RHCE第四次作业

dns的正反向解析

[root@localhost ~]# systemctl stop firewalld
[root@localhost ~]# setenforce 0

[root@localhost ~]# mount /dev/sr0 /mnt

[root@localhost ~]# yum install bind -y
Updating Subscription Management repositories.
Unable to read consumer identity

This system is not registered with an entitlement server. You can use subscription-manager to register.

Last metadata expiration check: 2:10:03 ago on Wed 10 May 2023 05:16:00 PM CST.
Package bind-32:9.16.23-5.el9_1.x86_64 is already installed.
Dependencies resolved.
Nothing to do.
Complete!
[root@localhost ~]# 

[root@localhost ~]# vim /etc/named.conf更改配置文件

 修改区域配置文件，添加正向区域配置

vim /etc/named.rfc1912.zones
zone “luwei.com” IN {         #正向解析“luwei.com”区域
type master;                  #类型为主区域
file "luwei.com.zone";        #指定区域数据文件为luwei.com.zone
allow-update { none; };
}

配置正向区域数据文件

cd /var/named/
cp -p named.localhost luwei.com.zone      #保留源文件的权限和属主的属性复制
vim /var/named/luwei.com.zone
$TTL 1D                          #设置缓存解析结果的有效时间
@       IN SOA luwei.com. admin.luwei.com. (
                                      0; serial .  		 #更新序列号，可以是10以内的整数
                                      1D; refresh 		 #刷新时间，重新下载地址数据的间隔
                                      1H; retry   		 #重试延时，下载失败后的充实间隔
                                      1W; expire   		 #失效时间
                                      3H ) ; minimum	 #无效解析记录的生存周期
         NS    luwei.com.                     #记录当前区域的DNS服务器的名称
         A     192.168.73.88                #记录主机IP地址
IN   MX  10    mail.luwei.com.                #MX为邮件交换记录，数字越大优先级越低
www  IN  A     192.168.73.88                  #记录正向解析www.benet.com对应的IP
mail IN  A     192.168.184.28
ftp  IN CNAME  www                          #CNAME使用别名，ftp是www的别名
*    IN   A    192.168.73.100              #泛域名解析，“*"代表任意主机名

关闭防火墙，然后启动服务

systemctl start named
systemctl stop firewalld
setenforce 0        
tail -f /var/log/ messages                               

测试     ---实现正反向解析

[root@server ~ ~]# nslookup www.test.com
Server:		192.168.42.128
Address:	192.168.42.128#53
 
Name:	www.qq.com
Address: 192.168.42.10
 
[root@server ~]# nslookup en.test.com
Server:		192.168.42.128
Address:192.168.42.128#53
 
Name:	en.qq.com
Address: 192.168.42.20
 
[root@server ~]# nslookup ftp.test.com
Server:		192.168.42.128
Address:	192.168.42.128#53
 
Name:	ftp.qq.com
Address: 192.168.42.30
 
[root@server ~]# nslookup fff.test.com
Server:		192.168.42.128
Address:	192.168.42.128#53
 
fff.qq.com	canonical name = ftp.test.com.
Name:	ftp.qq.com
Address: 192.168.42.30

[root@server ~]# nslookup 192.168.42.10
10.42.168.192.in-addr.arpa	name = www.test.com.
 
[root@server ~]# nslookup 192.168.42.20
20.42.168.192.in-addr.arpa	name = en.test.com.
 
[root@server ~]# nslookup 192.168.42.30
30.42.168.192.in-addr.arpa	name = ftp.test.com.