随记：linux DNS服务器搭建

原创

zzsavage 2013-05-15 17:31:56 博主文章分类：linux ©著作权

文章标签 linux dns 搭建 文章分类 服务器

©著作权归作者所有：来自51CTO博客作者zzsavage的原创作品，请联系作者获取转载授权，否则将追究法律责任

环境：CentOS6.3

需求：建立example.com域用于内部和外部查询，内网环境192.168.88.0/24,10.1.0.0/16

1.安装

yum install bind //没安装chroot

2.主配置文件

/etc/named.conf //主配置文件

vi /etc/named.conf

options {
        listen-on port 53 { any; };
        directory       "/var/named";      //此配置文件中区域文件的存放路径
        dump-file       "/var/named/data/cache_dump.db";
        statistics-file "/var/named/data/named_stats.txt";
        memstatistics-file "/var/named/data/named_mem_stats.txt";
        allow-query     { any; };
        recursion yes;

        dnssec-enable yes;
        dnssec-validation yes;
        dnssec-lookaside auto;

/* Path to ISC DLV key */
bindkeys-file "/etc/named.iscdlv.key";

managed-keys-directory "/var/named/dynamic";
};

logging {
        channel default_debug {
                file "data/named.run";
                severity dynamic;
        };
};

view "internal" { //建立内部查询视图

match-clients { 192.168.0.0/16; 10.1.0.0/16; }; //指定允许查询主机
recursion yes;

        zone "." IN {
                type hint;
                file "named.ca";
        };

        zone "example.com" IN {
                type master;
                file "example.com.zone.internal";
        };

        zone "88.168.192.in-addr.arpa" IN {       //注意反向区域的命名写法，我之前就错误的写成0.88168.192.in-addr.arpa
                type master;
                file "88.168.192.zone";
        };

include "/etc/named.rfc1912.zones"; //如果有include的话，要包括在每个view里
include "/etc/named.root.key";
};

view "external" {

match-clients { any; };
recursion yes;

        zone "." IN {
                type hint;
                file "named.ca";
        };

        zone "example.com" IN {
                type master;
                file "example.com.zone.external";
        };

        zone "1.100.202.in-addr.arpa" IN {
                type master;
                file "1.100.202.zone";
        };

include "/etc/named.rfc1912.zones";
include "/etc/named.root.key";
};

3.建立区域配置文件

cp –p /var/named/named.empty /var/named/example.com.zone.internal

cp –p /var/named/named.empty /var/named/example.com.zone.external

cp –p /var/named/named.empty /var/named/88.168.192.zone

cp –p /var/named/named.empty /var/named/1.100.202.zone //注意带上-p保持文件属性

example.com.zone.internal     //internal view的正向区域文件
$TTL 3H
@       IN SOA  ns1.example.com. root.example.com. (
                                        2013051501      ; serial      //序列号注意修改配置后增加此值
                                        1D      ; refresh
                                        1H      ; retry
                                        1W      ; expire
                                        3H )    ; minimum
           IN      NS      ns1.example.com.

IN MX 5 mail.example.com.
ns1 IN A 192.168.88.110

mail IN A 192.168.88.111

www IN A 192.168.88.112

bbs IN CNAME www

example.com.zone.external    //external view正向区域文件
$TTL 3H
@       IN SOA  ns1.example.com. root.example.com. (
                                        2013051501      ; serial
                                        1D      ; refresh
                                        1H      ; retry
                                        1W      ; expire
                                        3H )    ; minimum
           IN      NS      ns1.example.com.
ns1     IN      A       202.100.1.110

88.168.192.zone   //internal view的反向区域文件
$TTL 3H
@       IN SOA  ns1.example.com. root.example.com. (
                                        2013051501      ; serial
                                        1D      ; refresh
                                        1H      ; retry
                                        1W      ; expire
                                        3H )    ; minimum
            IN      NS      ns1.example.com.
110     IN      PTR     ns1.example.com.

1.100.202.zone    //external view的反向区域文件
$TTL 3H
@       IN SOA  ns1.example.com. root.example.com. (
                                        2013051501      ; serial
                                        1D      ; refresh
                                        1H      ; retry
                                        1W      ; expire
                                        3H )    ; minimum
            IN      NS      ns1.example.com.
110     IN      PTR     ns1.example.com.

4.配置检查

named-checkconf /etc/named.conf

named-checkzone example.com /var/named/example.com.zone.internal

named-checkzone example.com /var/named/example.com.zone.external

named-checkzone 88.168.192.in-addr.arpa 88.168.192.zone

named-checkzone 1.100.202.in-addr.arpa 1.100.202.zone

5.启动服务

service named start

6.打开防火墙

vi /etc/sysconfig/iptables

-A INPUT -m state --state NEW -m tcp -p tcp --dport 53 -j ACCEPT
-A INPUT -m state --state NEW -m udp -p udp --dport 53 -j ACCEPT //注意UDP一定也要打开

7.注册系统服务