bind杂记（2）

最新推荐文章于 2020-07-22 11:23:29 发布
最新推荐文章于 2020-07-22 11:23:29 发布
阅读量210 收藏
点赞数
文章标签： 运维 开发工具 网络
原文链接：http://blog.51cto.com/zhongle21/2091440
版权

反向bind配置

host

host解析

[root@qq named]# host -t A www.magedu.com 10.201.106.129
Using domain server:
Name: 10.201.106.129
Address: 10.201.106.129#53
Aliases: 

www.magedu.com has address 10.201.106.129
www.magedu.com has address 10.201.106.110

host查询NS和MX记录

[root@qq named]# host -t NS magedu.com 10.201.106.129
Using domain server:
Name: 10.201.106.129
Address: 10.201.106.129#53
Aliases: 

magedu.com name server ns2.magedu.com.
magedu.com name server ns1.magedu.com.

[root@qq named]# host -t MX magedu.com 10.201.106.129
Using domain server:
Name: 10.201.106.129
Address: 10.201.106.129#53
Aliases: 

magedu.com mail is handled by 20 mx2.magedu.com.
magedu.com mail is handled by 10 mx1.magedu.com.

nslookup

查询A记录

[root@qq named]# nslookup
> server 10.201.106.129           #指明提供解析的服务器
Default server: 10.201.106.129
Address: 10.201.106.129#53
> set q=A                         #设置要查询的记录类型
> www.magedu.com                  #输入要查询的域名
Server:     10.201.106.129
Address:    10.201.106.129#53

Name:   www.magedu.com
Address: 10.201.106.110
Name:   www.magedu.com
Address: 10.201.106.129

其它资源测试

set q=NS
magedu.com
Server: 10.201.106.129
Address: 10.201.106.129#53

magedu.com nameserver = ns1.magedu.com.
magedu.com nameserver = ns2.magedu.com.

配置反向区域

1 创建反向区域文件

[root@qq named]# vim /etc/named.rfc1912.zones
zone "106.201.10.in-addr.arpa" IN {
        type master;
        file "10.201.106.zone";
};

[root@qq named]# cat 10.201.106.zone 
$TTL 86400
$ORIGIN 106.201.10.in-addr.arpa.
@   IN  SOA ns1.magedu.com. admin.magedu.com. (
            2015042201
            1H
            5M
            7D
            1D )
    IN  NS  ns1.magedu.com.
    IN  NS  ns2.magedu.com.
129 IN  PTR ns1.magedu.com.
129 IN  PTR www.magedu.com.
130 IN  PTR ns2.magedu.com.
130 IN  PTR www.magedu.com.
131 IN  PTR mx1.magedu.com.
132 IN  PTR mx2.magedu.com.

2 更改权限和检查语法正确性

[root@qq named]# chmod 640 10.201.106.zone 
[root@qq named]# ll 10.201.106.zone 
-rw-r----- 1 root root 337 Aug  3 04:14 10.201.106.zone
[root@qq named]# 
[root@qq named]# chown :named 10.201.106.zone 
[root@qq named]# 
[root@qq named]# ll 10.201.106.zone 
-rw-r----- 1 root named 337 Aug  3 04:14 10.201.106.zone
[root@qq named]# 
[root@qq named]# named-checkzone "106.201.10.in-addr.arpa" 10.201.106.zone 
zone 106.201.10.in-addr.arpa/IN: loaded serial 2015042201
OK

[root@qq named]# named-checkconf 
[root@qq named]#

3 重新加载服务

[root@qq named]# service named reload
Reloading named:                                           [  OK  ]

查看状态
[root@qq named]# rndc status
version: 9.8.2rc1-RedHat-9.8.2-0.30.rc1.el6
CPUs found: 1
worker threads: 1
number of zones: 21
debug level: 0
xfers running: 0
xfers deferred: 0
soa queries in progress: 0
query logging is OFF
recursive clients: 0/0/1000
tcp clients: 0/100
server is up and running
[root@qq named]#

4 解析测试

[root@qq named]# host -t PTR 10.201.106.129 10.201.106.129
Using domain server:
Name: 10.201.106.129
Address: 10.201.106.129#53
Aliases: 

129.106.201.10.in-addr.arpa domain name pointer www.magedu.com.
129.106.201.10.in-addr.arpa domain name pointer ns1.magedu.com.
[root@qq named]# 
[root@qq named]# 
[root@qq named]# dig -x 10.201.106.129 @10.201.106.129

; <<>> DiG 9.8.2rc1-RedHat-9.8.2-0.30.rc1.el6 <<>> -x 10.201.106.129 @10.201.106.129
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 17617
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 2, ADDITIONAL: 2

;; QUESTION SECTION:
;129.106.201.10.in-addr.arpa.   IN  PTR

;; ANSWER SECTION:
129.106.201.10.in-addr.arpa. 86400 IN   PTR ns1.magedu.com.
129.106.201.10.in-addr.arpa. 86400 IN   PTR www.magedu.com.

;; AUTHORITY SECTION:
106.201.10.in-addr.arpa. 86400  IN  NS  ns1.magedu.com.
106.201.10.in-addr.arpa. 86400  IN  NS  ns2.magedu.com.

;; ADDITIONAL SECTION:
ns1.magedu.com.     86400   IN  A   10.201.106.129
ns2.magedu.com.     86400   IN  A   10.201.106.130

;; Query time: 1 msec
;; SERVER: 10.201.106.129#53(10.201.106.129)
;; WHEN: Wed Aug  3 05:06:55 2016
;; MSG SIZE  rcvd: 155

[root@qq named]# dig -x 10.201.106.130 @10.201.106.129

; <<>> DiG 9.8.2rc1-RedHat-9.8.2-0.30.rc1.el6 <<>> -x 10.201.106.130 @10.201.106.129
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 25115
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 2, ADDITIONAL: 2

;; QUESTION SECTION:
;130.106.201.10.in-addr.arpa.   IN  PTR

;; ANSWER SECTION:
130.106.201.10.in-addr.arpa. 86400 IN   PTR www.magedu.com.
130.106.201.10.in-addr.arpa. 86400 IN   PTR ns2.magedu.com.

全量区域传送

[root@qq named]# dig -t axfr magedu.com @10.201.106.129

; <<>> DiG 9.8.2rc1-RedHat-9.8.2-0.30.rc1.el6 <<>> -t axfr magedu.com @10.201.106.129
;; global options: +cmd
magedu.com.     86400   IN  SOA ns1.magedu.com. admin.magedu.com.magedu.com. 2015042201 3600 300 604800 86400
magedu.com.     86400   IN  NS  ns1.magedu.com.
magedu.com.     86400   IN  NS  ns2.magedu.com.
magedu.com.     86400   IN  MX  10 mx1.magedu.com.
magedu.com.     86400   IN  MX  20 mx2.magedu.com.
ftp.magedu.com.     86400   IN  CNAME   www.magedu.com.
mx1.magedu.com.     86400   IN  A   10.201.106.131
mx2.magedu.com.     86400   IN  A   10.201.106.132
ns1.magedu.com.     86400   IN  A   10.201.106.129
ns2.magedu.com.     86400   IN  A   10.201.106.130
www.magedu.com.     86400   IN  A   10.201.106.129
www.magedu.com.     86400   IN  A   10.201.106.130
magedu.com.     86400   IN  SOA ns1.magedu.com. admin.magedu.com.magedu.com. 2015042201 3600 300 604800 86400
;; Query time: 4 msec
;; SERVER: 10.201.106.129#53(10.201.106.129)
;; WHEN: Wed Aug  3 05:13:47 2016
;; XFR size: 13 records (messages 1, bytes 311)

[root@qq named]# 

传送反向区域
[root@qq named]# dig -t axfr 106.201.10.in-addr.arpa @10.201.106.129

; <<>> DiG 9.8.2rc1-RedHat-9.8.2-0.30.rc1.el6 <<>> -t axfr 106.201.10.in-addr.arpa @10.201.106.129
;; global options: +cmd
106.201.10.in-addr.arpa. 86400  IN  SOA ns1.magedu.com. admin.magedu.com. 2015042201 3600 300 604800 86400
106.201.10.in-addr.arpa. 86400  IN  NS  ns1.magedu.com.
106.201.10.in-addr.arpa. 86400  IN  NS  ns2.magedu.com.
129.106.201.10.in-addr.arpa. 86400 IN   PTR ns1.magedu.com.
129.106.201.10.in-addr.arpa. 86400 IN   PTR www.magedu.com.
130.106.201.10.in-addr.arpa. 86400 IN   PTR ns2.magedu.com.
130.106.201.10.in-addr.arpa. 86400 IN   PTR www.magedu.com.
131.106.201.10.in-addr.arpa. 86400 IN   PTR mx1.magedu.com.
132.106.201.10.in-addr.arpa. 86400 IN   PTR mx2.magedu.com.
106.201.10.in-addr.arpa. 86400  IN  SOA ns1.magedu.com. admin.magedu.com. 2015042201 3600 300 604800 86400
;; Query time: 1 msec
;; SERVER: 10.201.106.129#53(10.201.106.129)
;; WHEN: Wed Aug  3 05:21:30 2016
;; XFR size: 10 records (messages 1, bytes 277)

解析没有的记录，否定答案，后面设置泛域名（通用）域名解析

[root@qq named]# dig -t A pop3.magedu.com @10.201.106.129

; <<>> DiG 9.8.2rc1-RedHat-9.8.2-0.30.rc1.el6 <<>> -t A pop3.magedu.com @10.201.106.129
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 34427
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;pop3.magedu.com.       IN  A

;; AUTHORITY SECTION:
magedu.com.     86400   IN  SOA ns1.magedu.com. admin.magedu.com.magedu.com. 2015042201 3600 300 604800 86400

增加一条全部解析记录
[root@qq named]# vi magedu.com.zone 
*   IN      A   10.201.106.129
magedu.com. IN     A    10.201.106.129   #只解析域名，只想这个IP；

重新加载
[root@qq named]# rndc reload
server reload successful

再次解析不存在的主机
[root@qq named]# dig -t A pop3.magedu.com @10.201.106.129

; <<>> DiG 9.8.2rc1-RedHat-9.8.2-0.30.rc1.el6 <<>> -t A pop3.magedu.com @10.201.106.129
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 23145
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 2

;; QUESTION SECTION:
;pop3.magedu.com.       IN  A

;; ANSWER SECTION:
pop3.magedu.com.    86400   IN  A   10.201.106.129

;; AUTHORITY SECTION:
magedu.com.     86400   IN  NS  ns1.magedu.com.
magedu.com.     86400   IN  NS  ns2.magedu.com.

;; ADDITIONAL SECTION:
ns1.magedu.com.     86400   IN  A   10.201.106.129
ns2.magedu.com.     86400   IN  A   10.201.106.130

主从复制

1 开启从服务器，检验是否能从主服务器区域传送过来资源

[root@ns2 ~]# dig -t axfr magedu.com @10.201.106.129

; <<>> DiG 9.9.4-RedHat-9.9.4-29.el7 <<>> -t axfr magedu.com @10.201.106.129
;; global options: +cmd
magedu.com.     86400   IN  SOA ns1.magedu.com. admin.magedu.com.magedu.com. 2015042201 3600 300 604800 86400
magedu.com.     86400   IN  A   10.201.106.129
magedu.com.     86400   IN  NS  ns1.magedu.com.
magedu.com.     86400   IN  NS  ns2.magedu.com.
magedu.com.     86400   IN  MX  10 mx1.magedu.com.
magedu.com.     86400   IN  MX  20 mx2.magedu.com.
*.magedu.com.       86400   IN  A   10.201.106.129
ftp.magedu.com.     86400   IN  CNAME   www.magedu.com.
mx1.magedu.com.     86400   IN  A   10.201.106.131
mx2.magedu.com.     86400   IN  A   10.201.106.132
ns1.magedu.com.     86400   IN  A   10.201.106.129
ns2.magedu.com.     86400   IN  A   10.201.106.130
www.magedu.com.     86400   IN  A   10.201.106.129
www.magedu.com.     86400   IN  A   10.201.106.130
magedu.com.     86400   IN  SOA ns1.magedu.com. admin.magedu.com.magedu.com. 2015042201 3600 300 604800 86400
;; Query time: 2 msec
;; SERVER: 10.201.106.129#53(10.201.106.129)
;; WHEN: Thu Aug 11 17:35:57 CST 2016
;; XFR size: 15 records (messages 1, bytes 345)

[root@ns2 ~]# 
[root@ns2 ~]# 
[root@ns2 ~]# dig -t axfr 106.201.10.in-addr.arpa @10.201.106.129

; <<>> DiG 9.9.4-RedHat-9.9.4-29.el7 <<>> -t axfr 106.201.10.in-addr.arpa @10.201.106.129
;; global options: +cmd
106.201.10.in-addr.arpa. 86400  IN  SOA ns1.magedu.com. admin.magedu.com. 2015042201 3600 300 604800 86400
106.201.10.in-addr.arpa. 86400  IN  NS  ns1.magedu.com.
106.201.10.in-addr.arpa. 86400  IN  NS  ns2.magedu.com.
129.106.201.10.in-addr.arpa. 86400 IN   PTR ns1.magedu.com.
129.106.201.10.in-addr.arpa. 86400 IN   PTR www.magedu.com.
130.106.201.10.in-addr.arpa. 86400 IN   PTR ns2.magedu.com.
130.106.201.10.in-addr.arpa. 86400 IN   PTR www.magedu.com.
131.106.201.10.in-addr.arpa. 86400 IN   PTR mx1.magedu.com.
132.106.201.10.in-addr.arpa. 86400 IN   PTR mx2.magedu.com.
106.201.10.in-addr.arpa. 86400  IN  SOA ns1.magedu.com. admin.magedu.com. 2015042201 3600 300 604800 86400
;; Query time: 3 msec
;; SERVER: 10.201.106.129#53(10.201.106.129)
;; WHEN: Thu Aug 11 17:36:02 CST 2016
;; XFR size: 10 records (messages 1, bytes 277)

[root@ns2 ~]#
配置从服务器，只需要定义区域就行了

配置正向 从服务器

1 首先从服务器安装bind

[root@ns2 yum.repos.d]# yum install bind -y

2 编辑缓存名称服务器的配置文件

options {
        listen-on port 53 { 10.201.106.130;127.0.0.1; };
        //listen-on-v6 port 53 { ::1; };
        directory       "/var/named";
        dump-file       "/var/named/data/cache_dump.db";
        statistics-file "/var/named/data/named_stats.txt";
        memstatistics-file "/var/named/data/named_mem_stats.txt";
        allow-query     { any; };

        /* 
           recursion. 
         - If your recursive DNS server has a public IP address, you MUST enable access 
           control to limit queries to your legitimate users. Failing to do so will
           cause your server to become part of large scale DNS amplification 
           attacks. Implementing BCP38 within your network would greatly
           reduce such attack surface 
        */
        recursion yes;

//      dnssec-enable yes;
//      dnssec-validation yes;

        /* Path to ISC DLV key */
//      bindkeys-file "/etc/named.iscdlv.key";

//      managed-keys-directory "/var/named/dynamic";

//      pid-file "/run/named/named.pid";
//      session-keyfile "/run/named/session.key";
};

3 检查服务是否开启

[root@ns2 yum.repos.d]# systemctl restart named
[root@ns2 yum.repos.d]# 
[root@ns2 yum.repos.d]# systemctl status named
● named.service - Berkeley Internet Name Domain (DNS)
   Loaded: loaded (/usr/lib/systemd/system/named.service; disabled; vendor preset: disabled)
   Active: active (running) since Thu 2016-08-11 17:52:40 CST; 6s ago
  Process: 23475 ExecStop=/bin/sh -c /usr/sbin/rndc stop > /dev/null 2>&1 || /bin/kill -TERM $MAINPID (code=exited, status=0/SUCCESS)
  Process: 23495 ExecStart=/usr/sbin/named -u named $OPTIONS (code=exited, status=0/SUCCESS)
  Process: 23490 ExecStartPre=/bin/bash -c if [ ! "$DISABLE_ZONE_CHECKING" == "yes" ]; then /usr/sbin/named-checkconf -z /etc/named.conf; else echo "Checking of zone files is disabled"; fi (code=exited, status=0/SUCCESS)
 Main PID: 23500 (named)
   CGroup: /system.slice/named.service
           └─23500 /usr/sbin/named -u named

Aug 11 17:52:40 ns2.magedu.com named[23500]: managed-keys-zone: sync...
Aug 11 17:52:40 ns2.magedu.com named[23500]: managed-keys-zone: unab...
Aug 11 17:52:40 ns2.magedu.com named[23500]: zone 0.in-addr.arpa/IN:...
Aug 11 17:52:40 ns2.magedu.com named[23500]: zone 1.0.0.127.in-addr....
Aug 11 17:52:40 ns2.magedu.com named[23500]: zone localhost.localdom...
Aug 11 17:52:40 ns2.magedu.com named[23500]: zone 1.0.0.0.0.0.0.0.0....
Aug 11 17:52:40 ns2.magedu.com named[23500]: zone localhost/IN: load...
Aug 11 17:52:40 ns2.magedu.com named[23500]: all zones loaded
Aug 11 17:52:40 ns2.magedu.com systemd[1]: Started Berkeley Internet...
Aug 11 17:52:40 ns2.magedu.com named[23500]: running
Hint: Some lines were ellipsized, use -l to show in full.
[root@ns2 yum.repos.d]# 
[root@ns2 yum.repos.d]# ss -tnl
State       Recv-Q Send-Q Local Address:Port               Peer Address:Port              
LISTEN      0      10     10.201.106.130:53                  *:*                  
LISTEN      0      10     127.0.0.1:53                  *:*                  
LISTEN      0      5      192.168.122.1:53 

[root@ns2 yum.repos.d]# ss -unl
State       Recv-Q Send-Q Local Address:Port               Peer Address:Port              
UNCONN      0      0       *:5353                *:*                  
UNCONN      0      0      10.201.106.130:53                  *:*                  
UNCONN      0      0      127.0.0.1:53                  *:*                  
UNCONN      0      0      192.168.122.1:53                  *:*

4 选择从服务器同步过来的记录存放位置

[root@ns2 ~]# ps aux | grep named
named    23500  0.0  3.3 162736 16624 ?        Ssl  17:52   0:00 /usr/sbin/named -u named
root     24379  0.1  1.0 153632  5256 pts/1    S+   18:37   0:00 vim /etc/named.rfc1912.zones
root     24489  0.0  0.1 112644   960 pts/2    S+   18:39   0:00 grep --color=auto named
[root@ns2 ~]# 
[root@ns2 ~]# ll -d /var/named/
drwxr-x---. 5 root named 4096 Aug 11 17:46 /var/named/
[root@ns2 ~]# 
[root@ns2 ~]# ll  /var/named/
total 16
drwxrwx---. 2 named named   47 Aug 11 18:36 data
drwxrwx---. 2 named named    6 Nov 20  2015 dynamic
-rw-r-----. 1 root  named 2076 Jan 28  2013 named.ca
-rw-r-----. 1 root  named  152 Dec 15  2009 named.empty
-rw-r-----. 1 root  named  152 Jun 21  2007 named.localhost
-rw-r-----. 1 root  named  168 Dec 15  2009 named.loopback
drwxrwx---. 2 named named    6 Nov 20  2015 slaves  #该目录专用于从服务器
[root@ns2 ~]#

5 在bind的 /etc/named.rfc1912.zones配置正向区域

[root@ns2 named]# vim /etc/named.rfc1912.zones
zone "madedu.com" IN {
type slave;
masters { 10.201.106.129； };
file "slaves/magedu.com.zone";
};

6 重载服务，同步主服务器的资源

[root@ns2 named]# rndc reload
server reload successful

[root@zz named]# tail /var/log/messages
Jul 29 13:10:48 zz named[2524]: using default UDP/IPv6 port range: [1024, 65535]
Jul 29 13:10:48 zz named[2524]: sizing zone task pool based on 7 zones
Jul 29 13:10:48 zz named[2524]: Warning: 'empty-zones-enable/disable-empty-zone' not set: disabling RFC 1918 empty zones
Jul 29 13:10:48 zz named[2524]: reloading configuration succeeded
Jul 29 13:10:48 zz named[2524]: reloading zones succeeded
Jul 29 13:10:48 zz named[2524]: zone magedu.com/IN: Transfer started.
Jul 29 13:10:48 zz named[2524]: transfer of 'magedu.com/IN' from 10.201.106.129#53: connected using 10.201.106.128#42070
Jul 29 13:10:48 zz named[2524]: zone magedu.com/IN: transferred serial 2015042201
Jul 29 13:10:48 zz named[2524]: transfer of 'magedu.com/IN' from 10.201.106.129#53: Transfer completed: 1 messages, 15 records, 345 bytes, 0.008 secs (43125 bytes/sec)     #15条记录
Jul 29 13:10:48 zz named[2524]: zone magedu.com/IN: sending notifies (serial 2015042201)

测试主服务器修改，从服务器是否能同步

主服务器
[root@qq named]# vim /var/named/magedu.com.zone 
[root@qq named]# 
[root@qq named]# 
[root@qq named]# vim /var/named/magedu.com.zone 

$TTL 86400
$ORIGIN magedu.com.
@    IN     SOA     ns1.magedu.com. admin.magedu.com (
                    2015042203      #序列号加1

pop3 IN    CNAME    mx1             #新增一条记录

[root@qq named]# named-checkzone "magedu.com." /var/named/magedu.com.zone 
zone magedu.com/IN: loaded serial 2015042202
OK
[root@qq named]# 

主服务器更改完记录区域记录后，重加加载
[root@qq named]# rndc reload
server reload successful
[root@qq named]# 
[root@qq named]# tail /var/lo
local/      lock/       log/        lost+found/ 
[root@qq named]# tail /var/log/messages
Aug  3 09:46:04 qq named[19186]: using default UDP/IPv4 port range: [1024, 65535]
Aug  3 09:46:04 qq named[19186]: using default UDP/IPv6 port range: [1024, 65535]
Aug  3 09:46:04 qq named[19186]: sizing zone task pool based on 8 zones
Aug  3 09:46:04 qq named[19186]: Warning: 'empty-zones-enable/disable-empty-zone' not set: disabling RFC 1918 empty zones
Aug  3 09:46:04 qq named[19186]: reloading configuration succeeded
Aug  3 09:46:04 qq named[19186]: reloading zones succeeded
Aug  3 09:46:04 qq named[19186]: zone magedu.com/IN: loaded serial 2015042203
Aug  3 09:46:04 qq named[19186]: zone magedu.com/IN: sending notifies (serial 2015042203)
Aug  3 09:46:04 qq named[19186]: client 10.201.106.128#54411: transfer of 'magedu.com/IN': AXFR-style IXFR started      #IXFR：增量备份
Aug  3 09:46:04 qq named[19186]: client 10.201.106.128#54411: transfer of 'magedu.com/IN': AXFR-style IXFR ended

从服务器
从服务器也已经同步数据过来
[root@zz slaves]# tail /var/log/messages
Jul 29 13:30:40 zz named[2524]: sizing zone task pool based on 7 zones
Jul 29 13:30:40 zz named[2524]: Warning: 'empty-zones-enable/disable-em
Jul 29 13:30:40 zz named[2524]: reloading configuration succeeded
Jul 29 13:30:40 zz named[2524]: reloading zones succeeded
Jul 29 13:34:26 zz named[2524]: client 10.201.106.129#16525: received n
Jul 29 13:34:26 zz named[2524]: zone magedu.com/IN: Transfer started.
Jul 29 13:34:26 zz named[2524]: transfer of 'magedu.com/IN' from 10.201
Jul 29 13:34:26 zz named[2524]: zone magedu.com/IN: transferred serial 
Jul 29 13:34:26 zz named[2524]: transfer of 'magedu.com/IN' from 10.201s (8704 bytes/sec)
Jul 29 13:34:26 zz named[2524]: zone magedu.com/IN: sending notifies (s
[root@zz slaves]# 

[root@zz named]# 
[root@zz named]# cat slaves/magedu.comzone 
$ORIGIN .
$TTL 86400  ; 1 day
magedu.com      IN SOA  ns1.magedu.com. admin.magedu.com.magedu.com. (
                2015042203 ; serial
                3600       ; refresh (1 hour)
                300        ; retry (5 minutes)
                604800     ; expire (1 week)
                86400      ; minimum (1 day)
                )
            NS  ns1.magedu.com.
            NS  ns2.magedu.com.
            A   10.201.106.129
            MX  10 mx1.magedu.com.
            MX  20 mx2.magedu.com.
$ORIGIN magedu.com.
*           A   10.201.106.129
ftp         CNAME   www
mx1         A   10.201.106.131
mx2         A   10.201.106.132
ns1         A   10.201.106.129
ns2         A   10.201.106.128
pop3            CNAME   mx1
pop4            CNAME   ns1
www         A   10.201.106.129
            A   10.201.106.128

定义反向 从服务器

1 查看主服务器的反向区域记录是否有从服务器的NS记录和PTR记录

[root@qq named]# vim 10.201.106.zone 

$TTL 86400
$ORIGIN 106.201.10.in-addr.arpa.
@       IN      SOA     ns1.magedu.com. admin.magedu.com. (
                        2015042201
                        1H
                        5M
                        7D
                        1D )
        IN      NS      ns1.magedu.com.
        IN      NS      ns2.magedu.com.
129     IN      PTR     ns1.magedu.com.
129     IN      PTR     www.magedu.com.
128     IN      PTR     ns2.magedu.com.

2 也是只需定义named.rfc1912.zones区域文件，只需要做区域定义

vim /etc/named.rfc1912.zones
 49 zone "106.201.10.in-addr.arpa" IN {
 50         type slave;
 51         masters { 10.201.106.129; };
 52         file "slaves/10.201.106.zone";
 53 };

3 检查语法，重载服务，查看日志

[root@zz named]# named-checkconf 
[root@zz named]# 
[root@zz named]# 
[root@zz named]# rndc reload
server reload successful

[root@zz named]# 
[root@zz named]# tail /var/log/messages
Jul 29 13:58:32 zz named[2524]: using default UDP/IPv6 port range: [1024, 65535]
Jul 29 13:58:32 zz named[2524]: sizing zone task pool based on 8 zones
Jul 29 13:58:32 zz named[2524]: Warning: 'empty-zones-enable/disable-empty-zone' not set: disabling RFC 1918 empty zones
Jul 29 13:58:32 zz named[2524]: reloading configuration succeeded
Jul 29 13:58:32 zz named[2524]: reloading zones succeeded
Jul 29 13:58:32 zz named[2524]: zone 106.201.10.in-addr.arpa/IN: Transfer started.
Jul 29 13:58:32 zz named[2524]: transfer of '106.201.10.in-addr.arpa/IN' from 10.201.106.129#53: connected using 10.201.106.128#47866
Jul 29 13:58:32 zz named[2524]: zone 106.201.10.in-addr.arpa/IN: transferred serial 2015042201
Jul 29 13:58:32 zz named[2524]: transfer of '106.201.10.in-addr.arpa/IN' from 10.201.106.129#53: Transfer completed: 1 messages, 10 records, 277 bytes, 0.010 secs (27700 bytes/sec)
Jul 29 13:58:32 zz named[2524]: zone 106.201.10.in-addr.arpa/IN: sending notifies (serial 2015042201)
[root@zz named]# vim /etc/named.rfc1912.zones 

root@zz named]# vim /etc/named.rfc1912.zones 
[root@zz named]# 
[root@zz named]# ll slaves/
total 8
-rw-r--r--. 1 named named 488 Jul 29 13:58 10.201.106.zone
-rw-r--r--. 1 named named 600 Jul 29 13:34 magedu.comzone
[root@zz named]#

4 主服务器主动修改，查看从服务器是否同步

主服务器
[root@qq named]# vim 10.201.106.zone 

$TTL 86400
$ORIGIN 106.201.10.in-addr.arpa.
@       IN      SOA     ns1.magedu.com. admin.magedu.com. (
                        2015042202      #序列号加1
10     IN      PTR     lamp.magedu.com. #增加一条记录

[root@qq named]# named-checkzone "106.201.10.in-addr.arpa" /var/named/10.201.106.zone 
zone 106.201.10.in-addr.arpa/IN: loaded serial 2015042202
OK

[root@qq named]# rndc reload
[root@qq named]# 
[root@qq named]# tail /var/log/messages
Aug  3 10:23:56 qq named[19186]: using default UDP/IPv4 port range: [1024, 65535]
Aug  3 10:23:56 qq named[19186]: using default UDP/IPv6 port range: [1024, 65535]
Aug  3 10:23:56 qq named[19186]: sizing zone task pool based on 8 zones
Aug  3 10:23:56 qq named[19186]: Warning: 'empty-zones-enable/disable-empty-zone' not set: disabling RFC 1918 empty zones
Aug  3 10:23:56 qq named[19186]: reloading configuration succeeded
Aug  3 10:23:56 qq named[19186]: reloading zones succeeded
Aug  3 10:23:56 qq named[19186]: zone 106.201.10.in-addr.arpa/IN: loaded serial 2015042202
Aug  3 10:23:56 qq named[19186]: zone 106.201.10.in-addr.arpa/IN: sending notifies (serial 2015042202)
Aug  3 10:23:56 qq named[19186]: client 10.201.106.128#51457: transfer of '106.201.10.in-addr.arpa/IN': AXFR-style IXFR started
Aug  3 10:23:56 qq named[19186]: client 10.201.106.128#51457: transfer of '106.201.10.in-addr.arpa/IN': AXFR-style IXFR ended
[root@qq named]# 

反向从服务器
Jul 29 14:07:59 zz named[2524]: managed-keys-zone ./IN: Unable to fetch DNSKEY set '.': SERVFAIL
Jul 29 14:12:18 zz named[2524]: client 10.201.106.129#65218: received notify for zone '106.201.10.in-addr.arpa'
Jul 29 14:12:18 zz named[2524]: zone 106.201.10.in-addr.arpa/IN: Transfer started.
Jul 29 14:12:18 zz named[2524]: transfer of '106.201.10.in-addr.arpa/IN' from 10.201.106.129#53: connected using 10.201.106.128#51457
Jul 29 14:12:18 zz named[2524]: zone 106.201.10.in-addr.arpa/IN: transferred serial 2015042202
Jul 29 14:12:18 zz named[2524]: transfer of '106.201.10.in-addr.arpa/IN' from 10.201.106.129#53: Transfer completed: 1 messages, 11 records, 300 bytes, 0.012 secs (25000 bytes/sec)
Jul 29 14:12:18 zz named[2524]: zone 106.201.10.in-addr.arpa/IN: sending notifies (serial 2015042202)

[root@zz named]# cat slaves/10.201.106.zone 
$ORIGIN .
$TTL 86400  ; 1 day
106.201.10.in-addr.arpa IN SOA  ns1.magedu.com. admin.magedu.com. (
                2015042202 ; serial
                3600       ; refresh (1 hour)
                300        ; retry (5 minutes)
                604800     ; expire (1 week)
                86400      ; minimum (1 day)
                )
            NS  ns1.magedu.com.
            NS  ns2.magedu.com.
$ORIGIN 106.201.10.in-addr.arpa.
110         PTR lamp.magedu.com.
……

rndc

rndc开始查询日志功能

[root@www ~]# rndc querylog
[root@www ~]# rndc status
version: 9.8.2rc1-RedHat-9.8.2-0.30.rc1.el6
CPUs found: 1
worker threads: 1
number of zones: 21
debug level: 0
xfers running: 0
xfers deferred: 0
soa queries in progress: 0
query logging is ON             #
recursive clients: 0/0/1000
tcp clients: 0/100
server is up and running

[root@www ~]# rndc querylog
[root@www ~]# rndc status
version: 9.8.2rc1-RedHat-9.8.2-0.30.rc1.el6
CPUs found: 1
worker threads: 1
number of zones: 21
debug level: 0
xfers running: 0
xfers deferred: 0
soa queries in progress: 0
query logging is OFF
recursive clients: 0/0/1000
tcp clients: 0/100
server is up and running

测试：
[root@www ~]# dig -t A magedu.com @10.201.106.129

; <<>> DiG 9.8.2rc1-RedHat-9.8.2-0.30.rc1.el6 <<>> -t A magedu.com @10.201.106.129
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 14008
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 2

;; QUESTION SECTION:
;magedu.com.            IN  A

;; ANSWER SECTION:
magedu.com.     86400   IN  A   10.201.106.129

;; AUTHORITY SECTION:
magedu.com.     86400   IN  NS  ns1.magedu.com.
magedu.com.     86400   IN  NS  ns2.magedu.com.

;; ADDITIONAL SECTION:
ns1.magedu.com.     86400   IN  A   10.201.106.129
ns2.magedu.com.     86400   IN  A   10.201.106.128

;; Query time: 1 msec
;; SERVER: 10.201.106.129#53(10.201.106.129)
;; WHEN: Wed Aug  3 10:45:47 2016
;; MSG SIZE  rcvd: 112

[root@www ~]# 
[root@www ~]# 
[root@www ~]# tail /var/lo
local/      lock/       log/        lost+found/ 
[root@www ~]# tail /var/log/messages
Aug  3 10:23:56 qq named[19186]: client 10.201.106.128#51457: transfer of '106.201.10.in-addr.arpa/IN': AXFR-style IXFR started
Aug  3 10:23:56 qq named[19186]: client 10.201.106.128#51457: transfer of '106.201.10.in-addr.arpa/IN': AXFR-style IXFR ended
Aug  3 10:44:44 qq named[19186]: received control channel command 'querylog'
Aug  3 10:44:44 qq named[19186]: query logging is now on
Aug  3 10:45:14 qq named[19186]: received control channel command 'querylog'
Aug  3 10:45:14 qq named[19186]: query logging is now off
Aug  3 10:45:32 qq named[19186]: received control channel command 'querylog'
Aug  3 10:45:32 qq named[19186]: query logging is now on
Aug  3 10:45:46 qq named[19186]: client 10.201.106.128#56887: query: magedu.com IN SOA -E (10.201.106.129)          #本机自己的查询有记录到
Aug  3 10:45:47 qq named[19186]: client 10.201.106.129#41396: query: magedu.com IN A + (10.201.106.129)
[root@www ~]#       #可以从别的主机指向该服务器查询，然后查询日志

开启关闭debug日志

[root@www ~]# rndc trace 5          开启debug日志，并设置成5级
[root@www ~]# rndc status
version: 9.8.2rc1-RedHat-9.8.2-0.30.rc1.el6
CPUs found: 1
worker threads: 1
number of zones: 21
debug level: 5
xfers running: 0
xfers deferred: 0
soa queries in progress: 0
query logging is OFF
recursive clients: 0/0/1000
tcp clients: 0/100
server is up and running
[root@www ~]# 
[root@www ~]# 
[root@www ~]# 
[root@www ~]# rndc tracer 0         关闭debug日志
rndc: 'tracer' failed: unknown command
[root@www ~]# rndc trace 0
[root@www ~]# rndc status
version: 9.8.2rc1-RedHat-9.8.2-0.30.rc1.el6
CPUs found: 1
worker threads: 1
number of zones: 21
debug level: 0
xfers running: 0
xfers deferred: 0
soa queries in progress: 0
query logging is OFF
recursive clients: 0/0/1000
tcp clients: 0/100
server is up and running

转载于:https://blog.51cto.com/zhongle21/2091440

weixin_34253539
关注
  • 0
    点赞
  • 踩
  • 0
    收藏
    觉得还不错? 一键收藏
  • 0
    评论
最详细搭建bind服务器教程
m0_55024320的博客
10-13 3850
1、准备设备 客户端10.10.30.30 应用交付：10.10.30.31 根服务器(.)10.10.30.52 一级服务器（com.）10.10.30.53 二级服务器（baidu.com.）10.10.30.54 2、编辑一级服务器vi /etc/named.conf 注释这两行
bind 安装
less is more
04-16 385
修改配置文件/etc/named.conf listen-on port 53 { any; };memstatistics-file "/var/named/data/named_mem_stats.txt";allow-query     { any; };修改域名文件/etc/named.rfc1912.zones zone    "dblinux.com"   IN {        ty...
从根开始的DNS服务器架构,让整个互联网掌控于你的手中
weixin_33806300的博客
09-29 1546
做为想完全掌握DNS服务的同学来说，就很有必要去理解一下，到底我们做为客户机在上网时把DNS地址指向电信提供的DNS服务器后，我们在浏览器上输入一个域名的同时，这些DNS服务器是如何帮我们解析出对应的IP地址的。那么今天就给大家揭密一下，如何从根开始搭建一个完整的互联网体系下的DNS服务器架构，从此，让整体互联网从你开始，让整个互联网掌控于你的手中。环境需求：...
基于DNS日志分析，勒索病毒和远程控制病毒排查方法
xudxy的专栏
06-15 4529
 由于公司受到勒索病毒及一些远程控制病毒攻击，在杀毒软件不能正常查杀的情况下怎样知道全网有多少用户受到威胁，通过行业一些专业机构给出的处理方法，经验证，通过DNS日志分析是一个很好的排查手段，下面对本次排查过程进行分析，希望可以帮助到大家。           1.勒索病毒和远程控制病毒特征分析               通过网上收集，勒索病毒和远程控制病毒运行会访问特定域名，仅作为示例：   ...
bind bind bind bind
09-15
bind bind bind bind
bindParam和bindValue的区别以及在Yii2中的使用详解
10-18
下面小编就为大家分享一篇bindParam和bindValue的区别以及在Yii2中的使用详解，具有很好的参考价值，希望对大家有所帮助。一起跟随小编过来看看吧
free2bind-开源
04-27
**免费绑定(free2bind)：开源RNA分子结合分析工具** 免费绑定(free2bind)是一款专注于生物信息学领域的开源软件，它专为计算两个独立的RNA分子之间的最小自由能结合而设计。在生物学中，RNA分子间的相互作用是生命...
BindData2UI-开源
05-28
《BindData2UI-开源：Java Swing界面与数据对象的桥梁》 在Java Swing开发中，将业务数据绑定到用户界面（UI）控件是一项常见的任务。`BindData2UI`是一个开源项目，旨在简化这一过程，使得开发者可以更高效地实现...
javascript bind绑定函数代码
10-29
`bind`函数的基本语法是`func.bind(thisArg[, arg1[, arg2[, ...]]])`。`thisArg`参数是调用函数时`this`将被设置的新值，后面的`arg1, arg2, ...`则可以预先填充到函数调用的参数列表中。 在给定的代码示例中，...
CentOS7 DNS配置一条龙全套服务
muyangzi123的博客
07-22 3181
1.前言 DNS介绍原理功能巴拉巴拉的我这里就不介绍了，相必在看到我这篇博文前各位已经查阅了足够的资料。我在开始配置DNS服务器时也苦于网上的资料不全或者重复，或者我遇到的奇葩问题找不到案例。所以就想做一个一站式全套服务，尽量把大部分配置全介绍一遍，不需各位开n个网页来回切，真的晕。 2.前期准备 这里提供的方法是用包来安装，也就是需要将DNS所需的安装包和依赖包全部下载 下载地址:http://mirrors.163.com/centos/7/os/x86_64/Packages/ 需要下载如下包 [ro
dns服务器报错关闭ipv6和目录权限
wolf
04-19 6937
[root@dns02 ~]# tail -f /var/log/messages Apr 19 10:17:27 localhost named[5470]: error (network unreachable) resolving './NS/IN': 2001:503:ba3e::2:30#53 Apr 19 10:17:27 localhost named[5470]: valida
BIND配置文件详解（二）
weixin_34310369的博客
10-28 614
本文档摘录自《BIND9管理员手册》，如果有不对或者不清楚的地方，请大家告诉我，谢谢！ BIND配置文件详解（二） 6.options语句 options语句的定义和使用： options语句用来设置可以被整个BIND使用的全局选项。这个语句在每个配置文件中只有一处。如果出现多个options语句，则第一个options的配置有效，并且会产生一个警告信息。 如果没有o...
轻量级http服务器Nginx(一)
weixin_34361881的博客
07-13 74
nginx [engine x]是Igor Sysoev编写的一个HTTP和反向代理服务器，另外它也可以作为邮件代理服务器。 它从2004开始已经在众多流量很大的俄罗斯网站上使用，之前apache的时候已经看过他的市场占有率正在逐步的向上提升。 基本的HTTP服务器特性 处理静态文件，索引文件以及自动索引；打开文件描述符缓存； 使用缓存加速反向代理；简单负载均衡以...
小型网络中心服务器配置（三）DNS服务器的安装与配置
抛物线的博客
10-13 3656
为保证总公司网络中心的FTP、WWW、DHCP、SMTP服务器能正常访问，以及各公司冈站能有相应的域名，拟建立两台DNS服务器，解析网络中心诸多服务器，具体描述如下： 建立DNS服务器，主域名服务器域名注册为wmmtest. edu. cn,网段地址为192. 168.217. * 一台主域名服务器的域名为dns. wmmtest. edu. cn, IP地址为192.168. 217.155。...
基于BIND实现主从DNS服务器、手动区域传送、子域授权及ACL配置（案例详解）
weixin_44983653的博客
09-08 812
基于BIND实现主从DNS服务器、手动区域传送和子域授权（案例详解）1、主从服务器配置（正向）1.1 配置主服务器（192.168.1.9）1.1.1 编辑正向解析文件1.1.2 进行语法检查和服务重载1.2 配置从服务器（192.168.1.10）1.2.1 编辑 /etc/named.conf，并重启服务1.2.2 编辑 /etc/named.rfc1912.conf1.2.3 进行语法检查和...
详述CentOS 7中构建分离解析域名服务器
09-08 400
DNS分离解析介绍 ​ 分离解析的域名服务器，实际上也还是主域名服务器，这里所说的分离解析，主要是指根据不同的客户端，提供不同的域名解析记录。来自不同地址的客户机请求解析同一域名时，为其提供不同的解析结果。 搭建DNS分离解析服务器 实验环境 使用VMware 15软件分别打开一台win 10虚拟机，一台win 7虚拟机和一台CentOS 7虚拟机 使用VMware 15 下载链...
bind1st bind2nd
最新发布
08-09
bind1st和bind2nd都是STL中的函数适配器，用于重载二元函数对象的第一个参数或第二个参数。 bind1st函数可以将二元函数对象的第一个参数绑定为一个常量值，返回一个新的函数对象；这个新的函数对象只需要传入第二个...
评论
添加红包

请填写红包祝福语或标题

个

红包个数最小为10个

元

红包金额最低5元

当前余额3.43元 前往充值 >
需支付：10.00元
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包
实付元
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明：

1.余额是钱包充值的虚拟货币，按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载，可以购买VIP、付费专栏及课程。

余额充值