Thursday, July 5, 2012

Decomission of public/external DNS servers

I came upon a situation where I needed to retire a couple of external DNS servers without having any type of access to update WHOIS information for every domain it hosts.  This post will cover setting up the source BIND DNS server to allow zone transfers to a MS DNS server where we will later convert to a primary zone that feeds additional secondary zones running on PowerDNS as a supermaster.  Lastly, the retired DNS hostnames will be updated with IP addresses of the target hosts.


Configure source server to allow zone transfers to target MS DNS.  (In my case I had to set this per zone)

 
Enter the IP address of the target server here.  Even though it says "from" it seems that it works when transferring "to".

On the target server configure a new secondary DNS zone.



Enter the IP address of the master or source DNS server.

Hit Finish

Next, verify your newly created secondary zone pulled all DNS records from the master/primary server.

Once all records have been verified, the newly created secondary zone can be changed to primary the zone properties page.



Update the Name Servers, SOA, and Zone Transfers tab accordingly.

At this point, one issue that we noticed that changes and newly created records were not being updated from the new primary/master server to its downline secondary/slave servers.  In order to fix this problem, the zone serial number needed to be incremented under the SOA tab.

Lastly, once the newly created zones were tested the SOA, NS, and A records for the old servers were updated to reflect the hostnames and IP addresses of the new ones.

No comments:

Post a Comment