正向与反向解析
服务端安装bind软件
[root@server ~]# yum install bind -y
[root@server ~]# nmcli c modify ens32 ipv4.method manual ipv4.addresses 192.168.134.128/24 ipv4.gateway 192.168.134.2 ipv4.dns 114.114.114.114
[root@server ~]# nmcli c reload
[root@server ~]# nmcli c up ens32
连接已成功激活(D-Bus 活动路径:/org/freedesktop/NetworkManager/ActiveConnection/2)
[root@node ~]# nmcli c modify ens32 ipv4.method manual ipv4.addresses 192.168.134.129/24 ipv4.gateway 192.168.134.2 ipv4.dns 114.114.114.114
[root@node ~]# nmcli c reload
[root@node ~]# nmcli c up ens32
连接已成功激活(D-Bus 活动路径:/org/freedesktop/NetworkManager/ActiveConnection/2)
正向解析
DNS配置
第一步:服务端操作,编辑bind主配置文件
options {
listen-on port 53 { any; };
listen-on-v6 port 53 { ::1; };
directory "/var/named";
dump-file "/var/named/data/cache_dump.db";
statistics-file "/var/named/data/named_stats.txt";
memstatistics-file "/var/named/data/named_mem_stats.txt";
secroots-file "/var/named/data/named.secroots";
recursing-file "/var/named/data/named.recursing";
allow-query { any; };
第二步:服务端操作,编辑区域配置文件,可以选择一个模版修改局部(推荐),也可以全部清空重启写入数据
zone "openlab.com" IN {
type master;
file "openlab.com.zone";
alloe-update { none; };
};
第三步:服务端操作,编辑数据配置文件,使用拷贝命令将模版文件(/var/named/named.localhost)复制一份在修改局部,注意:拷贝时需要加-a参数,即拷贝内容及文件属性保证文件内容一致、权限等信息不变
[root@server named]# cp -a named.localhost openlab.com.zone
[root@server named]# vim openlab.com.zone
$TTL 1D
openlab.com. IN SOA ns.opeblab.com. admin.openlab.com. (
0 ; serial
1D ; refresh
1H ; retry
1W ; expire
3H ) ; minimum
openlab.com. IN NS ns.openlab.com.
ns.openlab.com. IN A 192.168.134.128
www.openlab.com. IN A 192.168.134.128
ftp.openlab.com. IN A 192.168.134.128
bbs.openlab.com. IN A 192.168.134.128
www1.openlab.com. IN CNAME www.openlab.com.
第四步:服务端重启服务
[root@server named]# systemctl restart named
测试
[root@node ~]# vim /etc/sysconfig/network-scripts/ifcfg-ens32 dns=192.168.134.128;
[root@node ]# nmcli c reload [root@node1 ]# nmcli c up ens32
连接已成功激活(D-Bus 活动路径:/org/freedesktop/NetworkManager/ActiveConnection/2)
[root@node ~]# nslookup www.openlab.com
Server: 192.168.134.128
Address: 192.168.134.128#53
Name: www.openlab.com
Address: 192.168.134.128
[root@node ~]# nslookup
bbs.openlab.com Server: 192.168.134.128 Address: 192.168.134.128#53
Name: bbs.openlab.com Address: 192.168.134.128
>
[root@node ~]# dig www.openlab.com
; <<>> DiG 9.16.23 <<>> www.openlab.com
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 18795
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1232
; COOKIE: 20fb6788387802ab0100000065ec0a3b9a2dd3f08e438d81 (good)
;; QUESTION SECTION:
;www.openlab.com. IN A
;; ANSWER SECTION:
www.openlab.com. 86400 IN A 192.168.134.128
;; Query time: 1 msec
;; SERVER: 192.168.134.128#53(192.168.134.128)
;; WHEN: Sat Mar 09 15:20:54 CST 2024
;; MSG SIZE rcvd: 88
[root@node ~]# nslookup www1.openlab.com
Server: 192.168.134.128
Address: 192.168.134.128#53
www1.openlab.com canonical name = www.openlab.com.
Name: www.openlab.com
Address: 192.168.134.128
反向解析(未还原)
DNS设置
第一步:服务端操作,编辑区域配置文件,添加反向解析记录,注意:区域名称中IP地址反向书写,只需书写网段号
[root@server named]# vim /etc/named.rfc1912.zones
zone "134.168.192.in-addr.arpa" IN {
type master;
file "192.168.134.arpa";
allow-update { none; };
};
第二步:服务端操作,编辑数据配置文件,复制一份反向解析模版(/var/named/named.loopback),复制时需要加-a 参数,在修改局部即可
[root@server named]# cp -a named.loopback 192.168.134.arpa
[root@server named]# vim 192.168.134.arpa
$TTL 1D
@ IN SOA ns.openlab.com. jenny.qq.com. (
0 ; serial
1D ; refresh
1H ; retry
1W ; expire
3H ) ; minimum
IN NS ns.openlab.com.
ns.openlab.com. IN A 192.168.134.128
130 IN PTR ns.openlab.com.
130 IN PTR www.openlab.com.
130 IN PTR ftp.openlab.com.
第三步:重启服务
[root@server named]# systemctl restart named
客户端测试
[root@node1 ~]# nslookup 192.168.134.128
128.134.168.192.in-addr.arpa name = www.openlab.com.
128.134.168.192.in-addr.arpa name = ftp.openlab.com.
128.134.168.192.in-addr.arpa name = ns.openlab.com.