实现DNS子域委派和转发
DNS子域委派
在父域下创建一个NS名为zhengzhou,地址为192.168.160.140
vim li.com.zone
zhengzhou NS ns3
ns3 A 192.168.160.140
vim /etc/named.conf
dnssec-enable no;
dnssec-validation no;
#把这两项dns安全加密相关的关闭
然后依次配置区域文件和区域数据库
vim /etc/named.rfc1912.zones
zone "zhengzhou.li.com" IN {
type master;
file "zhengzhou.li.com.zone";
};
vim zhengzhou.li.com.zone
$TTL 1D
@ IN SOA master.li.com admin.li.com (
0 ; serial
1D ; refresh
1H ; retry
1W ; expire
3H ) ; minimum
NS master
master A 192.168.160.140
www CNAME websrv
websrv A 5.5.5.5
修改配主置文件
vim /etc/named.conf
// listen-on port 53 { 127.0.0.1; };
// allow-query { localhost; };
#把这两条注释掉
启动服务
systemctl start named
DNS服务器转发
实验环境
一台能连外网的服务器192.168.160.129
一台中间进行转发的服务器192.168.160.140
一台客户机192.168.160.128
192.168.160.129配置
yum install bind
vim /etc/named.conf
// listen-on port 53 { 127.0.0.1; };
// allow-query { localhost; };
systemctl start named
192.168.160.140配置
yum install bind
vim /etc/named.conf
// listen-on port 53 { 127.0.0.1; };
// allow-query { localhost; };
forward only; #仅执行转发,转发失败不会自己查找
forwarders {192.168.160.129;}; #转发指向192.168.160.129
systemctl start named