配置DNS主从服务器，实现正常的正反向解析

盲烟

已于 2024-03-13 17:02:18 修改

阅读量392

点赞数 7

文章标签：服务器 linux 运维

于 2024-01-24 14:59:01 首次发布

本文链接：https://blog.csdn.net/2301_78934155/article/details/135820065

版权

一、主DNS服务器配置

//关闭防火墙
[root@master ~]# systemctl stop firewalld
[root@master ~]# setenforce 0

//安装相关包 
[root@master ~]# yum install bind -y

//修改配置文件
[root@master ~]# vim /etc/named.conf

options {
        listen-on port 53 { 192.168.10.130; };
        directory       "/var/named";
        allow-query     { any; };
        recursion yes;
        allow-transfer { 192.168.10.129; }

};


zone "baidu.com" IN {
        type master;
        file "baidu.z";
};
zone "10.168.192.in-addr.arpa" IN {
        type master;
        file "baidu.f";
};

1.配置正向解析

[root@master ~]# vim /var/named/master.z
$TTL 1D
@       IN SOA  @ admin.baidu.com. (
                                        0
                                        1M
                                        1M
                                        3M
                                        1M )
        NS      dns.baidu.com.
        NS      slave.baidu.com.
dns     A       192.168.10.130
www     A       192.168.10.132
ftp     A       192.168.10.133
slave   A       192.168.10.129
w       CNAME   www

2.配置反向解析

[root@master ~]# vim /var/named/baidu.f
$TTL 1D
@       IN SOA  @ admin.baidu.com. (
                                        0
                                        1M
                                        1M
                                        3M
                                        1M )
        NS      dns.baidu.com.
        NS      slave.baidu.com.
130     PTR     dns.baidu.com.
132     PTR     www.baidu.com.
132     PTR     w.baidu.com.
133     PTR     ftp.baidu.com.
129     PTR     slave.baidu.com.

//重启服务
[root@master ~]# systemctl restart named

二、从服务器配置

//关闭防火墙
[root@slave ~]# systemctl stop firewalld
[root@slave ~]# setenforce 0

//安装相关包
[root@slave ~]# yum install bind -y

//修改配置文件
[root@slave ~]# vim /etc/named.conf
options {
        listen-on port 53 { 192.168.10.129; };
        directory       "/var/named/slaves";
        allow-query     { any; };
};
zone "baidu.com" IN {
        type slave;
        file "named.baidu.z";
        masters { 192.168.10.130; };
};
zone "10.168.192.in-addr.arpa" IN {
        type slave;
        file "named.baidu.f";
        masters { 192.168.10.130; };
};

//重启服务
[root@slave ~]# systemctl restart named

测试：
[root@master named]# nslookup
> server 192.168.10.129
Default server: 192.168.10.129
Address: 192.168.10.129#53
> www.baidu.com
Server: 192.168.10.130
Address: 192.168.10.130#53

三、增量区域传送

//正向解析
[root@master ~]# vim /var/named/baidu.z
$TTL 1D
@       IN SOA  @ admin.baidu.com. (
                                        1   
                                        1M
                                        1M
                                        3M
                                        1M )
        NS      dns.baidu.com.
        NS      slave.baidu.com.
dns     A       192.168.10.130
www     A       192.168.10.132
ftp     A       192.168.10.133
slave   A       192.168.10.129
aaa     A       192.168.10.101 
w       CNAME   www
 
//反向解析
[root@master ~]# vim /var/named/baidu.f
$TTL 1D
@       IN SOA  @ admin.baidu.com. (
                                        1  
                                        1M
                                        1M
                                        3M
                                        1M )
        NS      dns.baidu.com.
        NS      slave.baidu.com.
130    PTR      dns.baidu.com.
132     PTR     www.baidu.com.
132     PTR     w.baidu.com.
133     PTR     ftp.baidu.com.
129    PTR      slave.baidu.com.
101     PTR     aaa.baidu.com.  
 
//重启服务
[root@master ~]# systemctl restart named

//测试
[root@master ~]#tail -f /var/log/messages