Setting Up and Configuring a DNS Server

BIND includes a utility called rndc which allows you to use command line statements to administer the named daemon, locally, or remotely. The rndc program uses the /etc/rndc.conf file for its configuration options, which can be overridden with command line options. In order to prevent unauthorized users on other systems from controlling BIND on your server, a shared secret key method is used to explicitly grant privileges to particular hosts. In order for rndc to issue commands to any named, even on a local machine, the keys used in /etc/named.conf and /etc/rndc.conf must match.

Run the Bind key generator for rndc.conf

It teminal window enter:

cd /root /usr/sbin/dnssec-keygen -a hmac-md5 -b 128 -n user rndc

this command creates two files with names starting Krndc.....
In the one with the .private extension you will find something like:

Private-key-format: v1.2
Algorithm: 157 (HMAC_MD5)
Key: Nds78kjheRT8Ovwe==

The last line is what you're interested in as its the authentication key and
should be put into /etc/rndc.conf and /etc/named.conf

It's easy to edit from gnome desktop simply select file manager then change
to /etc directory right click on the rndc.conf file and select edit.

Edit the file /etc/rndc.conf so that it looks something like this :
replace the 72.96.52.127 ip address to your server ip address :

options {
default-server 72.96.52.127;
default-key rndc_key;
};

server localhost {
key rndc_key;
};

key rndc_key {
algorithm hmac-md5;
secret "Nds78kjheRT8Ovwe==";
};

Next, edit /etc/named.conf to the following :
[rememeber to replace the 72.96.52.127 ip address to your server ip address]

key rndc_key {
algorithm hmac-md5;
secret "Nds78kjheRT8Ovwe==";
};

controls {inet 72.96.52.127 port 953 allow {localhost;} keys {rndc_key;} ; };

Once you've done that restart 'named' as follows :

/etc/rc.d/init.d/named restart