主从DNS搭建

搭建Linux网关服务器:

1. 修改网络配置:

   # 复制网卡配置文件
   cp /etc/sysconfig/network-scripts/ifcfg-eth0 /etc/sysconfig/network-scripts/ifcfg-eth1
   
   # 修改eth0配置
   vim /etc/sysconfig/network-scripts/ifcfg-eth0
   

   DEVICE=eth0
   TYPE=Ethernet
   ONBOOT=yes
   NM_CONTROLLED=no
   BOOTPROTO=static
   IPADDR=192.168.12.165
   NETMASK=255.255.255.0
   GATEWAY=192.168.12.1
   DNS1=114.114.114.114
   

   # 修改eth1配置
   vim /etc/sysconfig/network-scripts/ifcfg-eth1
   

   DEVICE=eth1
   TYPE=Ethernet
   ONBOOT=yes
   NM_CONTROLLED=no
   BOOTPROTO=static
   IPADDR=192.168.1.1
   NETMASK=255.255.255.0
   

   # 重启网络
   /etc/init.d/network restart
   

2. 开启路由转发:

   # 修改sysctl配置
   vim /etc/sysctl.conf
   

   在文件末尾添加:

   net.ipv4.ip_forward = 1
   

   应用配置:

   sysctl -p
   

3. 编辑iptables防护墙规则:

   iptables -t nat -I POSTROUTING -s 192.168.1.0/24 -j SNAT --to-source 192.168.12.165
   

搭建主DNS服务器:

1. 修改网络配置:

   vim /etc/sysconfig/network-scripts/ifcfg-eth0
   

   DEVICE=eth0
   TYPE=Ethernet
   ONBOOT=yes
   NM_CONTROLLED=no
   BOOTPROTO=static
   IPADDR=192.168.1.10
   NETMASK=255.255.255.0
   GATEWAY=192.168.1.1
   DNS1=192.168.1.10
   DNS2=192.168.1.20
   

   重启网络:

   /etc/init.d/network restart
   

   修改主机名:

   vim /etc/sysconfig/network
   

   HOSTNAME=ns1.xueluo.org
   

2. 安装bind软件包:

   yum -y install bind bind-utils bind-chroot
   

3. 编辑主配置文件:

   vim /etc/named.conf
   

   添加或修改以下内容:

   options {
       listen-on port 53 { 192.168.1.10; };
       directory "/var/named";
       // ...
   };
   
   zone "xueluo.org" IN {
       type master;
       file "xueluo.org.zone";
       allow-transfer {192.168.1.20;};
   };
   
   zone "1.168.192.in-addr.arpa" IN {
       type master;
       file "192.168.1.arpa";
       allow-transfer {192.168.1.20;};
   };
   

   复制模板文件并修改:

   cp /var/named/named.empty /var/named/xueluo.org.zone
   cp /var/named/named.empty /var/named/192.168.1.arpa
   

   编辑正向解析文件:

   vim /var/named/xueluo.org.zone
   

   $TTL 86400
   @   IN  SOA xueluo.org. admin.xueluo.org. (
                   0        ; serial
                   1D       ; refresh
                   1H       ; retry
                   1W       ; expire
                   3H )     ; minimum
   
   IN  NS  ns1.xueluo.org.
   IN  NS  ns2.xueluo.org.
   ns1 IN  A   192.168.1.10
   ns2 IN  A   192.168.1.20
   blog IN  A   192.168.1.200
   www IN  A   192.168.1.100
   

   编辑反向解析文件:

   vim /var/named/192.168.1.arpa
   

   $TTL 86400
   @   IN  SOA xueluo.org. admin.xueluo.org. (
                   0        ; serial
                   1D       ; refresh
                   1H       ; retry
                   1W       ; expire
                   3H )     ; minimum
   
   IN  NS  ns1.xueluo.org.
   IN  NS  ns2.xueluo.org.
   10  IN  PTR ns1.xueluo.org.
   20  IN  PTR ns2.xueluo.org.
   200 IN  PTR blog.xueluo.org.
   100 IN  PTR www.xueluo.org.
   

   修改文件权限:

   chown named:named /var/named/192.168.1.arpa /var/named/xueluo.org.zone
   

   启动named服务:

   /etc/init.d/named start && chkconfig --level 35 named on
   

搭建从DNS服务器:

1. 修改网络配置:

   vim /etc/sysconfig/network-scripts/ifcfg-eth0
   

   DEVICE=eth0
   TYPE=Ethernet
   ONBOOT=yes
   NM_CONTROLLED=no
   BOOTPROTO=static
   IPADDR=192.168.1.20
   NETMASK=255.255.255.0
   GATEWAY=192.168.1.1
   DNS1=192.168.1.20
   DNS2=192.168.1.10
   

   重启网络:

   /etc/init.d/network restart
   

   修改主机名:

   vim /etc/sysconfig/network
   

   HOSTNAME=ns2.xueluo.org
   

2. 安装bind软件包:

   yum -y install bind bind-utils bind-chroot
   

3. 编辑主配置文件:

   scp root@192.168.1.10:/etc/named.conf /etc/
   

   修改named.conf文件:

   vim /etc/named.conf
   

   添加或修改以下内容:

   options {
       listen-on port 53 { 192.168.1.20; };
       directory "/var/named";
       // ...
   };
   
   zone "xueluo.org" IN {
       type slave;
       file "slaves/xueluo.org.zone";
       masters {192.168.1.10;};
   };
   
   zone "1.168.192.in-addr.arpa" IN {
       type slave;
       file "slaves/192.168.1.arpa";
       masters {192.168.1.10;};
   };
   

   启动named服务:

   /etc/init.d/named start && chkconfig --level 35 named on
   

   验证是否有拷贝的文件:

   ls -l /var/named/slaves/
   

客户端配置:

设置一块网卡(vmnet1)，网关为192.168.1.1，首选DNS为192.168.1.10，备用DNS为192.168.1.20。

在命令行中执行以下命令记性验证:

cmd --> nslookup www.xueluo.org

以上为完整的搭建Linux网关服务器、主DNS服务器和从DNS服务器步骤。