This is an old revision of the document!

Again, please make sure you install from within Webmin (Un-used Modules) then Refresh Modules to move the BIND link under Servers. This is the default screen. The newly installed Webmin BIND module In the upper left corner the icon that looks like a gear is the Module Config. In the upper right corner the icon looks like a “Play” button starts the service. When you configure RDC a “Refresh” button is added. Do not yet start it, but lets look at its home directory.

The location and content of BIND's home The location and the list of files might be different on a different distribution (Red-Hat, Slackware, or from Enterprises like Oracle).

The difference between backup and archive is the location where they are stored - one is on-line, but going to be lost when the host is lost. The other is off-line, but remains available. These are your choices for backup:

  • A manual snapshot by Linode, which you should use for milestones such as before distribution upgrades.
  • Three automated backups by Linode, which you should use to recover from errors or attacks.
  • A compressed archive by Webmin, which you should use to save parts of the filesystem
  • A download / upload utility by Webmin, to keep off-line copies of your archives.

Use the listed above to plan and test your capacity to recover from errors, attacks or even from ransomware. These are very basic, simple measures to keep your service stacks functional.

Webmin Filesystem Backup with scheduling The Webmin screen to schedule and create compressed archives of the filesystem.

Save and restore copies of your on-line backup Recover from off-line backup in case of sustained attack going back for weeks or months.

User Management

User management from the shell is expanded by Webmin several ways. The most advanced is Usermin via LDAP, which is not really necessary on single instances. However, using the Webmin Users and Groups modules is necessary to allow login via Webmin - otherwise the user is limited to ssh login only. Also - on production servers Webmin shall not be installed to reduce the number of software exploits.

Extended functionally for UNIX Users and Groups by Webmin Webmin Users and Groups control access to Modules - but the UNIX user must also exist.

Forwarding and Transfers

These should be the IP4 addresses of the OpenNIC Tier-2s. Normally you use Google's here, but if you enter only that this name-server is NOT going to function. Also note - this is different from the settings of your VPS network, which SHOULD use Google's.

DNSSEC Initialization

Access both screens, and set as you wish. Webmin fully automates the re-signing process, and the default 21 days is acceptable.

Module Config

Finally, click on the gear in the upper left corner, and change from the defaults:

Module Configuration - Part 1 If you want to run under chroot set it here.
If reverse zone is REQUIRED leave it, otherwise set to NO.
More to come later

Module Configuration - Part 2 More to come later

Module Configuration - Part 3 More to come later

NOTE: Editing of this page is suspended until information for a production server becomes available.

  • /wiki/data/attic/opennic/setup/webminbind/debian9u0webmin1u9base.1585230651.txt.gz
  • Last modified: 11 months ago
  • by fouroh-llc