CNIT 40 Proj 6: DNS Logging on Linux with Bind (15 pts.)

What You Need for This Project

Purpose

Configure logging on a DNS server with Bind on Linux.

Testing your Kali Linux DNS Server

Start your Kali Linux machine.

In a Terminal window, execute this command:

ping google.com
You should see replies, as shown below. If you don't see replies, you need to troubleshoot your networking.

Press Ctrl+C to stop the pings.

In a Terminal window, execute these commands:

service bind9 restart

netstat -an | grep 53

You should see tcp and udp ports LISTENING, as shown below.

In a Terminal window, execute this command:

dig @127.0.0.1 yahoo.com
You should see an ANSWER SECTION containing some IP addresses, as shown below.

If you don't see the answers, you need to restart or reinstall Bind.

Editing named.conf

In a Terminal window, execute these commands:

cp /etc/bind/named.conf /etc/bind/named.conf.bak

nano /etc/bind/named.conf

Add this code to the end of the file, as shown below: 
logging {
   channel default_debug {
   file "/var/log/named/named.run" versions 3 size 5m;
   severity dynamic;
   print-time yes;
   };

channel queries_channel {
   file "/var/log/named/queries.log" versions 3 size 5m;
   severity debug 3;
   print-category yes;
   print-severity yes;
   print-time yes;
   };

channel security_channel {
   file "/var/log/named/security.log" versions 3 size 5m;
   severity debug 3;
   print-category yes;
   print-severity yes;
   print-time yes;
   };

channel update_security_channel {
   file "/var/log/named/updates.log" versions 3 size 5m;
   severity debug 3;
   print-category yes;
   print-severity yes;
   print-time yes;
   };

channel dnssec_channel {
   file "/var/log/named/dnssec.log" versions 3 size 5m;
   severity debug 3;
   print-category yes;
   print-severity yes;
   print-time yes;
   };

channel xfers_channel {
   file "/var/log/named/zone_transfers.log" versions 3 size 5m;
   severity debug 3;
   print-category yes;
   print-severity yes;
   print-time yes;
   };

category queries { queries_channel; };
category security { security_channel; };
category update-security { update_security_channel; };
category dnssec { dnssec_channel; };
category xfer-out { xfers_channel; };

};

Save the file with Ctrl+X, Y, Enter.

In a Terminal window, execute these commands:

mkdir /var/log/named

chmod 777 /var/log/named

service bind9 restart

Bind should start, as shown below.

Troubleshooting

If bind won't start, open another Terminal window and execute this command.
tail -f /var/log/daemon.log
Then, in another Terminal window, execute this command:
service bind9 start
The first window should show helpful error messages.

Viewing the Run Log

In a Terminal window, execute this command:
tail /var/log/named/named.run
You should see several messages, ending with "running", as shown below.

Viewing the Queries Log

In a Terminal window, execute these commands.

In the second command, replace "YOURNAME" with your own name:

dig @127.0.0.1 samsclass.info

dig @127.0.0.1 YOURNAME.samsclass.info

tail /var/log/named/queries.log

You should see several messages, ending with a query containing your name, as shown below.

Saving a Screen Image

Make sure a a query containing your name is visible.

Click the taskbar at the bottom of your host Windows 7 desktop, to make the host machine listen to the keyboard, instead of the virtual machine.

Press the PrintScrn key in the upper-right portion of the keyboard. That will copy the whole desktop to the clipboard.

YOU MUST SUBMIT A FULL-DESKTOP IMAGE FOR FULL CREDIT!

Paste the image into Paint and save it with the filename "YOUR NAME Proj 6a", replacing "YOUR NAME" with your real name.

Viewing the Security Log

In a Terminal window, execute this command:
tail /var/log/named/security.log
You should see several messages, showing the resolutions that were made, and showing that they were approved for placement into the cache, as shown below.

Viewing the DNSSEC Log

In a Terminal window, execute these commands:
dig @127.0.0.1 ietf.org

tail /var/log/named/dnssec.log

You should see several "validating" messages, as shown below.

Saving a Screen Image

Click the taskbar at the bottom of your host Windows 7 desktop, to make the host machine listen to the keyboard, instead of the virtual machine.

Make sure you can see at least one "validating" message.

Press the PrintScrn key in the upper-right portion of the keyboard. That will copy the whole desktop to the clipboard.

YOU MUST SUBMIT A FULL-DESKTOP IMAGE FOR FULL CREDIT!

Paste the image into Paint and save it with the filename "YOUR NAME Proj 6b", replacing "YOUR NAME" with your real name.

Turning In Your Project

Email the images to me as an attachments to an e-mail message. Send it to: cnit.40@gmail.com with a subject line of "Proj 6 From YOUR NAME", replacing "YOUR NAME" with your real name.

Send a Cc to yourself.

Sources

http://www.zytrax.com/books/dns/ch7/logging.html

Last modified 11-1-16