linux学习笔记--DNS服务器搭建中遇到的几个问题

最新推荐文章于 2024-11-29 17:48:40 发布

原创

最新推荐文章于 2024-11-29 17:48:40 发布 · 1.1k 阅读

3 ·

CC 4.0 BY-SA版权

文章标签：

#Linux #DNS #centos7

使用环境WIN时，使用虚拟机软件 vmware player，搭载centos 7搭建DNS服务器，搭建DNS服务器进行DNS劫持。搭建过程中出现几个问题，最终得到解决，下面归纳总结几个出现的问题。

1、使用虚拟机时，构建好DNS服务后，PC无法正常访问DNS服务器

使用虚拟机设置时，网络适配器，需要使用桥接模式，直接连接物理网络，使用其他NAT模式时，无法正常访问DNS服务器

2、安装centos 7后，网络无法使用，一些基础网络软件无法使用如 nslookup，ifconfig，iptables，bind软件。

在安装centos 7时，使用默认设置，需要在安装时，勾选基础网络调试功能模组，就能在安装时集成众多网络调试软件

另外可以使用yum软件安装这些调试软件

yum install net-tools.x86_64
yum -y install bind-chroot
yum install -y iptables-services

路由器设置DHCP自动分配网络，需要在 /etc/sysconfig/network-scripts/ifcfg-ensxx(不同电脑可能不一样）中进行设置

其中 ONBOOT=yes后，重启网络服务器 service network restart 后，即可正常访问网络

3、外部网络的DNS服务无法正常监听，需要在启用ipt

最低0.47元/天解锁文章

200万优质内容无限畅学

确定要放弃本次机会？

福利倒计时

: :

立减 ¥

普通VIP年卡可用

立即使用

qw95147536

关注关注

0
点赞
踩
3

收藏

觉得还不错? 一键收藏
0
评论
分享

复制链接

分享到 QQ

分享到新浪微博

扫一扫
举报

举报

专栏目录

linux中dns服务故障,Linux DNS服务器故障解决

weixin_42522400的博客

05-04

2254

(2)digdig工具向DNS服务器发送named查询，dig可以查询单一和多个域名服务器。dig的功能比 nslookup 强大很多而且使用简单，不像nslookup需要设置set选项。下面是dig的一些比较常用的命令。dig @server sina.com.cn. # dig 最基本的用法dig @server zx.xmgd.com. AXFR# 用dig查看zone数据传输dig @s...

Linux为啥dns为啥安装不了,[dns] linux dns 安装配置

weixin_39999532的博客

05-13

909

[dns] linux dns 安装配置作者：flymasterqq:908601287blog:http://www.cnblogs.com/flymaster500/1.yum install -y bind2.不要安装bind-chroot(安装了文件配置就在/etc/var/chroot/etc/下面)3.dns配置文件位置：/etc/named.conf/etc/named.rfc191...

参与评论您还未登录，请先登录后发表或查看评论

dns搭建及一些常见问题

weixin_33744141的博客

06-16

349

2019独角兽企业重金招聘Python工程师标准>>> ...

linux下安装DNS服务器（自己安装好的步骤和出现错误）

weixin_33737134的博客

11-05

1094

第一步：从安装盘中安装DNS。（1）rpm –qa | grep‘bind’（检查是否已经安装）bind-utils- 9.2.4-30.el4_7.2ypbind-1.17.2-13bind-libs-9.2.4-30.el4_7.2bind-9.2.4-30.el4_7.2bind-devel-9.2.4-30.el4_7.2bind-chroot-9.2.4-30.el...

DNS的部署（BIND）的经验之谈（有常见报错总结）

weixin_49315122的博客

08-21

4979

这里不介绍DNS的基础知识，只关于DNS部署相关的内容首先理解两个概念：递归请求和迭代请求所谓递归请求：即为DNS服务器要去DNS的根服务器一层一层的请求下来（相当消耗资源）所谓迭代请求：DNS服务器从自己负责的区域这一层或往下就能找到（不需要去DNS根服务器找）本机主DNS服务器：192.168.150.129 从DNS服务器：192.168.150.130 子域DNS服务器：192.168.150.131 BIND的基础安装 (1)yum安装BIND安装包 yum.

Linux学习笔记---基础篇

Fatter$hday的博客

05-04

1617

Linux学习笔记 本笔记是根据尚硅谷的Linux视频，经过自己的总结得出来的笔记，分为两个大章节，一-四章讲的是Linux的文件目录结构、vim编辑器、网络配置和系统管理、进程和服务。第二个章节是Linux的基础常用命令总结。

Linux学习笔记（一）- 基础概念

qq_62942356的博客

07-10

1287

Linux由Linux Torvalds在1991年构思设计而成，继承了 Unix 以网络为核心的设计思想，是一个性能稳定的多用户网络操作系统。它是一套免费使用和自由传播的开源的类 Unix 操作系统，同时也是一个基于 POSIX 和 UNIX 的多用户、多任务、支持多线程和多 CPU 的操作系统。操作系统则是指直接管理系统硬件和资源（如 CPU、内存和存储空间）的软件。操作系统位于应用与硬件之间，负责在所有软件与相关的物理资源之间建立连接（这里简单带过，不再多做介绍。

Linux学习笔记——CentOS

最新发布

2301_81336865的博客

11-29

870

在网络安全领域，Kali Linux 无疑是一款备受推崇的强大工具。它集成了众多专业的安全测试软件和工具，无论是渗透测试人员、安全研究人员还是网络管理员，都能借助它深入探索网络安全的奥秘，发现系统潜在的漏洞并加以防范。接下来，就让我们详细了解一下 Kali Linux 的准备与搭建过程。

DNS

Quberry的博客

11-24

748

############################################################################################ server5: yum install bind -y## systemctl enable named## systemctl start named## firewall-cmd --lis

BIND-LINUX64位包

06-26

DNS解析BIND 9(适用于WINDOWS桌面系统) 完全改进： Security Fixes Treat an all zero netmask as invalid when generating the localnets acl to workaround bug on Windows platform. [CVE-2013-6230] [RT #34687] Fix crashes when serving some NSEC3 signed zones. memcpy was incorrectly called with overlapping ranges, resulting in malformed names being generated on some platforms. This could cause INSIST failures. (CVE 2014-0591) [RT #35120] Features Changes Add the ability to specify ndots to "nslookup". [RT #34711] Introduce a new tool "dnssec-importkey" to allow externally-generated DNSKEY to be imported into the DNSKEY management framework. [RT #34698] Check that EDNS subnet client options are well formed. [RT #34718] "named" now preserves the capitalization of names when responding to queries. [RT #34737] Include a comment in .nzf files (used for adding new zones via "rndc"), giving the name of the associated view. [RT #34765] Use separate rate limiting queues for refresh and notify requests. [RT #30589] Adjust when a master server is deemed unreachable to be less aggressive. [RT #27075] Create delegations for all "children" of empty zones except "forward first". [RT #34826] Changed the name of "isc-config.sh" developers script (for outputting compiler and linker flags) to "bind9-config". [RT #23825] Add "dig" option to keep the TCP socket open between successive queries (+[no]keepopen). [RT #34918] Add dns_client_createx2() function to DNS Client API to provide a way to specify the local address for use when sending update packets. [RT #34811] "named-checkconf -z" now checks zones of type hint as well as master. [RT #35046] Update config.guess and config.sub to add support for ppc64le (powerpc 64-bit Little Endian). [RT #35060] Update the Windows build system to support feature selection and WIN64 builds. This is a work in progress. [RT #34160] Add "dnssec-signzone -Q" switch to drop signatures from keys that are still published but no longer active. [RT #34990] Add a more detailed "not found" message to "rndc" commands which specify a zone name. [RT #35059] named will now warn when a zone's configured "key-directory" does not exist or is not a directory. [RT #35108] Added improvements to statistics channel XSL stylesheet: the stylesheet can now be cached by the browser; section headers are omitted from the stats display when there is no data in those sections to be displayed; counters are now right-justified for easier readability. (Only available with ./configure --enable-newstats.) [RT #35117] "named-checkconf" can now obscure shared secrets when printing by specifying '-x'. [RT #34465] "named" can now accept integer timestamps in RRSIG records. [RT #35185] The export-library API call for loading "resolv.conf", irs_resconf_load(), has been modified to return ISC_R_FILENOTFOUND when the file does not exist and initializes the resconf structure as if the file had existed and configured with nameservers at the localhost addresses (127.0.0.1 and ::1). [RT #35194] Bug Fixes Treat type 65533 (KEYDATA) as opaque except when used in a key zone. [RT #34238] Fix "host" and "nslookup" so don't need dot after the domain by checking ndots when searching. Only continue searching on NXDOMAIN responses. [RT #34711] Handle changes to sig-validity-interval settings better. [RT #34625] Fix bug where journal filename string could be set incorrectly, causing garbage in log messages. [RT #34738] Address a race condition when shutting down a zone. [RT #34750] Address race condition with manual notify requests. [RT #34806] Fix nslookup crash where some readline clones don't accept NULL pointers when calling add_history. [RT #34842] Fix Linux compilation issue when libcap-devel is installed. [RT #34838] Fix installation on Solaris -- don't add explicit make dependencies/rules for python programs as make won't use the implicit rules. [RT #34835] Fix hanging server with inline-signed zones by addressing lock order reversal deadlock with inline zones. [RT #34856] Fix "host" failure if a UDP query timed out. [RT #34870] Address bugs in dns_rdata_fromstruct and dns_rdata_tostruct for WKS and ISDN types. [RT #34910] Updated OpenSSL PKCS#11 patches to fix active list locking and other bugs. [RT #34855] Fix a potential hang with failure to release lock on error in receive_secure_db. #34944] Fix cast in lex.c which could see 0xff treated as EOF. This fixes issue with potential bad data in a database used by DLZ or SDB. [RT #34993] Fix build issue on newer FreeBSD needing -lhx509 for GSSAPI build. [RT #35001] Address read after free in server side of lwres_getrrsetbyname. [RT #29075] Fix "nsupdate" memory leak if "realm" was used multiple times. [RT #35073] Fix "dig" for cleaning up TCP sockets still waiting on connect(). [RT #35074] Fix "dnssec-importkey" so imported key won't overwrite an existing non-imported private key. Fix issue where queries covered by a disabled Response Policy Zone (query type was '*') are answered with TTL of 0. [RT #35026] Fix "nsupdate" memory leak if "realm" was used multiple times. [RT #35073] Fix "dig" for cleaning up TCP sockets still waiting on connect(). [RT #35074] Fix issue with "rndc retransfer" with inline-signing replacing NSEC3 with NSEC records. [RT #34745] Fix issue with "rndc refresh" failing to sign slave zones using inline-signing. [RT #35105] Fix potential hang (detected by our inline-signing system test) with null pointer dereference in libdns zone_xfrdone. [RT #35042] Address bug in libdns loadnode function that could return a freed node on out of memory. [RT #35106] Fixed a bug causing an insecure delegation from one "static-stub" zone to another to fail with a broken trust chain. [RT #35081] Fixed problem where iterative responses could be discarded when the "query-source" port for an upstream query was the same as the listener port (53). [RT #34925] Fix crashes in RBTDB implementation. Two calls to dns_db_getoriginnode were fatal if there was no data at the node. [RT #35080] Fix a possible race and crash in the socket_search() function in dispatch.c. [RT #35107] Fix "dig" so it can handle AXFR style IXFR responses which span multiple messages. [RT #35137] Fix a "host" tool problem with converting UTF-8 textname to IDN encoding by handling "." as a search list element when IDN support is enabled. [RT #35133] Fix "queryperf" to prevent a possible integer overflow when printing results. [RT #35182] Prevent a theoretically possible race and crash when obtaining a socket in dispatch.c [RT #35128] Use built-in versions of strptime() and timegm() on all platforms to avoid portability issues. [RT #35183] Fix a bug which could cause a crash when running "rndc reconfig" or "rndc reload" after configuration is changed from regular zones to automatic empty zones. [RT #35177]

centos7搭建DNS服务(use)

justlpf的专栏

12-26

4690

在主DNS上修改区域文件时，必须将SOA记录的serial加1，因为slave是通过serial值来进行判断更新的。file “slaves/文件名”;//文件必须保存在slaves下,其他目录没有权限。//指出主服务器是谁。在第二台服务器上安装DNS服务作为主DNS服务器的缓存DNS。主DNS正反向文件中分别添加辅助DNS的 NS记录。父DNS进行子域授权 ftp.infanx.com。type slave;父DNS配置DNS基础的正向解析文件。安装DNS服务编辑区域配置文件。子域服务器安装DNS。

DNS相关配置

weixin_34109408的博客

10-15

141

一，主从配置1.DNS.正向配置1.主配置文件：/etc/named.conf可包含其他文件主配置文件配置之后便有缓存功能配置主配置文件：主配置文件：/etc/named.conf可包含其他文件options { listen-on port 53 { 10.1.45.70; };#监听本机端口 listen-on-v6 port 53 { ::1...

DNS 问题

u014492019的专栏

12-13

1793

1.在/var/log/message出现error (broken trust chain) resolving信息原因分析： dnssec开启，部分dns请求为不信任链导致解析延迟或者解析失败（error显示为不信任）解决方法： vi /etc/named.conf dnssec-enable no; dnssec-valication no; 2.服

Bind Cache Server无法解析公网域名error (broken trust chain) resolving './NS/IN'

weixin_34217711的博客

03-28

1384

系统环境：宿主机windows10 x64，虚拟机平台软件VMware12 Pro, 虚拟机系统linux6.8 x64, 安装bind后，修改/etc/named.conf：options{ listen-onport53{any;}; //listen-on-v6port53{::1;}; directory"/var/named"; d...

LINUX学记笔记16

qq_39764817的博客

03-20

750

使用Bind提供域名解析服务 DNS域名解析服务相较于由数字构成的IP地址，域名更容易被理解和记忆，所以我们通常更习惯通过域名的方式来访问网络中的资源。但是，网络中的计算机之间只能基于IP地址来相互识别对方的身份，而且要想在互联网中传输数据，也必须基于外网的IP地址来完成。为了降低用户访问网络资源的门槛，DNS（Domain Name System，域名系统）技术应运而生。这是一项用于管理和解...

bind-dnssec配置

linggang_123的博客

08-15

1391

而所谓的分布式就是，A可以向很多很多DNS服务器发送请求，这样就会成为N多服务器攻击同一台计算机（服务器：我是冤枉的/(ㄒoㄒ)/~~）。（1）开始以为BIND的效率挺差的，但是后来真正用起来发现还是相当快的，加上功能多，真不愧是当今世界上应用最广泛的DNS服务器。说的好听一点，它是对域名进行签名认证，保证域名的完整性和正确性，不会被修改。DNSSec不能防御对DNS服务器的攻击，也不会对请求和应答的数据进行加密，甚至如果你不知道DNSSec这个东西的话，域名是不是完整正确的你也不知道。

使用Bind搭建DNS服务

10-19

445

安装 ubuntu: apt install bind9 -y centos: yum install bind -y 配置 /etc/bind/named.conf.options options { directory "/var/cache/bind"; auth-nxdomain no; # conform to RFC1035 listen-on-v6 { any; }; listen-on port 53 { 192.168.199.130; }...

4种常见的DNS故障原因及处理方法!

oldboyedu1的博客

03-08

2557

解决办法：修改/etc/resolv.conf，给机器配置合适的DNS服务器 有时新启动的机器(不管是物理机、虚拟机还是容器)没有设置 DNS，导致访问域名不通。现象：某域名访问太慢、某域名总是指向相同IP(多IP情况下)、特定机器不可访问某域名等等。可能的原因：机器上有tc或iptables规则，导致到DNS服务器的packet变慢或丢失。解决办法：修改/etc/resolv.conf，配置合适的DNS服务器。现象：网络是通的(例如ping IP通)，但是DNS查询总是失败。现象：DNS查询太慢。