DNS Test Setup for NAPTR, SRV,A records

Read here to install BIND on windows.

Login to linux server and install bind

# yum install bind bind-utils

 # systemctl enable named
# systemctl start named
# systemctl status named

 

Edit /etc/named.conf file

To enable BIND to listen on all ip address’s instead of only localost, comment out the following lines

#listen-on port 53 { 127.0.0.1; }; #listen-on-v6 port 53 { ::1; };

Allow your networks to query DNS
#allow-query { localhost; }; allow-query { localhost;172.30.0.0/16; };

Add zone entry in named.conf. Copy following to end of earlier created named.conf file.

zone "mytestdomain.com" { type master; file "/var/named/db.mytestdomain"; };

Add new zone file

Now put following new zone file in /var/named/ directory.
Create a new zone file /var/named/db.mytestdomain
$TTL 0 mytestdomain.com. IN SOA ns.mytestdomain.com. root.mytestdomain.com. ( 2004011522 ; Serial no., based on date 21600 ; Refresh after 6 hours 3600 ; Retry after 1 hour 604800 ; Expire after 7 days 3600 ; Minimum TTL of 1 hour ) mytestdomain.com. 43200 IN NS ns.mytestdomain.com. ; ns.mytestdomain.com. 43200 IN A 10.108.60.20 sipserver1.mytestdomain.com. 43200 IN A 172.30.1.139 sipserver2.mytestdomain.com. 43200 IN A 10.108.60.22 ; _sip._udp.mytestdomain.com. 43200 IN SRV 0 0 5065 sipserver1.mytestdomain.com. _sip._udp.mytestdomain.com. 43200 IN SRV 1 0 5060 sipserver2.mytestdomain.com. _sip._tcp.mytestdomain.com. 43200 IN SRV 0 4 5060 sipserver1.mytestdomain.com. _sip._tcp.mytestdomain.com. 43200 IN SRV 0 2 5060 sipserver2.mytestdomain.com. _sips._tcp.mytestdomain.com. 43200 IN SRV 2 0 5060 sipserver1.mytestdomain.com. _sips._tcp.mytestdomain.com. 43200 IN SRV 3 0 5060 sipserver2.mytestdomain.com. ; mytestdomain.com. IN NAPTR 2 0 "s" "SIPS+D2T" "" _sips._tcp.mytestdomain.com. mytestdomain.com. IN NAPTR 1 0 "s" "SIP+D2T" "" _sip._tcp.mytestdomain.com. mytestdomain.com. IN NAPTR 0 0 "s" "SIP+D2U" "" _sip._udp.mytestdomain.com.
Now you are ready to restart and run service.

# systemctl restart named

DNS Test commands

In following commands replace @10.108.1.200 with your just setup dns server ip

[root@hplabsbc01 debug]# dig @10.108.1.200 -t naptr mytestdomain.com ; <<>> DiG 9.9.4-RedHat-9.9.4-50.el7 <<>> @10.108.1.200 -t naptr mytestdomain.com ; (1 server found) ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 53340 ;; flags: qr aa rd; QUERY: 1, ANSWER: 3, AUTHORITY: 0, ADDITIONAL: 9 ;; WARNING: recursion requested but not available ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 4096 ;; QUESTION SECTION: ;mytestdomain.com. IN NAPTR ;; ANSWER SECTION: mytestdomain.com. 0 IN NAPTR 2 0 "s" "SIPS+D2T" "" _sips._tcp.mytestdomain.com. mytestdomain.com. 0 IN NAPTR 1 0 "s" "SIP+D2T" "" _sip._tcp.mytestdomain.com. mytestdomain.com. 0 IN NAPTR 0 0 "s" "SIP+D2U" "" _sip._udp.mytestdomain.com. ;; ADDITIONAL SECTION: sipserver1.mytestdomain.com. 43200 IN A 10.108.2.57 sipserver2.mytestdomain.com. 43200 IN A 10.108.60.22 _sip._udp.mytestdomain.com. 43200 IN SRV 0 0 5060 sipserver1.mytestdomain.com. _sip._udp.mytestdomain.com. 43200 IN SRV 1 0 5060 sipserver2.mytestdomain.com. _sip._tcp.mytestdomain.com. 43200 IN SRV 0 2 5060 sipserver2.mytestdomain.com. _sip._tcp.mytestdomain.com. 43200 IN SRV 0 4 5060 sipserver1.mytestdomain.com. _sips._tcp.mytestdomain.com. 43200 IN SRV 2 0 5060 sipserver1.mytestdomain.com. _sips._tcp.mytestdomain.com. 43200 IN SRV 3 0 5060 sipserver2.mytestdomain.com. ;; Query time: 46 msec ;; SERVER: 10.108.1.200#53(10.108.1.200) ;; WHEN: Thu Mar 28 17:58:00 UTC 2019 ;; MSG SIZE rcvd: 548

 

[root@hplabsbc01 debug]# dig @10.108.1.200 -t srv _sip._udp.mytestdomain.com ; <<>> DiG 9.9.4-RedHat-9.9.4-50.el7 <<>> @10.108.1.200 -t srv _sip._udp.mytestdomain.com ; (1 server found) ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 27583 ;; flags: qr aa rd; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 3 ;; WARNING: recursion requested but not available ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 4096 ;; QUESTION SECTION: ;_sip._udp.mytestdomain.com. IN SRV ;; ANSWER SECTION: _sip._udp.mytestdomain.com. 43200 IN SRV 0 0 5060 sipserver1.mytestdomain.com. _sip._udp.mytestdomain.com. 43200 IN SRV 1 0 5060 sipserver2.mytestdomain.com. ;; ADDITIONAL SECTION: sipserver1.mytestdomain.com. 43200 IN A 10.108.2.57 sipserver2.mytestdomain.com. 43200 IN A 10.108.60.22 ;; Query time: 37 msec ;; SERVER: 10.108.1.200#53(10.108.1.200) ;; WHEN: Thu Mar 28 18:05:33 UTC 2019 ;; MSG SIZE rcvd: 181

 

[root@hplabsbc01 debug]# dig @10.108.1.200 sipserver1.mytestdomain.com ; <<>> DiG 9.9.4-RedHat-9.9.4-50.el7 <<>> @10.108.1.200 sipserver1.mytestdomain.com ; (1 server found) ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 53431 ;; flags: qr aa rd; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1 ;; WARNING: recursion requested but not available ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 4096 ;; QUESTION SECTION: ;sipserver1.mytestdomain.com. IN A ;; ANSWER SECTION: sipserver1.mytestdomain.com. 43200 IN A 10.108.2.57 ;; Query time: 37 msec ;; SERVER: 10.108.1.200#53(10.108.1.200) ;; WHEN: Thu Mar 28 18:07:41 UTC 2019 ;; MSG SIZE rcvd: 72

How to Disable External DNS recursion

 

Configure following in section of options in /etc/bind/named.conf

allow-transfer {"none";}; allow-recursion {"none";}; recursion no;

restart and run service.
# systemctl restart named