linux dns服务器配置

常用命令，排错利器：

查看进程

 ps  aux |grep named

启动

service named start (centos)

/usr/local/bind/sbin/named -4  (redhat)

杀死

killall named

查看端口

netstat -ano| grep 53

检测

nslookup

dig

dig -x

改dns

vi /etc/resolv.conf

改网卡

vi /etc/sysconfig/network-scripts/ifcfg-eth0

centos系统（那你就幸福了，可以用yum装,redhat的直接往下拉）：

一、安装
# rpm -qa | grep bind
#rpm -qa | grep caching

# yum install caching-nameserver

ok,centos这样就装好了。

检查一下：

#service named start

[root@localhost named]# ps  aux |grep named
named    14011  4.0  0.2  38852  3380 ?        Ssl  07:48   0:00 /usr/sbin/named -u named- c /etc/named.caching-nameserver.conf- t /var/named/chroot
root     14021  0.0  0.0   4784   704 pts/1    R+   07:48   0:00 grep named

注意了，红蓝字部分

说明，我们named服务配置文件为： /etc/named.caching-nameserver.conf

zone文件应该放在： /var/named/chroot/var/named/

二、配置

先说明一下，不然看着这些配置文件你或许会晕：

192.168.10.62 将是我们的dns服务器
192.168.10.188 将是我们的slave服务器

abc.zone.db 正解文件

named.192.168.10 反解文件

服务配置文件：

[root@localhost named]# vi /etc/named.caching-nameserver.conf

//
// named.conf
//
// Provided by Red Hat bind package to configure the ISC BIND named(8) DNS
// server as a caching only nameserver (as a localhost DNS resolver only).
//
// See /usr/share/doc/bind*/sample/ for example named configuration files.
//

options {
        listen-on port 53 { 192.168.10.0/24; };
        listen-on-v6 port 53 { ::1; };
        directory       "/var/named";
        dump-file       "/var/named/data/cache_dump.db";
        statistics-file "/var/named/data/named_stats.txt";
        memstatistics-file "/var/named/data/named_mem_stats.txt";
        allow-query     { 192.168.10.0/24; };
        allow-query-cache { 192.168.10.0/24; };
        recursion yes;

};

logging {
        channel default_debug {
                file "data/named.run";
                severity dynamic;
        };
};

zone "." IN {

        type hint;
        file "/var/named/named.ca";
};


zone "mx1985.com." IN {

        type master;

        file "/var/named/mx1985.zone.db";
        allow-transfer { 192.168.10.188; };
};

zone "abc.com." IN {

       type master;

       file "/var/named/abc.zone.db";
        allow-transfer { 192.168.10.188; };
};

zone "10.168.192.in-addr.arpa" IN {
        type master;
        file "/var/named/named.192.168.10";
        allow-transfer { 192.168.10.188; };
};

正解文件：

[root@localhost named]# vi /var/named/chroot/var/named/abc.zone.db

$TTL 1D
@       IN SOA  @ rname.invalid. (
                                        0       ; serial
                                        1D      ; refresh
                                        1H      ; retry
                                        1W      ; expire
                                        3H )    ; minimum
                IN  NS  abc.com.
                IN  NS  slave.abc.com.
abc.com.        IN  A 192.168.10.62
slave.abc.com.  IN  A 192.168.10.188

www     IN A    192.168.10.188
aaa     IN A    192.168.10.188
bbb     IN A    192.168.10.62


反解文件：

[root@localhost named]# vi /var/named/chroot/var/named/named.192.168.10

$TTL 1D
@       IN SOA  @ rname.invalid. (
                                        0       ; serial
                                        1D      ; refresh
                                        1H      ; retry
                                        1W      ; expire
                                        3H )    ; minimum
        IN  NS  abc.com.
        IN  NS  slave.abc.com.
62      IN  PTR abc.com.
188     IN  PTR slave.abc.com.

188     IN PTR   www.abc.com.
188     IN PTR  aaa.abc.com.
62      IN PTR  bbb.abc.com.
~
~


redhat 系统作为slave 服务的配置（redhat作为master服务器的配置请再往下拉）：

在上面我们用的192.168.10.188作为slave服务器，现在我们来配置它。

因为我采用的是redhat，所以，这里就把其安装说明一下：

我分享一下 安装包

http://pan.baidu.com/share/link?shareid=90714652&uk=3222060313

#tar -zxvf bind-9.9.2.tar.gz

#cd bind-9.9.2

#./configure --prefix=/usr/local/bind --enable-threads --with-dlz-mysql

#make

#make install

生成基本配置文件

# /usr/local/bind/sbin/rndc-confgen >/usr/local/bind/etc/rndc.conf

#tail -10 rndc.conf | head -9 | sed s/#\ //g > named.conf

启动

#/usr/local/bind/sbin/named -4

好了，进入slavedns的配置，特别要注意这个系统的路径

建一个slaves目录，用于存放zone文件，

#mkdir /usr/local/bind/etc/slaves

#chmod 777 -R slaves/

#chown -R named.named slaves/

# ll -d slaves
drwxrwxrwx 2 named named 4096 Jul 25 13:42 slaves(这样就对了)

[root@localhost etc]# vi named.conf

key "rndc-key" {
        algorithm hmac-md5;
        secret "XfiakRq8MCb3uC6XwKDLQQ==";
};

controls {
        inet 127.0.0.1 port 953
                allow { 127.0.0.1; } keys { "rndc-key"; };
};
zone "." IN {

        type hint;
        file "/usr/local/bind/etc/named.ca";

};

zone "abc.com." IN {

       type slave;

       file "slaves/abc.zone.db";

        masters { 192.168.10.62; };

};

zone "10.168.192.in-addr.arpa" IN {
        type slave;
        file "slaves/named.192.168.10";

        masters { 192.168.10.62; };
};

重启，master共享的zone文件就过来了
# /usr/local/bind/sbin/named -4

[root@localhost etc]# ll slaves/
total 8
-rw-r--r-- 1 root root 349 Jul 25 14:18 abc.zone.db
-rw-r--r-- 1 root root 446 Jul 25 14:38 named.192.168.10

现在我们配置一个redhat下的master DNS服务器，不包括slave服务

named.conf

[root@rhes6 ~]# vi /usr/local/bind/etc/named.conf

//
// named.conf
//
// Provided by Red Hat bind package to configure the ISC BIND named(8) DNS
// server as a caching only nameserver (as a localhost DNS resolver only).
//
// See /usr/share/doc/bind*/sample/ for example named configuration files.
//

options {
        listen-on port 53 { 192.168.10.0/24; };
        listen-on-v6 port 53 { ::1; };
        directory       "/usr/local/bind/etc/";
        pid-file "/usr/local/bind/var/run/named/named.pid";
        allow-query     { 192.168.10.0/24; };
        allow-query-cache { 192.168.10.0/24; };
        recursion yes;
        allow-transfer { none; };
};

include "/usr/local/bind/etc/rndc.key";
zone "." IN {

        type hint;
        file "/usr/local/bind/etc/named.ca";

};


zone "mx1985.com." IN {

       type master;

       file "mx1985.zone.db";

};

zone "abc.com." IN {

       type master;

       file "abc.zone.db";

};

zone "10.168.192.in-addr.arpa" IN {
        type master;
        file "named.192.168.10";
};


正解文件

[root@rhes6 ~]# vi /usr/local/bind/etc/abc.zone.db

$TTL 1D
@       IN SOA  @ rname.invalid. (
                                        0       ; serial
                                        1D      ; refresh
                                        1H      ; retry
                                        1W      ; expire
                                        3H )    ; minimum
        IN  NS  abc.com.
        A 192.168.10.185

www     IN A    192.168.10.188
aaa     IN A    192.168.10.188
bbb     IN A    192.168.10.188


反解文件：

~
[root@rhes6 ~]# vi /usr/local/bind/etc/named.192.168.10

$TTL 1D
@       IN SOA  @ rname.invalid. (
                                        0       ; serial
                                        1D      ; refresh
                                        1H      ; retry
                                        1W      ; expire
                                        3H )    ; minimum
        IN  NS  abc.com.
        PTR 192.168.10.185

188     IN PTR   www.abc.com.
188     IN PTR  aaa.abc.com.

188      IN PTR bbb.abc.com.

现在将所有机器的dns都改成这两台服务器吧

# vi /etc/resolv.conf

mastername 192.168.10.62

mastername 192.168.10.188