DNS server配置

1、安装软件：bind-9.8.2/bind-libs-9.8.2/bind-chroot-9.8.2/bind-utils-9.8.2

2、修改/etc/named.conf

options {

    listen-on port 53 { 127.0.0.1; }; //修改为server 真实ip

......

    allow-query    { any; }

......

}

增加：

zone "0.186.192.in-addr.arpa." IN { //反向解析

    type master;

    file "0.168.192.zone";

};

zone "example.com" IN {    // 正向解析

    type master;

    file "example.com.zone";

};

3、 反向解析文件

// /var/named/0.168.192.zone

cp /var/named/named.lookback    /var/named/0.168.192.zone

$TTL 1D

@    IN SOA     test-3.example.com root.test-3.example.com. (

                    0    ; serial

                    1D    ; refresh

                    1H    ; retry

                    1W    ; expire

                    3H )    ; minimum

    NS     example.com.

201 IN PTR test-1.example.com.

202 IN PTR test-1.example.com.

4、正向解析文件

cp /var/named/named.localhost    /var/named/ example.com.zone

// /var/named/example.com.zone

$TTL 1D

@    IN SOA    @ root.example.com. (

                    0    ; serial

                    1D    ; refresh

                    1H    ; retry

                    1W    ; expire

                    3H )    ; minimum

    IN NS test-3

test-3 IN A 127.0.0.1

test-1 IN A 192.168.0.201

test-2 IN A 192.168.0.202

重启服务：service named restart

测试命令：nslookup hostname        dig example.com

普通机器配置：

/etc/hosts文件配置

ip    domain alias    //domain 格式 test.example.com需要与dns sever 一致

/etc/resolv.con

search example.com

nameserver serverip

/etc/host.conf

order bind,hosts    //解析顺序先dns，再hosts

multi on

5、错误：

5.1 执行 nslookup hostname出现错误“server can;t find example.com  :SERVFAIL”

原因正向解析文件 example.com.zone 权限错误，chow named example.com.zon，重启 service named restart可以解决

5.2 在普通机器上执行：nslookup hostname 出现：“no servers could be reached”

解决：关闭DNSsever 防火墙、关闭selinux、重启server；

http://blog.csdn.net/wei_gw2012/article/details/79145033