配置dns服务的正反向解析
一、正向解析
1.安装需要的服务
yum install bind -y
如果失败,可以先检查是否是挂载出了问题,重新挂载一下
2.编写配置文件
[root@localhost ~]# cat /etc/named.conf
options {
listen-on port 53 { 192.168.229.136; };
directory "/var/named";
allow-query { any; };
};
zone "qq.com" IN {
type master;
file "named.qq.com";
};
[root@localhost ~]# cat /var/named/named.qq.com
$TTL 1D
@ IN SOA @ admin.qq.com. (
2022090100
1D
1H
3D
1D )
@ IN NS dns.qq.com.
dns IN A 192.168.10.100
www IN A 192.168.10.10
en IN A 192.168.10.20
ftp IN A 192.168.10.30
fff IN CNAME ftp
3.重启named服务,且关闭防火墙
[root@localhost ~]# systemctl restart named
[root@localhost ~]# systemctl stop firewalld
[root@localhost ~]# setenforce 0
4.客户端主机修改resolv.conf文件,并测试
[root@localhost ~]# cat /etc/resolv.conf
# Generated by NetworkManager
search localdomain
nameserver 192.168.229.136
[root@localhost ~]# dig -t A www.qq.com @192.168.229.136
; <<>> DiG 9.11.26-RedHat-9.11.26-6.el8 <<>> -t A www.qq.com @192.168.229.136
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 6980
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 1, ADDITIONAL: 2
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1232
; COOKIE: ed19cc67ea7ec5d3596acf916310c804e479ba407ecea949 (good)
;; QUESTION SECTION:
;www.qq.com. IN A
;; ANSWER SECTION:
www.qq.com. 86400 IN A 192.168.10.10
;; AUTHORITY SECTION:
qq.com. 86400 IN NS dns.qq.com.
;; ADDITIONAL SECTION:
dns.qq.com. 86400 IN A 192.168.10.100
;; Query time: 0 msec
;; SERVER: 192.168.229.136#53(192.168.229.136)
;; WHEN: Thu Sep 01 10:56:04 EDT 2022
;; MSG SIZE rcvd: 117
二、反向解析
1.修改配置文件
[root@localhost ~]# cat /etc/named.conf
options {
listen-on port 53 { 192.168.229.136; };
directory "/var/named";
allow-query { any; };
};
zone "229.168.192.in-addr.arpa" IN {
type master;
file "named2.qq.com";
allow-update { none; };
};
[root@localhost ~]# cat /var/named/named2.qq.com
$TTL 1D
@ IN SOA @ admin.qq.com. (
2022090100
1D
1H
3D
1D )
@ IN NS dns.qq.com.
dns IN A 192.168.229.136
10 IN PTR www.qq.com.
20 IN PTR en.qq.com.
30 IN PTR ftp.qq.com.
fff IN CNAME ftp
2.重启named服务
3.客户端测试
[root@localhost ~]# host 192.168.229.136
Host 136.229.168.192.in-addr.arpa. not found: 3(NXDOMAIN)
[root@localhost ~]# host 192.168.229.10
10.229.168.192.in-addr.arpa domain name pointer www.qq.com.
[root@localhost ~]# host 192.168.229.20
20.229.168.192.in-addr.arpa domain name pointer en.qq.com.