标签：dns
DNS配置
实验环境
主dns：192.168.110.33
从dns：192.168.110.59
iptables and selinux disabled
yum install -y bind
主dns端
1.主配置文件（注意文件权限）
# ll /etc/named.conf
-rw-r-----. 1 root named 453 Aug 7 22:44 /etc/named.conf
# vim /etc/named.conf
options {
directory "/var/named"; #定义区域数据目录
};
zone "cheungssh.com" IN { #定义域
type master; #类型为master
file "cheungssh.com.zone"; #定义区域数据文件
};
zone "110.168.192.in-addr.arpa" { #反向解析
type master;
file "192.168.110.zone";
};
zone "." IN { #根域
type hint; #类型为根
file "named.ca";
};
zone "localhost" IN { #本地解析
type master;
2.区域数据文件（注意文件权限）
# pwd
/var/named
# ll
-rw-r-----. 1 root named 329 Aug 7 22:25 192.168.110.zone
-rw-r-----. 1 root named 427 Aug 8 00:27 cheungssh.com.zone
正向区域数据文件
# vim cheungssh.com.zone
$TTL 1D #ttl值为一天
cheungssh.com. IN SOA ns.cheungssh.com. admin.cheungssh.com. (
1026080702 ; serial #序列号(此文件修改一次，序列号必须变)
1D ; refresh #刷新时间
1H ; retry #重试时间
1W ; expire #过期时间
3H ) ; minimum #最小时常
IN NS ns #定义域所属的dns服务器
IN MX 10 mail #定义邮件记录
mail IN A 192.168.110.33
ns IN A 192.168.110.33
www IN A 192.168.110.33
ycc IN A 192.168.110.33
www IN A 192.168.110.34
ftp IN CNAME WWW #别名，ftp别名为www
vip IN A 192.168.197.100
rs1 IN A 192.168.197.105
rs2 IN A 192.168.197.107
反向区域数据文件
# vim 192.168.110.zone
$TTL 1D
@ IN SOA ns.cheungssh.com. admin.cheungssh.com. (
1026080702 ; serial
1D ; refresh
1H ; retry
1W ; expire
3H ) ; minimum
IN NS ns.cheungssh.com.
33 IN PTR ns.cheungssh.com.
33 IN PTR www.cheungssh.com.
33 IN PTR mail.cheungssh.com
34 IN PTR ns.cheungssh.com.
6 IN PTR hello.cheungssh.com.
3.在/etc/resolv.conf中指明dns服务器
# vim /etc/resolv.conf
nameserver 192.168.110.33
4.重启dns服务
5.命令测试
dig命令测试解析
# dig -t A www.cheungssh.com #-t指明rt记录
; <<>> DiG 9.8.2rc1-RedHat-9.8.2-0.47.rc1.el6 <<>> -t A www.cheungssh.com
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 14084
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 1, ADDITIONAL: 1
;; QUESTION SECTION:
;www.cheungssh.com. IN A
;; ANSWER SECTION:
www.cheungssh.com. 86400 IN A 192.168.110.33
www.cheungssh.com. 86400 IN A 192.168.110.34
;; AUTHORITY SECTION: #权威答案
cheungssh.com. 86400 IN NS ns.cheungssh.com.
;; ADDITIONAL SECTION: #补充段，避免二次查询，直接将主机名转换为ip
ns.cheungssh.com. 86400 IN A 192.168.110.33
;; Query time: 0 msec
;; SERVER: 192.168.110.33#53(192.168.110.33)
;; WHEN: Sun Aug 7 00:59:32 2016
;; MSG SIZE rcvd: 84
# dig -t CNAME ftp.cheungssh.com
; <<>> DiG 9.8.2rc1-RedHat-9.8.2-0.47.rc1.el6 <<>> -t CNAME ftp.cheungssh.com
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 57946
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 1, ADDITIONAL: 1
;; QUESTION SECTION:
;ftp.cheungssh.com. IN CNAME
;; ANSWER SECTION:
ftp.cheungssh.com. 86400 IN CNAME WWW.cheungssh.com.
;; AUTHORITY SECTION:
cheungssh.com. 86400 IN NS ns.cheungssh.com.
;; ADDITIONAL SECTION:
ns.cheungssh.com. 86400 IN A 192.168.110.33
;; Query time: 0 msec
;; SERVER: 192.168.110.33#53(192.168.110.33)
;; WHEN: Sun Aug 7 01:10:39 2016
;; MSG SIZE rcvd: 86
# dig -t NS cheungssh.com
; <<>> DiG 9.8.2rc1-RedHat-9.8.2-0.47.rc1.el6 <<>> -t NS cheungssh.com
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 31012
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1
;; QUESTION SECTION:
;cheungssh.com. IN NS
;; ANSWER SECTION:
cheungssh.com. 86400 IN NS ns.cheungssh.com.
;; ADDITIONAL SECTION:
ns.cheungssh.com. 86400 IN A 192.168.110.33
;; Query time: 0 msec
;; SERVER: 192.168.110.33#53(192.168.110.33)
;; WHEN: Sun Aug 7 01:11:56 2016
;; MSG SIZE rcvd: 64
dig测试反向解析
# dig -x 192.168.110.33
; <<>> DiG 9.8.2rc1-RedHat-9.8.2-0.47.rc1.el6 <<>> -x 192.168.110.33
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 6945
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 3, AUTHORITY: 1, ADDITIONAL: 1
;; QUESTION SECTION:
;33.110.168.192.in-addr.arpa. IN PTR
;; ANSWER SECTION:
33.110.168.192.in-addr.arpa. 86400 IN PTR www.cheungssh.com.
33.110.168.192.in-addr.arpa. 86400 IN PTR mail.cheungssh.com.110.168.192.in-addr.arpa.
33.110.168.192.in-addr.arpa. 86400 IN PTR ns.cheungssh.com.
;; AUTHORITY SECTION:
110.168.192.in-addr.arpa. 86400 IN NS ns.cheungssh.com.
;; ADDITIONAL SECTION:
ns.cheungssh.com. 86400 IN A 192.168.110.33
;; Query time: 0 msec
;; SERVER: 192.168.110.33#53(192.168.110.33)
;; WHEN: Sun Aug 7 01:37:53 2016
;; MSG SIZE rcvd: 156
host命令测试解析
# host -t A www.cheungssh.com
www.cheungssh.com has address 192.168.110.33
www.cheungssh.com has address 192.168.110.34
# host -t A www.cheungssh.com
www.cheungssh.com has address 192.168.110.34
www.cheungssh.com has address 192.168.110.33
# host -t NS cheungssh.com
cheungssh.com name server ns.cheungssh.com.
# host -t MX cheungssh.com
cheungssh.com mail is handled by 10 mail.cheungssh.com. #10表示优先级是10
# host -t SOA cheungssh.com
cheungssh.com has SOA record ns.cheungssh.com. admin.cheungssh.com. 1026080701 86400 3600 604800 10800
从dns端
1.主配置文件（注意文件权限）
# ll /etc/named.conf
-rw-r-----. 1 root named 523 Aug 7 22:00 /etc/named.conf
# cat /etc/named.conf
options {
directory "/var/named";
};
zone "cheungssh.com" IN {
type slave; #类型为slave
file "slaves/cheungssh.com.zone"; #区域数据文件在slaves下
masters { 192.168.110.33; }; #指明主dns
};
zone "110.168.192.in-addr.arpa" {
type slave;
file "slaves/192.168.110.zone";
masters { 192.168.110.33; };
};
zone "." IN {
type hint;
file "named.ca";
};
zone "localhost" IN {
type master;
file "named.localhost";
};
zone "0.0.127.in-addr.arpa" IN {
type master;
file "named.loopback";
};
#include "/etc/named.rfc1912.zones";
#include "/etc/named.root.key";
2.在/etc/resolv.conf中指明dns服务器
# vim /etc/resolv.conf
nameserver 192.168.110.33
3.重启dns服务，区域数据文件会从主dns同步至/var/named/slaves目录下
4.区域数据文件（注意文件权限,从主dns同步过来，一般权限不存在问题）
#pwd
/var/named
# ll
total 8
-rw-r--r--. 1 named named 458 Aug 7 23:01 192.168.110.zone
-rw-r--r--. 1 named named 459 Aug 7 23:01 cheungssh.com.zone
# cat cheungssh.com.zone
$ORIGIN .
$TTL 86400 ; 1 day
cheungssh.com IN SOA ns.cheungssh.com. admin.cheungssh.com. (
1026080702 ; serial
86400 ; refresh (1 day)
3600 ; retry (1 hour)
604800 ; expire (1 week)
10800 ; minimum (3 hours)
)
NS ns.cheungssh.com.
MX 10 mail.cheungssh.com.
$ORIGIN cheungssh.com.
ftp CNAME WWW
mail A 192.168.110.33
ns A 192.168.110.33
www A 192.168.110.33
A 192.168.110.34
ycc A 192.168.110.33
# cat 192.168.110.zone
$ORIGIN .
$TTL 86400 ; 1 day
110.168.192.in-addr.arpa IN SOA ns.cheungssh.com. admin.cheungssh.com. (
1026080702 ; serial
86400 ; refresh (1 day)
3600 ; retry (1 hour)
604800 ; expire (1 week)
10800 ; minimum (3 hours)
)
NS ns.cheungssh.com.
$ORIGIN 110.168.192.in-addr.arpa.
33 PTR ns.cheungssh.com.
PTR www.cheungssh.com.
PTR mail.cheungssh.com
34 PTR ns.cheungssh.com.
6 PTR hello.cheungssh.com.
5.测试
# dig ycc.cheungssh.com
; <<>> DiG 9.8.2rc1-RedHat-9.8.2-0.47.rc1.el6 <<>> ycc.cheungssh.com
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 16006
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 1, ADDITIONAL: 1
;; QUESTION SECTION:
;ycc.cheungssh.com. IN A
;; ANSWER SECTION:
ycc.cheungssh.com. 86400 IN A 192.168.110.33
;; AUTHORITY SECTION:
cheungssh.com. 86400 IN NS ns.cheungssh.com.
;; ADDITIONAL SECTION:
ns.cheungssh.com. 86400 IN A 192.168.110.33
;; Query time: 0 msec
;; SERVER: 192.168.110.59#53(192.168.110.59)
;; WHEN: Mon Aug 8 03:01:28 2016
;; MSG SIZE rcvd: 84
本文出自 “真水无香” 博客，请务必保留此出处http://chengyanli.blog.51cto.com/11399167/1846788
标签：dns
原文地址：http://chengyanli.blog.51cto.com/11399167/1846788
