Cwp Dns

CWP DNS Management

Manage DNS zones, records, templates, and clustering on CWP servers. Handle BIND configuration, zone templates, nameserver setup, and DNS security.

DNS Features

Manage DNS through these components:

• FreeDNS Service (free DNS clustering with DDoS protection)
• Zone Management (add, edit, list, remove zones)
• Template Editor (custom DNS zone templates)
• Nameserver Editor (configure nameserver IPs)
• Record Types: A, AAAA, MX, TXT, CNAME, SRV

Configuration Files

DNS Zone Templates

Template Location

/usr/local/cwpsrv/htdocs/resources/conf/dns/bind/zones/

Template Variables

Example Zone Template

$TTL 14400
@   IN  SOA %ns1%. %dns-email%. (
    %domain_serial%
    7200
    3600
    1209600
    86400 )

@       14400   IN  NS      %ns1%.
@       14400   IN  NS      %ns2%.
@       14400   IN  A       %ip%
%domain%. 14400 IN  MX      0 %domain%.
mail    14400   IN  A       %ip%
www     14400   IN  A       %ip%
ftp     14400   IN  A       %ip%
smtp    14400   IN  A       %ip%
pop     14400   IN  A       %ip%
imap    14400   IN  A       %ip%

DNS Record Types

DNS Cluster Options

Option 1: FreeDNS

Free hosted DNS cluster with DDoS protection. Configure via CWP Admin -> DNS -> FreeDNS.

Option 2: Slave DNS Manager

Self-hosted DNS clustering with unlimited accounts.

Option 3: Slave2 DNS Server

Additional nodes for redundancy in self-hosted clusters.

Nameserver Configuration

Configure nameserver IPs via CWP Admin -> DNS -> Nameserver IPs.

# Rebuild named.conf
/scripts/cwp_api account rebuild_etc_named_conf

# Rebuild all zone files
/scripts/cwp_api account rebuild_var_named_all

DNS Operations

Add DNS Zone

# Via CWP API or Admin panel
# DNS -> Add New Zone

Edit DNS Records

# Via CWP Admin panel
# DNS -> Zone Editor -> Select domain

Remove DNS Zone

# Via CWP Admin panel
# DNS -> List DNS Zones -> Delete

DNS Security

Disable Open Resolver

Prevent DNS amplification attacks:

# Edit /etc/named.conf
sed -i 's/recursion yes/recursion no/g' /etc/named.conf

Additional BIND Hardening

Add to /etc/named.conf in the options block:

allow-recursion { localnets; };
allow-transfer {"none";};
version none;
server-id none;

After changes:

systemctl restart named

Common DNS Operations

# Restart BIND
systemctl restart named

# Check BIND configuration
named-checkconf /etc/named.conf

# Check zone file
named-checkzone domain.com /var/named/domain.com.db

# Query local DNS
dig @localhost domain.com
dig @localhost domain.com MX
dig @localhost domain.com TXT

# Trace DNS resolution
dig +trace domain.com

# Check propagation
dig +short domain.com @8.8.8.8

Troubleshooting

Diagnostic Commands

# Check BIND status
systemctl status named

# View BIND logs
tail -f /var/log/messages | grep named

# List all zones
ls /var/named/*.db

# Verify zone syntax
for zone in /var/named/*.db; do named-checkzone $(basename $zone .db) $zone; done

# Check named.conf syntax
named-checkconf

Additional Resources

• references/dns-templates.md -- Complete zone template examples
• references/dns-cluster.md -- DNS cluster and FreeDNS setup guide
• references/bind.md -- BIND configuration and security hardening