Linux总结笔记8-搭建DNS服务器

部署DNS主服务器

1.安装bind服务程序

[root@linux1 ~]# yum -y install bind-chroot

2.修改bind的主配置文件

[root@linux1 ~]# vim /etc/named.conf
options {
        listen-on port 53 { any; };     //改为any；在所有网卡上监听dns请求
        listen-on-v6 port 53 { ::1; };
        directory       "/var/named";
        dump-file       "/var/named/data/cache_dump.db";
        statistics-file "/var/named/data/named_stats.txt";
        memstatistics-file "/var/named/data/named_mem_stats.txt";
        allow-query     { any; };       //改为any；允许所有主机进行dns请求

3.修改bind的区域配置文件

[root@linux1 ~]# vim /etc/named.rfc1912.zones
zone "kangvcar.com" IN {
        type master;
        file "kangvcar.com.zone";
        allow-update { none;};
};

zone "100.168.192.in-addr.arpa" IN {
        type master;
        file "192.168.100.arpa";
        allow-update { none;};
};

4.修改bind的数据文件

在/var/named 目录下有正反向解析的模版文件
使用cp -a 复制（连同权限和所有者一起复制）模版即可
[root@linux1 ~]# cp -a /var/named/named.localhost /var/named/kangvcar.com.zone  --->正向解析文件
[root@linux1 ~]# cp -a /var/named/named.loopback /var/named/192.168.100.arpa   --->反向解析文件
[root@linux1 ~]# vim /var/named/kangvcar.com.zone   --->正向解析文件
$TTL 1D
@       IN SOA  kangvcar.com. root.kangvcar.com. (
                                        0       ; serial
                                        1D      ; refresh
                                        1H      ; retry
                                        1W      ; expire
                                        3H )    ; minimum
        NS      ns.kangvcar.com.
ns      IN A    192.168.100.10
www     IN A    192.168.100.10
bbs     IN A    192.168.100.20
tech    IN A    192.168.100.30

[root@linux1 ~]# vim /var/named/192.168.100.arpa    --->反向解析文件
$TTL 1D
@       IN SOA  kangvcar.com. root.kangvcar.com. (
                                        0       ; serial
                                        1D      ; refresh
                                        1H      ; retry
                                        1W      ; expire
                                        3H )    ; minimum
        NS      ns.kangvcar.com.
ns      IN A    192.168.100.10
10      IN PTR  www.kangvcar.com.
20      IN PTR  bbs.kangvcar.com.
30      IN PTR  tech.kangvcar.com.

5.重新启动namd服务即可

[root@linux1 ~]# systemctl restart named
[root@linux1 ~]# systemctl enable named

6.验证

//修改网卡配置文件，加入DNS服务器的IP
[root@linux1 ~]# vim /etc/sysconfig/network-scripts/ifcfg-eno16777728
DNS1=192.168.100.10
//在/etc/resolv.conf文件中加入nameserver
[root@linux1 ~]# cat /etc/resolv.conf    
nameserver 192.168.100.10
//用nslookup 进行验证
[root@linux1 named]# nslookup 
> www.kangvcar.com
Server:         192.168.100.10
Address:        192.168.100.10#53

Name:   www.kangvcar.com
Address: 192.168.100.10
> 192.168.10030
Server:         192.168.100.10
Address:        192.168.100.10#53

** server can't find 192.168.10030: SERVFAIL
> 192.168.100.30
Server:         192.168.100.10
Address:        192.168.100.10#53

30.100.168.192.in-addr.arpa     name = tech.kangvcar.com.

---

部署DNS从服务器

（在已部署DNS主服务器的基础上）

1.修改DNS主服务器的区域配置文件

[root@linux1 ~]# vim /etc/named.rfc1912.zones
zone "kangvcar.com" IN {
        type master;
        file "kangvcar.com.zone";
        allow-update { 192.168.100.11;};    //把none改为DNS从服务器的IP地址
};

zone "100.168.192.in-addr.arpa" IN {
        type master;
        file "192.168.100.arpa";
        allow-update { 192.168.100.11;};    //把none改为DNS从服务器的IP地址
};

[root@linux1 ~]# systemctl restart named    //重新启动named服务

2.在DNS从服务器上安装bind服务程序

[root@linux2 ~]# yum -y install bind-chroot​

3.修改DNS从服务器的主配置文件

[root@linux2 ~]# cat /etc/named.conf 
options {
        listen-on port 53 { any; };     //改为any；在所有网卡上监听dns请求
        listen-on-v6 port 53 { ::1; };
        directory       "/var/named";
        dump-file       "/var/named/data/cache_dump.db";
        statistics-file "/var/named/data/named_stats.txt";
        memstatistics-file "/var/named/data/named_mem_stats.txt";
        allow-query     { any; };       //改为any；允许所有主机进行dns请求

4.修改DNS从服务器的区域配置文件

[root@linux2 ~]# cat /etc/named.rfc1912.zones
zone "kangvcar.com" IN {
        type slave;                 //类型为slave
        masters { 192.168.100.10;}; //指定DNS主服务器的IP
        file "slaves/kangvcar.com.zone";   //指定同步后的文件保存位置
};

zone "100.168.192.in-addr.arpa" IN {
        type slave;                 //类型为slave
        masters { 192.168.100.10;}; //指定DNS主服务器的IP
        file "slaves/192.168.100.arpa";    //指定同步后的文件保存位置
};

5.重新启动named服务即可

[root@linux2 ~]# systemctl restart named

6.验证

//修改网卡配置文件，加入DNS服务器的IP
[root@linux2 ~]# vim /etc/sysconfig/network-scripts/ifcfg-eno16777728
DNS1=192.168.100.11
//在/etc/resolv.conf文件中加入nameserver
[root@linux2 ~]# cat /etc/resolv.conf    
nameserver 192.168.100.11
//用nslookup 进行验证
[root@linux2 named]# nslookup 
> www.kangvcar.com
Server:         192.168.100.11
Address:        192.168.100.11#53

Name:   www.kangvcar.com
Address: 192.168.100.10
> 192.168.100.12
Server:         192.168.100.11
Address:        192.168.100.11#53

12.100.168.192.in-addr.arpa     name = tech.kangvcar.com.