Mr. David Norse Soloman, founder of Double Neutron Star Digital Network Solutions, Son of Daniel N. Soloman (Department of Nuclear Safety) and Mrs. Daisy N. Soloman (Director of Nursing Services), has responded to our requests with “Do Not Survey” - and as such, his Data is Not Shown in our survey of Daily Nutritional Support.
Remember: Without proper Daily Nutritional Support, one could become a Drowning Non-Swimmer - and then who would manufacture the Doppler Navigation Systems?
Delete all the clones, we’re making fresh ones.
They’re all going on the same network.
| Name | Operating System | IP | Role |
|---|---|---|---|
| LambSauce | CentOS 7 | .2 | Linux DNS Server |
| Wisdom | Windows 2016 | .3 | Windows DNS Server |
| Lucy | CentOS 7 | .4 | Linux DNS Client |
| Wacco | Windows 7 | .5 | Windows DNS Client |
Config the IP of your bench machine.
See Lab1 - Secret Commands to make CentOS not Terrible to config the CentOS vms.
The windows VMs are all GUI based. Setup IP, DNS, Default gateway, netmask, standard stuff.
You can do part 4 for windows while waiting for yum to update.
If you’re using windows 10, the lab will help you out.
Setting hostname on windows server 2016
Windows 7:
Restart the windows VMs
Wait for Yum to update on the CentOS machines…
Use hostnamectl set-hostname [name]
vim /etc/selinux/configSELINUX=permissiveshutdown -r nowsestatus will show you the current mode. We want “permissive”, not “enforcing”.
Use setenforce permissive.
You will have to do this again after every restart.
sestatus)This website is great - keep it open somewhere.
Zytrax - DNS for Rocket Scientists.
We are not freshly installing CentOS onto anything, this section is useless.
yum -y install bind bind-utilsfirewall-cmd --zone=public --permanent --add-service=dnsNo actions, just info.
No actions, just info.
Lots of info for reference later
More info for reference
More info, not really needed
Real good reference info in here.
I’ll update this later if we need these.
Now we use the above reference info to create the configs.
named-checkconfnamed-checkzoneThis is where I got to during the first lab session.
deleting a semicolon is all you really need to do.
Run the following command:
rndc status
Take a screenshot.
Change the debug level with:
rndc trace X
where X is the debug level you want. I used 71.
rndc status
Take a screenshot.
run:
rndc reload
Take a screenshot.
Just for fun, you may run man rndc, scroll to commands, and take a screenshot of the reload command description.
Note - we never configured rndc to communicate with the server, this could be a problem later? Saving this link here just in case: config rndc with bind
Note as of completing the lab, the above is not needed - the report doesn’t care than it never worked properly. I’ll use this as another testament to how horrid these labs are.
At this point, the instructions and the report diverge.
Here’s my understanding of the report:
using info from nslookup, dig, or host:
Back to activity 2.3.
This is as far as I’ve gotten in lab section 2, understanding this part, 2.3, really held me up a lot.
Question 9’s requirements are easy, question ten requires the use of command line arguments.
Dig @server name type
type can be A, NS, ANY, whatever you’re looking for
-4 forces ipv4, -6 forces ipv6, -p to specify port (53 is default), +trace enables tracing the delegation path, +norecurse turns off the recursive resolve bit
dig @10.150.71.2 lambsauce.myco.[name].com CNAME -4 +norecurse -p 53
The instructions do not tell you how to do this. Fortunately, it’s very easy.
Here’s what mine looks like:
nameserver 10.150.71.2
Do that on both CentOS vms, the server and the client.
Set the windows VMs to use LambSauce as the DNS server. Easy.
Instructions don’t specify which VMs to start wireshark on, nor which VM to run ping from.
This relates to question 12 on the report. Question 12 doesn’t care which VM sends the requests, as long as we can see the request and reply. (One request reply pair, no need to ping every client.)
ping wisdom.myco.[name].comcat /etc/resolv.confThe signoff also wants to be able to resolve requests from windows.
ipconfig /allSignoff!
TODO: Save 3.3.reqrep.pcapng from Lucy [TODO offload file]
We’re setting up a Windows DNS server as a secondary - in my case, Wisdom.
The instructions go step-by-step here. Follow those.
The instructions go pretty much step by step.
For part E, use myco.[name].com
For part J, use the ip address as normal - 10.150.71, it will reverse it on its own.
Gotta add nameserver 10.150.71.3 to the CentOS VMs, and set the secondary on the windows VMs. Easy.
This works with questions 14 and 15 in the report.
For 14, we need a screenshot of the dig output showing if the second server is authoritative
For 15, we need a network trace of a zone transfer.
For the signoff, we need a network trace of a DNS request/reply on the secondary server, as well as the transfer trace for question 15.
Steps for capture 1:
Steps for capture 2:
Signoff.
At the end of the third lab session, I wrote the above steps but have yet to execute them.
It’s November 15th. Bench 7 wasn’t available. Reset IPs, did the above, signoff. Boom! Done! All is well once again, until tomorrow at least.
| Data | Time Spent | Progress |
|---|---|---|
| First lab session | 2 hours | Finish act 1, got signoff 1. |
| Lab nov05 | 2 hours | Got signoff 2 |
| Lab nov12 | 2 hours | Got signoff 3 - so close to signoff 4, but not close enough. |
| Nov 15th | 45 minutes | Setup, run 4.4 - got last signoff! - teardown |
In total, this lab took me 6 hours and 45 minutes.
setenforce permissive on CentOS