 |
|
茫茫網海中的冷日
發生過的事，不可能遺忘，只是想不起來而已！ |
|
|
恭喜您是本站第 1729845
位訪客!
登入 | 註冊
|
|
|
|
| 發表者 |
討論內容 |
冷日
(冷日) |
發表時間：2014/3/13 8:45 |
- Webmaster
- 註冊日: 2008/2/19
- 來自:
- 發表數: 15773
|
- [轉貼]Linux DNS(BIND)安裝與設定
- Linux DNS(BIND)安裝與設定
一、 DNS介紹
網域名稱系統DNS（Domain Name System）是網際網路的一項核心服務，它作為可以將域名和IP位址相互對映的一個分布式資料庫，能夠使人更方便的存取網際網路，而不用去記住能夠被機器直接讀取的IP數串。
DNS 使用TCP和UDP埠53。
二、 系統配置
主機環境 :
Centos 5.6 32位元
Master Dns：192.168.1.122
Slave Dns：192.168.1.123
設定項目 :
Master Dns
Slave Dns
三、 DNS (BIND)設定方式
1. 安裝套件:
1.1 在開始設定DNS之前要先確認是否有以下套件
bind-utils、bind-chroot、bind、bind-libs
[root@localhost ~]# rpm -qa | grep '^bind'
bind-libs-9.3.6-16.P1.el5 #給 bind 與相關指令使用的函式庫
bind-9.3.6-16.P1.el5 #這個是用戶端搜尋主機名稱的相關指令
bind-chroot-9.3.6-16.P1.el5 #就是 bind 主程式所需軟體
bind-utils-9.3.6-16.P1.el5 #將 bind 主程式限制在/var/named/chroot裡
基本上在安裝Linux時就會把以上四樣所需的安裝好。
若是沒有安裝的話請自行先行安裝
安裝方式一:
[root@localhost ~]# yum -y install bind bind-chroot bind-utils bind-libs
安裝方式二:
[root@localhost ~]# yum –y install bind*
1.2 安裝caching-nameserver相關套件(一定要安裝)
[root@localhost ~]# yum -y install caching-nameserver
2.設定master DNS Server
2.1 設定named.conf文件
先建立一個named.conf文件，然後在修改內容。
[root@localhost ~]# cd /var/named/chroot/etc/
[root@localhost etc]# cp named.rfc1912.zones named.conf
[root@localhost etc]# chown root:named named.conf
2.2 編輯DNS主要設定檔named.conf
黃色文字部份請依個人需求自行設定，想了解named.conf的設定方式可參考【DNS主要設定檔named.conf介紹】
[root@localhost ~]# vim /var/named/chroot/etc/named.conf
// named.rfc1912.zones:
// Provided by Red Hat caching-nameserver package
// ISC BIND named zone configuration for zones recommended by
// RFC 1912 section 4.1 : localhost TLDs and address zones
// See /usr/share/doc/bind*/sample/ for example named configuration files.
options {
directory "/var/named";
dump-file "/var/named/data/cache_dump.db";
statistics-file "/var/named/data/named_stats.txt";
query-source port 53;
query-source-v6 port 53;
allow-query { any; };
version "None of your business";
forwarders { 168.95.1.1; 168.95.192.2; 8.8.8.8; };
};
zone "." IN {
type hint;
file "named.ca";
};
zone "localdomain" IN {
type master;
file "localdomain.zone";
allow-update { none; };
};
zone "localhost" IN {
type master;
file "localhost.zone";
allow-update { none; };
};
zone "0.0.127.in-addr.arpa" IN {
type master;
file "named.local";
allow-update { none; };
};
zone "0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ip6.arpa" IN {
file "named.ip6.local";
allow-update { none; }
};
zone "255.in-addr.arpa" IN {
type master;
file "named.broadcast";
allow-update { none; };
};
zone "0.in-addr.arpa" IN {
type master;
file "named.zero";
allow-update { none; };
};
#正解
zone "faq-book.com.tw" IN {
type master;
file " faq-book.com.zone";
also-notify {192.168.1.123;};
allow-transfer {192.168.1.123;};
allow-update { none; };
};
#反解
zone "192.168.1.in-addr.arpa" IN {
type master;
file "192.168.1.local";
also-notify {192.168.1.123;};
allow-transfer {192.168.1.123;};
allow-update { none; };
};
2.3 建立正反解檔案
正反解檔案放在( /var/named/chroot/var/named)
[root@localhost ~]# cd /var/named/chroot/var/named/
[root@localhost named]# cp localhost.zone faq-book.com.zone
[root@localhost named]# cp named.local 192.168.1.local
[root@localhost named]# chown root:named faq-book.com.zone 192.168.1.local
2.4編輯faq-book.com.zone 正解(請依照個人設定)
[root@localhost ~]# cd /var/named/chroot/var/named/
[root@localhost named]# vim faq-book.com.zone
$TTL 3600
@ IN SOA ns.faq-book.com. root.faq-book.com. (
42 ; serial (d. adams)
3H ; refresh
15M ; retry
1W ; expiry
1D ) ; minimum
IN NS ns.faq-book.com.
IN NS ns1.faq-book.com.
IN NS ns1.faq-book.com.
IN NS ns1.faq-book.com.
IN NS ns1.faq-book.com.
IN NS ns1.faq-book.com.
IN NS ns1.faq-book.com.
IN NS ns1.faq-book.com.
IN MX 5 mail
IN A 192.168.1.122
ns IN A 192.168.1.122
ns1 IN A 192.168.1.123
www IN A 192.168.1.122
mail IN A 192.168.1.122
blog IN A 192.168.1.122
ftp IN CNAME www
2.5 編輯192.168.1.local 正解
[root@localhost ~]# cd /var/named/chroot/var/named/
[root@localhost named]# vim 192.168.1.local
$TTL 3600
@ IN SOA ns.faq-book.com. root.faq-book.com. (
1997022700 ; Serial
28800 ; Refresh
14400 ; Retry
3600000 ; Expire
86400 ) ; Minimum
IN NS ns.faq-book.com.
IN NS ns1.faq-book.com.
122 IN PTR faq-book.com.
122 IN PTR blog.faq-book.com.
122 IN PTR www.faq-book.com.
122 IN PTR mail.faq-book.com.
3. 建立Slave DNS Server
3.1 設定named.conf文件
先建立一個named.conf文件，然後在修改內容。
[root@localhost ~]# cd /var/named/chroot/etc/
[root@localhost etc]# cp named.rfc1912.zones named.conf
[root@localhost etc]# chown root:named named.conf
3.2 編輯DNS主要設定檔named.conf，黃色文字部份請依個人需求自行設定
[root@localhost ~]# vim /var/named/chroot/etc/named.conf
// named.rfc1912.zones:
// Provided by Red Hat caching-nameserver package
// ISC BIND named zone configuration for zones recommended by
// RFC 1912 section 4.1 : localhost TLDs and address zones
// See /usr/share/doc/bind*/sample/ for example named configuration files.
options {
directory "/var/named";
dump-file "/var/named/data/cache_dump.db";
statistics-file "/var/named/data/named_stats.txt";
query-source port 53;
query-source-v6 port 53;
allow-query { any; };
version "None of your business";
forwarders { 168.95.1.1; 168.95.192.2; 8.8.8.8; };
};
zone "." IN {
type hint;
file "named.ca";
};
zone "localhost" IN {
type master;
file "localhost.zone";
allow-update { none; };
};
#正解
zone "faq-book.com" IN {
type slave;
file "slaves/faq-book.com.zone";
masters { 192.168.1.122; };
};
#反解
zone "192.168.1.in-addr.arpa" IN {
type slave;
file "slaves/192.168.1.local";
masters { 192.168.1.122; };
};
3.3 設定完這兩台DNS Server後就請啟動或是重新啟動dns服務。
[root@localhost ~]# /etc/init.d/named restart
4. 測試DNS
[root@localhost ~]# nslookup
> server 127.0.0.1 #用本機的DNS做測試
Default server: 127.0.0.1
Address : 127.0.0.1#53
> faq-book.com
Server: 127.0.0.1
Address: 127.0.0.1#53
Name: faq-book.com
Address: 192.168.1.122
> set q=mx
> faq-book.com
Server: 127.0.0.1
Address: 127.0.0.1#53
faq-book.com mail exchanger = 5 mail.faq-book.com.
> set q=ns
> faq-book.com
Server: 127.0.0.1
Address: 127.0.0.1#53
faq-book.com nameserver = ns.faq-book.com.
faq-book.com nameserver = ns1.faq-book.com.
> set q=a
> bolg.faq-book.com
Server: 127.0.0.1
Address: 127.0.0.1#53
blog.faq-book.com canonical name = www.faq-book.com.
Name: www.faq-book.com
Address: 192.168.1.122
如果測試完DNS後都正常的話就表示大制上設定好了。
5.設定開機自動執行
[root@localhost ~]# chkconfig named on
原文出處：Linux DNS(BIND)安裝與設定(上) - iT邦幫忙::IT知識分享社群
|
|
|
|
|
討論串
|
[轉貼]bind - DNS 設定 (冷日