fedora下dns的配置

一、主DNS
1、安装bind,bind-chroot
yum -y install bind bind-chroot

2、修改DNS主配置文件
vim /etc/named.conf

options {
        listen-on port 53 { any; };
        listen-on-v6 port 53 { ::1; };
        directory       "/var/named";
        dump-file       "/var/named/data/cache_dump.db";
        statistics-file "/var/named/data/named_stats.txt";
        memstatistics-file "/var/named/data/named_mem_stats.txt";
        allow-query     { any; };
        recursion yes;

        dnssec-enable yes;
        dnssec-validation yes;
        dnssec-lookaside auto;

        /* Path to ISC DLV key */
        bindkeys-file "/etc/named.iscdlv.key";
};

logging {
        channel default_debug {
                file "data/named.run";
                severity dynamic;
        };
};

zone "." IN {
        type hint;
        file "named.ca";
};

include "/etc/named.rfc1912.zones";

zone "example.com" IN {
        type master;//主DNS
        file "google.zone";//正向解析文件名
        allow-update { none; };
};
zone "56.168.192.in-addr.arpa" IN {
        type master;
        file "named.google";//反向解析文件名
        allow-update { none; };
};

       DNS服务器是面向网络的，所以有许多的域名要进行解析，有许多的主机要进行访问，这里把其中几行关键内容都设置为了any，同时也可以指定网络地址，规定哪些能够访问，哪些不能访问。

      在vim /etc/named.conf文件中添加了这些之后就不需要在/etc/named.rfc1912.zones文件中添加，不然会出现重复的错误。

3.[root@localhost ~]# vim /etc/resolv.conf
# generated by NetworkManager, do not edit!

#domain localdomain

#search localdomain

nameserver 192.168.56.134//将这里改为ifconfig看到的ip地址

4.[root@localhost ~]# ifconfig
eth5      Link encap:Ethernet  HWaddr 00:0C:29:D8:C5:19 
          inet addr:192.168.56.134  Bcast:192.168.56.255  Mask:255.255.255.0
          inet6 addr: fe80::20c:29ff:fed8:c519/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:233 errors:0 dropped:0 overruns:0 frame:0
          TX packets:187 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:57940 (56.5 KiB)  TX bytes:24193 (23.6 KiB)
          Interrupt:19 Base address:0x2024

5、编辑google.zone

$TTL 1D
@	IN SOA	ns.example.com.  root(
					42	; serial
					1D	; refresh
					1H	; retry
					1W	; expire
					3H )	; minimum
@	IN	NS	ns.example.com.
ns  IN  A	192.168.56.134
www IN  A	192.168.56.134

注意：ns,www前面不能有空格；IN前面要有空格或者@符号或者tab

6、编辑named.google

$TTL 1D
@	IN SOA	ns.example.com.  root(
					42	; serial
					1D	; refresh
					1H	; retry
					1W	; expire
					3H )	; minimum
@	IN	NS	ns.example.com.
ns	IN	PTR	192.168.56.134
134	IN	PTR	ns.example.com.
134	IN	PTR	www.example.com.

7、service named restart

     重启服务器

8、客户端测试

[root@localhost ~]# nslookup
> 192.168.56.134
Server:  192.168.56.134
Address: 192.168.56.134#53

134.56.168.192.in-addr.arpa name = ns.example.com.
134.56.168.192.in-addr.arpa name = www.example.com.
134.56.168.192.in-addr.arpa name = haha.example.com.

 

[root@localhost ~]# dig hehe.example.com

;; QUESTION SECTION:
;hehe.example.com.  IN A

;; ANSWER SECTION:
hehe.example.com. 86400 IN A 192.168.56.134

;; AUTHORITY SECTION:
example.com.  86400 IN NS ns.example.com.

;; ADDITIONAL SECTION:
ns.example.com.  86400 IN A 192.168.56.134