bind安裝域名解析服務(wù),以及分離服務(wù)

安裝DNS

rpm -ivh bind*.rpm

進入/etc/named/chroot/etc 設(shè)置named.conf

[root@localhost named]# vim /etc/named.conf

//

// named.conf

//

// Provided by Red Hat bind package to configure the ISC BIND named(8) DNS

// server as a caching only nameserver (as a localhost DNS resolver only).

//

// See /usr/share/doc/bind*/sample/ for example named configuration files.

//

options {

listen-on port 53 { any; };//監(jiān)聽端口

listen-on-v6 port 53 { ::1; };/ipv6監(jiān)聽端口

directory       "/var/named";

dump-file       "/var/named/data/cache_dump.db";

statistics-file "/var/named/data/named_stats.txt";

memstatistics-file "/var/named/data/named_mem_stats.txt";

allow-query     { 192.168.2.0/24;192.168.4.0/24; };//允許訪問的IP段

allow-transfer { 192.168.2.1;};//配置主從DNS使用下發(fā)同步

recursion yes;

forwarders{192.168.119.2;114.114.114.114;};//當(dāng)遇到自身沒有的域名映射IP時，向上一級請求

dnssec-enable yes;

dnssec-validation yes;

/* Path to ISC DLV key */

bindkeys-file "/etc/named.iscdlv.key";

managed-keys-directory "/var/named/dynamic";

};

logging {

channel default_debug {

file "data/named.run";

severity dynamic;

};

};

view localhost_resolver {//解析器

match-clients      { 192.168.4.0/24; };//可以使用該解析的IP段

match-destinations { localhost; };

#    recursion yes;

include  "/etc/baishan.zones";//指定zones位置

};

view localhost_resolver2 {

match-clients      { 192.168.2.0/24; };

match-destinations { localhost; };

#   recursion yes;

include "/etc/named.root.key";

include "/etc/named.rfc1912.zones";

};

配置zones

zone"4.168.192.in-addr.arpa" IN {

type master; //主從 關(guān)系時使用

file "4.168.192.in-addr.arpa";//正向解析

allow-update { none; };

};

zone"example.com" IN{

type master;

file "example.com";//指定反向解析文件名，在var/name下

allow-update{none;};

};

配置解析文件

正向

$TTL 1D

@       IN SOA  example.com. admin.example.com. (

0       ; serial

1D      ; refresh

1H      ; retry

1W      ; expire

3H )    ; minimum

NS      @

A       127.0.0.1

AAAA    ::1

www     IN   A   192.168.4.131

~反向

$TTL 1D

@       IN SOA  example.com. admin.example.com. (

0       ; serial

1D      ; refresh

1H      ; retry

1W      ; expire

3H )    ; minimum

NS      @

A       127.0.0.1

AAAA    ::1

131    IN  PTR  www.example.com.

檢測命令

使用named-checkconfig named.conf檢測錯誤

使用naned-checkzone 2.168.192.in-addr.arpa test.com

無錯誤后啟動DNS

Service named  restart

分離解析

分離解析的域名服務(wù)器實際上還是主域名服務(wù)器，這里所說的分離解析主要針對不同的客戶端提供不同的解析記錄，如當(dāng)dns同時為internet和內(nèi)網(wǎng)提供服務(wù)時，可能需要內(nèi)網(wǎng)用戶訪問公司的web服務(wù)和mail服務(wù)直接發(fā)往位于內(nèi)網(wǎng)的web和mail服務(wù)器上，減輕服務(wù)器地址轉(zhuǎn)換的負(fù)擔(dān)在、/etc/named.conf

view "LAN" {

    match-clients { 192.168.4.0/24; };\\該LAN只能是192.168.4.0/24訪問

zone "tech.org" IN {

    type master;

    file "tech.org.zone.lan";};

    }

view "WAN" {

    match-clients { any; };

    zone "tech.org" IN {

    type master;

    file "tech.org.wan";};

};