Linux bind 域名服务器安装配置

系统环境
CentOS 5.5 x64

检查是否安装 BIND

# rpm -qa|grep bind
bind-libs-9.3.6-4.P1.el5_4.2
ypbind-1.19-12.el5
bind-9.3.6-4.P1.el5_4.2
bind-chroot-9.3.6-4.P1.el5_4.2
bind-utils-9.3.6-4.P1.el5_4.2

不然
rpm -ivh /mnt/CentOS/bind-*.rpm

卸载已安装的 bind
rpm -qa | grep '^bind' | while read line
>do
>rpm -e --nodeps $line
>done

检查是否安装 caching-nameserver
# rpm -qa|grep caching-nameserver
不然就安装
/mnt/CentOS/caching-nameserver*.rpm
卸载已安装的 caching-nameserver
rpm -e caching-nameserver --nodeps

完成安装后，

配置本机ip和dns

本机ip: 192.168.0.212
子网掩码: 255.255.255.0
默认网关: 192.168.0.254
dns: 192.168.0.212


vim /etc/resolv.conf
search localhost
nameserver 192.168.0.212

修改
/var/named/chroot/var/named/etc/named.caching-nameserver.conf

options {
listen-on port 53 { any; };
listen-on-v6 port 53 { any; };
directory "/var/named";
dump-file "/var/named/data/cache_dump.db";
statistics-file "/var/named/data/named_stats.txt";
memstatistics-file "/var/named/data/named_mem_stats.txt";

// Those options should be used carefully because they disable port
// randomization
// query-source port 53;
// query-source-v6 port 53;

allow-query { any; };
allow-query-cache { any; };
forwarders { 8.8.8.8; }; //将解析不了的域名跳转到其他域名服务器进行解析
};
logging {
channel default_debug {
file "data/named.run";
severity dynamic;
};
};
view localhost_resolver {
match-clients { any; };
match-destinations { any; };
recursion yes;
include "/etc/named.rfc1912.zones";
};
将 localhost 都修改为 any

检查配置文件
# cd /var/named/chroot/var/named/etc/
# named-checkconf named.caching-nameserver.conf

修改
/var/named/chroot/var/named/etc/named.rfc1912.zones

添加正向解析 zone
zone "jackie.com" IN {
type master;
file "jackie.com.zone";
allow-update { none; };
};

添加反向解析 zone
zone "0.168.192.in-addr.arpa" IN {
type master;
file "192.168.0.rev";
allow-update { none; };
};

然后
cd /var/named/chroot/var/named/
复制
cp localhost.zone jackie.com.zone
cp named.local 192.168.0.rev

vim jackie.com.zone
$TTL 86400
@ IN SOA www.jackie.com. mail.jackie.com. (
42 ; serial (d. adams)
3H ; refresh
15M ; retry
1W ; expiry
1D ) ; minimum

IN NS www.jackie.com.
IN NS dns.jackie.com.
IN NS dns1.jackie.com.
IN MX 5 mail.jackie.com.
www IN A 192.168.0.212
dns IN A 192.168.0.213
dns1 IN A 192.168.0.214
mail IN CNAME dns1.jackie.com.

vim 192.168.0.rev

$TTL 86400
@ IN SOA www.jackie.com. mail.jackie.com. (
1997022700 ; Serial
28800 ; Refresh
14400 ; Retry
3600000 ; Expire
86400 ) ; Minimum
IN NS dns.test.cn.
212 IN PTR www.jackie.com.
213 IN PTR dns.jackie.com.
214 IN PTR dns1.jackie.com.

配置完成后

检查配置文件
# cd /var/named/chroot/var/named
named-checkzone jackie.com jackie.com.zone

service named restart

nslookup www.jackie.com

Server: 192.168.0.212
Address: 192.168.0.212#53

Name: www.jackie.com
Address: 192.168.0.212


nslookup 192.168.0.212

Server: 192.168.0.212
Address: 192.168.0.212#53

212.0.168.192.in-addr.arpa name = www.jackie.com.
212.0.168.192.in-addr.arpa name = dns.test.cn.


配置跳转服务器

vim /var/named/chroot/etc/named.rfc1921.zones

zone "jackie.com" IN {
type forward;
forward only;
forwarders { 192.168.0.212;};
};
将 jackie.com 域的域名跳转到 192.168.0.212 进行解析;


nslookup 用法
nslookup www.jackie.com //显示 www.jackie.com 域名的解析
以下效果相同
nslookup
> www.jackie.com

nslookup
> server 192.168.0.200 //将当前服务器的 dns 设置为 192.168.0.200

本机解析ok
如果要让其他机器也能解析，将客户端 dns 改成 192.168.0.200
然后解析服务器防火墙开放 53 端口就可以
iptables -A INPUT -p tcp --dport 53 -j ACCEPT
service iptables save
service iptables restart

完成解析


设置解析类型
> set type=MX
> jackie.com //显示jackie.com 域下的 MX 记录解析
以下类同
> set type=NS
> set type=A

dig 用法
dig @192.168.0.212 jackie.com NS

显示 192.168.0.21 域名服务器 jackie.com 域下的 NS 解析