Contents
What is the configuration file of the DNS service?
named daemon, DNS on a name server consists of a configuration file called named. conf , a resolver file named resolv. conf , and four types of zone data files.
Which system configuration file is used to configure the DNS servers the system will use?
/etc/resolv.conf file
If DNS is used, the IP addresses of the DNS name servers are configured in the /etc/resolv. conf file. A client can nominate itself (using the localhost or loopback address, 127.0. 0.1) as a name server if it is configured as a DNS name server.
What port is eq domain?
In this case it references DNS over TCP (port 53).
What is the purpose of locally configured DNS?
Share the Article: The Domain Name System (DNS) Local Database feature allows you to search the intranet services much faster. You don’t need to remember the IP addresses of the devices and you also can access them more easily.
Do you need ACL for DNS zone transfer?
DNS zone transfers use tcp/53. Make sure your DNS servers are configured to only allow zone transfers to specific servers you allow. That protection belongs in your DNS server configuration, not ACL configuration. Test it by trying to zone transfer from an “unauthorized” host!
Which is the correct ACL for UDP / 53?
Your ACL is correct for udp/53, which is the port that most DNS resolution occurs on. While DNS queries normally run over UDP/53, they can also run over TCP/53. If a DNS A-record has over (approximately) 17 IP addresses, it will exceed the size of one DNS UDP packet and normal DNS resolution will use tcp/53.
Which is the ACL port for DNS resolution?
Your ACL is correct for udp/53, which is the port that most DNS resolution occurs on. While DNS queries normally run over UDP/53, they can also run over TCP/53.
Where to place EQ domain command in Cisco ACL?
For example, if my DNS server is 1.1.1.1, the ACLs would look like this: VLAN 10 is the 5.5.5.0/24 network. I’m getting confused as to where to place the eq domain command. I’m assuming you place the domain command on the actual DNS server 1.1.1.1. By the way, the /24 notation is accepted on Cisco NX-OS and the addresses are not literal.