How to configure dnsmasq as an authoritative DNS server?
I'd like to setup dnsmasq as an authoritative DNS server, but can't find any good guides for it. So could somebody please post a sample configuration of dnsmasq as an authoritative DNS server (with some basic options, such as A records)? I'd also like to know the path of the configuration, just so I set it up properly.
EDIT: Some clarification on my use case:
I intend to setup an authoritative DNS server so I can have automatic renewal of Let's Encrypt certificates using the DNS-01 challenge.
What I do not understand:
I've breifly read over http://www.thekelleys.org.uk/dnsmasq/docs/dnsmasq-man.html, but I don't understand which options are required for a basic configuration in authoritative only mode, nor how to configure the options.
debian dns dnsmasq
asked May 1 '18 at 0:35
GirafferGiraffer
997
bumped to the homepage by Community♦ 2 hours ago
This question has answers that may be good or bad; the system has marked it active so that they can be reviewed.
add a comment |
I'd like to setup dnsmasq as an authoritative DNS server, but can't find any good guides for it. So could somebody please post a sample configuration of dnsmasq as an authoritative DNS server (with some basic options, such as A records)? I'd also like to know the path of the configuration, just so I set it up properly.
EDIT: Some clarification on my use case:
I intend to setup an authoritative DNS server so I can have automatic renewal of Let's Encrypt certificates using the DNS-01 challenge.
What I do not understand:
I've breifly read over http://www.thekelleys.org.uk/dnsmasq/docs/dnsmasq-man.html, but I don't understand which options are required for a basic configuration in authoritative only mode, nor how to configure the options.
debian dns dnsmasq
asked May 1 '18 at 0:35
GirafferGiraffer
997
bumped to the homepage by Community♦ 2 hours ago
This question has answers that may be good or bad; the system has marked it active so that they can be reviewed.
Did you look at thekelleys.org.uk/dnsmasq/docs/setup.html ?
– Patrick Mevzek
May 1 '18 at 13:33
Yes, but I don't understand much of it, so that's why I'm asking for a sample configuration.
– Giraffer
May 1 '18 at 13:54
Start by explaining what you do not understand then... go back to the basics, state your question with all details on your use case.
– Patrick Mevzek
May 1 '18 at 14:17
@PatrickMevzek I've updated my question. If it still needs improvement, please post another comment telling me what information I should include. Thanks in advance!
– Giraffer
May 1 '18 at 14:42
add a comment |
I'd like to setup dnsmasq as an authoritative DNS server, but can't find any good guides for it. So could somebody please post a sample configuration of dnsmasq as an authoritative DNS server (with some basic options, such as A records)? I'd also like to know the path of the configuration, just so I set it up properly.
EDIT: Some clarification on my use case:
I intend to setup an authoritative DNS server so I can have automatic renewal of Let's Encrypt certificates using the DNS-01 challenge.
What I do not understand:
I've breifly read over http://www.thekelleys.org.uk/dnsmasq/docs/dnsmasq-man.html, but I don't understand which options are required for a basic configuration in authoritative only mode, nor how to configure the options.
debian dns dnsmasq
asked May 1 '18 at 0:35
GirafferGiraffer
997
I'd like to setup dnsmasq as an authoritative DNS server, but can't find any good guides for it. So could somebody please post a sample configuration of dnsmasq as an authoritative DNS server (with some basic options, such as A records)? I'd also like to know the path of the configuration, just so I set it up properly.
EDIT: Some clarification on my use case:
I intend to setup an authoritative DNS server so I can have automatic renewal of Let's Encrypt certificates using the DNS-01 challenge.
What I do not understand:
I've breifly read over http://www.thekelleys.org.uk/dnsmasq/docs/dnsmasq-man.html, but I don't understand which options are required for a basic configuration in authoritative only mode, nor how to configure the options.
debian dns dnsmasq
debian dns dnsmasq
asked May 1 '18 at 0:35
GirafferGiraffer
997
asked May 1 '18 at 0:35
GirafferGiraffer
997
edited May 1 '18 at 14:41
Giraffer
asked May 1 '18 at 0:35
GirafferGiraffer
997
asked May 1 '18 at 0:35
GirafferGiraffer
997
asked May 1 '18 at 0:35
GirafferGiraffer
997
997
bumped to the homepage by Community♦ 2 hours ago
This question has answers that may be good or bad; the system has marked it active so that they can be reviewed.
bumped to the homepage by Community♦ 2 hours ago
This question has answers that may be good or bad; the system has marked it active so that they can be reviewed.
Did you look at thekelleys.org.uk/dnsmasq/docs/setup.html ?
– Patrick Mevzek
May 1 '18 at 13:33
Yes, but I don't understand much of it, so that's why I'm asking for a sample configuration.
– Giraffer
May 1 '18 at 13:54
Start by explaining what you do not understand then... go back to the basics, state your question with all details on your use case.
– Patrick Mevzek
May 1 '18 at 14:17
@PatrickMevzek I've updated my question. If it still needs improvement, please post another comment telling me what information I should include. Thanks in advance!
– Giraffer
May 1 '18 at 14:42
add a comment |
Did you look at thekelleys.org.uk/dnsmasq/docs/setup.html ?
– Patrick Mevzek
May 1 '18 at 13:33
Yes, but I don't understand much of it, so that's why I'm asking for a sample configuration.
– Giraffer
May 1 '18 at 13:54
Start by explaining what you do not understand then... go back to the basics, state your question with all details on your use case.
– Patrick Mevzek
May 1 '18 at 14:17
@PatrickMevzek I've updated my question. If it still needs improvement, please post another comment telling me what information I should include. Thanks in advance!
– Giraffer
May 1 '18 at 14:42
Did you look at thekelleys.org.uk/dnsmasq/docs/setup.html ?
– Patrick Mevzek
May 1 '18 at 13:33
Did you look at thekelleys.org.uk/dnsmasq/docs/setup.html ?
– Patrick Mevzek
May 1 '18 at 13:33
Yes, but I don't understand much of it, so that's why I'm asking for a sample configuration.
– Giraffer
May 1 '18 at 13:54
Yes, but I don't understand much of it, so that's why I'm asking for a sample configuration.
– Giraffer
May 1 '18 at 13:54
Start by explaining what you do not understand then... go back to the basics, state your question with all details on your use case.
– Patrick Mevzek
May 1 '18 at 14:17
Start by explaining what you do not understand then... go back to the basics, state your question with all details on your use case.
– Patrick Mevzek
May 1 '18 at 14:17
@PatrickMevzek I've updated my question. If it still needs improvement, please post another comment telling me what information I should include. Thanks in advance!
– Giraffer
May 1 '18 at 14:42
@PatrickMevzek I've updated my question. If it still needs improvement, please post another comment telling me what information I should include. Thanks in advance!
– Giraffer
May 1 '18 at 14:42
add a comment |
1 Answer
1
active
oldest
votes
# Do not read /etc/resolv.conf
no-resolv
# Do not read /etc/hosts
no-hosts
# e.g.
# Define the zone
auth-zone=example.com
# Set SOA record
auth-soa=12345678,admin.example.com
# Set A record
address=/www.example.com/10.2.3.4
# Set MX record
mx-host=example.com,www.example.com,10
# Set TXT record
txt-record=_acme-challenge.www.example.com,f0o...bar
I found a good example. https://www.onderka.com/computer-und-netzwerk/autoritativer-dns-server-mit-dnsmasq/
By the way, do you know acme-dns?
https://github.com/joohoi/acme-dns
It's more suitable for automatic renewals of Let's Encrypt certificates.
answered Oct 30 '18 at 14:25
ayaguchiayaguchi
12
add a comment |
Your Answer
StackExchange.ready(function() {
var channelOptions = {
tags: "".split(" "),
id: "106"
};
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function() {
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled) {
StackExchange.using("snippets", function() {
createEditor();
});
}
else {
createEditor();
}
});
function createEditor() {
StackExchange.prepareEditor({
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: false,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: null,
bindNavPrevention: true,
postfix: "",
imageUploader: {
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
},
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
});
}
});
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2funix.stackexchange.com%2fquestions%2f441019%2fhow-to-configure-dnsmasq-as-an-authoritative-dns-server%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
1 Answer
1
active
oldest
votes
1 Answer
1
active
oldest
votes
active
oldest
votes
active
oldest
votes
# Do not read /etc/resolv.conf
no-resolv
# Do not read /etc/hosts
no-hosts
# e.g.
# Define the zone
auth-zone=example.com
# Set SOA record
auth-soa=12345678,admin.example.com
# Set A record
address=/www.example.com/10.2.3.4
# Set MX record
mx-host=example.com,www.example.com,10
# Set TXT record
txt-record=_acme-challenge.www.example.com,f0o...bar
I found a good example. https://www.onderka.com/computer-und-netzwerk/autoritativer-dns-server-mit-dnsmasq/
By the way, do you know acme-dns?
https://github.com/joohoi/acme-dns
It's more suitable for automatic renewals of Let's Encrypt certificates.
answered Oct 30 '18 at 14:25
ayaguchiayaguchi
12
add a comment |
# Do not read /etc/resolv.conf
no-resolv
# Do not read /etc/hosts
no-hosts
# e.g.
# Define the zone
auth-zone=example.com
# Set SOA record
auth-soa=12345678,admin.example.com
# Set A record
address=/www.example.com/10.2.3.4
# Set MX record
mx-host=example.com,www.example.com,10
# Set TXT record
txt-record=_acme-challenge.www.example.com,f0o...bar
I found a good example. https://www.onderka.com/computer-und-netzwerk/autoritativer-dns-server-mit-dnsmasq/
By the way, do you know acme-dns?
https://github.com/joohoi/acme-dns
It's more suitable for automatic renewals of Let's Encrypt certificates.
answered Oct 30 '18 at 14:25
ayaguchiayaguchi
12
add a comment |
# Do not read /etc/resolv.conf
no-resolv
# Do not read /etc/hosts
no-hosts
# e.g.
# Define the zone
auth-zone=example.com
# Set SOA record
auth-soa=12345678,admin.example.com
# Set A record
address=/www.example.com/10.2.3.4
# Set MX record
mx-host=example.com,www.example.com,10
# Set TXT record
txt-record=_acme-challenge.www.example.com,f0o...bar
I found a good example. https://www.onderka.com/computer-und-netzwerk/autoritativer-dns-server-mit-dnsmasq/
By the way, do you know acme-dns?
https://github.com/joohoi/acme-dns
It's more suitable for automatic renewals of Let's Encrypt certificates.
answered Oct 30 '18 at 14:25
ayaguchiayaguchi
12
# Do not read /etc/resolv.conf
no-resolv
# Do not read /etc/hosts
no-hosts
# e.g.
# Define the zone
auth-zone=example.com
# Set SOA record
auth-soa=12345678,admin.example.com
# Set A record
address=/www.example.com/10.2.3.4
# Set MX record
mx-host=example.com,www.example.com,10
# Set TXT record
txt-record=_acme-challenge.www.example.com,f0o...bar
I found a good example. https://www.onderka.com/computer-und-netzwerk/autoritativer-dns-server-mit-dnsmasq/
By the way, do you know acme-dns?
https://github.com/joohoi/acme-dns
It's more suitable for automatic renewals of Let's Encrypt certificates.
answered Oct 30 '18 at 14:25
ayaguchiayaguchi
12
edited Oct 30 '18 at 15:19
answered Oct 30 '18 at 14:25
ayaguchiayaguchi
12
answered Oct 30 '18 at 14:25
ayaguchiayaguchi
12
answered Oct 30 '18 at 14:25
ayaguchiayaguchi
12
12
add a comment |
add a comment |
Thanks for contributing an answer to Unix & Linux Stack Exchange!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2funix.stackexchange.com%2fquestions%2f441019%2fhow-to-configure-dnsmasq-as-an-authoritative-dns-server%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Did you look at thekelleys.org.uk/dnsmasq/docs/setup.html ?
– Patrick Mevzek
May 1 '18 at 13:33
Yes, but I don't understand much of it, so that's why I'm asking for a sample configuration.
– Giraffer
May 1 '18 at 13:54
Start by explaining what you do not understand then... go back to the basics, state your question with all details on your use case.
– Patrick Mevzek
May 1 '18 at 14:17
@PatrickMevzek I've updated my question. If it still needs improvement, please post another comment telling me what information I should include. Thanks in advance!
– Giraffer
May 1 '18 at 14:42