目的:为内网测试域名做解析,其他域名通过外网解析(转发)
下载:http://ftp.isc.org/isc/bind9/9.6.0-P1/bind-9.6.0-P1.tar.gz
tar -zxvf bind-9.6.0-P1.tar.gz
cd bind-9.6.0-P1
./configure --prefix=/usr/local
make
make install
#1,创建 rndc.conf文件,用bind自带程序生成
/usr/local/sbin/rndc-confgen > /usr/local/etc/rndc.conf
#/usr/local/etc/rndc.conf 的文件内容
#######################start of rndc.conf##################################################
# Start of rndc.conf
key "rndc-key" {
algorithm hmac-md5;
secret "jLTWPrxavBf4+LtSHAYNiw==";
};
options {
default-key "rndc-key";
default-server 127.0.0.1;
default-port 953;
};
# End of rndc.conf
# Use with the following in named.conf, adjusting the allow list as needed:
# key "rndc-key" {
# algorithm hmac-md5;
# secret "jLTWPrxavBf4+LtSHAYNiw==";
# };
#
# controls {
# inet 127.0.0.1 port 953
# allow { 127.0.0.1; } keys { "rndc-key"; };
# };
# End of named.conf
#######################start of rndc.conf##################################################
#2,编辑配置文件 /usr/local/etc/named.conf
#######################start of named.conf##################################################
logging {
channel default_syslog { syslog local2; severity notice; };
#日志文件
channel audit_log { file "/var/log/named.log"; severity notice; print-time yes; };
category default { default_syslog; };
category general { default_syslog; };
category security { audit_log; default_syslog; };
category config { default_syslog; };
category resolver { audit_log; };
category xfer-in { audit_log; };
category xfer-out { audit_log; };
category notify { audit_log; };
category client { audit_log; };
category network { audit_log; };
category update { audit_log; };
category queries { audit_log; };
category lame-servers { audit_log; };
};
#这段是从rndc.conf文件中复制来的--start
key "rndc-key" {
algorithm hmac-md5;
secret "jLTWPrxavBf4+LtSHAYNiw==";
};
controls {
inet 127.0.0.1 port 953
allow { 127.0.0.1; } keys { "rndc-key"; };
};
#这段是从rndc.conf文件中复制来的--end
options {
#zones文件目录,需要手工建立该目录
directory "/var/named/zones";
pid-file "/var/named/named.pid";
statistics-file "/var/named/named.stats";
dump-file "/var/log/named.dump";
zone-statistics no;
auth-nxdomain yes;
notify yes;
transfer-format many-answers;
max-transfer-time-in 60;
interface-interval 0;
allow-query { any; };
listen-on-v6 { any; };
#配置转发,若不能解析,则转发到电信的域名服务器
forwarders{202.109.15.135;202.96.209.134;};
};
zone "." {
type hint;
file "named.root";
};
#本地域
zone "localhost" in {
Type master;
File "localhost.zone";
};
zone "0.0.127.IN-ADDR.ARPA" {
type master;
file "localhost.rev";
};
#测试域名
zone "bdwbd-test.com" in {
Type master;
File "bdwbd-test.com.zone";
};
#######################end of named.conf##################################################
#3,创建/var/named/zones/localhost.zone
#######################start of localhost.zone##################################################
;
; BIND data file for local loopback interface
;
$TTL 604800
@ IN SOA localhost. root.localhost. (
1 ; Serial
604800 ; Refresh
86400 ; Retry
2419200 ; Expire
604800 ) ; Negative Cache TTL
;
@ IN NS localhost.
@ IN A 127.0.0.1
#######################end of localhost.zone##################################################
#4,创建/var/named/zones/localhost.rev
#######################end of localhost.rev##################################################
$TTL 86400
@ IN SOA localhost. root.localhost. (
1997022700 ; Serial
28800 ; Refresh
14400 ; Retry
3600000 ; Expire
86400 ) ; Minimum
@ IN NS localhost.
;
1 IN PTR localhost.
#######################end of localhost.rev##################################################
5,创建/var/named/zones/bdwbd-test.com.zone
#######################end of bdwbd-test.com.zone##################################################
;
; BIND data file for local loopback interface
;
$TTL 604800
@ IN SOA bdwbd-test.com. root.bdwbd-test.com. (
1 ; Serial
604800 ; Refresh
86400 ; Retry
2419200 ; Expire
604800 ) ; Negative Cache TTL
;
@ IN NS bdwbd-test.com.
@ IN A 192.168.1.4
* IN A 192.168.1.4
#######################end of bdwbd-test.com.zone##################################################
6,生成/var/named/zones/named.root
命令:dig > /var/named/zones/named.root
生成好的内容:
#######################end of named.root##################################################
; <<>> DiG 9.6.0-P1 <<>>
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 32266
;; flags: qr rd ra; QUERY: 1, ANSWER: 13, AUTHORITY: 0, ADDITIONAL: 14
;; QUESTION SECTION:
;. IN NS
;; ANSWER SECTION:
. 188550 IN NS M.ROOT-SERVERS.NET.
. 188550 IN NS A.ROOT-SERVERS.NET.
. 188550 IN NS B.ROOT-SERVERS.NET.
. 188550 IN NS C.ROOT-SERVERS.NET.
. 188550 IN NS D.ROOT-SERVERS.NET.
. 188550 IN NS E.ROOT-SERVERS.NET.
. 188550 IN NS F.ROOT-SERVERS.NET.
. 188550 IN NS G.ROOT-SERVERS.NET.
. 188550 IN NS H.ROOT-SERVERS.NET.
. 188550 IN NS I.ROOT-SERVERS.NET.
. 188550 IN NS J.ROOT-SERVERS.NET.
. 188550 IN NS K.ROOT-SERVERS.NET.
. 188550 IN NS L.ROOT-SERVERS.NET.
;; ADDITIONAL SECTION:
A.ROOT-SERVERS.NET. 603934 IN A 198.41.0.4
A.ROOT-SERVERS.NET. 522334 IN AAAA 2001:503:ba3e::2:30
B.ROOT-SERVERS.NET. 603934 IN A 192.228.79.201
C.ROOT-SERVERS.NET. 603934 IN A 192.33.4.12
D.ROOT-SERVERS.NET. 603934 IN A 128.8.10.90
E.ROOT-SERVERS.NET. 603934 IN A 192.203.230.10
F.ROOT-SERVERS.NET. 603934 IN A 192.5.5.241
F.ROOT-SERVERS.NET. 522334 IN AAAA 2001:500:2f::f
G.ROOT-SERVERS.NET. 603934 IN A 192.112.36.4
H.ROOT-SERVERS.NET. 603934 IN A 128.63.2.53
H.ROOT-SERVERS.NET. 522334 IN AAAA 2001:500:1::803f:235
I.ROOT-SERVERS.NET. 603934 IN A 192.36.148.17
J.ROOT-SERVERS.NET. 603934 IN A 192.58.128.30
J.ROOT-SERVERS.NET. 287785 IN AAAA 2001:503:c27::2:30
;; Query time: 17 msec
;; SERVER: 192.168.1.1#53(192.168.1.1)
;; WHEN: Mon Mar 9 11:08:20 2009
;; MSG SIZE rcvd: 500
#######################end of named.root##################################################
启动:
#/usr/local/sbin/named -c /usr/local/etc/named.conf
检测配置文件是否正确:
# /usr/local/sbin/named-checkzone bdwbd-test.com /var/named/zones/bdwbd-test.com.zone
zone bdwbd-test.com/IN: loaded serial 1
OK
#查看状态
# /usr/local/sbin/rndc status
version: 9.6.0-P1
number of zones: 15
debug level: 0
xfers running: 0
xfers deferred: 0
soa queries in progress: 0
query logging is ON
recursive clients: 0/0/1000
tcp clients: 0/100
server is up and running
重载配置文件:
# /usr/local/sbin/rndc reload
server reload successful