DNS服務的基本配置

一、LINUX域名服務相關文件：

主配置文件： /etc/named.conf 設置一般參數，服務器使用域數據庫的信息源；

指向文件：  /var/named/named.ca  指向域名服務器，惟高速緩存配置；

默認localhost區文件： /var/named/localhost.zone  用於交名字轉換為本地回傳的IP

                    /var/named/named.local  將主機名映射為IP地址

                             如果用戶是用readhat 9作為DNS服務器，這兩個文件存放位置是

                    /var/named/name_to_IP.conf 將主機映射IP

                   /var/named/ip_to_name.conf 將IP映射為主機

resolv.conf:  DNS客戶端配置文件。

 

二、檢查與安裝DNS服務文件

RedHat的LINUX DNS安裝包括三個文件，bind-utils,bind,caching-nameserver這三個文件。

詳細安裝步驟(參加LINUX下面軟件安裝與卸載)

 

三、詳細配置

(1)配置etc/named.conf文件

# vi /etc/named.conf~
//
// named.conf for Red Hat caching-nameserver
//

options {
        directory "/var/named";
        dump-file "/var/named/data/cache_dump.db";
        statistics-file "/var/named/data/named_stats.txt";
        /*
         * If there is a firewall between you and nameservers you want
         * to talk to, you might need to uncomment the query-source
         * directive below.  Previous versions of BIND always asked
         * questions using port 53, but BIND 8.1 uses an unprivileged
         * port by default.
         */
         // query-source address * port 53;
};

//
// a caching only nameserver config
//
controls {
        inet 127.0.0.1 allow { localhost; } keys { rndckey; };
};

zone "." IN {
        type hint;
        file "named.ca";
};

zone "localdomain" IN {
        type master;
        file "localdomain.zone";
        allow-update { none; };
};

zone "localhost" IN {
        type master;
        file "localhost.zone";
        allow-update { none; };
};

zone "myqmail.com" IN {                  //紅色部分是手工進行配置的地方
        type master;                     //配置域名為myqmail.com的DNS服務
        file "myqmail.com";
        allow-update { none; };         //不允許動態更新服務
};                                      //正向配置

zone "0.168.192.in-addr.arpa" IN {      //反向配置
        type master;
        file "0.168.192.rev";
};

 

zone "0.0.127.in-addr.arpa" IN {
        type master;
        file "named.local";
        allow-update { none; };
};

zone "0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ip6.arpa" IN {
        type master;
        file "named.ip6.local";
        allow-update { none; };
};

zone "255.in-addr.arpa" IN {
        type master;
        file "named.broadcast";
        allow-update { none; };
};

zone "0.in-addr.arpa" IN {
        type master;
        file "named.zero";
        allow-update { none; };
};


include "/etc/rndc.key";

 

(2)配置"var/named/chroot/var/named/name_to_IP"文件

# vi /var/named/chroot/var/named/myqmail.com
$TTL    86400
@       IN      SOA    www.myqmail.com. root.www.myqmail.com.  (
                                      1997022700 ; Serial
                                      28800      ; Refresh
                                      14400      ; Retry
                                      3600000    ; Expire
                                      86400 )    ; Minimum
              IN      NS      www.myqmail.com.

www       IN     A      192.168.0.1
win01     IN     A      192.168.0.100

 

配置"var/named/chroot/var/named/ip_to_name"文件

# vi /var/named/chroot/var/named/0.168.192.rev
$TTL    86400
@       IN      SOA    www.myqmail.com. root.www.myqmail.com.  (
                                      1997022700 ; Serial
                                      28800      ; Refresh
                                      14400      ; Retry
                                      3600000    ; Expire
                                      86400 )    ; Minimum
              IN      NS      www.myqmail.com.

1      IN      PTR      www.myqmail.com.
100    IN      PTR      win01.myqmail.com.

(3)修改網卡配置文件 /etc/sysconfig/networ-scripts/ifcfg-eth0

DEVICE=eth0
BOOTPROT=static
HWADDR=00:0C:29:F8:CA:13
ONBOOT=yes
TYPE=Ethernet
NETMASK=255.255.255.0
IPADDR=192.168.0.1
USERCTL=no
IPV6INIT=no
PEERDNS=no
GATEWAY=192.168.0.1
BOOTPROTO=none

(4)修改客戶端DNS配置文件 /etc/resolv.conf

search myqmail.com.

nemeserver 192.168.0.1

 

(5)重啟網絡配置服務及DNS服務

# service network restart

# service named restart

 

(6)用nslookup或host命令進行測試

 

---

備注：如果你有問題咨詢或對本篇日志存在某些錯誤的地方，歡迎提寶貴的意見。