注册 | 登录 忘记密码? 51cto首页 | 博客 | 论坛 | 招聘
热点文章 LCS2005客户端配置详解:L..
 帮助

DNS设定实例


2007-06-18 15:17:59
 标签:DNS redhat BIND   [推送到技术圈]

版权声明:原创作品,允许转载,转载时请务必以超链接形式标明文章 原始出处 、作者信息和本声明。否则将追究法律责任。http://yahoon.blog.51cto.com/13184/30593
DNS设定实例
 
环境:
redhat9 :默认集成bind-9.2.1-16
功能:
内部使用的DNS,也可以访问外网的域名.
需求:
域名
主机名
IP
domain1.com
s1.domain1.com
192.168.0.111
s2.domain1.com
192.168.0.111
domain2.com
s3.domain2.com
192.168.0.111
s4.domain2.com
192.168.0.28
正向文件domain1.com对应 domain1.com.zone;domain2.com对应domain2.com.zone
反向文件 0.168.192.local
实验就将192.168.0.111作为dns服务器,192.168.0.28作为客户端
 
配置文件如下
/etc/named.conf
 
// generated by named-bootconf.pl
options {
     directory "/var/named";
     /*
      * If there is a firewall between you and nameservers you want
      * to talk to, you might need to uncomment the query-source
      * directive below.  Previous versions of BIND always asked
      * questions using port 53, but BIND 8.1 uses an unprivileged
      * port by default.
      */
     // query-source address * port 53;
     forwarders {
                202.103.24.68;
     };
        pid-file "/var/run/named/named.pid"; 
};
//使得外部域名向外转发到202.103.24.68查询(武汉电信的DNS)
//
// a caching only nameserver config
//
controls {
     inet 127.0.0.1 allow { localhost; } keys { rndckey; };
};
zone "." IN {
     type hint;
     file "named.ca";
};
 
zone "localhost" IN {
     type master;
     file "localhost.zone";
     allow-update { none; };
};
 
zone "0.0.127.in-addr.arpa" IN {
     type master;
     file "named.local";
     allow-update { none; };
};
 
 
zone "domain1.com" IN {
     type master;
     file "domain1.com.zone";
     allow-update { none; };
};
 
zone "domain2.com" IN {
     type master;
     file "domain2.com.zone";
     allow-update { none; };
};
 
zone "0.168.192.in-addr.arpa" IN {
     type master;
     file "0.168.192.local";
     allow-update { none; };
};
include "/etc/rndc.key";
 
/var/named/domain1.com.zone
 
$TTL 86400
$ORIGIN domain1.com.
@        1D IN SOA      localhost. root (
                       42       ; serial (d. adams)
                       3H       ; refresh
                       15M      ; retry
                       1W       ; expiry
                       1D )     ; minimum
 
              1D IN NS localhost.
s1            1D IN A       192.168.0.111
s2            1D IN A       192.168.0.111
 
/var/named/domain2.com.zone
 
$TTL    86400
$ORIGIN domain2.com.
@           1D IN SOA   localhost. root (
                    42      ; serial (d. adams)
                    3H      ; refresh
                    15M     ; retry
                    1W      ; expiry
                    1D )        ; minimum
 
            1D IN NS    localhost.
s3          1D IN A     192.168.0.111
s4          1D IN A     192.168.0.28
 
/var/named/0.168.192.local
 
$TTL         86400
@       IN      SOA     localhost. root.localhost.  (
                                      1997022700 ; Serial
                                      28800      ; Refresh
                                      14400      ; Retry
                                      3600000    ; Expire
                                      86400 )    ; Minimum
              IN      NS      localhost.
 
111       IN      PTR     s1.domain1.com.
111       IN      PTR     s2.domain1.com.
111       IN      PTR     s3.domain2.com.
28       IN      PTR     s4.domain2.com.
 
启动服务
/etc/rc.d/init.d/named start
 
port 观察
[root@test root]# netstat -tuln | grep 53
 
查看日志
tail -n 15 /var/log/messages | grep named
 
在设定好之后,方便直接在dns服务器调试,需要改本机的DNS,可以这么改
[root@localhost named]# vi /etc/resolv.conf
 
nameserver 127.0.0.1
nameserver 202.103.24.68
search localdomain
 
客户端测试,XP上将DNS指向192.168.0.111
ping如下地址
s1.domain1.com
s2.domain1.com
s3.domain2.com
s4.domain2.com
www.baidu.com (外网域名)
 
所有通过表示成功
  

本文出自 “yahoon的小屋” 博客,请务必保留此出处http://yahoon.blog.51cto.com/13184/30593





    文章评论
 
2007-06-18 21:52:40
不得 DNS设定,内部的DNS可访问外网域名,配置很详细,经典的

2007-07-04 14:03:30
反向文件 0.168.192.local
反身解析。如果是其它的段。 应该怎么设置?

2007-07-05 09:25:54
每个网段做成一个反向解析文件
如10.1.2.0的网段的反向解析文件相应写成
0.2.1.10.local

2007-09-10 18:36:06
我linux 好菜.555555555
正在努力学习中.

 

发表评论

昵   称:
验证码:  点击图片可刷新验证码  博客过2级,无需填写验证码
内   容: