp.naba.net at the DNS server running on localhost:

host wxp.naba.net localhost
Using domain server:
Name: localhost
Address: 127.0.0.1#53
Aliases:
wxp.naba.net has address 192.168.0.2

If you want to use dig to check the DNS server, type the following command:

dig @localhost wxp.naba.net

That @localhost part specifies the DNS server that dig should contact.

Here is an example of when I try a reverse lookup with the IP address 192.168.0.2:

host 192.168.0.2 localhost
Using domain server:
Name: localhost
Address: 127.0.0.1#53
Aliases:
2.0.168.192.in-addr.arpa domain name pointer wxp.naba.net