安装dns服务器,bind 9.6

目的:为内网测试域名做解析,其他域名通过外网解析(转发)

下载:http://ftp.isc.org/isc/bind9/9.6.0-P1/bind-9.6.0-P1.tar.gz

tar -zxvf bind-9.6.0-P1.tar.gz
cd bind-9.6.0-P1
./configure --prefix=/usr/local
make
make install

#1,创建 rndc.conf文件,用bind自带程序生成
/usr/local/sbin/rndc-confgen > /usr/local/etc/rndc.conf

#/usr/local/etc/rndc.conf 的文件内容
#######################start of rndc.conf##################################################
# Start of rndc.conf
key "rndc-key" {
algorithm hmac-md5;
secret "jLTWPrxavBf4+LtSHAYNiw==";
};

options {
default-key "rndc-key";
default-server 127.0.0.1;
default-port 953;
};
# End of rndc.conf

# Use with the following in named.conf, adjusting the allow list as needed:
# key "rndc-key" {
# algorithm hmac-md5;
# secret "jLTWPrxavBf4+LtSHAYNiw==";
# };
#
# controls {
# inet 127.0.0.1 port 953
#    allow { 127.0.0.1; } keys { "rndc-key"; };
# };
# End of named.conf
#######################start of rndc.conf##################################################

#2,编辑配置文件 /usr/local/etc/named.conf
#######################start of named.conf##################################################
logging {
    channel default_syslog { syslog local2; severity notice; };
    #日志文件
    channel audit_log { file "/var/log/named.log"; severity notice; print-time yes; };
    category default { default_syslog; };
    category general { default_syslog; };
    category security { audit_log; default_syslog; };
    category config { default_syslog; };
    category resolver { audit_log; };
    category xfer-in { audit_log; };
    category xfer-out { audit_log; };
    category notify { audit_log; };
    category client { audit_log; };
    category network { audit_log; };
    category update { audit_log; };
    category queries { audit_log; };
    category lame-servers { audit_log; };
};
#这段是从rndc.conf文件中复制来的--start
key "rndc-key" {
    algorithm hmac-md5;
    secret "jLTWPrxavBf4+LtSHAYNiw==";
};

controls {
    inet 127.0.0.1 port 953
        allow { 127.0.0.1; } keys { "rndc-key"; };
};
#这段是从rndc.conf文件中复制来的--end

options {
    #zones文件目录,需要手工建立该目录
    directory "/var/named/zones";
    pid-file "/var/named/named.pid";
    statistics-file "/var/named/named.stats";
    dump-file "/var/log/named.dump";
    zone-statistics no;
    auth-nxdomain yes;
    notify yes;
    transfer-format many-answers;
    max-transfer-time-in 60;
    interface-interval 0;
    allow-query { any; };
    listen-on-v6 { any; };
    #配置转发,若不能解析,则转发到电信的域名服务器
    forwarders{202.109.15.135;202.96.209.134;};
};

zone "." {
    type hint;
    file "named.root";
};
#本地域
zone "localhost" in {
    Type master;
    File "localhost.zone";
};
zone "0.0.127.IN-ADDR.ARPA" {
    type master;
    file "localhost.rev";
};
#测试域名
zone "bdwbd-test.com" in {
    Type master;
    File "bdwbd-test.com.zone";
};
#######################end of named.conf##################################################

#3,创建/var/named/zones/localhost.zone
#######################start of localhost.zone##################################################
;
; BIND data file for local loopback interface
;
$TTL    604800
@       IN      SOA     localhost. root.localhost. (
        1         ; Serial
        604800         ; Refresh
        86400         ; Retry
        2419200         ; Expire
        604800 )       ; Negative Cache TTL
;
@       IN      NS      localhost.
@       IN      A       127.0.0.1
#######################end of localhost.zone##################################################

#4,创建/var/named/zones/localhost.rev
#######################end of localhost.rev##################################################
$TTL 86400
@ IN SOA localhost. root.localhost. (
        1997022700 ; Serial
        28800 ; Refresh
        14400 ; Retry
        3600000 ; Expire
        86400 ) ; Minimum
@ IN NS localhost.
;

1 IN PTR localhost.
#######################end of localhost.rev##################################################

5,创建/var/named/zones/bdwbd-test.com.zone
#######################end of bdwbd-test.com.zone##################################################
;
; BIND data file for local loopback interface
;
$TTL    604800
@       IN      SOA     bdwbd-test.com. root.bdwbd-test.com. (
        1         ; Serial
        604800         ; Refresh
        86400         ; Retry
        2419200         ; Expire
        604800 )       ; Negative Cache TTL
;
@       IN      NS      bdwbd-test.com.
@       IN      A       192.168.1.4
*       IN      A       192.168.1.4
#######################end of bdwbd-test.com.zone##################################################

6,生成/var/named/zones/named.root
   命令:dig > /var/named/zones/named.root
   生成好的内容:
#######################end of named.root##################################################
; <<>> DiG 9.6.0-P1 <<>>
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 32266
;; flags: qr rd ra; QUERY: 1, ANSWER: 13, AUTHORITY: 0, ADDITIONAL: 14

;; QUESTION SECTION:
;.     IN NS

;; ANSWER SECTION:
.    188550 IN NS M.ROOT-SERVERS.NET.
.    188550 IN NS A.ROOT-SERVERS.NET.
.    188550 IN NS B.ROOT-SERVERS.NET.
.    188550 IN NS C.ROOT-SERVERS.NET.
.    188550 IN NS D.ROOT-SERVERS.NET.
.    188550 IN NS E.ROOT-SERVERS.NET.
.    188550 IN NS F.ROOT-SERVERS.NET.
.    188550 IN NS G.ROOT-SERVERS.NET.
.    188550 IN NS H.ROOT-SERVERS.NET.
.    188550 IN NS I.ROOT-SERVERS.NET.
.    188550 IN NS J.ROOT-SERVERS.NET.
.    188550 IN NS K.ROOT-SERVERS.NET.
.    188550 IN NS L.ROOT-SERVERS.NET.

;; ADDITIONAL SECTION:
A.ROOT-SERVERS.NET. 603934 IN A 198.41.0.4
A.ROOT-SERVERS.NET. 522334 IN AAAA 2001:503:ba3e::2:30
B.ROOT-SERVERS.NET. 603934 IN A 192.228.79.201
C.ROOT-SERVERS.NET. 603934 IN A 192.33.4.12
D.ROOT-SERVERS.NET. 603934 IN A 128.8.10.90
E.ROOT-SERVERS.NET. 603934 IN A 192.203.230.10
F.ROOT-SERVERS.NET. 603934 IN A 192.5.5.241
F.ROOT-SERVERS.NET. 522334 IN AAAA 2001:500:2f::f
G.ROOT-SERVERS.NET. 603934 IN A 192.112.36.4
H.ROOT-SERVERS.NET. 603934 IN A 128.63.2.53
H.ROOT-SERVERS.NET. 522334 IN AAAA 2001:500:1::803f:235
I.ROOT-SERVERS.NET. 603934 IN A 192.36.148.17
J.ROOT-SERVERS.NET. 603934 IN A 192.58.128.30
J.ROOT-SERVERS.NET. 287785 IN AAAA 2001:503:c27::2:30

;; Query time: 17 msec
;; SERVER: 192.168.1.1#53(192.168.1.1)
;; WHEN: Mon Mar 9 11:08:20 2009
;; MSG SIZE rcvd: 500

#######################end of named.root##################################################


启动:
#/usr/local/sbin/named -c /usr/local/etc/named.conf
检测配置文件是否正确:
# /usr/local/sbin/named-checkzone bdwbd-test.com /var/named/zones/bdwbd-test.com.zone
zone bdwbd-test.com/IN: loaded serial 1
OK
#查看状态
# /usr/local/sbin/rndc status
version: 9.6.0-P1
number of zones: 15
debug level: 0
xfers running: 0
xfers deferred: 0
soa queries in progress: 0
query logging is ON
recursive clients: 0/0/1000
tcp clients: 0/100
server is up and running
重载配置文件:
# /usr/local/sbin/rndc reload
server reload successful


评论
添加红包

请填写红包祝福语或标题

红包个数最小为10个

红包金额最低5元

当前余额3.43前往充值 >
需支付:10.00
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包
实付
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明:

1.余额是钱包充值的虚拟货币,按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载,可以购买VIP、付费专栏及课程。

余额充值