RHCE

配置dns服务的正反向解析

正向解析

服务端	客户端	网址
192.168.62.129	192.168.62.130	www.openlab.com

第一：准备工作

#安装软件
[root@server ~]# yum install bind -y
[root@server ~]# setenforce 0
setenforce: SELinux is disabled
[root@server ~]# systemctl stop firewalld
[root@server ~]# 
​

第二：配置dns主配置文件

[root@server ~]# vim /etc/named.conf 
​
options {
        listen-on port 53 {  any;  };
        listen-on-v6 port 53 { ::1; };
        directory       "/var/named";
        dump-file       "/var/named/data/cache_dump.db";
        statistics-file "/var/named/data/named_stats.txt";
        memstatistics-file "/var/named/data/named_mem_stats.txt";
        secroots-file   "/var/named/data/named.secroots";
        recursing-file  "/var/named/data/named.recursing";
        allow-query     {  any;  };
​

第三：配置dns从配置文件

[root@server ~]# vim /etc/named.rfc1912.zones 
zone "openlab.com" IN {
        type master;
        file "openlab.com.zone";
        allow-update { none; };
};
​

第四：编辑数据配置文件

[root@server named]# cp -a named.localhost openlab.com.zone
[root@server named]# vim openlab.com.zone 
​
$TTL 1D
openlab.com.    IN SOA  ns.openlab.com. fox.qq.com. (
                                        0       ; serial
                                        1D      ; refresh
                                        1H      ; retry
                                        1W      ; expire
                                        3H )    ; minimum
openlab.com.    IN      NS      ns.openlab.com.
ns.openlab.com. IN      A       192.168.62.129
​
www.openlab.com.        IN      A       192.168.62.129
bbs.openlab.com.        IN      A       192.168.62.129
ftp.openlab.com.        IN      A       192.168.62.129
www1.openlab.com.       IN      CNAME   www.openlab.com.
​
​

重启服务

[root@server named]# systemctl start named
​

第五：客户端测试

[root@node1 ~]# vim /etc/NetworkManager/system-connections/ens160.nmconnection 
​
[ipv4]
address1=192.168.62.130/24,192.168.62.2
dns=192.168.62.129;
method=manual
[root@node1 ~]# nmcli connection reload 
[root@node1 ~]# nmcli connection up ens160 
连接已成功激活（D-Bus 活动路径：/org/freedesktop/NetworkManager/ActiveConnection/2）
​
​
[root@node1 ~]# nslookup 
> www.openlab.com
Server:     192.168.62.129
Address:    192.168.62.129#53
​
Name:   www.openlab.com
Address: 192.168.62.129
> bbs.openlab.com
Server:     192.168.62.129
Address:    192.168.62.129#53
​
Name:   bbs.openlab.com
Address: 192.168.62.129
> ftp.openlab.com
Server:     192.168.62.129
Address:    192.168.62.129#53
​
Name:   ftp.openlab.com
Address: 192.168.62.129
> www1.openlab.com
Server:     192.168.62.129
Address:    192.168.62.129#53
​
www1.openlab.com    canonical name = www.openlab.com.
Name:   www.openlab.com
Address: 192.168.62.129
> 
​
[root@node1 ~]# 

​

反向解析

服务端	客户端	网址
192.168.62.129	192.168.62.130	www.openlab.com

主配置文件不变

编辑区域配置文件

[root@server ~]# vim /etc/named.rfc1912.zones 
​
zone "62.168.192.in-addr.arpa" IN {
        type master;
        file "192.168.62.arpa";
        allow-update { none; };
};

​

编辑数据配置文件

#拷贝反向解析模版（named.loopback）
[root@server named]# cp -a named.loopback 192.168.62.arpa
[root@server named]# ls
192.168.62.arpa  dynamic   named.empty      named.loopback    slaves
data             named.ca  named.localhost  openlab.com.zone
[root@server named]# vim 192.168.62.arpa
​
$TTL 1D
@       IN SOA  ns.openlab.com. zhang.qq.com. (
                                        0       ; serial
                                        1D      ; refresh
                                        1H      ; retry
                                        1W      ; expire
                                        3H )    ; minimum
        NS      ns.openlab.com.
129     IN      PTR     ns.openlab.com.
​
129     IN      PTR     www.openlab.com.
129     IN      PTR     bbs.openlab.com.
129     IN      PTR     ftp.openlab.com.
​

#重启服务

[root@server named]# systemctl restart named
[root@server named]# 
​

客户端测试 

[root@node1 ~]# nslookup 
> www.openlab.com
Server:     192.168.62.129
Address:    192.168.62.129#53
​
Name:   www.openlab.com
Address: 192.168.62.129
> 192.168.62.129
129.62.168.192.in-addr.arpa name = www.openlab.com.
129.62.168.192.in-addr.arpa name = ns.openlab.com.
129.62.168.192.in-addr.arpa name = ftp.openlab.com.
129.62.168.192.in-addr.arpa name = bbs.openlab.com.
>