Small-Time DNS with BIND9 - Revision history

Tgirl: /* Create the Forward Lookup Zone File */ fix typo

2025-11-16T12:45:48Z

Create the Forward Lookup Zone File: fix typo

← Older revision		Revision as of 12:45, 16 November 2025
Line 201:		Line 201:
	=== Create the Forward Lookup Zone File ===		=== Create the Forward Lookup Zone File ===

	The zone file for localhost is fairly simple, with only one A record. An example is ~~show~~ below. Create a new file with the path /etc/bind/zones/localhost and copy the contents of the example into it.		The zone file for localhost is fairly simple, with only one A record. An example is shown below. Create a new file with the path /etc/bind/zones/localhost and copy the contents of the example into it.

	$TTL 3600		$TTL 3600

2025-11-16T12:36:43Z

Create the Zone File: : fix typo in path

← Older revision		Revision as of 12:36, 16 November 2025
Line 133:		Line 133:
	Be sure to check the file using named-checkzone and fix any errors before continuing. The positional parameters are ''zone name'' and ''file name''.		Be sure to check the file using named-checkzone and fix any errors before continuing. The positional parameters are ''zone name'' and ''file name''.

	# named-checkzone home /etc/bind/~~zone~~/home		# named-checkzone home /etc/bind/zones/home
	zone home/IN: loaded serial 1		zone home/IN: loaded serial 1
	OK		OK

2025-09-12T13:54:05Z

Blocking Ads: Typo fix

← Older revision		Revision as of 13:54, 12 September 2025
Line 284:		Line 284:
	The Response Policy Zone (RPZ) feature of BIND9 makes it easy to block access to an unwanted domain by returning a domain not found response instead of an IP address. Three steps are required to get this working.		The Response Policy Zone (RPZ) feature of BIND9 makes it easy to block access to an unwanted domain by returning a domain not found response instead of an IP address. Three steps are required to get this working.

	# Enable to RPZ feature in the options section of named.conf		# Enable the RPZ feature in the options section of named.conf
	# Create a zone file lising unwanted domains.		# Create a zone file lising unwanted domains.
	# Reference the zone file in named.conf		# Reference the zone file in named.conf

2025-03-07T00:46:48Z

Configure as a Forwarding DNS Server: allow queries from anywhere after recent versions of BIND9 now block by default

2025-02-10T17:24:33Z

Maintaining the RPZ File: Stop script from failing on first run

← Older revision		Revision as of 17:24, 10 February 2025
Line 377:		Line 377:
	curl -Os https://raw.githubusercontent.com/hagezi/dns-blocklists/main/rpz/multi.txt \|\| exit 2		curl -Os https://raw.githubusercontent.com/hagezi/dns-blocklists/main/rpz/multi.txt \|\| exit 2
	named-checkzone rpz ./multi.txt \|\| exit 3		named-checkzone rpz ./multi.txt \|\| exit 3
	cp rpz rpz~ && mv multi.txt rpz		cp rpz rpz~
			mv multi.txt rpz
	service named reload		service named reload

2025-02-05T04:25:35Z

← Older revision		Revision as of 04:25, 5 February 2025
Line 390:		Line 390:

	Whichever you choose to pursue is up to you. See the [https://bind9.readthedocs.io BIND9 documentation] for more information.		Whichever you choose to pursue is up to you. See the [https://bind9.readthedocs.io BIND9 documentation] for more information.
			[[Category:Networking]]

2025-02-03T19:53:47Z

Next Steps: Removed encryption. DNSSEC is not actually encryption, it's cryptographic signing.

← Older revision		Revision as of 19:53, 3 February 2025
Line 387:		Line 387:
	* IPv6 domains		* IPv6 domains
	* Secondary DNS servers		* Secondary DNS servers
	* DNSSEC ~~encryption~~		* DNSSEC

	Whichever you choose to pursue is up to you. See the [https://bind9.readthedocs.io BIND9 documentation] for more information.		Whichever you choose to pursue is up to you. See the [https://bind9.readthedocs.io BIND9 documentation] for more information.

2025-02-03T18:42:10Z

Create the Zone File: Remove uninteded line break

2025-02-03T18:41:24Z

Create the Zone File: Add step to fix dir ownership to allow automatic dnssec signing if desired

2025-02-02T17:35:49Z

Remove redundant title heading

← Older revision		Revision as of 17:35, 2 February 2025
Line 1:		Line 1:
	~~= Small-Time DNS Server with BIND9 =~~

	This document shows how to configure a basic installation of the ISC DNS server, BIND9, for Alpine Linux. This is useful when you want to have a DNS server for your home or home office network. The instructions start with a basic caching, forwarding DNS server. It continues on with adding lookup zones for your LAN hosts. Finally, it gives a peek at setting up ad blocking. You can work through as much or as little as you like depending on your DNS needs.		This document shows how to configure a basic installation of the ISC DNS server, BIND9, for Alpine Linux. This is useful when you want to have a DNS server for your home or home office network. The instructions start with a basic caching, forwarding DNS server. It continues on with adding lookup zones for your LAN hosts. Finally, it gives a peek at setting up ad blocking. You can work through as much or as little as you like depending on your DNS needs.