centos7下配置dns服务器
来源:互联网 发布:网络认证 编辑:程序博客网 时间:2024/04/30 22:46
参考诸多资料,步骤如下:(说明:用a.com做dns解析用,解析b.com)
1、在centos上安装bind,命令yum install bind-chroot bind -y
2、拷贝bind相关文件,准备bind chroot 环境。[root@centos7 ~]# cp -R /usr/share/doc/bind-*/sample/var/named/* /var/named/chroot/var/named/
3、在bind chroot 的目录中创建相关文件
[root@centos7 ~]# touch /var/named/chroot/var/named/data/cache_dump.db
[root@centos7 ~]# touch /var/named/chroot/var/named/data/named_stats.txt
[root@centos7 ~]# touch /var/named/chroot/var/named/data/named_mem_stats.txt
[root@centos7 ~]# touch /var/named/chroot/var/named/data/named.run
[root@centos7 ~]# mkdir /var/named/chroot/var/named/dynamic
[root@centos7 ~]# touch /var/named/chroot/var/named/dynamic/managed-keys.bind
4、将 Bind 锁定文件设置为可写
[root@centos7 ~]# chmod -R 777/var/named/chroot/var/named/data
[root@centos7 ~]# chmod -R 777/var/named/chroot/var/named/dynamic
5、 将 /etc/named.conf 拷贝到 bind chroot目录
[root@centos7 ~]# cp -p /etc/named.conf /var/named/chroot/etc/named.conf
6、配置named.conf文件
options {
listen-on port 53 { any; };
listen-on-v6 port 53 { ::1; };
directory "/var/named";
dump-file "/var/named/data/cache_dump.db";
statistics-file "/var/named/data/named_stats.txt";
memstatistics-file "/var/named/data/named_mem_stats.txt";
allow-query { any; };
/*
- If you are building an AUTHORITATIVE DNS server, do NOT enable recursion.
- If you are building a RECURSIVE (caching) DNS server, you need to enable
recursion.
- If your recursive DNS server has a public IP address, you MUST enable access
control to limit queries to your legitimate users. Failing to do so will
cause your server to become part of large scale DNS amplification
attacks. Implementing BCP38 within your network would greatly
reduce such attack surface
*/
recursion yes;
dnssec-enable yes;
dnssec-validation yes;
dnssec-lookaside auto;
/* Path to ISC DLV key */
bindkeys-file "/etc/named.iscdlv.key";
managed-keys-directory "/var/named/dynamic";
pid-file "/run/named/named.pid";
session-keyfile "/run/named/session.key";
};
logging {
channel default_debug {
file "data/named.run";
severity dynamic;
};
};
zone "." IN {
type hint;
file "named.ca";
};
zone "ns.a.com" IN {
type master;
file "a.com";
};
zone "b.com" IN {
type master;
file "b.com";
};
zone "1.168.192.in-addr.arpa" IN {
type master;
file "192.168.1.zone";
allow-transfer {192.168.1.2;};
};
include "/etc/named.rfc1912.zones";
include "/etc/named.root.key";
7、配置正向解析文件
文件放在var/named目录下,要是不行一份到/var/named/chroot/var/named/
vi a.com
$TTL 1D
$TTL 600
@ IN SOA ns.a.com admin.a.com (
0 ;serial
1D ;refresh
1H ;retry
1w ;expire
3H ) ;minimum
@ IN NS ns
ns IN A 192.168.1.2
:wq保存退出
vi b.com$TTL 1D
$TTL 600
@ IN SOA b.com admin.b.com (
0 ;serial
1D ;refresh
1H ;retry
1w ;expire
3H ) ;minimum
@ IN NS ns.a.com.
www IN A 192.168.1.3
:wq保存退出
8、反向解析文件
vi 192.168.1.zone
$TTL 1D
$TTL 600
@ IN SOA 1.168.192.in-addr.arpa. admin.a.com. (
0 ;serial
1D ;refresh
1H ;retry
1W ;expire
3H ;minimum
)
@ IN NS ns.a.com.
240 IN PTR ns.a.com.
:wq保存退出
9、重启named服务,systemctl restart named
10、修改防火墙iptables,添加53端口
-A INPUT -m state --state NEW -m tcp -p tcp --dport 53 -j ACCEPT
-A INPUT -m state --state NEW -m udp -p udp --dport 53 -j ACCEPT
11、服务器的dns改成本机IP,修改/etc/resolv.conf文件
12、在文件/etc/hostname中修改服务器名字,最好对应做解析用的域名,比如ns.a.com
配置一下试试!
- centos7下配置dns服务器
- Centos7下配置DNS
- CentOS7安装配置DNS服务器
- centOS7下DNS服务器的安装与配置
- Centos7 DNS服务器搭建与配置
- LINUX下DNS服务器配置
- Linux下配置 DNS 服务器
- RHEL4下配置DNS服务器
- ubuntu下DNS服务器配置
- linux下DNS服务器配置
- linux下配置DNS服务器
- Linux下配置dns服务器
- centos7搭建DNS服务器
- CentOS7搭建DNS服务器
- centos7 搭建DNS服务器
- centos7 下Apache服务器配置
- CentOS7.3使用BIND配置DNS服务器(一)
- Centos7配置DNS
- Android PopupWindows
- UISlider 滑块控件
- yii 下拉框
- 信号量与PV操作
- 兼容 Android 4.4 透明状态栏与导航栏
- centos7下配置dns服务器
- fedora 关闭防火墙的方法
- 《Java编程思想》学习笔记8——泛型编程高级
- Hadoop2.x Yarn作业提交(客户端)
- 多个返回 顶部的代码
- SAT阅读真题资料3
- 禁止锁屏和隐藏标题栏
- 四分位数(定义、位置、数值)
- 1001. A+B Format (20):vector stack 简单运用