CentOS 8 配置主辅域名解析服务器

最新推荐文章于 2024-04-03 17:22:10 发布

不知名hack

最新推荐文章于 2024-04-03 17:22:10 发布

阅读量390

点赞数

分类专栏： Linux 文章标签：服务器 centos linux

本文链接：https://blog.csdn.net/qq_44484541/article/details/130094244

版权

Linux 专栏收录该内容

42 篇文章 2 订阅

订阅专栏

实验环境：

主：192.168.100.101 辅：192.168.100.102

一、主域名服务器配置

1、安装服务

[root@server ~]# dnf install bind bind-utils -y

2、编辑配置文件

[root@server ~]# vim  /etc/named.conf

options {

        listen-on port 53 { any; };

        listen-on-v6 port 53 { any; };

        directory       "/var/named";

        dump-file       "/var/named/data/cache_dump.db";

        statistics-file "/var/named/data/named_stats.txt";

        memstatistics-file "/var/named/data/named_mem_stats.txt";

        secroots-file   "/var/named/data/named.secroots";

        recursing-file  "/var/named/data/named.recursing";

        allow-query     { any; };

[root@server ~]# vim  /etc/named.rfc1912.zones

zone "skills.com" IN {

        type master;

        file "named.z";

        allow-update { none; };

};

zone "1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ip6.arpa" IN {

        type master;

        file "named.loopback";

        allow-update { none; };

};

zone "199.168.192.in-addr.arpa" IN {

        type master;

        file "named.f";

        allow-update { none; };

};

3、复制区域配置文件

[root@server ~]# cp /var/named/named.localhost /var/named/named.z

[root@server ~]# cp /var/named/named.loopback /var/named/named.f

4、编辑区域配置文件

编辑正向解析文件

[root@server ~]# cd /var/named/

[root@server named]# vim named.z

server  A       192.168.199.101

server2   A       192.168.199.102

编辑反向解析文件

[root@server named]# vim named.f

101     PTR    server.skills.com.

102     PTR    server2.skills.com.

5、启动服务

[root@server named]# systemctl start named

[root@server named]# systemctl enable named

Created symlink /etc/systemd/system/multi-user.target.wants/named.service → /usr/lib/systemd/system/named.service.

6、防火墙放行dns服务端口

[root@server named]# firewall-cmd --add-port=53/tcp --permanent

success

[root@server named]# firewall-cmd --add-port=53/udp --permanent

success

[root@server named]# firewall-cmd --reload

Success

7、设置resolv.conf文件指向dns服务器

[root@server named]# cat /etc/resolv.conf

nameserver 192.168.199.101

8、测试dns服务器

[root@server named]# nslookup server.skills.com

Server:         192.168.199.101

Address:        192.168.199.101#53

Name:   server.skills.com

Address: 192.168.199.101

[root@server named]# nslookup client.skills.com

Server:         192.168.199.101

Address:        192.168.199.101#53

Name:   server2.skills.com

Address: 192.168.199.102

[root@server named]# nslookup 192.168.199.101

101.199.168.192.in-addr.arpa    name = server.skills.com.

[root@server named]# nslookup 192.168.199.102

102.199.168.192.in-addr.arpa    name = server2.skills.com.

二、辅域名服务器配置

1、主域名服务修改配置文件

zone "skills.com" IN {

        type master;

        file "named.z";

        allow-transfer { 192.168.199.102; };

};

zone "1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ip6.arpa" IN {

        type master;

        file "named.loopback";

        allow-update { none; };

};

zone "199.168.192.in-addr.arpa" IN {

        type master;

        file "named.f";

        allow-transfer { 192.168.199.102; };

};

2、辅域安装服务

[root@server2 ~]# dnf install bind bind-utils -y

3、辅域编辑配置文件

[root@server2 ~]# vim /etc/named.rfc1912.zones

zone "skills.com" IN {

        type slave;

        file "slaves/named.z";

        masters { 192.168.199.101; };

};

zone "1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ip6.arpa" IN {

        type master;

        file "named.loopback";

        allow-update { none; };

};

zone "199.168.192.in-addr.arpa" IN {

        type slave;

        file "slaves/named.f";

        masters { 192.168.199.101; };

};

4、启动服务查看是否将主域名区域解析文件传输过来（无须手动配置解析文件）

[root@server2 ~]# systemctl restart named

[root@server2 ~]# ll /var/named/slaves/

total 8

-rw-r--r--. 1 named named 401 Sep 22 17:00 named.f

-rw-r--r--. 1 named named 279 Sep 22 16:57 named.z