基于CentOS7(fedora 21通用)安装配置DNS服务器

最新推荐文章于 2023-01-17 10:29:47 发布

汪云飞记录本

最新推荐文章于 2023-01-17 10:29:47 发布

阅读量124

点赞数

分类专栏： Linux 文章标签：运维

Linux 专栏收录该内容

25 篇文章

订阅专栏

本文介绍如何在CentOS 7上安装BIND9并配置DNS服务器，包括正向和反向解析区域文件的创建过程及配置验证方法。

摘要生成于 C知道，由 DeepSeek-R1 满血版支持，前往体验 >

1 准备

准备一台安装有centos/fedora的机器（192.168.1.103），本例基于Centos7

1.1 安装bind9

yum -y install bind bind-utils

2 配置

2.1 配置DNS Server

vi /etc/named.conf

options {
        listen-on port 53 { 127.0.0.1; 192.168.1.103;}; ##注意此处
        listen-on-v6 port 53 { ::1; };
        directory       "/var/named";
        dump-file       "/var/named/data/cache_dump.db";
        statistics-file "/var/named/data/named_stats.txt";
        memstatistics-file "/var/named/data/named_mem_stats.txt";
        allow-query     { localhost;192.168.1.0/24; }; ##注意此处

        recursion yes;

        dnssec-enable yes;
        dnssec-validation yes;
        dnssec-lookaside auto;

        /* Path to ISC DLV key */
        bindkeys-file "/etc/named.iscdlv.key";

        managed-keys-directory "/var/named/dynamic";

        pid-file "/run/named/named.pid";
        session-keyfile "/run/named/session.key";
};

logging {
        channel default_debug {
                file "data/named.run";
                severity dynamic;
        };
};

zone "." IN {
        type hint;
        file "named.ca";
};

##注意下面

zone "example.home" IN {
        type master;
        file "forward.example";
        allow-update{ none; };
};

##注意下面

zone "1.168.192.in-addr.arpa" IN {
        type master;
        file "reverse.example";
        allow-update{ none; };
};

include "/etc/named.rfc1912.zones";
include "/etc/named.root.key";

2.2 创建Zone文件

局域网此时有2台机器，192.168.1.102（映射域名为wisely.example.home），192.168.1.106（映射域名为puppet.example.home）

2.2.1 创建forward zone文件

vi /var/named/forward.example

添加

$TTL 86400
@ IN  SOA     dns.example.home. root.example.home. (
        2011071001  ;Serial
        3600        ;Refresh
        1800        ;Retry
        604800      ;Expire
        86400       ;Minimum TTL
)
@       IN  NS          dns.example.home.
@       IN  A           192.168.1.103
@       IN  A           192.168.1.106
@       IN  A           192.168.1.102
dns       IN  A   192.168.1.103
puppet       IN  A   192.168.1.106
wisely   IN A   192.168.1.102

2.2.2 创建reverse zone文件

vi /var/named/reverse.example

添加

$TTL 86400
@ IN  SOA     dns.example.home. root.example.home. (
        2011071001  ;Serial
        3600        ;Refresh
        1800        ;Retry
        604800      ;Expire
        86400       ;Minimum TTL
)
@       IN  NS          dns.example.home.
@       IN  PTR         example.home.
dns          IN  A   192.168.1.103
puppet          IN  A   192.168.1.106
wisely     IN A 192.168.1.102
103     IN  PTR         dns.example.home.
106     IN  PTR         puppet.example.home.
102     In  PTR         wisely.example.home.