fedora下dns的配置

一、主DNS

1、安装bind,bind-chroot

yum -y install bind bind-chroot

2、修改DNS主配置文件

vim /etc/named.conf

options {

listen-on port 53 { any; };

listen-on-v6 port 53 { ::1; };

directory "/var/named";

dump-file "/var/named/data/cache_dump.db";

statistics-file "/var/named/data/named_stats.txt";

memstatistics-file "/var/named/data/named_mem_stats.txt";

allow-query { any; };

recursion yes;

dnssec-enable yes;

dnssec-validation yes;

dnssec-lookaside auto;

/* Path to ISC DLV key */

bindkeys-file "/etc/named.iscdlv.key";

};

logging {

channel default_debug {

file "data/named.run";

severity dynamic;

};

};

zone "." IN {

type hint;

file "named.ca";

};

include "/etc/named.rfc1912.zones";

zone "example.com" IN {

type master;//主DNS

file "google.zone";//正向解析文件名

allow-update { none; };

};

zone "56.168.192.in-addr.arpa" IN {

type master;

file "named.google";//反向解析文件名

allow-update { none; };

};

DNS服务器是面向网络的，所以有许多的域名要进行解析，有许多的主机要进行访问，这里把其中几行关键内容都设置为了any，同时也可以指定网络地址，规定哪些能够访问，哪些不能访问。

在vim /etc/named.conf文件中添加了这些之后就不需要在/etc/named.rfc1912.zones文件中添加，不然会出现重复的错误。

3.[root@localhost ~]# vim /etc/resolv.conf

# generated by NetworkManager, do not edit!

#domain localdomain

#search localdomain

nameserver 192.168.56.134//将这里改为ifconfig看到的ip地址

4.[root@localhost ~]# ifconfig

eth5 Link encap:Ethernet HWaddr 00:0C:29:D8:C5:19

inet addr:192.168.56.134 Bcast:192.168.56.255 Mask:255.255.255.0

inet6 addr: fe80::20c:29ff:fed8:c519/64 Scope:Link

UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1

RX packets:233 errors:0 dropped:0 overruns:0 frame:0

TX packets:187 errors:0 dropped:0 overruns:0 carrier:0

collisions:0 txqueuelen:1000

RX bytes:57940 (56.5 KiB) TX bytes:24193 (23.6 KiB)

Interrupt:19 Base address:0x2024

5、编辑google.zone

$TTL 1D
@	IN SOA	ns.example.com.  root(
42	; serial
1D	; refresh
1H	; retry
1W	; expire
3H )	; minimum
@	IN	NS	ns.example.com.
ns  IN  A	192.168.56.134
www IN  A	192.168.56.134

注意：ns,www前面不能有空格；IN前面要有空格或者@符号或者tab

6、编辑named.google

$TTL 1D
@	IN SOA	ns.example.com.  root(
42	; serial
1D	; refresh
1H	; retry
1W	; expire
3H )	; minimum
@	IN	NS	ns.example.com.
ns	IN	PTR	192.168.56.134
134	IN	PTR	ns.example.com.
134	IN	PTR	www.example.com.

7、service named restart

重启服务器

8、客户端测试

[root@localhost ~]# nslookup

> 192.168.56.134

Server: 192.168.56.134

Address: 192.168.56.134#53

134.56.168.192.in-addr.arpa name = ns.example.com.

134.56.168.192.in-addr.arpa name =
www.example.com.

134.56.168.192.in-addr.arpa name = haha.example.com.

[root@localhost ~]# dig hehe.example.com

;; QUESTION SECTION:

;hehe.example.com. IN A

;; ANSWER SECTION:

hehe.example.com. 86400 IN A 192.168.56.134

;; AUTHORITY SECTION:

example.com. 86400 IN NS ns.example.com.

;; ADDITIONAL SECTION:

ns.example.com. 86400 IN A 192.168.56.134