DNS设定实例 推荐

DNS[/b]设定实例[/b]

环境:
redhat9 :默认集成bind-9.2.1-16
功能:
内部使用的DNS,也可以访问外网的域名.
需求:

域名	主机名	IP
domain1.com	s1.domain1.com	192.168.0.111
s2.domain1.com	192.168.0.111
domain2.com	s3.domain2.com	192.168.0.111
s4.domain2.com	192.168.0.28
正向文件domain1.com对应 domain1.com.zone;domain2.com对应domain2.com.zone 反向文件 0.168.192.local

实验就将192.168.0.111作为dns服务器,192.168.0.28作为客户端

配置文件如下
/etc/named.conf[/b]

[align=left]// generated by named-bootconf.pl[/align]
[align=left]options {[/align]
[align=left] directory "/var/named";[/align]
[align=left] /*[/align]
[align=left] * If there is a firewall between you and nameservers you want[/align]
[align=left] * to talk to, you might need to uncomment the query-source[/align]
[align=left] * directive below. Previous versions of BIND always asked[/align]
[align=left] * questions using port 53, but BIND 8.1 uses an unprivileged[/align]
[align=left] * port by default.[/align]
[align=left] */[/align]
[align=left] // query-source address * port 53;[/align]
[align=left] forwarders { [/align]
[align=left] 202.103.24.68;[/align]
[align=left] }; [/align]
[align=left] pid-file "/var/run/named/named.pid"; [/align]
[align=left]};[/align]
[align=left]//使得外部域名向外转发到202.103.24.68查询(武汉电信的DNS)[/align]
[align=left]// [/align]
[align=left]// a caching only nameserver config[/align]
[align=left]// [/align]
[align=left]controls {[/align]
[align=left] inet 127.0.0.1 allow { localhost; } keys { rndckey; };[/align]
[align=left]};[/align]
[align=left]zone "." IN {[/align]
[align=left] type hint;[/align]
[align=left] file "named.ca";[/align]
[align=left]};[/align]
[align=left] [/align]
[align=left]zone "localhost" IN {[/align]
[align=left] type master;[/align]
[align=left] file "localhost.zone";[/align]
[align=left] allow-update { none; };[/align]
[align=left]};[/align]
[align=left] [/align]
[align=left]zone "0.0.127.in-addr.arpa" IN {[/align]
[align=left] type master;[/align]
[align=left] file "named.local";[/align]
[align=left] allow-update { none; };[/align]
[align=left]};[/align]
[align=left] [/align]
[align=left] [/align]
[align=left]zone "domain1.com" IN {[/align]
[align=left] type master;[/align]
[align=left] file "domain1.com.zone";[/align]
[align=left] allow-update { none; };[/align]
[align=left]};[/align]
[align=left] [/align]
[align=left]zone "domain2.com" IN {[/align]
[align=left] type master;[/align]
[align=left] file "domain2.com.zone";[/align]
[align=left] allow-update { none; };[/align]
[align=left]};[/align]
[align=left] [/align]
[align=left]zone "0.168.192.in-addr.arpa" IN {[/align]
[align=left] type master;[/align]
[align=left] file "0.168.192.local";[/align]
[align=left] allow-update { none; };[/align]
[align=left]};[/align]
[align=left]include "/etc/rndc.key";[/align]

/var/named/domain1.com.zone[/b]

[align=left]$TTL 86400[/align]
[align=left]$ORIGIN domain1.com.[/align]
[align=left]@ 1D IN SOA localhost. root ([/align]
[align=left] 42 ; serial (d. adams)[/align]
[align=left] 3H ; refresh[/align]
[align=left] 15M ; retry[/align]
[align=left] 1W ; expiry[/align]
[align=left] 1D ) ; minimum[/align]
[align=left] [/align]
[align=left] 1D IN NS localhost.[/align]
[align=left]s1 1D IN A 192.168.0.111[/align]
[align=left]s2 1D IN A 192.168.0.111[/align]

/var/named/domain2.com.zone[/b]

[align=left]$TTL 86400[/align]
[align=left]$ORIGIN domain2.com.[/align]
[align=left]@ 1D IN SOA localhost. root ([/align]
[align=left] 42 ; serial (d. adams)[/align]
[align=left] 3H ; refresh[/align]
[align=left] 15M ; retry[/align]
[align=left] 1W ; expiry[/align]
[align=left] 1D ) ; minimum[/align]
[align=left] [/align]
[align=left] 1D IN NS localhost.[/align]
[align=left]s3 1D IN A 192.168.0.111[/align]
[align=left]s4 1D IN A 192.168.0.28[/align]

/var/named/0.168.192.local[/b]
[/b]
$TTL 86400
@ IN SOA localhost. root.localhost. (
1997022700 ; Serial
28800 ; Refresh
14400 ; Retry
3600000 ; Expire
86400 ) ; Minimum
IN NS localhost.

111 IN PTR s1.domain1.com.
111 IN PTR s2.domain1.com.
111 IN PTR s3.domain2.com.
28 IN PTR s4.domain2.com.

启动服务
/etc/rc.d/init.d/named start

port 观察：
[root@test root]# netstat -tuln | grep 53

查看日志
tail -n 15 /var/log/messages | grep named

在设定好之后,方便直接在dns服务器调试,需要改本机的DNS,可以这么改
[root@localhost named]# vi /etc/resolv.conf

nameserver 127.0.0.1
nameserver 202.103.24.68
search localdomain

客户端测试,在XP上将DNS指向192.168.0.111
ping如下地址
s1.domain1.com
s2.domain1.com
s3.domain2.com
s4.domain2.com
www.baidu.com (外网域名)

所有通过表示成功