反向解析
实验配置:
- Linux和PC使用同一网卡。
- PC段的DNS设置为Linux的IP。
实验步骤:
1.全局配置文件
[root@localhost ~]# vim /etc/named.conf
12 options {
13 listen-on port 53 { any; };//将IP改为any
14 listen-on-v6 port 53 { ::1; };
15 directory "/var/named";
16 dump-file "/var/named/data/cache_dump.db";
17 statistics-file "/var/named/data/named_stats.txt";
18 memstatistics-file "/var/named/data/named_mem_stats.txt";
19 recursing-file "/var/named/data/named.recursing";
20 secroots-file "/var/named/data/named.secroots";
21 allow-query { any; };
2.区域配置文件
[root@localhost ~]# vim /etc/named.rfc1912.zones
13 zone "localhost.localdomain" IN {
14 type master;
15 file "named.localhost";
16 allow-update { none; };
17 };
18
19 zone "xzw.com" IN {
20 type master;
21 file "xzw.com.zone";
22 allow-update { none; };
//以上为正向解析部分
省略部分
......
42 zone "108.168.192.in-addr.arpa" IN { //linux网段,反写。
43 type master;
44 file "xzw.com.zone";
45 allow-update { none; };
46 };
3.复制named.localhost生成区域文件
[root@localhost ~]# cp -p /var/named/named.localhost /var/named/xzw/com.zone
4.编辑区域文件
[root@localhost ~]# vim /var/named/xzw.com.zone
TTL 1D
@ IN SOA @ rname.invalid. (
0 ; serial
1D ; refresh
1H ; retry
1W ; expire
3H ) ; minimum
NS @
A 127.0.0.1
www A 192.168.108.4
4 PTR www.xzw.com. //4为此Linux IP的最后位。PTR反向指针
~
5.启动named
[root@localhost ~]# systemctl start named
//如果去区域文件有错误,将会报错:
6.打开PC检测
在Linux上DNS测试
修改//etc/resolv.conf
[root@localhost ~]# vim /etc/resolv.conf
# Generated by NetworkManager
nameserver 192.168.108.4
nameserver 114.114.114.114
~
检测:
[root@localhost ~]# host 192.168.108.4
4.108.168.192.in-addr.arpa domain name pointer www.xzw.com.
[root@localhost ~]# nslookup 192.168.108.4
4.108.168.192.in-addr.arpa name = www.xzw.com.
拓展:让PC访问网页
制作html
[root@localhost ~]# vim /var/www/html/xzw.com.zone
hello world!!
~
~
PC访问网页
缓存服务器
实验配置:
- 一台linux系统作缓存服务器
- 一台linux系统作DNS服务器
- 一台win10作客户端
- 三个需使用同一个网卡
实验步骤:
缓存服务器配置
options {
directory "/var/named";
forwarders { 192.168.108.4 };
allow-query { any; };
};
//将以下内容删除,否则会访问根据查询
主服务器配置不变
[root@localhost ~]# vim /etc/named.conf
options {
listen-on port 53 { any; };
directory "/var/named";
allow-query { any; };
[root@localhost ~]# vim /etc/named.rfc1912.zones
zone "xzw.com" IN {
type master;
file "xzw.com.zone";
allow-update { none; };
//正向解析
zone "108.168.192.in-addr.arpa" IN {
type master;
file "xzw.com.zone";
allow-update { none; };
};
//反向解析
复制named.localhost到xzw.com.zone
[root@localhost ~]# cp -p /var/named/named.localhost /var/named/xzw.com.zone
编辑xzw.com.zone
[root@localhost ~]# vim /var/named/xzw.com.zone
$TTL 1D
@ IN SOA @ rname.invalid. (
0 ; serial
1D ; refresh
1H ; retry
1W ; expire
3H ) ; minimum
NS @
A 127.0.0.1
www A 192.168.108.4
4 PTR www.xzw.com. //4是服务器的Ip最后一位。
在Linux上DNS测试
修改//etc/resolv.conf
[root@localhost ~]# vim /etc/resolv.conf
# Generated by NetworkManager
nameserver 192.168.108.4
nameserver 114.114.114.114
~
将PC的DNS改为缓存服务器的IP
主从服务器和同步
作用: 设置主从服务器,主要用于冗余备份,以免一台DNS服务器失效,所有的主机名都不能被找到
Slave DNS配置:
全局区域配置与反向解析的一致。
[root@localhost ~]# vim /etc/named.conf
options {
listen-on port 53 { any; };
listen-on-v6 port 53 { ::1; };
directory "/var/named";
dump-file "/var/named/data/cache_dump.db";
statistics-file "/var/named/data/named_stats.txt";
memstatistics-file "/var/named/data/named_mem_stats.txt";
recursing-file "/var/named/data/named.recursing";
secroots-file "/var/named/data/named.secroots";
allow-query { any; };
区域配置文件:
[root@localhost ~]# vim /etc/named.rfc1912.zones
zone "xzw.com" IN {
type slave;
file "slaves/xzw.com.zone.slave";将文件存在slave下
masters { 192.168.108.4; };//指定masters地址
//slaves是主从服务器同步的数据储存位置
配置masters
全局区域配置与反向解析的一致。
[root@localhost ~]# vim /etc/named.conf
options {
listen-on port 53 { any; };
listen-on-v6 port 53 { ::1; };
directory "/var/named";
dump-file "/var/named/data/cache_dump.db";
statistics-file "/var/named/data/named_stats.txt";
memstatistics-file "/var/named/data/named_mem_stats.txt";
recursing-file "/var/named/data/named.recursing";
secroots-file "/var/named/data/named.secroots";
allow-query { any; };
区域配置文件:
[root@localhost ~]# vim /etc/named.rfc1912.zones
zone "xzw.com" IN {
type master;
file "xzw.com.zone";
allow-transfer { 192.168.108.103; };//指定备服务器
[root@localhost named]# cp -p named.localhost xzw.com.zone
[root@localhost ~]# cd /var/named
[root@localhost named]# vim xzw.com.zone
$TTL 1D
@ IN SOA @ rname.invalid. (
0 ; serial
1D ; refresh
1H ; retry
1W ; expire
3H ) ; minimum
NS @
A 127.0.0.1
www A 192.168.108.4
4 PTR www.xzw.com.
进入PC改DNS
查看slaves存储文件