系統約定：
1、域名：redhat.com
2、ns：192.168.101.168
3、web：192.168.101.11, 192.168.101.12
4、mail：192.168.101.10
1、安裝bind
yum install bind-libs bind-utils bind
2、關閉SELinux、防火牆
vim /etc/selinux/config
SELINUX=disabled
setenforce 0
service iptables stop
chkconfig iptables off
3、配置bind
cp /etc/named.conf /etc/named.conf.bak
vim /etc/named.conf
options {
directory "/var/named";
# 限制IP遞歸查詢
allow-recursion { 192.168.101.0/24; };
};
zone "." IN {
type hint;
file "named.ca";
};
zone "localhost" IN {
type master;
file "named.localhost";
};
zone "0.0.127.in-addr.arpa" IN {
type master;
file "named.loopback";
};
4、修改DNS
vim /etc/resolv.conf
nameserver 192.168.101.168
5、測試配置文件
named-checkzone "localhost" /var/named/named.localhost
named-checkzone "0.0.127.in-addr.arpa" /var/named/named.loopback
6、啓動BIND
# 啓動過程中如果報：Generating /etc/rndc.key
# 解決方法生成一個rndc-key：
rndc-confgen -r /dev/urandom -a
service named start
7、測試查找根DNS
dig -t NS . @192.168.101.168
ping www.baidu.com
chkconfig named on
# 至此一個DNS緩存服務器配置完成。
8、配置正向解析
vim /etc/named.conf
# 添加：
zone "redhat.com" IN {
type master;
file "redhat.com.zone";
};
9、添加正向解析配置文件
vim /var/named/redhat.com.zone
$TTL 86400
@ IN SOA ns1.redhat.com. admin.redhat.com. (
2015010101 ; serial
1H ; refresh
5M ; retry
1W ; expire
3H ) ; minimum
IN NS ns1
IN MX 10 mail
ns1 IN A 192.168.101.168
mail IN A 192.168.101.10
www IN A 192.168.101.11
www IN A 192.168.101.12
# 授權相關文件
chmod 640 /var/named/redhat.com.zone
chgrp named /var/named/redhat.com.zone
10、配置反向解析
vim /etc/named.conf
# 添加：
zone "101.168.192.in-addr.arpa" IN {
type master;
file "192.168.101.zone";
};
11、添加反向解析配置文件
vim /var/named/192.168.101.zone
$TTL 86400
@ IN SOA ns1.redhat.com. admin.redhat.com. (
2015010101 ; serial
1H ; refresh
5M ; retry
1W ; expire
3H ) ; minimum
IN NS ns1.redhat.com.
168 IN PTR ns1.redhat.com.
10 IN PTR mail.redhat.com.
11 IN PTR www.redhat.com.
12 IN PTR www.redhat.com.
# 授權相關文件
chmod 640 /var/named/192.168.101.zone
chgrp named /var/named/192.168.101.zone
12、檢測並重啓
named-checkconf
named-checkzone "redhat.com" /var/named/redhat.com.zone
named-checkzone "101.168.192.in-addr.arpa" /var/named/192.168.101.zone
service named restart
13、測試
dig -t NS redhat.com
dig -t A www.redhat.com
dig -t MX redhat.com
dig -x 192.168.101.10
dig -x 192.168.101.11
dig -x 192.168.101.12