bind杂记（3）

最新推荐文章于 2021-05-04 21:17:41 发布
最新推荐文章于 2021-05-04 21:17:41 发布
阅读量100 收藏
点赞数
文章标签： 开发工具 网络 运维
原文链接：http://blog.51cto.com/zhongle21/2091441
版权

bind高级

回顾

配置成缓存名称服务器

[root@www ~]# vim /etc/named.conf

//

options {
        //listen-on port 53 { 10.201.106.129; };
        /* listen-on-v6 port 53 { ::1; }; */
        directory       "/var/named";
        dump-file       "/var/named/data/cache_dump.db";
        statistics-file "/var/named/data/named_stats.txt";
        memstatistics-file "/var/named/data/named_mem_stats.txt";
        //allow-query     { any; };
        recursion yes;

        /*dnssec-enable yes;
        dnssec-validation yes;
        dnssec-lookaside auto;

         Path to ISC DLV key 
        bindkeys-file "/etc/named.iscdlv.key";

        managed-keys-directory "/var/named/dynamic";
        */
};

查看DNS的TCP和UDP端口是否开启

[root@www ~]# ss -tuln | grep :53
udp    UNCONN     0      0         10.201.106.129:53                    *:*     
udp    UNCONN     0      0              127.0.0.1:53                    *:*     
tcp    LISTEN     0      3         10.201.106.129:53                    *:*     
tcp    LISTEN     0      3              127.0.0.1:53                    *:*     
tcp    LISTEN     0      128                   :::53835                :::*

定义正向和反向区域文件

vim /etc/named.rfc1912.conf
zone "magedu.com" IN {
        type master;
        file "magedu.com.zone";
};

zone "106.201.10.in-addr.arpa" IN {
        type master;
        file "10.201.106.zone";
};

重载服务
[root@www ~]# rndc reload
server reload successful

[root@www ~]# rndc reload
server reload successful
[root@www ~]# rndc status
version: 9.8.2rc1-RedHat-9.8.2-0.30.rc1.el6
CPUs found: 1
worker threads: 1
number of zones: 21
debug level: 0
xfers running: 0
xfers deferred: 0
soa queries in progress: 0
query logging is OFF
recursive clients: 0/0/1000
tcp clients: 0/100
server is up and running

[root@www ~]# tail /var/log/messages
Aug  3 13:39:42 qq named[19186]: error (network unreachable) resolving './DNSKEY/IN': 2001:503:c27::2:30#53
Aug  3 13:39:42 qq named[19186]: error (network unreachable) resolving './DNSKEY/IN': 2001:7fe::53#53
Aug  3 13:39:53 qq named[19186]: received control channel command 'reload'
Aug  3 13:39:53 qq named[19186]: loading configuration from '/etc/named.conf'
Aug  3 13:39:53 qq named[19186]: using default UDP/IPv4 port range: [1024, 65535]
Aug  3 13:39:53 qq named[19186]: using default UDP/IPv6 port range: [1024, 65535]
Aug  3 13:39:53 qq named[19186]: sizing zone task pool based on 8 zones
Aug  3 13:39:54 qq named[19186]: Warning: 'empty-zones-enable/disable-empty-zone' not set: disabling RFC 1918 empty zones
Aug  3 13:39:54 qq named[19186]: reloading configuration succeeded
Aug  3 13:39:54 qq named[19186]: reloading zones succeeded

创建正向区域解析库文件

[root@www named]# vim zz.com.zone 

$TTL 1D
$ORIGIN zz.com.
@       IN      SOA     ns1.zz.com. admin.zz.com. (
                        2016042501
                        1H
                        5M
                        3D
                        1D )
        IN      NS      ns1
        IN      NS      ns2
ns1     IN      A       10.201.106.129
ns2     IN      A       10.201.106.128
www     IN      A       10.201.106.129
*       IN      A       10.201.106.129

[root@www named]# named-checkzone "zz.com" /var/named/zz.com.zone 
zone zz.com/IN: loaded serial 2016042501
OK

更改区域记录文件权限

[root@www named]# chmod 640 zz.com.zone 
[root@www named]# chown :named zz.com.zone 
[root@www named]# ll zz.com.zone 
-rw-r----- 1 root named 217 Aug  3 14:09 zz.com.zone

重新加载named

[root@www named]# rndc reload
server reload successful
[root@www named]# tail /var/log/messages
Aug  3 14:14:07 qq named[19186]: received control channel command 'reload'
Aug  3 14:14:07 qq named[19186]: loading configuration from '/etc/named.conf'
Aug  3 14:14:07 qq named[19186]: using default UDP/IPv4 port range: [1024, 65535]
Aug  3 14:14:07 qq named[19186]: using default UDP/IPv6 port range: [1024, 65535]
Aug  3 14:14:07 qq named[19186]: sizing zone task pool based on 9 zones
Aug  3 14:14:07 qq named[19186]: Warning: 'empty-zones-enable/disable-empty-zone' not set: disabling RFC 1918 empty zones
Aug  3 14:14:07 qq named[19186]: reloading configuration succeeded
Aug  3 14:14:07 qq named[19186]: zone zz.com/IN: loaded serial 2016042501
Aug  3 14:14:07 qq named[19186]: reloading zones succeeded
Aug  3 14:14:07 qq named[19186]: zone zz.com/IN: sending notifies (serial 2016042501)

记录测试

[root@www named]# dig -t A www.zz.com @10.201.106.129

; <<>> DiG 9.8.2rc1-RedHat-9.8.2-0.30.rc1.el6 <<>> -t A www.zz.com @10.201.106.129
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 3270
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 2

;; QUESTION SECTION:
;www.zz.com.            IN  A

;; ANSWER SECTION:
www.zz.com.     86400   IN  A   10.201.106.129

;; AUTHORITY SECTION:
zz.com.         86400   IN  NS  ns2.zz.com.
zz.com.         86400   IN  NS  ns1.zz.com.

泛域名解析
[root@www named]# dig -t A ftp.zz.com @10.201.106.129

; <<>> DiG 9.8.2rc1-RedHat-9.8.2-0.30.rc1.el6 <<>> -t A ftp.zz.com @10.201.106.129
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 4797
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 2

;; QUESTION SECTION:
;ftp.zz.com.            IN  A

;; ANSWER SECTION:
ftp.zz.com.     86400   IN  A   10.201.106.129

;; AUTHORITY SECTION:
zz.com.         86400   IN  NS  ns2.zz.com.
zz.com.         86400   IN  NS  ns1.zz.com.

子域授权

在区域解析库创建子域

[root@www named]# vim zz.com.zone 

$TTL 1D
$ORIGIN zz.com.
@       IN      SOA     ns1.zz.com. admin.zz.com. (
                        2016042501
                        1H
                        5M
                        3D
                        1D )
        IN      NS      ns1
        IN      NS      ns2
ns1     IN      A       10.201.106.129
ns2     IN      A       10.201.106.128
www     IN      A       10.201.106.129
*       IN      A       10.201.106.129

ops     IN      NS      ns1.ops         ##子域定义
ops     IN      NS      ns2.ops         ##子域定义
ns1.ops IN      A       10.201.106.128  ##子域定义
ns2.ops IN      A       10.201.106.131  ##子域定义

重载后区域数不会发生改变

[root@www named]# 
[root@www named]# rndc status
version: 9.8.2rc1-RedHat-9.8.2-0.30.rc1.el6
CPUs found: 1
worker threads: 1
number of zones: 22
debug level: 0
xfers running: 0
xfers deferred: 0
soa queries in progress: 0
query logging is OFF
recursive clients: 0/0/1000
tcp clients: 0/100
server is up and running
[root@www named]# 
[root@www named]# rndc reload
server reload successful
[root@www named]# 
[root@www named]# rndc status
version: 9.8.2rc1-RedHat-9.8.2-0.30.rc1.el6
CPUs found: 1
worker threads: 1
number of zones: 22
debug level: 0
xfers running: 0
xfers deferred: 0
soa queries in progress: 0
query logging is OFF
recursive clients: 0/0/1000
tcp clients: 0/100
server is up and running
[root@www named]#

配置子域服务器

也是将子域服务器配置成缓存服务器，/etc/named.conf

定义子域区域

[root@zz ~]# vim /etc/named.rfc1912.zones 
 55 zone "ops.zz.com" IN {
 56         type master;
 57         file "ops.zz.com";
 58 };

重载后已经增加了一个区域

[root@zz ~]# rndc status
version: 9.8.2rc1-RedHat-9.8.2-0.47.rc1.el6
CPUs found: 1
worker threads: 1
number of zones: 21
debug level: 0
xfers running: 0
xfers deferred: 0
soa queries in progress: 0
query logging is OFF
recursive clients: 0/0/1000
tcp clients: 0/100
server is up and running
[root@zz ~]# 
[root@zz ~]# rndc reload
server reload successful
[root@zz ~]# rndc status
version: 9.8.2rc1-RedHat-9.8.2-0.47.rc1.el6
CPUs found: 1
worker threads: 1
number of zones: 22
debug level: 0
xfers running: 0
xfers deferred: 0
soa queries in progress: 0
query logging is OFF
recursive clients: 0/0/1000
tcp clients: 0/100
server is up and running
[root@zz ~]#

编辑子正向域区域解析库文件

[root@zz named]# vim ops.zz.com.zone

  1 $TTl 1d
  2 $ORIGIN ops.zz.com.
  3 @       IN      SOA     ns1.ops.zz.com. admin.ops.zz.com. (
  4                         2015042501
  5                         1H
  6                         10M
  7                         3D
  8                         1D )
  9         IN      NS      ns1
 10         IN      NS      ns2
 11 ns1     IN      A       10.201.106.128
 12 ns2     IN      A       10.201.106.131
 13 www     IN      A       10.201.106.200
 14 *       IN      A       10.201.106.200

[root@zz named]# named-checkzone "ops.zz.com" /var/named/ops.zz.com.zone 
zone ops.zz.com/IN: loaded serial 2015042501
OK
[root@zz named]# vim ops.zz.com.zone

[root@zz named]# tail /var/log/messages
Jul 29 18:39:35 zz named[2524]: loading configuration from '/etc/named.conf'
Jul 29 18:39:35 zz named[2524]: using default UDP/IPv4 port range: [1024, 65535]
Jul 29 18:39:35 zz named[2524]: using default UDP/IPv6 port range: [1024, 65535]
Jul 29 18:39:35 zz named[2524]: sizing zone task pool based on 9 zones
Jul 29 18:39:36 zz named[2524]: Warning: 'empty-zones-enable/disable-empty-zone' not set: disabling RFC 1918 empty zones
Jul 29 18:39:36 zz named[2524]: zone ops.zz.com/IN: (master) removed
Jul 29 18:39:36 zz named[2524]: reloading configuration succeeded
Jul 29 18:39:36 zz named[2524]: zone ops.zz.com/IN: loaded serial 2015042501
Jul 29 18:39:36 zz named[2524]: reloading zones succeeded
Jul 29 18:39:36 zz named[2524]: zone ops.zz.com/IN: sending notifies (serial 2015042501)

修改权限
[root@zz named]# chgrp named ops.zz.com.zone 
[root@zz named]# ll ops.zz.com.zone 
-rw-r-----. 1 root named 232 Jul 29 21:29 ops.zz.com.zone
[root@zz named]# 

[root@zz named]# dig -t NS ops.zz.com @10.201.106.128

; <<>> DiG 9.8.2rc1-RedHat-9.8.2-0.47.rc1.el6 <<>> -t NS ops.zz.com @10.201.106.128
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 12464
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 2

;; QUESTION SECTION:
;ops.zz.com.            IN  NS

;; ANSWER SECTION:
ops.zz.com.     86400   IN  NS  ns2.ops.zz.com.
ops.zz.com.     86400   IN  NS  ns1.ops.zz.com.

测试子域服务器解析

[root@zz named]# dig -t A www.ops.zz.com @10.201.106.128

; <<>> DiG 9.8.2rc1-RedHat-9.8.2-0.47.rc1.el6 <<>> -t A www.ops.zz.com @10.201.106.128
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 17382
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 2

;; QUESTION SECTION:
;www.ops.zz.com.            IN  A

;; ANSWER SECTION:
www.ops.zz.com.     86400   IN  A   10.201.106.200

;; AUTHORITY SECTION:
ops.zz.com.     86400   IN  NS  ns1.ops.zz.com.
ops.zz.com.     86400   IN  NS  ns2.ops.zz.com.

父域测试子域

[root@www named]# dig -t NS ops.zz.com @10.201.106.129 +norecurse

; <<>> DiG 9.8.2rc1-RedHat-9.8.2-0.30.rc1.el6 <<>> -t NS ops.zz.com @10.201.106.129 +norecurse
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 42676
;; flags: qr ra; QUERY: 1, ANSWER: 0, AUTHORITY: 2, ADDITIONAL: 2

;; QUESTION SECTION:
;ops.zz.com. IN NS

;; AUTHORITY SECTION:
ops.zz.com. 86400 IN NS ns1.ops.zz.com.
ops.zz.com. 86400 IN NS ns2.ops.zz.com.

;; ADDITIONAL SECTION:
ns1.ops.zz.com. 86400 IN A 10.201.106.128
ns2.ops.zz.com. 86400 IN A 10.201.106.131

解决问题：

定义转发域

父域配置(全局转发)

vim /etc/name.conf
options {
        listen-on port 53 { 10.201.106.128;127.0.0.1; };
        //listen-on-v6 port 53 { ::1; };
        directory       "/var/named";
        dump-file       "/var/named/data/cache_dump.db";
        statistics-file "/var/named/data/named_stats.txt";
        memstatistics-file "/var/named/data/named_mem_stats.txt";
        allow-query     { any; };
        recursion yes;
        forward first;                  ***
        forwarder { 10.201.106.2; };    ***

子域（区域转发），配置子域对zz.com的解析都转发给主服务器解析；

vim /etc/named.rfc1912.conf

zone "zz.com" IN {
        type forward;
        forward only;
        forwarders { 10.201.106.129; };
};

测试：在子域解析父域的域名
[root@zz ~]# dig -t A www.magedu.com @10.201.106.128

; <<>> DiG 9.8.2rc1-RedHat-9.8.2-0.47.rc1.el6 <<>> -t A www.magedu.com @10.201.106.128
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 39821
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 2, ADDITIONAL: 2

;; QUESTION SECTION:
;www.magedu.com.            IN  A

;; ANSWER SECTION:
www.magedu.com.     86400   IN  A   10.201.106.129
www.magedu.com.     86400   IN  A   10.201.106.128

测试：在父域测试子域的域名
[root@qq ~]# dig -t A ns1.ops.zz.com @10.201.106.129

; <<>> DiG 9.8.2rc1-RedHat-9.8.2-0.30.rc1.el6 <<>> -t A ns1.ops.zz.com @10.201.106.129
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 13781
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 1

;; QUESTION SECTION:
;ns1.ops.zz.com.            IN  A

;; ANSWER SECTION:
ns1.ops.zz.com.     86400   IN  A   10.201.106.128

将子域的转发区域测试，将不能解析父域 ###、

将转发域注释掉（/etc/named.rfc1912.conf）
[root@zz ~]# dig -t A www.zz.com @10.201.106.128

; <<>> DiG 9.8.2rc1-RedHat-9.8.2-0.47.rc1.el6 <<>> -t A www.zz.com @10.201.106.128
;; global options: +cmd
;; Got answer:
查看防火墙是否打开
[root@zz ~]# iptables -L -n
Chain INPUT (policy ACCEPT)
target     prot opt source               destination         

Chain FORWARD (policy ACCEPT)
target     prot opt source               destination         

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination         
[root@zz ~]# 

清空缓存
rndc flsuh

区域解析优先级大于全局解析

当子域服务器同时配置区域和全局解析配置时，解析内网的域名时找父域服务器，解析外网的域名时找外网DNS服务器；

配置：
全局解析配置：
[root@zz ~]# vim /etc/named.conf
forward first;
forwarders { 10.201.106.2; };
区域解析配置：
[root@zz ~]# vim /etc/named.rfc1912.zones 

zone "zz.com" IN {
        type forward;
        forward only;
        forwarders { 10.201.106.129; };
};

测试验证：
[root@zz ~]# dig -t A www.baidu.com @10.201.106.128

; <<>> DiG 9.8.2rc1-RedHat-9.8.2-0.47.rc1.el6 <<>> -t A www.baidu.com @10.201.106.128
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 27032
;; flags: qr rd ra; QUERY: 1, ANSWER: 3, AUTHORITY: 13, ADDITIONAL: 10

;; QUESTION SECTION:
;www.baidu.com.         IN  A

;; ANSWER SECTION:
www.baidu.com.      5   IN  CNAME   www.a.shifen.com.
www.a.shifen.com.   5   IN  A   111.13.100.91
www.a.shifen.com.   5   IN  A   111.13.100.92

;; AUTHORITY SECTION:
.           5   IN  NS  e.root-servers.net.
.           5   IN  NS  f.root-servers.net.
.           5   IN  NS  h.root-servers.net.
.           5   IN  NS  g.root-servers.net.
.           5   IN  NS  d.root-servers.net.
.           5   IN  NS  i.root-servers.net.
.           5   IN  NS  c.root-servers.net.
.           5   IN  NS  l.root-servers.net.
.           5   IN  NS  a.root-servers.net.
.           5   IN  NS  j.root-servers.net.
.           5   IN  NS  k.root-servers.net.
.           5   IN  NS  b.root-servers.net.
.           5   IN  NS  m.root-servers.net.

;; ADDITIONAL SECTION:
h.root-servers.net. 5   IN  A   198.97.190.53
j.root-servers.net. 5   IN  A   192.58.128.30
j.root-servers.net. 5   IN  AAAA    2001:503:c27::2:30
e.root-servers.net. 5   IN  A   192.203.230.10
a.root-servers.net. 5   IN  A   198.41.0.4
a.root-servers.net. 5   IN  AAAA    2001:503:ba3e::2:30
k.root-servers.net. 5   IN  A   193.0.14.129
k.root-servers.net. 5   IN  AAAA    2001:7fd::1
d.root-servers.net. 5   IN  A   199.7.91.13
d.root-servers.net. 5   IN  AAAA    2001:500:2d::d

;; Query time: 12 msec
;; SERVER: 10.201.106.128#53(10.201.106.128)
;; WHEN: Fri Jul 29 23:41:15 2016
;; MSG SIZE  rcvd: 509

[root@zz ~]# dig -t A www.zz.com @10.201.106.128

; <<>> DiG 9.8.2rc1-RedHat-9.8.2-0.47.rc1.el6 <<>> -t A www.zz.com @10.201.106.128
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 6758
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 2

;; QUESTION SECTION:
;www.zz.com.            IN  A

;; ANSWER SECTION:
www.zz.com.     85785   IN  A   10.201.106.129

;; AUTHORITY SECTION:
zz.com.         85770   IN  NS  ns1.zz.com.
zz.com.         85770   IN  NS  ns2.zz.com.

;; ADDITIONAL SECTION:
ns2.zz.com.     85770   IN  A   10.201.106.128
ns1.zz.com.     85770   IN  A   10.201.106.129

;; Query time: 1 msec
;; SERVER: 10.201.106.128#53(10.201.106.128)
;; WHEN: Fri Jul 29 23:41:27 2016
;; MSG SIZE  rcvd: 112
如果失败失败，可以看下named.conf里的一些安全配置改为no，两边服务器的安全配置都需要一模一样，不能一边项关闭，一边项注释；

bind的基础安全配置

acl的定义

[root@qq ~]# vim /etc/named.conf

acl slaves {
    10.201.106.129;
    127.0.0.1
};

只需要特定主机查询主域服务器的解析困

如果不在白名单，就算是自己服务器的其它IP也无法查询
/etc/named.rfc1912.conf
zone "zz.com" IN {
        type master;
        file "zz.com.zone";
        allow-query { 10.201.106.129; };

};

换成any，任意主机都可以查询；
zone "zz.com" IN {
    type master;
    file "zz.com.zone";
    allow-query { any; };

};
子域发起查询主域名
[root@zz ~]# dig -t A www.zz.com @10.201.106.129

; <<>> DiG 9.8.2rc1-RedHat-9.8.2-0.47.rc1.el6 <<>> -t A www.zz.com @10.201.106.129
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 3007
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 2

;; QUESTION SECTION:
;www.zz.com.            IN  A

;; ANSWER SECTION:
www.zz.com.     86400   IN  A   10.201.106.129

;; AUTHORITY SECTION:
zz.com.         86400   IN  NS  ns1.zz.com.
zz.com.         86400   IN  NS  ns2.zz.com.

只需许主域本机区域传送

未配置前子域可以从主域区域传送：
[root@zz ~]# dig -t AXFR zz.com @10.201.106.129

; <<>> DiG 9.8.2rc1-RedHat-9.8.2-0.47.rc1.el6 <<>> -t AXFR zz.com @10.201.106.129
;; global options: +cmd
zz.com.         86400   IN  SOA ns1.zz.com. admin.zz.com. 2016042501 3600 300 259200 86400
zz.com.         86400   IN  NS  ns1.zz.com.
zz.com.         86400   IN  NS  ns2.zz.com.
*.zz.com.       86400   IN  A   10.201.106.129
ns1.zz.com.     86400   IN  A   10.201.106.129
ns2.zz.com.     86400   IN  A   10.201.106.128
ops.zz.com.     86400   IN  NS  ns1.ops.zz.com.
ns1.ops.zz.com.     86400   IN  A   10.201.106.128
www.zz.com.     86400   IN  A   10.201.106.129
zz.com.         86400   IN  SOA ns1.zz.com. admin.zz.c

主机配置/etc/named.rfc1912.conf进行限制
zone "zz.com" IN {
        type master;
        file "zz.com.zone";
        allow-query { any; };
        allow-transfer { 10.201.106.129; };

};

子域再测试，不能再传送了：
[root@zz ~]# dig -t AXFR zz.com @10.201.106.129

; <<>> DiG 9.8.2rc1-RedHat-9.8.2-0.47.rc1.el6 <<>> -t AXFR zz.com @10.201.106.129
;; global options: +cmd
; Transfer failed.

主域可以正常传送区域
[root@qq ~]# dig -t AXFR zz.com @10.201.106.129

; <<>> DiG 9.8.2rc1-RedHat-9.8.2-0.30.rc1.el6 <<>> -t AXFR zz.com @10.201.106.129
;; global options: +cmd
zz.com.         86400   IN  SOA ns1.zz.com. admin.zz.com. 2016042501 3600 300 259200 86400
zz.com.         86400   IN  NS  ns1.zz.com.
zz.com.         86400   IN  NS  ns2.zz.com.
*.zz.com.       86400   IN  A   10.201.106.129
ns1.zz.com.     86400   IN  A   10.201.106.129
ns2.zz.com.     86400   IN  A   10.201.106.128
ops.zz.com.     86400   IN  NS  ns1.ops.zz.com.
ns1.ops.zz.com.     86400   IN  A   10.201.106.128
www.zz.com.     86400   IN  A   10.201.106.129
zz.com.         86400   IN  SOA ns1.zz.com. admin.zz.com. 2016042501 3600 300 259200 86400
;; Query time: 2 msec
;; SERVER: 10.201.106.129#53(10.201.106.129)
;; WHEN: Wed Aug  3 20:33:43 2016
;; XFR size: 10 records (messages 1, bytes 246)

允许哪些主机递归

/etc/named.confg
allow-recursion { ip; };

禁止更新区域数据库中的内容

zone "zz.com" IN {
        type master;
        file "zz.com.zone";
        allow-update { none; };

};

转载于:https://blog.51cto.com/zhongle21/2091441

weixin_33691817
关注
  • 0
    点赞
  • 踩
  • 0
    收藏
    觉得还不错? 一键收藏
  • 0
    评论
bind bind bind bind
09-15
bind bind bind bind
DNS 服务与邮件服务器(1)
weixin_52623251的博客
02-03 1220
1、 基础配置 （1）修改 mail 节点与 dns 节点主机名 [root@localhost ~]# hostnamectl set-hostname mail [root@localhost ~]# bash [root@jing ~]# hostnamectl set-hostname dns [root@jing ~]# bash （2）关闭防火墙 [root@mail ~]# systemctl stop firewalld [root@mail ~]# systemctl disable f.
dns服务器报错关闭ipv6和目录权限
wolf
04-19 6873
[root@dns02 ~]# tail -f /var/log/messages Apr 19 10:17:27 localhost named[5470]: error (network unreachable) resolving './NS/IN': 2001:503:ba3e::2:30#53 Apr 19 10:17:27 localhost named[5470]: valida
centos bind dns服务器安装
sylalak123的博客
09-05 1496
bind安装： yum install bind yum install bind-chroot bind-chroot是bind的一个功能，使bind可以在一个chroot的模式下运行。也就是说,bind运行时的/(根)目录，并不是系统真正的/(根)目录，只是系统中的一个子目录而已。这样做的目的是为了提高安全性，因为在chroot的模式下，bind可以访问的范围仅限于这个子目录的范围里，无法进一步提升,进入到系统的其他目录中。将BIND运行于chroot的方式将加强安全性。
dns报错问题
weixin_33895695的博客
11-20 1715
错误日志类似：1. ---------------network unreachable resolving './NS/IN': 2001:503:ba3e::2:30#53network unreachable resolving 'NS1.APNIC.NET/A/IN': 2001:503:c27::2:30#53network unreachable resolvin...
Network unreachable
兜里的米
04-07 240
之前一直在宿舍是用pppoe上网的，结果今天用公司的有线上不了网。查看了一番，发现/etc/network/interfaces被写入了pppoe的东西。手动改之即可(修改以下配置切记备份.....地址根据实际情况)   sodu vi /etc/network/interfaces   auto lo iface lo inet loopback iface eth0 inet st...
bind-9.17.3.tar.xz
07-21
Linux版bind9二进制安装包，使用二进制安装包可以直接在Ubuntu或者Centos之类的的Linux下直接安装使用建立内部DNS。
javascript bind绑定函数代码
10-29
bind函数，顾名思义，用于为调用函数绑定一个作用域，因为this很容易跟丢它原来所在的作用域，直接指向顶层的window对象。
jQuery中 bind的用法简单介绍
10-20
bind() 方法为被选元素添加一个或多个事件处理程序，并规定事件发生时运行的函数。这篇文章主要介绍了jQuery中的 bind用法,需要的朋友可以参考下
浅谈js中的bind
10-17
主要介绍了js中的bind应用，文中通过示例代码介绍的非常详细，对大家的学习或者工作具有一定的参考学习价值，需要的朋友们下面随着小编来一起学习学习吧
linux dns日志,【已解决】CentOS6.2的DNS日志错误，不能解析
weixin_29369363的博客
05-04 755
我把配置都贴出来吧：named.conf配置options {listen-on port 53 { 192.168.0.0; };directory "/var/named";dump-file "/var/named/data/cache_dump.db";statistics-file "/var/named/data/named_stats.txt";memstat...
搭建DNS服务器
迷途的攻城狮
04-24 1151
搭建DNS服务器 本文将描述在CentOS 7上使用bind9搭建DNS服务器并配置泛域名解析。 1、安装bind、bind-chroot、bind-utils [root@node-dns ~]# yum install -y bind bind-chroot bind-util bind-chroot使bind运行在单独的文件系统中，提高安全性； 2、初始化chr...
【错误】【CentOS_7】解决named[7780]: network unreachable resolving
weixin_43996664的博客
11-06 5063
1.问题截图如下 原因：这个错误的原因是named尝试使用IPV6进行传输 所以我们可以让他只运行在IPV4模式下 2.解决方法如下 （1）编辑文件 vi /etc/sysconfig/named （2）把下面的代码加入文件中 OPTIONS="-4" ...
centos查看dns缓存_centos6下BIND配置DNS缓存服务
weixin_39656435的博客
12-20 985
DNS服务是linux下最常用的一个服务，其一般是CDN 架设前的基础。在centos6下默认使用的DNS服务包软件是bind。本地DNS缓存的作用是将根DNS或远程DNS查询的结果在本地主机上进行缓存，加快DNS查询的速度。同时对于内网中假设只有一台主机可以上外网的情况下，也可以通过将内网主机的DNS指向能上外网的主机，从而解析出外网域名和IP的对应关系。一、相关包与环境其相关软件包有如下三个：...
dns服务之bind配置内网解析部分子域名，其它子域名转发
weixin_30457551的博客
03-20 1910
bind配置内网解析部分子域名，其它子域名转发。以下以m.xxx.com和admin.xxx.com由内网dns解析，其它*.xxx.com转发给外网dns解析为例配置。文件/etc/named.conf：options {# listen-on port 53 { 127.0.0.1; }; #注释表示监听所有端口# listen-on-v6 port 53 { ::1;...
network is unreachable
三月软件工作室--任忌
10-04 2908
以前，在ubuntu中一直用的都是无线上网，现在没有无线了，总是连不上。            使用ifconfig也可一发现eth0存在。但是没有ip地址、网关、子网掩码等信息。所以说驱动没有问题。           使用ping命令 ：ping 127.0.0.1的时候可以连通。            使用ping命令别的ip就不行，一直提示 network is unreacha
/var/log/message 错误error (network unreachable)
cj990133的博客
07-01 690
如果在/var/log/message日志里出现一下内容 Jul 8 13:36:34 master named-sdb[6324]: error (network unreachable) resolving 'ns1.n...
解决：etwork unreachable resolving问题
qq_38461475的博客
07-20 2175
系统： CentOS Linux release 7.7.1908 (Core) bind: BIND 9.11.4-P2-RedHat-9.11.4-16.P2.el7_8.6 部署使用bind后， 使用systemctl status named或者查看messages日志，都能看到 Jul 12 06:08:40 od-bind-81 named[994]: network unreachable resolving 'gateway/A/IN': 2001:500:12::d0d#53 Jul 1
linux的网络不可达问题,我的服务器日志中的linux – (网络不可达)错误
weixin_39894914的博客
05-04 568
我的Centos消息日志文件中有很多网络无法访问的行.他们似乎无法解决某些地址,我没有任何想法,为什么我的服务器必须首先解决它们.谁能让我知道这种错误的根源？我受到了攻击吗？Oct 23 11:39:03 server named[1585]: error (network unreachable) resolving './DNSKEY/IN': 2001:503:ba3e::2:30#53Oc...
v-bind在vue3
最新发布
08-19
- *1* *2* *3* [Vue3新属性 — css中使用v-bind（v-bind in css）](https://blog.csdn.net/weixin_52235488/article/details/126290046)[target="_blank" data-report-click={"spm":"1018.2226.3001.9630","extra":{...

“相关推荐”对你有帮助么？

  • 非常没帮助
  • 没帮助
  • 一般
  • 有帮助
  • 非常有帮助
提交
评论
添加红包

请填写红包祝福语或标题

个

红包个数最小为10个

元

红包金额最低5元

当前余额3.43元 前往充值 >
需支付：10.00元
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包
实付元
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明：

1.余额是钱包充值的虚拟货币，按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载，可以购买VIP、付费专栏及课程。

余额充值