毕业设计之dns搭建:
[_sever ~]$ sudo yum install -y bind
[_sever ~]$ sudo vim /etc/named.conf
//
// named.conf
//
// Provided by Red Hat bind package to configure the ISC BIND named(8) DNS
// server as a caching only nameserver (as a localhost DNS resolver only).
//
// See /usr/share/doc/bind*/sample/ for example named configuration files.
//
options {
listen-on port 53 { 127.0.0.1; any;};
listen-on-v6 port 53 { ::1; };
directory "/var/named";
dump-file "/var/named/data/cache_dump.db";
statistics-file "/var/named/data/named_stats.txt";
memstatistics-file "/var/named/data/named_mem_stats.txt";
allow-query { localhost; any;};
recursion yes;
dnssec-enable no;
dnssec-validation no;
/* Path to ISC DLV key */
bindkeys-file "/etc/named.iscdlv.key";
managed-keys-directory "/var/named/dynamic";
};
logging {
channel default_debug {
file "data/named.run";
severity dynamic;
};
};
zone "." IN {
type hint;
file "named.ca";
};
include "/etc/named.rfc1912.zones";
include "/etc/named.root.key";注意:上面修改了 加入两个any
将dnssec 相关的都设置为no
Domain Name System Security Extensions (DNSSEC)DNS安全扩展,是由IETF提供的一系列DNS安全认证的机制 DNSSEC是为解决DNS欺骗和缓存污染而设计的一种安全机制。 由于内网dns,只用于内网的域名解析,所以不用添加
修改子配置文件:
[ ~]$vim /etc/named.rfc1912.zones
// (c)2007 R W Franks
//
// See /usr/share/doc/bind*/sample/ for example named configuration files.
//
zone "localhost.localdomain" IN {
type master;
file "named.localhost";
allow-update { none; };
};
zone "localhost" IN {
type master;
file "named.localhost";
allow-update { none; };
};
zone "1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ip6.arpa" IN {
type master;
file "named.loopback";
allow-update { none; };
};
zone "1.0.0.127.in-addr.arpa" IN {
type master;
file "named.loopback";
allow-update { none; };
};
zone "0.in-addr.arpa" IN {
type master;
file "named.empty";
allow-update { none; };
};
zone "quan.bbs" IN {
type master;
file "quan.bbs.zone";
allow-update { none; };
};编辑详细的dns解析文件:
[ ~]$vim /var/named/quan.bbs.zone
$TTL 1D
@ IN SOA @ rname.invalid. (
0 ; serial
1D ; refresh
1H ; retry
1W ; expire
3H ) ; minimum
@ NS dns.quan.bbs.
dns A 192.168.111.222
lvsA.load A 192.168.111.131
lvsB.load A 192.168.111.132
webone A 192.168.111.141
webtwo A 192.168.111.142
mysql A 192.168.111.151
mysql.bkone A 192.168.111.152
mysql.bktwo A 192.168.111.153
ansz A 192.168.111.111
jp A 192.168.111.122
dnsserver A 192.168.111.222解析:
zone 通常具有以下几种标志: SOA:开始验证 (Start of Authority); NS:名称服务器 (NameServer),后面记录的数据是 DNS 服务器的意思; A:地址 (Address),后面记录的是 IP 的对应 (最重要)。
测试:
[ ~]$yum install bind-utils [ ~]$vim /etc/resolv.conf ; generated by /sbin/dhclient-script search localdomain one.bbs nameserver 192.168.111.222 nameserver 8.8.8.8 检测 [ ~]$nslookup webone.quan.bbs Server: 192.168.111.222 Address: 192.168.111.222#53 Name: webone.quan.bbs Address: 192.168.111.141
将其他服务器加上dns服务器即可
注:建议直接再网卡上加dns服务器,按照小范围和大范围设置
相关推荐
localhost0 2020-11-12
jlccwss 2020-09-11
lwplvx 2020-09-07
YzhilongY 2020-08-31
KevinXC 2020-08-12
oLeiShen 2020-08-01
dahege 2020-08-01
windzoone 2020-07-29
travelinrain 2020-07-27
hxf0 2020-07-10
oLeiShen 2020-06-25
oLeiShen 2020-06-25
dahege 2020-06-25
dahege 2020-06-22
MissFuTT 2020-06-21
ationwork 2020-06-16
kenson 2020-06-12
chwzmx 2020-06-09