今晚,玩一玩linux上的DNS

mac2022-06-30  41

老哥遇到的问题,

我先按正规方式操作一波。

一,安装dns服务

yum install bind bind-utils -y

 

二,修改/etc/named.conf文件

options { listen-on port 53 { any; }; listen-on-v6 port 53 { ::1; }; directory "/var/named"; dump-file "/var/named/data/cache_dump.db"; statistics-file "/var/named/data/named_stats.txt"; memstatistics-file "/var/named/data/named_mem_stats.txt"; recursing-file "/var/named/data/named.recursing"; secroots-file "/var/named/data/named.secroots"; allow-query { any; }; recursion no; dnssec-enable no; dnssec-validation no; /* Path to ISC DLV key */ bindkeys-file "/etc/named.iscdlv.key"; managed-keys-directory "/var/named/dynamic"; pid-file "/run/named/named.pid"; session-keyfile "/run/named/session.key"; }; logging { channel default_debug { file "data/named.run"; severity dynamic; }; }; zone "." IN { type hint; file "named.ca"; }; include "/etc/named.rfc1912.zones"; include "/etc/named.root.key";

 

三,修改/etc/named.rfc1912.zones文件

zone "localhost.localdomain" IN { type master; file "named.localhost"; allow-update { none; }; }; zone "localhost" IN { type master; file "named.localhost"; allow-update { none; }; }; zone "1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ip6.arpa" IN { type master; file "named.loopback"; allow-update { none; }; }; zone "1.0.0.127.in-addr.arpa" IN { type master; file "named.loopback"; allow-update { none; }; }; zone "0.in-addr.arpa" IN { type master; file "named.empty"; allow-update { none; }; }; zone "linuxidc.cn" IN { type master; file "/var/named/linuxidc.cn.zone"; allow-update { none; }; };

 

四,生成域名zone文件

可以先从demo文件里生成

cp -p /var/named/named.localhost /var/named/linuxidc.cn.zone

linuxidc.cn.zone文件修改后的内容

$TTL 1D @ IN SOA @ linuxidc.cn. ( 0 ; serial 1D ; refresh 1H ; retry 1W ; expire 3H ) ; minimum NS @ A 127.0.0.1 AAAA ::1 admin A 192.168.1.112 www A 192.168.1.111

 

五,启动服务

在启动服务前,可以先用如下两条命令作一下check.

named-checkconf /etc/named.conf named-checkzone linuxidc.cn.zone /var/named/linuxidc.cn.zone systemctl restart named

 

六,修改/etc/resolv.conf文件

nameserver 192.168.1.111 #nameserver 192.168.1.1

 

七,nslookup测试

nslookup www.linuxidc.cn

输出如下:

转载于:https://www.cnblogs.com/aguncn/p/11342382.html

最新回复(0)