安装服务
yum –y install bind #安装DNS 服务
yum install bind-utils –y #安装DNS 检测工具
编辑配置文件
vi /etc/named.conf
options {
listen-on port 53 { any; }; #监听地址和端口
#listen-on-v6 port 53 { any; };
directory "/var/named"; #区域数据文件的默认存放位置
dump-file "/var/named/data/cache_dump.db"; #用于指定缓存数据库文件,状态文件的位置
statistics-file "/var/named/data/named_stats.txt";
memstatistics-file "/var/named/data/named_mem_stats.txt";
recursing-file "/var/named/data/named.recursing";
secroots-file "/var/named/data/named.secroots";
allow-query { any; }; #允许使用本DNS服务器的网段
/*
- If you are building an AUTHORITATIVE DNS server, do NOT enable recursion.
- If you are building a RECURSIVE (caching) DNS server, you need to enable
recursion.
- If your recursive DNS server has a public IP address, you MUST enable access
control to limit queries to your legitimate users. Failing to do so will
cause your server to become part of large scale DNS amplification
attacks. Implementing BCP38 within your network would greatly
reduce such attack surface
*/
recursion yes;
dnssec-enable yes;
dnssec-validation yes;
/* Path to ISC DLV key */
bindkeys-file "/etc/named.root.key";
managed-keys-directory "/var/named/dynamic";
pid-file "/run/named/named.pid";
session-keyfile "/run/named/session.key";
};
logging {
channel default_debug {
file "data/named.run";
severity dynamic;
};
};
include "/etc/named.rfc1912.zones";
#include "/etc/named.root.key"; #无法解析外网地址就注释掉这个
检查语法错误
named-checkconf
编辑配置文件
vi /etc/named.rfc1912.zones
zone "ttpark.link" IN { #正向"ttpark.link"区域
type master; #类型为主要区域
file "ttpark.link.zone"; #区域数据文件
allow-update { none; };
};
zone "1.168.192.in-addr.arpa" in { #反向"192.168.1.0/24"区域
type master;
file "192.168.1.arpa"; #区域数据文件为 192.168.1.arpa
allow-update { none; };
};
编写正向DNS配置
cd /var/named
cp -p named.localhost ttpark.link.zone #编辑正向区域数据配置文件，注意复制配置文件时，要保持源文件权限
vi ttpark.link.zone //编辑正向区域数据配置文件内容
$TTL 1D
@ IN SOA ttpark.link. admin.ttpark.link. (
0 ; serial
1D ; refresh
1H ; retry
1W ; expire
3H ) ; minimum
@ IN NS ns.ttpark.link.
ns IN A 192.168.1.24
eka IN A 192.168.1.31
mq IN A 192.168.1.22
编辑反向配置文件
cp -p ttpark.link.zone 192.168.1.arpa #复制反向区域数据配置文件
vi 192.168.1.arpa
$TTL 1D
@ IN SOA ttpark.link. admin.ttpark.link. (
0 ; serial
1D ; refresh
1H ; retry
1W ; expire
3H ) ; minimum
@ IN NS ns.ttpark.link. #注意后面的点
240 IN PTR ns.ttpark.link.
31 IN PTR eka.ttpark.link.
22 IN PTR mq.ttpark.link.
全部配置文件编写完成后可以使用以下命令对所有DNS相关的配置文件进行检查，如有语法错误的地方，会依次指出
[root@localhost named]# named-checkzone 1.168.192.in-addr.arpa /var/named/192.168.1.arpa
zone 1.168.192.in-addr.arpa/IN: loaded serial 0
OK
[root@localhost named]# named-checkzone ttpark.link.zone /var/named/ttpark.link.zone
zone ttpark.link.zone/IN: loaded serial 0
OK
[root@localhost named]# named-checkconf -z /etc/named.conf
zone ttpark.link/IN: loaded serial 0
zone 1.168.192.in-addr.arpa/IN: loaded serial 0
测试DNS服务器
systemcrl restart named #重新启动服务
vi /etc/resolv.conf #添加新的DNS nameserver 192.168.1.24
[root@localhost named]# nslookup ns.ttpark.link #正向测试
Server: 192.168.1.24
Address: 192.168.1.24#53
Name: ns.ttpark.link
Address: 192.168.1.24
[root@localhost named]# nslookup 192.168.1.24 #反向测试
24.1.168.192.in-addr.arpa name = ns.ttpark.link.
