#powerdns

[henrynolastname]

[edztechorg-blog]

New Post has been published on EDZTECH

New Post has been published on https://edztech.org/install-powerdns-on-centos-6-3-64-bit/

Install PowerDNS on CentOS 6.3 64-bit

Install REMI and EPEL repositories and packages

Execute following commands in the VPS SH console:

rpm -ivh http://dl.fedoraproject.org/pub/epel/6/x86_64/epel-release-6-8.noarch.rpm rpm -ivh http://rpms.famillecollet.com/enterprise/remi-release-6.rpm yum -y install php php-mcrypt php-pdo php-mysql pdns pdns-backend-mysql mysql-server nano

Create a database and username:

service mysqld start service httpd start mysqladmin create powerdns

Select your own password below:

mysql -Bse “create user ‘powerdns’@’localhost’ identified by ‘password'” mysql -Bse “grant all privileges on powerdns.* to ‘powerdns’@’localhost'”

Create PowerDNS databases and tables

Start mysql console with “mysql” and copy/paste following lines of code:

mysql> use powerdns;

CREATE TABLE domains ( id INT auto_increment, name VARCHAR(255) NOT NULL, master VARCHAR(128) DEFAULT NULL, last_check INT DEFAULT NULL, type VARCHAR(6) NOT NULL, notified_serial INT DEFAULT NULL, account VARCHAR(40) DEFAULT NULL, primary key (id) );

CREATE UNIQUE INDEX name_index ON domains(name);

CREATE TABLE records ( id INT auto_increment, domain_id INT DEFAULT NULL, name VARCHAR(255) DEFAULT NULL, type VARCHAR(6) DEFAULT NULL, content VARCHAR(255) DEFAULT NULL, ttl INT DEFAULT NULL, prio INT DEFAULT NULL, change_date INT DEFAULT NULL, primary key(id) );

CREATE INDEX rec_name_index ON records(name); CREATE INDEX nametype_index ON records(name,type); CREATE INDEX domain_id ON records(domain_id);

CREATE TABLE supermasters ( ip VARCHAR(25) NOT NULL, nameserver VARCHAR(255) NOT NULL, account VARCHAR(40) DEFAULT NULL );

Exit mysql console by typing “exit”:

mysql> exit

Install PowerAdmin

Execute following commands in the VPS SH console:

cd /root wget https://github.com/downloads/poweradmin/poweradmin/poweradmin-2.1.6.tgz tar xvfz poweradmin-2.1.6.tgz cd poweradmin-2.1.6/inc mv config-me.inc.php config.inc.php

Edit config.inc.php and make sure to change password you’ve specified in step “Create a Database and Username”:

nano config.inc.php

Modify “db_pass” and “session_key” to your own values:

$db_host = ‘localhost’; $db_port = ‘3306’; $db_user = ‘powerdns’; $db_pass = ‘password’; $db_name = ‘powerdns’; $db_type = ‘mysql’; $session_key = ‘session_key’;

Move PowerAdmin folder to Apache’s DocumentRoot:

mv /root/poweradmin-2.1.6/* /var/www/html/ service httpd restart

Edit /etc/pdns/pdns.conf and add the following lines, make sure to modify “gmysql-password” to MySQL password you’ve selected in step “Create a Database and Username”:

launch=gmysql gmysql-host=localhost gmysql-user=powerdns gmysql-password=password gmysql-dbname=powerdns

Restart Power DNS daemon:

service pdns restart

Create PowerAdmin account

Proceed to installing PowerAdmin from webserver:

Navigate over to your VPS /install folder (in our case http://185.5.5.00/install/ );

Create a Poweradmin admin account ;

Finish the installation process, and after you get to Step 7, remove /var/www/html/install folder:

rm -rf /var/www/html/install

Now you can navigate to your VPS (http://185.5.5.00/ in our case), and login as admin with password you’ve specified in step “Create PowerAdmin Account”.

[homeapps]

PowerDNS: Web Administration

Continuing from where we left off with the PowerDNS article, I needed to additionally install a web front end to administer the new DNS server I had just installed. The whole point of moving away from the bind9 service was to have an alternative that was user friendly after all.

So there were quite a few ones that you can actually look into when it comes to PowerDNS administration tool choices. Here’s a quick list on GitHub.

The one that really caught my attention was the PowerAdmin tool. While the open source python and java based options seemed to be interesting from a hacker’s perspective, from my experience of home network administration, a PHP solution is always easier to install. (Check out the installation wiki here.)

Basically all you need to do is download the powerdns package from here, untar it, and copy it to the web site directory. Then start with the online installer by pointing to the <site>/poweradmin/install URL (for e.g., if your site is hosted on www.example.com, go to www.example.com/poweradmin/install to get started).

Remember to edit the <install_root>/inc/config.inc.php file, as the autogenerated file may not have the right password.

[homeapps]

PowerDNS: Alternative to BIND9

After my Raspberry Pi SD card got fried, I was left without a DNS server on my home network. So I wanted to reconfigure my other existing server box running Debian to serve as a DNS server.

But I was tired of using the same old Bind9. It’s configuration was somewhat cryptic, to say the least. As always, it was Google to the rescue, and PowerDNS was one of the listed alternatives that really caught my eye.

There were some quick tutorials here and there, that came in handy. But in short, it all boils down to the following core operations on my setup which I believe is way simpler than stated in either sites: 

Run the command:

apt-get install pdns-server pdns-backend-mysql pdns-recursor

Edit the file /etc/powerdns/pdns.conf, uncomment or add the following lines:

launch=gmysql

allow-recursion=127.0.0.1,192.168.0.0/24 #depending on your IP and netmask

allow-recursion-override=on # This is the most important step if you want to serve your fake domains on your home network.

recursor=192.168.0.9:5300 # Again this would point to the actual recursor which we will configure later.

local-address=0.0.0.0

local-port=53 # This is the default DNS port

Edit the file /etc/powerdns/recursor.conf:

local-address=192.168.0.9

local-port=5300

Edit the file /etc/powerdns/pdns.d/pdns.local:

gmysql-host=127.0.0.1 gmysql-user=power_admin gmysql-password=power_admin_password gmysql-dbname=powerdns

Run the following SQL script on MySQL:

CREATE DATABASE powerdns;

GRANT ALL ON powerdns.* TO 'power_admin'@'localhost' IDENTIFIED BY 'power_admin_password'; GRANT ALL ON powerdns.* TO 'power_admin'@'localhost.localdomain' IDENTIFIED BY 'power_admin_password';

FLUSH PRIVILEGES;

USE powerdns; CREATE TABLE domains ( id INT auto_increment, name VARCHAR(255) NOT NULL, master VARCHAR(128) DEFAULT NULL, last_check INT DEFAULT NULL, type VARCHAR(6) NOT NULL, notified_serial INT DEFAULT NULL, account VARCHAR(40) DEFAULT NULL, primary key (id) );

CREATE UNIQUE INDEX name_index ON domains(name);

CREATE TABLE records ( id INT auto_increment, domain_id INT DEFAULT NULL, name VARCHAR(255) DEFAULT NULL, type VARCHAR(6) DEFAULT NULL, content VARCHAR(255) DEFAULT NULL, ttl INT DEFAULT NULL, prio INT DEFAULT NULL, change_date INT DEFAULT NULL, primary key(id) );

CREATE INDEX rec_name_index ON records(name); CREATE INDEX nametype_index ON records(name,type); CREATE INDEX domain_id ON records(domain_id); CREATE TABLE supermasters ( ip VARCHAR(25) NOT NULL, nameserver VARCHAR(255) NOT NULL, account VARCHAR(40) DEFAULT NULL );

INSERT INTO domains (name, type) values ('example.com', 'NATIVE'); INSERT INTO records (domain_id, name, content, type,ttl,prio) VALUES (1,'example.com','localhost [email protected] 1','SOA',86400,NULL); INSERT INTO records (domain_id, name, content, type,ttl,prio) VALUES (1,'example.com','dns-us1.powerdns.net','NS',86400,NULL); INSERT INTO records (domain_id, name, content, type,ttl,prio) VALUES (1,'example.com','dns-eu1.powerdns.net','NS',86400,NULL); INSERT INTO records (domain_id, name, content, type,ttl,prio) VALUES (1,'www.example.com','192.168.5.9','A',120,NULL); INSERT INTO records (domain_id, name, content, type,ttl,prio) VALUES (1,'mail.example.com','192.168.5.9','A',120,NULL); INSERT INTO records (domain_id, name, content, type,ttl,prio) VALUES (1,'localhost.example.com','127.0.0.1','A',120,NULL); INSERT INTO records (domain_id, name, content, type,ttl,prio) VALUES (1,'example.com','mail.example.com','MX',120,25);

Then startup the processes:

/etc/init.d/pdns-recursor start

/etc/init.d/pdns monitor

Then do some digging and have fun:

nslookup www.example.com

[dotech]

Reverse DNS - Ubuntu Part -1

Install PowerDNS and MySQL

login to your ssh terminal and

type:

apt-get install mysql-server mysql-client

Use Any text editor to edit:

nano /etc/mysql/my.cnf

comment line saying

bind-address = 127.0.0.1

like

#bind-address = 127.0.0.1

restart the service

service mysql restart

Now check that networking is enabled.

Run

netstat -tap | grep mysql

The output should look like this:

root@server1:~# netstat -tap | grep mysql tcp 0 0 *:mysql *:* LISTEN 6724/mysqld

root@server1:~#

Installing PowerDNS:

apt-get install pdns-server pdns-backend-mysql

Download the PowerDNS SQL and import it:

wget http://files.soluslabs.com/solusvm/pdns/pdns.sql mysql --user=root --password=MYNEWPASSOWRD < pdns.sql Edit /etc/pdns/pdns.conf with your database details: launch=gmysql gmysql-host=127.0.0.1 gmysql-user=root gmysql-password=MYNEWPASSWORD gmysql-dbname=powerdns now login in to mysql through username / password and enter below line:

GRANT ALL ON powerdns.* TO 'root'@'YOUR_SOLUSVM_MASTERS_IP' IDENTIFIED BY 'MYNEWPASSWORD';

exit my sql and start powerdns

/etc/init.d/pdns start

[eklausmeier]

Wikipedia Infrastructure as of 2013

Some facts on Wikipedia:

Wikipedia uses round about 1,200 servers, see Tactical Monitoring Overview. These servers are located in Ashburn (Virginia), Tampa (Florida), San Francisco, and Amsterdam, see servers.

Wikipedia has about 4.5 million pages, see st…

View Post

[hostdb]

Уязвимости в MySQL, Gitorious, PowerDNS, Suhosin PHP, OpenSSL, Moodle, VirtualBox, Solaris, Wireshark, Glibc, DragonFly BSD, Asterisk

Несколько недавно найденных уязвимостей: Компания Oracle сообщила об исправлении в MySQL 27 уязвимостей, большинство из которых позволяют инициировать крах СУБД через ... Читать далее...

[zaphodb]

PowerDNS Authoritative Server 3.0 has been released!

Version 3.0 of the PowerDNS Authoritative Server brings a number of important features(like DNSSEC), as well as over two years of accumulated bug fixing.

Available from: * http://downloads.powerdns.com/releases/pdns-3.0.tar.gz * http://downloads.powerdns.com/releases/rpm/pdns-static-3.0-1.x86_64.rpm * http://downloads.powerdns.com/releases/deb/pdns-static_3.0-1_amd64.deb * http://downloads.powerdns.com/releases/rpm/pdns-static-3.0-1.i386.rpm * http://downloads.powerdns.com/releases/deb/pdns-static_3.0-1_i386.deb

These files also come with GPG signatures (append .sig).

RHEL/CentOS "native" RPMs are usually contributed by Kees Monshouwer (thanks!) pretty quickly after a release on: http://www.monshouwer.eu/download/3th_party/pdns-server/

The release notes are also available, with clickable links, on http://doc.powerdns.com/changelog.html#changelog-auth-3-0

Warning Version 3.0 of the PowerDNS Authoritative Server is a major upgrade. Please refer to Section 1, “From PowerDNS Authoritative Server 2.9.x to 3.0” for important information on correct and stable operation, as well as notes on performance and memory use.

Known issues as of RC3 include: * Not all new features are fully documented yet

Note Released on the 22nd of July 2011

The largest news in 3.0 is of course the advent of DNSSEC. Not only does PowerDNS now (finally) support DNSSEC, we think that our support of this important protocol is among the easiest to use available. In addition, all important algorithms are supported.

Complete detail can be found in Chapter 12, Serving authoritative DNSSEC data. The goal of 'PowerDNSSEC' is to allow existing PowerDNS installations to start serving DNSSEC with as little hassle as possible, while maintaining performance and achieving high levels of security.

Tutorials and examples of how to use DNSSEC in PowerDNS can be found linked from http://powerdnssec.org.

PowerDNS Authoritative Server 3.0 development has been made possible by the financial and moral support of:

AFNIC, the French registry

IPCom's RcodeZero Anycast DNS, a subsidiary of NIC.AT, the Austrian registry

SIDN, the Dutch registry

This release has received exceptional levels of community support, and we'd like to thank the following people in addition to those mentioned explicitly below: Peter Koch (DENIC), Olaf Kolkman (NLNetLabs), Wouter Wijngaards (NLNetLabs), Marco Davids (SIDN), Markus Travaille (SIDN), Leen Besselink, Antoin Verschuren (SIDN), Olafur Gudmundsson (IETF), Dan Kaminsky (Recursion Ventures), Roy Arends (Nominet), Miek Gieben (SIDN), Stephane Bortzmeyer (AFNIC), Michael Braunoeder (nic.at), Peter van Dijk, Maik Zumstrull, Jose Arthur Benetasso Villanova (Locaweb), Stefan Schmidt, Roland van Rijswijk (Surfnet), Paul Bakker (Brainspark/Fox-IT), Mathew Hennessy, Johannes Kuehrer (Austrian World4You GmbH), Marc van de Geijn (bHosted.nl), Stefan Arentz and Martin van Hensbergen (Fox-IT), Christof Meerwald, Detlef Peeters, Jack Lloyd, Frank Altpeter, frederik danerklint, Vasiliy G Tolstov, Brielle Bruns, Evan Hunt, Ralf van der Enden, Marc Laros, Serge Belyshev, Christian Hofstaedtler, Charlie Smurthwaite, Nikolaos Milas, ..