查看某个区域开启的所有服务
# firewall-cmd --zone=public --list-all
1.配yum源
2.改主机名为jison.com
hostnamectl set-hostname jison.com
3.修改网卡的ip地址等命令
TYPE=Enternet
HWADDR=00:00:00:00:01
IPADDR=192.168.1.109
NETMASK=255.255.255.0
GATEWAY=192.168.1.1
DNS1=192.168.1.109
4.装包bind,bind-utils
yum install bind bind-utils
5.启named服务
systemctl enable named
systemctl start named
6.配/etc/named.conf、/etc/named.rfc1912.zones
(1)# vim /etc/named.conf
options {
listen-on port 53 { any; }; # 设置监听
listen-on-v6 port 53 { ::1; };
directory "/var/named";
dump-file "/var/named/data/cache_dump.db";
statistics-file "/var/named/data/named_stats.txt";
memstatistics-file "/var/named/data/named_mem_stats.txt";
allow-query { any; }; # 允许查询
recursion yes;
dnssec-enable yes;
dnssec-validation yes;
dnssec-lookaside auto;
/* Path to ISC DLV key */
bindkeys-file "/etc/named.iscdlv.key";
managed-keys-directory "/var/named/dynamic";
pid-file "/run/named/named.pid";
session-keyfile "/run/named/session.key";
};
logging {
channel default_debug {
file "data/named.run";
severity dynamic;
};
};
zone "." IN {
type hint;
file "named.ca";
};
include "/etc/named.rfc1912.zones";
include "/etc/named.root.key";
(2)# vim /etc/named.rfc1912.zones
# 在该文件的最末尾加入以下内容
zone "jison.com" IN {
type master;
file "jison.zone";
allow-update { none; };
};
7.配zones
cd /var/named
cp -p named.localhost jison.zone
vi jison.zone
# cp –p /var/named/named.localhost /var/named/jison.zone
# vim /var/named/google.zone
$TTL 7200
@ IN SOA ns.jison.com. root.jison.com. (
2014112499 ; serial
1D ; refresh
1H ; retry
1W ; expire
3H ) ; minimum
@ NS ns.jison.com.
ns A 172.25.254.201
www A 172.25.254.201
ftp A 172.25.254.12
8.重启named服务
systemctl restart named.service
9.在防火墙中允许外界访问named服务
firewall-cmd --permanent --add-service=dns
firewall-cmd --reload
10.测试:nslookup
vim /etc/resolv.conf
nameserver 172.25.254.201 # 指定DNS服务器地址
ping www.jison.com
# firewall-cmd --zone=public --list-all
1.配yum源
2.改主机名为jison.com
hostnamectl set-hostname jison.com
3.修改网卡的ip地址等命令
TYPE=Enternet
HWADDR=00:00:00:00:01
IPADDR=192.168.1.109
NETMASK=255.255.255.0
GATEWAY=192.168.1.1
DNS1=192.168.1.109
4.装包bind,bind-utils
yum install bind bind-utils
5.启named服务
systemctl enable named
systemctl start named
6.配/etc/named.conf、/etc/named.rfc1912.zones
(1)# vim /etc/named.conf
options {
listen-on port 53 { any; }; # 设置监听
listen-on-v6 port 53 { ::1; };
directory "/var/named";
dump-file "/var/named/data/cache_dump.db";
statistics-file "/var/named/data/named_stats.txt";
memstatistics-file "/var/named/data/named_mem_stats.txt";
allow-query { any; }; # 允许查询
recursion yes;
dnssec-enable yes;
dnssec-validation yes;
dnssec-lookaside auto;
/* Path to ISC DLV key */
bindkeys-file "/etc/named.iscdlv.key";
managed-keys-directory "/var/named/dynamic";
pid-file "/run/named/named.pid";
session-keyfile "/run/named/session.key";
};
logging {
channel default_debug {
file "data/named.run";
severity dynamic;
};
};
zone "." IN {
type hint;
file "named.ca";
};
include "/etc/named.rfc1912.zones";
include "/etc/named.root.key";
(2)# vim /etc/named.rfc1912.zones
# 在该文件的最末尾加入以下内容
zone "jison.com" IN {
type master;
file "jison.zone";
allow-update { none; };
};
7.配zones
cd /var/named
cp -p named.localhost jison.zone
vi jison.zone
# cp –p /var/named/named.localhost /var/named/jison.zone
# vim /var/named/google.zone
$TTL 7200
@ IN SOA ns.jison.com. root.jison.com. (
2014112499 ; serial
1D ; refresh
1H ; retry
1W ; expire
3H ) ; minimum
@ NS ns.jison.com.
ns A 172.25.254.201
www A 172.25.254.201
ftp A 172.25.254.12
8.重启named服务
systemctl restart named.service
9.在防火墙中允许外界访问named服务
firewall-cmd --permanent --add-service=dns
firewall-cmd --reload
10.测试:nslookup
vim /etc/resolv.conf
nameserver 172.25.254.201 # 指定DNS服务器地址
ping www.jison.com