缓存DNS服务器
一块网卡为vmnet1,一块网卡为桥接
1.修改网络配置
1)vim /etc/sysconfig/network-scripts/ifcfg-eth0
DEVICE=eth0
TYPE=Ethernet
ONBOOT=yes
NM_CONTROLLED=no
BOOTPROTO=static
IPADDR=192.168.1.254
NETMASK=255.255.255.0
vim /etc/sysconfig/network-scripts/ifcfg-eth0
DEVICE=eth0
TYPE=Ethernet
ONBOOT=yes
NM_CONTROLLED=no
BOOTPROTO=dhcp
2.安装bind软件包
1)yum -y install bind bind-utils bind-chroot
3.编辑主配置文件
1)vim /etc/named.conf
options {
listen-on port 53 { 192.168.1.10; }; //设置监听IP地址;需修改
directory "/var/named"; //区域配置文件存放目录
dump-file "/var/named/data/cache_dump.db";
statistics-file "/var/named/data/named_stats.txt";
memstatistics-file "/var/named/data/named_mem_stats.txt";\
allow-query {localhost;}; //删除该行
recursion yes;
forwarders {114.114.114.114;8.8.8.8;}; //转发器设置,将所有DNS查询请求转发
dnssec-enable no; //bind安全检测机制;需修改
dnssec-validation no; //bind安全检测机制;需修改
dnssec-lookaside auto;
/* Path to ISC DLV key */
bindkeys-file "/etc/named.iscdlv.key";
managed-keys-directory "/var/named/dynamic";
};
logging {
channel default_debug {
file "data/named.run";
severity dynamic;
};
};
zone "." IN { //指定解析域
type hint; //指定DNS类型,为缓存服务器
file "named.ca"; //根解析文件
};
include "/etc/named.rfc1912.zones";
include "/etc/named.root.key";
2)/etc/init.d/named start && chkconfig --level 35 named on
开启路由转发
1)vim /etc/sysctl.conf
7 net.ipv4.ip_forward = 1
2)sysctl -p
3.编辑iptables防护墙规则
1)iptables -t nat -I POSTROUTING -s 192.168.1.0/24 -j SNAT --to-source 192.168.233.145(换为桥接获取的IP)
//允许192.168.1.0上网
测试
客户端配置
一块网卡vmnet1、网关192.168.1.1、首选DNS 192.168.1.10
cmd --> nslookup www.baidu.com