⭐⭐DNS域名解析实验

​ 0.配置ip

​ vim /etc/sysconfig/network-scripts/ifcfg-ens33

​

​

​ systemctl restart network

​

1. systemctl stop firewalld 关闭防火墙

   setenforce 0 关闭内核安全机制

2. mkdir /media/cdrom

   mount /dev/sr0 /media/cdrom/

   cd /media/cdrom/Packages/

1. rpm -qa |grep ^bind 查看缺少的包

   rpm -ivh python-ply-3.4-11.el7.noarch.rpm

   rpm -ivh bind-9.11.4-26.P2.el7.x86_64.rpm

1. vim /etc/named.conf

   . options {

   listen-on port 53 { 192.168.23.150; };

   directory  "/var/named";

   allow-query     { 192.168.23.0/24; 173.16.16.0/24; };

   };

   zone "kgc.com" IN {

   type master; file "kgc.com.zone";       

   allow-transfer { 192.168.23.11; };

   };

   zone "16.16.173.in-addr.arpa" IN {

   type master;

   file "173.16.16.arpa";       

   allow-transfer { 192.168.23.11; };

   };

2. vim /var/named/kgc.com.zone 编辑正向解析

3. :r /var/namd/named.localhost 把这个路径下的文件内容复制到当前文件上

4. $TTL 1D

   @ IN SOA kgc.com. admin.kgc.com. (

   ​

   ​ 1D ; refresh

   ​ 1H ; retry

   ​ 1W ; expire

   ​ 3H ); minimum

   @ IN NS ns1.kgc.com.

   IN MX 10 mail.kgc.com.

   ns1 IN A 192.168.10.10

   mail IN A 173.16.16.1

   www IN A 173.16.16.2

   test IN A 173.16.16.3

   ftp IN CNAME www

5. cd /var/named

   cp kgc.com.zone 173.16.16.arpa 把正向解析文件中的内容复制到反向解析中

   9.vim 173.16.16.arpa 编辑反向解析

   1. $TTL 1D

      @ IN SOA kgc.com. admin.kgc.com. (

      ​ 0 ; serial

      ​ 1D ; refresh

      ​ 1H ; retry

      ​ 1W ; expire

      ​ 3H ); minimum

      @ IN NS ns1.kgc.com.

      IN MX 10 mail.kgc.com.

      ns1 IN A 192.168.10.10

      1 IN PTR mail.kgc.com.

      2 IN PTR www.kgc.com.

      3 IN PTR test.kgc.com.

   1. named-checkconf -z /etc/named.conf

      named-checkzone kgc.com /var/named/kgc.com.zone

      named-checkzone kgc.com /var/named/173.16.16.arpa

   1. systemctl start named

      netstat -anptu |grep named

   13.

   ipconfig /all

   1. nslookup

   从

   ​ 0.配置ip

   ​ vim /etc/sysconfig/network-scripts/ifcfg-ens33

   ​

   

   ​ systemctl restart network

   ​

   1. systemctl stop firewalld 关闭防火墙

      setenforce 0 打开

   2. mkdir /media/cdrom

      mount /dev/sr0 /media/cdrom/

      cd /media/cdrom/Packages/

   3. rpm -qa |grep ^bind 查看缺少的包

      rpm -ivh python-ply-3.4-11.el7.noarch.rpm

      rpm -ivh bind-9.11.4-26.P2.el7.x86_64.rpm

   4. vim /etc/resolv.conf

   5. 

   6. 主 也要同步以上这个操作

   7. vim /etc/named.conf

   1. options {

      listen-on port 53 { 192.168.10.11; };

      directory   "/var/named";   
      ​
      allow-query     { 192.168.10.0/24; }; 
      ​
      };  

   ​ zone "kgc.com" IN {

   ​ type slave;       

   ​ masters { 192.168.10.10; };

   ​ file "slaves/kgc.com.zone";

   ​ };

   ​ zone "16.16.173.in-addr.arpa" IN {

   ​ type slave;       

   ​ masters { 192.168.10.10; };

   ​ file "slaves/173.16.16.arpa";

   ​ };

   1. systemctl restart named

      ls /var/named/slaves/

   2. 

   1. nslookup