RHCE之路配置本地DNS服务器的正反向解析

第十天

SOA格式 ---（序列号，同步时间，重试时间，过期时间，TTL）

正向解析

[root@a ~]# mount /dev/sr0 /mnt
mount: /mnt: WARNING: device write-protected, mounted read-only.
[root@a ~]# yum install bind -y

[root@a ~]# vim /etc/named.conf

options {
        listen-on port 53 { 192.168.10.129; };
        directory       "/var/named";
        allow-query     { any; };
};

zone "baidu.com" IN {
        type master;
        file "named.baidu.com";
};
zone "qq.com" IN {
        type master;
        file "named.qq.com";
};
~   

[root@a named]# vim named.baidu.com

$TTL 1D
@       IN      SOA     @       admin.admin.com. (
                                                        2022110400
                                                        1D
                                                        1H
                                                        3H
                                                        1D )
                NS      dns.baidu.com.
dns             A       192.168.10.129
www             A       192.168.11.11
ftp             A       192.168.10.129
mail            A       192.168.10.12
exmail          CNAME   mail

[root@a named]# vim named.qq.com

$TTL 1D
@       IN      SOA     @       admin.admin.com. (
                                                        2022110400
                                                        1D
                                                        1H
                                                        3H
                                                        1D )
                NS      dns.qq.com.
dns             A       192.168.10.129
www             A       192.168.11.11
ftp             A       192.168.10.129
mail            A       192.168.10.12
exmail          CNAME   mail

[root@a named]# systemctl restart named
[root@a named]# systemctl stop firewalld
[root@a named]# setenforce 0
 

[root@a named]# vim /etc/resolv.conf

# Generated by NetworkManager
search localdomain
nameserver 192.168.10.129                  

测试

ping

[root@a named]# ping www.baidu.com
PING www.baidu.com (192.168.11.11) 56(84) bytes of data.
^C
--- www.baidu.com ping statistics ---
15 packets transmitted, 0 received, 100% packet loss, time 14370ms

或者用nslookup测试 --- 解析

[root@a named]# nslookup mail.baidu.com
Server:        192.168.10.129
Address:    192.168.10.129#53

Name:    mail.baidu.com
Address: 192.168.10.12

注：可以用ctrl + 删除 进行删除

不改变resolv.conf里的值，用nslookup解析

[root@a named]# vim /etc/resolv.conf --- 将值改回

# Generated by NetworkManager
search localdomain
nameserver 192.168.10.2           

[root@a named]# nslookup
> server 192.168.10.129
Default server: 192.168.10.129
Address: 192.168.10.129#53
> www.qq.com
Server:        192.168.10.129
Address:    192.168.10.129#53

Name:    www.qq.com
Address: 192.168.11.11
>

[root@a named]# vim /var/named/named.baidu.com

$TTL 1D
@       IN      SOA     @       admin.admin.com. (
                                                        2022110400
                                                        1D
                                                        1H
                                                        3H
                                                        1D )
                NS      dns.baidu.com.
                NS      dns.qq.com.
dns             A       192.168.10.129
www             A       192.168.11.11
ftp             A       192.168.10.129
mail            A       192.168.10.12
exmail          CNAME   mail

[root@a ~]# nslookup qq.com
Server:        192.168.10.2
Address:    192.168.10.2#53

Non-authoritative answer:
Name:    qq.com
Address: 123.151.137.18
Name:    qq.com
Address: 183.3.226.35
Name:    qq.com
Address: 61.129.7.47

反向解析

[root@a ~]# vim /etc/named.conf

options {
        listen-on port 53 { 192.168.10.129; };
        directory       "/var/named";
        allow-query     { any; };
};

zone "baidu.com" IN {
        type master;
        file "named.baidu.com";
};
zone "qq.com" IN {
        type master;
        file "named.qq.com";
};
zone "10.168.192.in-addr.arpa" IN {  --- 将需要反向解析的网段反向写
        type master;
        file "named.192";
};

[root@a ~]# vim /var/named/named.192

$TTL 1D
@       IN      SOA     @ admin (
                                        00
                                        1D
                                        1H
                                        3H
                                        1D )
        IN      NS      dns.baidu.com.
        IN      NS      dns.qq.com.
129     IN      PTR     dns.baidu.com.
129     IN      PTR     dns.qq.com.
100     IN      PTR     www.baidu.com.                             

修改正向配置文件

[root@localhost ~]# vim /var/named/named.baidu.com

$TTL 1D
@       IN      SOA     @       admin.admin.com. (
                                                        2022110400
                                                        1D
                                                        1H
                                                        3H
                                                        1D )
                NS      dns.baidu.com.
                NS      dns.qq.com.
dns             A       192.168.10.129
www             A       192.168.10.100

将正反向文件写到一个文件里

[root@a ~]# vim /etc/named.conf

options {
        listen-on port 53 { 192.168.10.129; };
        directory       "/var/named";
        allow-query     { any; };
};

zone "baidu.com" IN {
        type master;
        file "named.baidu.com";
};
zone "qq.com" IN {
        type master;
        file "named.baidu.com";
};
zone "10.168.192.in-addr.arpa" IN {
        type master;
        file "named.baidu.com";
};

[root@a ~]# vim /var/named/named.baidu.com

$TTL 1D
@       IN      SOA     @       admin.admin.com. (
                                                        2022110400
                                                        1D
                                                        1H
                                                        3H
                                                        1D )
                NS      dns.baidu.com.
                NS      dns.qq.com.
dns             A       192.168.10.129
www             A       192.168.10.100
100             PTR     www.baidu.com.
100             PTR     www.qq.com.

用dig测试

[root@localhost ~]# dig -x 192.168.10.100 @192.168.10.129 --- 反向解析用 -x，正向解析 --- dig -t a www.baidu.com

; <<>> DiG 9.11.26-RedHat-9.11.26-6.el8 <<>> -x 192.168.10.100 @192.168.10.129
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 28191
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 2, ADDITIONAL: 3

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1232
; COOKIE: c70572218d215840778edc4d63661589c311fb00dc17fa1a (good)
;; QUESTION SECTION:
;100.10.168.192.in-addr.arpa.    IN    PTR

;; ANSWER SECTION:
100.10.168.192.in-addr.arpa. 86400 IN    PTR    www.qq.com.
100.10.168.192.in-addr.arpa. 86400 IN    PTR    www.baidu.com.

;; AUTHORITY SECTION:
10.168.192.in-addr.arpa. 86400    IN    NS    dns.qq.com.
10.168.192.in-addr.arpa. 86400    IN    NS    dns.baidu.com.

;; ADDITIONAL SECTION:
dns.baidu.com.        86400    IN    A    192.168.10.129
dns.qq.com.        86400    IN    A    192.168.10.129

;; Query time: 0 msec
;; SERVER: 192.168.10.129#53(192.168.10.129)
;; WHEN: Sat Nov 05 03:49:29 EDT 2022
;; MSG SIZE  rcvd: 200