linux5.5 里dns,RedHat 5.5搭建各种DNS服务器(3)

配置slave从服务器：

1.配置主配置文件

[root@Dns_slave etc]# cd/var/named/chroot/etc

[root@Dns_slave etc]# ls

localtimenamed.caching-nameserver.confnamed.rfc1912.zonesrndc.key

[root@Dns_slave etc]# vinamed.caching-nameserver.conf

options {

listen-on port 53 { any; };

listen-on-v6 port 53 { ::1; };

directory"/var/named";

dump-file"/var/named/data/cache_dump.db";

statistics-file "/var/named/data/named_stats.txt";

memstatistics-file "/var/named/data/named_mem_stats.txt";

// Those options should be used carefully because they disable port

// randomization

// query-sourceport 53;

// query-source-v6 port 53;

allow-query{ any; };

allow-query-cache { any; };

};

logging {

channel default_debug {

file "data/named.run";

severity dynamic;

};

};

acl cnc {192.168.1.0/24;};

acl tel {192.168.0.0/24;};

key "tel" {

algorithm hmac-md5;

secret "AO/jVw8Moo1USyH6dnyoFw==";

};

key "cnc" {

algorithm hmac-md5;

secret "GMhJe7tTV14A1LUyIHtErg==";

};

view "tel" {

match-clients { key "tel";tel; };

server 192.168.1.100 { keys "tel"; };

zone "linuxidc.com" {

type slave;

file "slaves/tel.linuxidc.com.zone";

masters {192.168.1.100;};

};

};

view "cnc" {

match-clients { key "cnc"; cnc;};

server 192.168.1.100 { keys "cnc"; };

zone "linuxidc.com" {

type slave;

file "slaves/cnc.linuxidc.com.zone";

masters {192.168.1.100;};

};

};

[root@Dns_slave etc]#

重启主从两台服务器

主重启

[root@Dns_master named]# service named restart

停止named：[确定]

启动named：[确定]

[root@Dns_master named]#

从重启

[root@Dns_slave etc]# cd ../var/named/slaves/

[root@Dns_slave slaves]# ls

cnc.linuxidc.com.zonetel.linuxidc.com.zone

[root@Dns_slave slaves]# rm -rf *

[root@Dns_slave slaves]# ls

[root@Dns_slave slaves]# service named restart

停止named：[确定]

启动named：[确定]

[root@Dns_slave slaves]# ls

cnc.linuxidc.com.zonetel.linuxidc.com.zone

[root@Dns_slave slaves]# pwd

/var/named/chroot/var/named/slaves

[root@Dns_slave slaves]#

简单测试：

在Master上设置nameserver是192.168.1.100

[root@Dns_master named]# dig www.linuxidc.com@192.168.1.100

; <<>> dig 9.3.6-P1-RedHat-9.3.6-4.P1.el5_4.2 <<>> www.linuxidc.com@192.168.1.100

;; global options:printcmd

;; Got answer:

;; ->>HEADER<

;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:

;www.linuxidc.com.INA

;; ANSWER SECTION:

www.linuxidc.com.86400INA192.168.1.100

;; AUTHORITY SECTION:

linuxidc.com.86400INNSdns.linuxidc.com.

;; Query time: 0 msec

;; SERVER: 192.168.1.100#53(192.168.1.100)

;; WHEN: Wed Sep7 09:15:37 2011

;; MSG SIZErcvd: 72

====================

[root@Dns_master named]# dig ftp.linuxidc.com@192.168.1.100

; <<>> DiG 9.3.6-P1-RedHat-9.3.6-4.P1.el5_4.2 <<>> ftp.linuxidc.com @192.168.1.100

;; global options:printcmd

;; Got answer:

;; ->>HEADER<

;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:

;ftp.linuxidc.com.INA

;; ANSWER SECTION:

ftp.linuxidc.com.86400INA192.168.1.102

;; AUTHORITY SECTION:

linuxidc.com.86400INNSdns.linuxidc.com.

;; Query time: 0 msec

;; SERVER: 192.168.1.100#53(192.168.1.100)

;; WHEN: Wed Sep7 09:15:49 2011

;; MSG SIZErcvd: 72

==========================

[root@Dns_master named]# dig www2.linuxidc.com@192.168.0.100

; <<>> DiG 9.3.6-P1-RedHat-9.3.6-4.P1.el5_4.2 <<>> www2.linuxidc.com @192.168.0.100

;; global options:printcmd

;; Got answer:

;; ->>HEADER<

;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:

;www2.linuxidc.com.INA

;; ANSWER SECTION:

www2.linuxidc.com.86400INA192.168.0.103

;; AUTHORITY SECTION:

linuxidc.com.86400INNSdns.linuxidc.com.

;; Query time: 0 msec

;; SERVER: 192.168.0.100#53(192.168.0.100)

;; WHEN: Wed Sep7 09:17:57 2011

;; MSG SIZErcvd: 73

到这里我们完成了view+TSIG+主从DNS服务器

============================================================================

第五阶段

项目内容：搭建cache缓冲服务器，当客户端发出请求时将请求发给指定的Dns服务器上做解析，并返回给客户端

项目目的：模拟Internet中的缓冲服务器的原理。Internet上的客户端并不知道真正的Dns服务器在哪，那么就又整个缓冲服务器去帮我们查询，并返回结果。

下面的实验：

我们假定1.102是北京的服务器，202.106.0.20，当北京的用户将nameserver，设置成它的时候，就会去给这台服务器发请求，从而得到解析

我们假定0.102是长沙的服务器，202.103.96.112，当长沙的用户将nameserver，设置成他的时候，就会去给这台服务器发请求，从而得到解析

项目环境：

第四阶段的整个环境

DNS Cache服务器：192.168.1.102/24和192.168.0.102/24两个IP地址互相切换

步骤：

1、以缓冲服务器IP是192.168.1.102

1)在缓冲服务器上安装必要软件

[root@Dns_cache ~]# yum install bind bind-chroot caching-nameserver

1)配置

[root@Dns_cache etc]# vi named.caching-nameserver.conf

#在主配置文件中修改options字段中的内容

options {

listen-on port 53{ any; };

listen-on-v6 port 53 { ::1; };

directory"/var/named";

dump-file"/var/named/data/cache_dump.db";

statistics-file "/var/named/data/named_stats.txt";

memstatistics-file "/var/named/data/named_mem_stats.txt";

// Those options should be used carefully because they disable port

// randomization

// query-sourceport 53;

// query-source-v6 port 53;

allow-query{ any; };

allow-query-cache { any; };

forward only;

forwarders {

192.168.1.100;

};

};

测试：

192.168.1.0/24网段的客户端测试

将nameserver修改成缓冲服务器的IP地址

[root@Dns_cache etc]# vi /etc/resolv.conf

[root@Dns_cache etc]# cat /etc/resolv.conf

nameserver 192.168.1.102

[root@Dns_cache etc]#

Host命令测试解析结果

[root@Dns_cache etc]# host www.linuxidc.com

www.linuxidc.com has address 192.168.1.100

[root@Dns_cache etc]# host ftp.linuxidc.com

ftp.linuxidc.com has address 192.168.1.102

[root@Dns_cache etc]#

切换缓冲服务器的地址是192.168.0.102

修改主配置文件

options {

listen-on port 53{ any; };

listen-on-v6 port 53 { ::1; };

directory"/var/named";

dump-file"/var/named/data/cache_dump.db";

statistics-file "/var/named/data/named_stats.txt";

memstatistics-file "/var/named/data/named_mem_stats.txt";

// Those options should be used carefully because they disable port

// randomization

// query-sourceport 53;

// query-source-v6 port 53;

allow-query{ any; };

allow-query-cache{ any; };

forward only;

forwarders {

192.168.0.100;

};

};

缓冲服务器 重启服务

[root@Dns_cache etc]# service named restart

停止named：[确定]

启动named：[确定]

[root@Dns_cache etc]#

测试：

192.168.0.0/24网段的客户机测试

将nameserver修改成缓冲服务器的IP地址

[root@Dns_cache etc]# vi /etc/resolv.conf

[root@Dns_cache etc]# cat /etc/resolv.conf

nameserver 192.168.0.102

[root@Dns_cache etc]#

Host命令测试解析结果

[root@Dns_cache etc]# host www.linuxidc.com

www.linuxidc.com has address 192.168.0.100

[root@Dns_cache etc]# host www2.linuxidc.com

www2.linuxidc.com has address 192.168.0.103