bind安装域名解析服务,以及分离服务

安装DNS

rpm -ivh bind*.rpm

进入/etc/named/chroot/etc 设置named.conf

[root@localhost named]# vim /etc/named.conf

//

// named.conf

//

// Provided by Red Hat bind package to configure the ISC BIND named(8) DNS

// server as a caching only nameserver (as a localhost DNS resolver only).

//

// See /usr/share/doc/bind*/sample/ for example named configuration files.

//

options {

listen-on port 53 { any; };//监听端口

listen-on-v6 port 53 { ::1; };/ipv6监听端口

directory       "/var/named";

dump-file       "/var/named/data/cache_dump.db";

statistics-file "/var/named/data/named_stats.txt";

memstatistics-file "/var/named/data/named_mem_stats.txt";

allow-query     { 192.168.2.0/24;192.168.4.0/24; };//允许访问的IP段

allow-transfer { 192.168.2.1;};//配置主从DNS使用下发同步

recursion yes;

forwarders{192.168.119.2;114.114.114.114;};//当遇到自身没有的域名映射IP时，向上一级请求

dnssec-enable yes;

dnssec-validation yes;

/* Path to ISC DLV key */

bindkeys-file "/etc/named.iscdlv.key";

managed-keys-directory "/var/named/dynamic";

};

logging {

channel default_debug {

file "data/named.run";

severity dynamic;

};

};

view localhost_resolver {//解析器

match-clients      { 192.168.4.0/24; };//可以使用该解析的IP段

match-destinations { localhost; };

#    recursion yes;

include  "/etc/baishan.zones";//指定zones位置

};

view localhost_resolver2 {

match-clients      { 192.168.2.0/24; };

match-destinations { localhost; };

#   recursion yes;

include "/etc/named.root.key";

include "/etc/named.rfc1912.zones";

};

配置zones

zone"4.168.192.in-addr.arpa" IN {

type master; //主从 关系时使用

file "4.168.192.in-addr.arpa";//正向解析

allow-update { none; };

};

zone"example.com" IN{

type master;

file "example.com";//指定反向解析文件名，在var/name下

allow-update{none;};

};

配置解析文件

正向

$TTL 1D

@       IN SOA  example.com. admin.example.com. (

0       ; serial

1D      ; refresh

1H      ; retry

1W      ; expire

3H )    ; minimum

NS      @

A       127.0.0.1

AAAA    ::1

www     IN   A   192.168.4.131

~反向

$TTL 1D

@       IN SOA  example.com. admin.example.com. (

0       ; serial

1D      ; refresh

1H      ; retry

1W      ; expire

3H )    ; minimum

NS      @

A       127.0.0.1

AAAA    ::1

131    IN  PTR  www.example.com.

检测命令

使用named-checkconfig named.conf检测错误

使用naned-checkzone 2.168.192.in-addr.arpa test.com

无错误后启动DNS

Service named  restart

分离解析

分离解析的域名服务器实际上还是主域名服务器，这里所说的分离解析主要针对不同的客户端提供不同的解析记录，如当dns同时为internet和内网提供服务时，可能需要内网用户访问公司的web服务和mail服务直接发往位于内网的web和mail服务器上，减轻服务器地址转换的负担在、/etc/named.conf

view "LAN" {

    match-clients { 192.168.4.0/24; };\\该LAN只能是192.168.4.0/24访问

zone "tech.org" IN {

    type master;

    file "tech.org.zone.lan";};

    }

view "WAN" {

    match-clients { any; };

    zone "tech.org" IN {

    type master;

    file "tech.org.wan";};

};