创建主要的配置文件:
# vi /usr/local/named/etc/named.conf
===========================named.conf=======================
acl "trust-lan" { 127.0.0.1/8; 192.168.0.0/16;}; //访问控制列表就是一个有名字的地址匹配列表
options {
directory "/usr/local/named/etc/"; //启动服务器的目录
pid-file "/var/run/named/named.pid";
version "0.0.0"; //服务器的真实版本号
datasize 40M;
allow-transfer {
"trust-lan";};
recursion yes; //是否代表客户机查询其他DNS服务器
allow-notify { //如果notify设为yes,并且named是一个或多个区的主服务器,那么每当区数据库有变化时,named会自动地通知相应的那些区的从服务器。
"trust-lan";
};
allow-recursion {
"trust-lan";
};
auth-nxdomain no;
forwarders { //指向外部转发器
202.96.209.5;
202.96.209.133;};
};
logging { //指定日志记录分类和他们的目标位置
channel warning
{ file "/var/log/named/dns_warnings" versions 3 size 1240k;
severity warning;
print-category yes;
print-severity yes;
print-time yes;
};
channel general_dns
{ file "/var/log/named/dns_logs" versions 3 size 1240k;
severity info;
print-category yes;
print-severity yes;
print-time yes;
};
category default { warning; };
category queries { general_dns; };
};
zone "." { //它告诉named它具有权威性的区域,并为管理每个区设置适当的选项
type hint;
file "named.root";
};
acl "CNC" {
58.16.0.0/16 ;
58.17.0.0/17;
58.17.128.0/17;
58.18.0.0/16;
58.19.0.0/16;
58.20.0.0/16;
58.21.0.0/16;
注:这些根据情况输入IP地址段
};
view "view_cnc" {
match-clients { CNC; };
zone "." {
type hint; //hint:表示是互联网中根域名服务器;master:表示定义的是主域名服务器;slave :表示定义的是辅助域名服务器
file "named.root";
};
zone "0.0.127.IN-ADDR.ARPA" {
type master;
file "localhost.rev";
};
include "master/cnc.def";
};
view "view_any" {
match-clients { any; };
zone "." {
type hint;
file "named.root";
};
zone "0.0.127.IN-ADDR.ARPA" {
type master;
file "localhost.rev";
};
include "master/telecom.def";
};
# vi /usr/local/named/etc/named.conf
===========================named.conf=======================
acl "trust-lan" { 127.0.0.1/8; 192.168.0.0/16;}; //访问控制列表就是一个有名字的地址匹配列表
options {
directory "/usr/local/named/etc/"; //启动服务器的目录
pid-file "/var/run/named/named.pid";
version "0.0.0"; //服务器的真实版本号
datasize 40M;
allow-transfer {
"trust-lan";};
recursion yes; //是否代表客户机查询其他DNS服务器
allow-notify { //如果notify设为yes,并且named是一个或多个区的主服务器,那么每当区数据库有变化时,named会自动地通知相应的那些区的从服务器。
"trust-lan";
};
allow-recursion {
"trust-lan";
};
auth-nxdomain no;
forwarders { //指向外部转发器
202.96.209.5;
202.96.209.133;};
};
logging { //指定日志记录分类和他们的目标位置
channel warning
{ file "/var/log/named/dns_warnings" versions 3 size 1240k;
severity warning;
print-category yes;
print-severity yes;
print-time yes;
};
channel general_dns
{ file "/var/log/named/dns_logs" versions 3 size 1240k;
severity info;
print-category yes;
print-severity yes;
print-time yes;
};
category default { warning; };
category queries { general_dns; };
};
zone "." { //它告诉named它具有权威性的区域,并为管理每个区设置适当的选项
type hint;
file "named.root";
};
acl "CNC" {
58.16.0.0/16 ;
58.17.0.0/17;
58.17.128.0/17;
58.18.0.0/16;
58.19.0.0/16;
58.20.0.0/16;
58.21.0.0/16;
注:这些根据情况输入IP地址段
};
view "view_cnc" {
match-clients { CNC; };
zone "." {
type hint; //hint:表示是互联网中根域名服务器;master:表示定义的是主域名服务器;slave :表示定义的是辅助域名服务器
file "named.root";
};
zone "0.0.127.IN-ADDR.ARPA" {
type master;
file "localhost.rev";
};
include "master/cnc.def";
};
view "view_any" {
match-clients { any; };
zone "." {
type hint;
file "named.root";
};
zone "0.0.127.IN-ADDR.ARPA" {
type master;
file "localhost.rev";
};
include "master/telecom.def";
};