Linux---DNS域名解析如何配置

一：搭建DNS缓存域名服务器

• DNS高速缓存服务器，通过向其它域名服务器查询获得域名IP地址记录，将域名查询结果缓存到本地，提高重复查询时速度

1.1：关闭并禁用防火墙

systemctl stop firewalld
systemctl disable firewalld

1.2：关闭核心防护

vi /etc/selinux/config
	SELINUX=disabled

1.3：安装与bind相关的软件包

查询是否安装
rpm -qa | grep ''bind"

yum -y install bind bind-chroot bind-utils bind-libs

1.4：修改主配置文件

vi /etc/named.conf
options {
	listen-on port 53 { 20.0.0.11; };
	forwarders { 8.8.8.8;114.114.114.114; };
	………………
	allow-query	{ 20.0.0.0/24; };

1.5：加载主配置文件中对应的区域数据库文件

named-checkconf -z /etc/named.conf

systemctl start named

netstat -anutp | grep named

1.6：客户机配置

vi /etc/resolv.conf
	nameserver 20.0.0.11

二：搭建DNS主从服务实验

• DNS主服务器（20.0.0.11）

2.1：关闭防火墙

systemctl stop firewalld
systemctl disable firewalld

2.2：关闭核心防护

vi /etc/selinux/config
	SELINUX=disabled

2.3：安装与bind相关的软件包

查询是否安装
rpm -qa | grep ''bind"

yum -y install bind bind-chroot bind-utils bind-libs

2.4：修改主配置文件(/etc/named.conf)

vi /etc/named.conf
options {
	listen-on port 53 { 20.0.0.11; };
	………………
	allow-query	{ any; };

2.5：新增正反配置文件 (/etc/named.rfc1912.zones)

vi /etc/named.rfc1912.zones
zone "cenjeal.com" IN {
	type master;
	file "cenjeal.com.zone";
	allow-transfer { 20.0.0.12; };
	also-notify { 20.0.0.12; };
};

zone "0.0.20.in-addr.arpa" IN {
	type master;
	file "20.0.0.arpa";
	allow-transfer { 20.0.0.12; };
	also-notify { 20.0.0.12; };
};

2.6：dns正向解析文件（/var/named/cenjeal.com.zone）

vi /var/named/cenjeal.com.zone
$TTL 1D
@	IN SOA cenjeal.com. admin.cenjeal.com. (
				0	; serial
				1D	; refresh
				1H	; retry
				1W	; expire
				3H )	; minimum
	NS        @
	A           192.168.11.119
www IN	A           192.168.11.119
ftp    IN	A           192.168.11.118
mail IN	CNAME	www

• 修改属主

chown named:named /var/named/bdqn.com.zone

2.7：dns反向解析文件（/var/named/20.0.0.arpa）

$TTL 1D
@	IN SOA cenjeal.com. admin.cenjeal.com. (
				0	; serial
				1D	; refresh
				1H	; retry
				1W	; expire
				3H )	; minimum
	NS        @
	A           192.168.11.119
119 IN	PTR          www.bdqn.com.
120 IN	PTR          ftp.bdqn.com.
121 IN	PTR	bbs.bdqn.com.

• 修改属主
  chown named:named /var/named/bdqn.com.zone

2.8：重启服务

systemctl restart named

三：DNS从服务器（20.0.0.12）配置

关闭防火墙
systemctl stop firewalld
systemctl disable firewalld
关闭核心防护
vi /etc/selinux/config
	SELINUX=disabled

yum -y install bind install bind-chroot bind-utils bind-libs
vi /etc/named.conf
options {
	listen-on port 53 { 20.0.0.12; };
	………………
	allow-query	{ any; };

新增正反配置文件
vi /etc/named.rfc1912.zones
zone "cenjeal.com" IN {
	type slave;
	masters { 20.0.0.11; };
	allow-notify { 20.0.0.11; };
	file "slaves/cenjeal.com.zone";
};

zone "0.0.20.in-addr.arpa" IN {
	type slave;
	masters { 20.0.0.11; };
	allow-notify { 20.0.0.11; };
	file "slaves/20.0.0.arpa";
}; 
:wq

systemctl start named

四：客户机（20.0.0.13）配置

vi /etc/resolv.conf

#主DNS服务器
nameserver 20.0.0.11
#从DNS服务器
#nameserver 20.0.0.12

五：测试

yum -y install bind-utils

nslookup www.cenjeal.com

nslookup 20.0.0.119