DNS搭建

[root@localhost ~]# yum install -y bind
[root@localhost ~]# cp /etc/named.conf /etc/named.conf.bak  
[root@localhost ~]# >/etc/named.conf
[root@localhost ~]# vim /etc/named.conf
//加入
options {
    directory "/var/named";
};

zone "." IN  {
    type hint;
    file "named.ca";
};

zone "localhost" IN {
    type master;
    file "localhost.zone";
};

zone "0.0.127.in-addr.arpa" IN {
    type master;
    file "named.local";
};

[root@localhost ~]# chown named /etc/named.conf
[root@localhost ~]# cd /var/named/
[root@localhost named]# dig -t NS . > named.ca     //yum install -y dig
[root@localhost named]#  vim localhost.zone 
//加入
@                   IN      SOA     localhost.  admin.localhost.     (
                                                                        2013081601
                                                                        1H
                                                                        10M
                                                                        7D
                                                                        1D
                                                                           )
@                   IN          NS          localhost.
localhost.          IN          A           127.0.0.1

[root@localhost named]# vim named.local 
//加入
$TTL 86400
@                    IN      SOA     localhost.  admin.localhost.      (
                                                                        2013081601
                                                                        1H
                                                                        10M
                                                                        7D
                                                                        1D
                                                                        )
@                    IN          NS          localhost.
1                    IN          PTR         localhost

[root@localhost named]# named-checkconf      //检测配置是否有问题
[root@localhost named]# named-checkzone "localhost" /var/named/localhost.zone                              //检测正解析
[root@localhost named]# named-checkzone "0.0.127.in-addr.arpa" /var/named/named.local                //检测反解析
[root@localhost named]# rndc-confgen -r /dev/urandom -a   //这一步是生成 rndc.key, 如果没有这个key namd 是启动不了的
[root@localhost named]# chown named:named /etc/rndc.key
[root@localhost named]# /etc/init.d/named start
[root@localhost named]# netstat -lnp  |grep named  // 查看一下named进程是否监听了53端口


//测试
[root@localhost named]# dig @127.0.0.1 localhost.        //测试正向解析
[root@localhost named]# dig @127.0.0.1 -x 127.0.0.1    //测试反向解析

[root@localhost ~]# vim /etc/named.conf
//加入
zone "abc.com" IN {
    type master;
    file "abc.com.zone";
};

zone "137.168.192.in-addr.arpa" IN {
    type master;
    file "192.168.zone";
};

[root@localhost ~]# vim /var/named/abc.com.zone
//加入
$TTL    600
@               IN      SOA     abc.com.      root.abc.com.    (
                                                        2013081601
                                                        1H
                                                        10M
                                                        7D
                                                        1D
)
                 IN      NS      ns.abc.com.
                 IN      MX  10  mail.abc.com.
ns               IN      A       192.168.0.11
www              IN      A       192.168.137.73
mail             IN      A       192.168.137.10
bbs              IN      CNAME    www.abc.com. 


[root@localhost ~]# vim /var/named/192.168.zone
//加入
$TTL 600
@               IN      SOA     ns.abc.com.      root.abc.com. (
                                                        2013081601
                                                        1H
                                                        10M
                                                        7D
                                                        1D
)
@               IN      NS      ns.abc.com.
10              IN      PTR     ns.abc.com.
11              IN      PTR     mail.abc.com.
73              IN      PTR     www.abc.com.

//检测两个配置文件是否有问题
[root@localhost ~]# named-checkzone "abc.com" abc.com.zone
[root@localhost ~]# named-checkzone "137.168.192.in-addr.arpa" 192.168.zone
[root@localhost ~]# /etc/init.d/named restart
[root@localhost ~]# dig @127.0.0.1 www.abc.com
[root@localhost ~]# dig  @127.0.0.1 -x 192.168.137.11

[root@localhost ~]# vim  /etc/named.conf
//在options{} 里面增加
forward first;
forwarders { 8.8.8.8; }

//从上设置，另外一个机器
[root@localhost ~]# yum install -y bind

//主上拷贝配置文件到从上，此处ip为slave ip
[root@localhost ~]# scp /etc/named.conf 192.168.11.10:/etc/
[root@localhost ~]# scp /var/named/named.local /var/named/localhost.zone 192.168.11.10:/var/named

//从上设置，另外一个机器
[root@localhost ~]# vim /etc/named.conf
//修改
options {
    directory "/var/named";
};

zone "." IN  {
    type hint;
    file "named.ca";
};

zone "localhost" IN {
    type master;
    file "localhost.zone";
};

zone "0.0.127.in-addr.arpa" IN {
    type master;
    file "named.local";
};
#此处以下将master修改为slave和slave的信息
zone "abc.com" IN {
    type slave; 
    file "slaves/abc.com.zone";
    masters { 192.168.0.11; #server端ip  };  
};

zone "137.168.192.in-addr.arpa" IN {
    type slave; 
    file "slaves/192.168.zone";
    masters { 192.168.0.11; };
};

[root@localhost ~]# rndc-confgen -r /dev/urandom -a
[root@localhost ~]# chown named:named /etc/rndc.key
[root@localhost ~]# /etc/init.d/named start

/*启动成功后， 在从上 /var/named下会生成slaves目录，
而在这个目录下，会有192.168.zone, abc.com.zone这两个文件，内容是和主上的一样的 */

//从上测试
[root@localhost ~]# dig @127.0.0.1  www.abc.com

//主上
[root@localhost ~]# vim /var/named/abc.com.zone
//文件最尾增加
123              IN      A       1.1.1.1

//修改第三行数字串，{用于做标记}。只能变大，不能变小

2013081601 -> 2013081602

[root@localhost ~]# /etc/init.d/named restart

/*从经常同步会特别慢，此时进行特殊操作*/
//主上设置
[root@localhost ~]# vim /etc/named.conf
//abc.com的zone中增加
notify yes;
also-notify { 192.168.0.12; };