Set up your DNS to Lumu - Linux Server

Configure DNS in Linux Server

Setting up DNS forwarding on a local server is recommended for enterprises where all the traffic is directed to the internet through a server.

For more context on Lumu Deployment scenarios, consult Lumu Deployment and Integration Guide.
Infrastructure with DNS Server pointing to LumuInfrastructure with DNS Server pointing to Lumu
This guide walks you through the DNS configuration process in a UNIX BIND-based DNS server.his guide will walk you through the DNS configuration process in a UNIX BIND-based DNS server.

Requirements

  1. A Local DNS server running a Linux distribution.
Remember that for using Lumu DNS servers through Lumu Gateways collectors, you first need to register your public IP address or group of IPs as a gateway for your company at the Lumu Portal before configuring your DNS. If you are using Lumu Virtual Appliance (VA) as a DNS resolver, remember first to deploy and configure your VA.

Edit Linux DNS Settings

Note: When creating this guide, we used Linux CentOS versions 7 and 8. The steps may vary on other distributions.

On most Linux server distributions, the system’s DNS server information for name resolution is defined in the /etc/named.conf file. However, this directory and filename can vary depending on the Linux distribution. We recommend creating a backup copy ( /etc/named.conf ) and then editing the original file.

First, edit the name servers file, adding the Lumu IP addresses or the IP addresses of the Virtual Appliance you created inside the “options” parameter of the  /etc/named.conf file. Example:
forwarders {
                50.17.0.10;
                3.87.85.24;
        };
        forward only; 
Setting Lumu IP addresses on a Linux server Setting Lumu IP addresses on a Linux server
Remember : the Lumu DNS resolvers IPv4 addresses are:
50.17.0.10
3.87.85.24

Ensure that your new settings are working after saving them. For CentOS, run the following command:

sudo named-checkconf

If there are no syntax errors in your configuration, the shell prompt will return immediately without displaying any output (blank). If any syntax errors are found, you will be alerted to the error and line number where it occurs. If this happens, go back and check your files for errors.

Once you confirm that your configuration does not have any syntax errors, reload the BIND daemon to implement your changes. For CentOS, use the following command:

rndc reload

Validate Your Settings

The final step is to verify that your DNS connections are correctly routed through Lumu. See Validate your DNS Settings for more information.
        • Related Articles

        • Configure DNS in Linux Desktop

          Setting up DNS forwarding on a Linux client device is the configuration suggested for testing purposes. We recommend you configure your DNS server or your router to take the most advantage of Lumu Continuous Compromise Assessment on your entire ...
        • Configure DNS in Windows Server

          Setting up DNS forwarding on a local server is recommended for enterprises where all the traffic is directed to the internet through a server. For more context on Lumu Deployment scenarios, consult Lumu Deployment and Integration Guide. ...
        • Point your DNS to Lumu

          To start taking advantage of Lumu Gateways, you need to configure your DNS resolver device to point all DNS requests to Lumu's IP addresses, substituting the automatic DNS servers provided by your internet service provider (ISP). Once you have ...
        • Configure DNS in Windows 10

          Setting up DNS forwarding on a Windows 10 device is the configuration suggested for testing purposes. We recommend you configure your DNS server or your router to take the most advantage of Lumu Continuous Compromise Assessment on your entire ...
        • Configure DNS in a Router

          Setting up the DNS on a router device is recommended for enterprises where all the traffic is directed to the internet through a router device. You also have the option to configure your DNS server (if available) to take the most advantage of Lumu ...