一.配置文件介绍
提供DNS服务的软件叫bind,服务名是named。
[root@localhost ~]# yum install bind -y
[root@localhost ~]# rpm -ql bind
/etc/named.conf # bind主配置文件
/var/named/slaves # 从dns服务器文件夹
[root@localhost ~]# vim /etc/named.conf
options {
listen-on port 53 { 127.0.0.1; };
listen-on-v6 port 53 { ::1; };
directory "/var/named";
allow-query { localhost; };
};
zone "." IN {
type hint;
file "named.ca";
};
配置正向解析
1.下载bind服务并开启
[root@localhost ~]# yum install -y bind
[root@localhost ~]# systemctl start named
[root@localhost ~]# systemctl enable named
2.制定配置计划
www.xx.com——分配一个真实ip
dns.xx.com——分配一个真实ip
dhcp.xx.com——可以选择分配虚拟地址
nfs.xx.com——可以选择分配虚拟地址
ntp.xx.com——可以选择分配虚拟地址
3.修改主配置文件/etc/named.conf
[root@localhost ~]# vim /etc/named.conf
listen-on port 53 { 192.168.119.131; };
directory "/var/named";
};
zone "baidu.com" IN {
type master;
file "named.baidu.com";
};
4.配置数据配置文件/var/named/
在/var/named/下vim一个“.zone”结尾的区域文件
[root@localhost ~]# cd /var/named/
[root@localhost named]# cp -a named.localhost named.baidu.zone
$TTL 1D
@ IN SOA @ rname.invalid. (
0 ; serial
1D ; refresh
1H ; retry
1W ; expire
3H ) ; minimum
NS @
A 127.0.0.1
AAAA ::1
进行配置
[root@localhost ~]# vim /var/named/named.baidu.com
$TTL 1D
@ IN SOA @ admin.baidu.com. ( 0 1D 1H 1W 3H )
IN NS ns.baidu.com.
IN MX 10 mail.baidu.com.
ns IN A 192.168.119.131
mail IN A 192.168.119.131
www IN A 192.168.119.131
ftp IN CNAME www
[root@localhost ~]# systemctl restart named
[root@localhost ~]# systemctl disable firewalld --now
配置反向解析
1.修改主配置文件/etc/named.conf
[root@localhost ~]# vim /etc/named.conf
zone "119.168.192.in-addr.arpa" IN {
//倒着写你服务器ip所在网段,最后一位0可以省略,后缀需要加上.in-addr-arpa
type master;
file "119.168.192.zone";
};
2.修改数据配置文件
[root@localhost ~]# vim /var/named/119.168.192.zone
//基本格式和正向解析相同
$TTL 1D
@ IN SOA dns.lll.com. test.163.com (
0
1D
1H
1W
3H
)
IN NS dns.ssll.com.
//将域名与IP指向反过来书写,这里的因为都属于是同一网段只需要写末尾一位
160 IN PTR dns.lll.com
161 IN PTR mail.lll.com
160 IN PTR www.lll.com
xx IN PTR ftp
xx IN PTR dhcp
xx IN PTR ntp
3.检查书写并重启服务
[root@localhost ~]# systemctl restart named
4.测试
[root@localhost named]# nslookup 192.168.119.10
** server can't find 10.119.168.192.in-addr.arpa: NXDOMAIN
[root@localhost named]# nslookup 192.168.119.160
160.119.168.192.in-addr.arpa name = dns.lll.com.119.168.192.in-addr.arpa.