CentOS 7 DNS服务配置

CentOS 7 DNS服务配置

1.安装DNS服务组件

[root@localhost ~]# yum -y install bind

这里已将对应的依赖关系的组件都安装好了

2.配置DNS服务文件

进入etc文件夹中查找named文件

[root@localhost etc]# ls named*
named-chroot.files  named.iscdlv.key     named.root.key
named.conf          named.rfc1912.zones

named:

编辑named.conf文件，将原本的监听端口改为any

注释logging区域

/*
logging {
        channel default_debug {
                file "data/named.run";
                severity dynamic;
        };
};
*/

在文件最后添加我们的正反向解析文件

zone "0.in-addr.arpa" IN {
	type master;
	file "named.empty";
	allow-update { none; };
};

zone "example.com" IN {
        type master;
        file "example.com";
        allow-update { none; };
};
zone "25.168.192.in-addr.arpa" IN {
        type master;
        file "192.168.26.zone";
        allow-update { none; };
};

将named.localhost复制出两个文件，分别对应正反区域文件“example.com"和192.168.26.zone“，这样省下了编辑SOA的一些常规参数

[root@localhost named]# cp -a named.localhost example.com
[root@localhost named]# cp -a named.localhost 192.168.26.zone

配置正反向区域文件

正向文件配置

vim example.com

$TTL 1D
@       IN SOA  example.com. rname.invalid. (
                                        0       ; serial
                                        1D      ; refresh
                                        1H      ; retry
                                        1W      ; expire
                                        3H )    ; minimum
@       NS      master.example.com.
mater   A       192.168.26.128
        AAAA    ::1

www     CNAME   master
ftp     CNAME   master

smtp    A       192.168.26.11
mail    A       192.168.26.12
@       MX 10   mail
~                     

反向文件配置

vim 192.168.26.zone

$TTL 1D
@       IN SOA  master.exmaple.com. rname.invalid. (
                                        0       ; serial
                                        1D      ; refresh
                                        1H      ; retry
                                        1W      ; expire
                                        3H )    ; minimum
@       NS      master.example.com.
128     PTR     master.example.com.

11      PTR     smtp.example.com.
12      PTR     mail.example.com.

重启DNS服务

配置好我们的ＤＮＳ服务器

vim /etc/sysconfig/network-scripts/ifcfg-ens33

TYPE="Ethernet"
PROXY_METHOD="none"
BROWSER_ONLY="no"
BOOTPROTO="static"
DEFROUTE="yes"
IPV4_FAILURE_FATAL="no"
IPV6INIT="yes"
IPV6_AUTOCONF="yes"
IPV6_DEFROUTE="yes"
IPV6_FAILURE_FATAL="no"
IPV6_ADDR_GEN_MODE="stable-privacy"
NAME="ens33"
UUID="c5fe79f2-77d7-4431-9814-79f6646b6083"
DEVICE="ens33"
ONBOOT="yes"
IPADDR="192.168.26.128"
NETMASK="255.255.255.0"
GATEWAY="192.168.26.2"
DNS1="192.168.26.128"
DNS2="8.8.8.8"

这里检查一下我们的配置有没有出错

named-checkconf -z /etc/named.rfc1912.zones

[root@localhost named]# named-checkconf -z /etc/named.rfc1912.zones
zone localhost.localdomain/IN: loaded serial 0
zone localhost/IN: loaded serial 0
zone 1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ip6.arpa/IN: loaded serial 0
zone 1.0.0.127.in-addr.arpa/IN: loaded serial 0
zone 0.in-addr.arpa/IN: loaded serial 0
zone example.com/IN: NS 'master.example.com' has no address records (A or AAAA)
zone example.com/IN: not loaded due to errors.
_default/example.com/IN: bad zone
zone 25.168.192.in-addr.arpa/IN: loaded serial 0

这里example.com文件出错了，发现是master写成来了mater,改过来之后重启ＤＮＳ服务
systemctl restart named

测试DNS服务配置

测试前主机的DNS服务器地址记得设置成刚写好的地址

[root@master ~]# nslookup
> www.example.com
Server:		192.168.26.128
Address:	192.168.26.128#53

www.example.com	canonical name = master.example.com.
Name:	master.example.com
Address: 192.168.26.128
Name:	master.example.com
Address: ::1
> ftp.example.com
Server:		192.168.26.128
Address:	192.168.26.128#53

ftp.example.com	canonical name = master.example.com.
Name:	master.example.com
Address: 192.168.26.128
Name:	master.example.com
Address: ::1
> 192.168.128
Server:		192.168.26.128
Address:	192.168.26.128#53

在win2003上测试 一下，先关CentOS的防火墙service firewalld stop
测试成功