Apa itu dig ?
+ dig adalah utility linux untuk me-lookup dns. (Simple nya aja mirip nslookup)
Bagaimana contoh comand nya ?
+ pada console ketikkan aja misalkan dig google.com nanti muncul seperti ini
root@pi /home/pi # dig google.com
; <<>> DiG 9.9.5-9+deb8u6-Debian <<>> google.com
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 28771
;; flags: qr rd ra; QUERY: 1, ANSWER: 16, AUTHORITY: 0, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;google.com. IN A
;; ANSWER SECTION:
google.com. 109 IN A 117.102.117.227
google.com. 109 IN A 117.102.117.212
google.com. 109 IN A 117.102.117.238
google.com. 109 IN A 117.102.117.234
google.com. 109 IN A 117.102.117.251
google.com. 109 IN A 117.102.117.249
google.com. 109 IN A 117.102.117.208
google.com. 109 IN A 117.102.117.241
google.com. 109 IN A 117.102.117.245
google.com. 109 IN A 117.102.117.230
google.com. 109 IN A 117.102.117.223
google.com. 109 IN A 117.102.117.218
google.com. 109 IN A 117.102.117.219
google.com. 109 IN A 117.102.117.216
google.com. 109 IN A 117.102.117.229
google.com. 109 IN A 117.102.117.240
;; Query time: 2 msec
;; SERVER: 127.0.0.1#53(127.0.0.1)
;; WHEN: Fri Sep 16 06:55:41 WIB 2016
;; MSG SIZE rcvd: 295
Lalu bagaimana jika dalam satu mesin terdapat 2 service DNS Server ?
+ kita tambahkan parameter
-p untuk memilih port khusus.
Mari langsung saja. Di bawah ini saya kasih sampel dalam 1 mesin menggunakan 2 DNS Server yakni unbound dan dnsmasq. Perhatikan yang saya beri warna merah adalah port yang sedang aktif. Jadi walaupun ada 2 Service DNS Server tidak bentrok karena beda port.
*) catatan : unbound untuk mesin produksi, untuk memilih akamai server suka suka kita. Dan dnsmasq sebenernya include dari pihole untuk mem-blok iklan.
root@pi /home/pi # netstat -tulpn
Active Internet connections (only servers)
Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name
tcp 0 0 127.0.0.1:3306 0.0.0.0:* LISTEN 993/mysqld
tcp 0 0 0.0.0.0:80 0.0.0.0:* LISTEN 662/lighttpd
tcp 0 0 0.0.0.0:52 0.0.0.0:* LISTEN 556/dnsmasq
tcp 0 0 0.0.0.0:53 0.0.0.0:* LISTEN 1158/unbound
tcp 0 0 0.0.0.0:22 0.0.0.0:* LISTEN 443/sshd
tcp 0 0 0.0.0.0:23 0.0.0.0:* LISTEN 446/inetd
tcp 0 0 127.0.0.1:953 0.0.0.0:* LISTEN 1158/unbound
tcp 0 0 0.0.0.0:8000 0.0.0.0:* LISTEN 449/sc_serv
tcp 0 0 0.0.0.0:8001 0.0.0.0:* LISTEN 449/sc_serv
tcp6 0 0 :::80 :::* LISTEN 662/lighttpd
tcp6 0 0 :::52 :::* LISTEN 556/dnsmasq
tcp6 0 0 :::22 :::* LISTEN 443/sshd
udp 0 0 27.131.2.1:123 0.0.0.0:* 510/ntpd
udp 0 0 127.0.0.1:123 0.0.0.0:* 510/ntpd
udp 0 0 0.0.0.0:123 0.0.0.0:* 510/ntpd
udp 0 0 0.0.0.0:52 0.0.0.0:* 556/dnsmasq
udp 0 0 0.0.0.0:53 0.0.0.0:* 1158/unbound
udp6 0 0 fe80::ba27:ebff:fec:123 :::* 510/ntpd
udp6 0 0 ::1:123 :::* 510/ntpd
udp6 0 0 :::123 :::* 510/ntpd
udp6 0 0 :::52 :::* 556/dnsmasq
Nah, sudah kelihatan bukan ? disana terdapat 2 service unbound dan dnsmasq dimana port service nya beda. Lalu mari kita pilih mau me-resolve menggunakan unbound (port 53) atau dnsmasq (port 52) dengan cara sbb :
+ Di bawah ini contoh meresolve dengan service unbound
root@pi /home/pi # dig google.com @127.0.0.1 -p 53
; <<>> DiG 9.9.5-9+deb8u6-Debian <<>> google.com @127.0.0.1 -p 53
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 40675
;; flags: qr rd ra; QUERY: 1, ANSWER: 16, AUTHORITY: 0, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;google.com. IN A
;; ANSWER SECTION:
google.com. 300 IN A 117.102.117.227
google.com. 300 IN A 117.102.117.212
google.com. 300 IN A 117.102.117.238
google.com. 300 IN A 117.102.117.234
google.com. 300 IN A 117.102.117.251
google.com. 300 IN A 117.102.117.249
google.com. 300 IN A 117.102.117.208
google.com. 300 IN A 117.102.117.241
google.com. 300 IN A 117.102.117.245
google.com. 300 IN A 117.102.117.230
google.com. 300 IN A 117.102.117.223
google.com. 300 IN A 117.102.117.218
google.com. 300 IN A 117.102.117.219
google.com. 300 IN A 117.102.117.216
google.com. 300 IN A 117.102.117.229
google.com. 300 IN A 117.102.117.240
;; Query time: 40 msec
;; SERVER: 127.0.0.1#53(127.0.0.1)
;; WHEN: Fri Sep 16 06:52:30 WIB 2016
;; MSG SIZE rcvd: 295
+ Dan di bawah ini meresolve menggunakan dnsmasq
root@pi /home/pi # dig google.com @127.0.0.1 -p 52
; <<>> DiG 9.9.5-9+deb8u6-Debian <<>> google.com @127.0.0.1 -p 52
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 37094
;; flags: qr rd ra; QUERY: 1, ANSWER: 6, AUTHORITY: 0, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 512
;; QUESTION SECTION:
;google.com. IN A
;; ANSWER SECTION:
google.com. 299 IN A 74.125.68.100
google.com. 299 IN A 74.125.68.138
google.com. 299 IN A 74.125.68.102
google.com. 299 IN A 74.125.68.139
google.com. 299 IN A 74.125.68.101
google.com. 299 IN A 74.125.68.113
;; Query time: 32 msec
;; SERVER: 127.0.0.1#52(127.0.0.1)
;; WHEN: Fri Sep 16 06:52:31 WIB 2016
;; MSG SIZE rcvd: 135
