DNS及DNS主从配置

DNS配置

[root@Client ~]# cat /etc/hosts //本地hosts文件，与windows的类似
127.0.0.1 localhost localhost.localdomain localhost4 localhost4.localdomain4
::1 localhost localhost.localdomain localhost6 localhost6.localdomain6

[root@Client ~]# cat /etc/resolv.conf //查看域名服务器
nameserver 114.114.114.114

[root@Client ~]# yum list |grep bind
[root@Client ~]# yum install -y bind
[root@Client ~]# vim /etc/named.conf //查看配置文件

[root@Client ~]# vim /var/named/named.ca //查看根域文件

[root@Client ~]# cat/var/named/named.localhost
$TTL 1D （生存周期）
@ IN SOA @ rname.invalid. (
(域名)(IN)(记录授权)(主机名)(管理员邮箱) 0 ; serial
1D ; refresh(刷新时间主与从)
1H ; retry(失败后1h,后再同步)
1W ; expire(一周后失效)
3H) ; minimum(缓存3H)
NS @
A 127.0.0.1
AAAA ::1

[root@Client ~]# cat /etc/named.conf
[root@Client ~]# cat/etc/named.rfc1912.zones //查看域名zones文件
[root@Client ~]# /etc/init.d/named start
[root@Client ~]# dig @127.0.0.1 localhost //测试域名localhost,解析成127.0.0.1
localhost. 86400 IN A 127.0.0.1

[root@Client ~]# cat/var/named/named.loopback //查看反向解析文件
$TTL 1D
@ IN SOA @ rname.invalid. (
0 ; serial
1D ; refresh
1H ; retry
1W ; expire
3H ) ; minimum
NS @
A 127.0.0.1
AAAA ::1
PTR localhost.

[root@Client ~]# dig @127.0.0.1 -x127.0.0.1
1.0.0.127.in-addr.arpa. 86400 IN PTR localhost.
//反向解析测试，127.0.0.1解析为localhost

自定义一个域
[root@Client ~]# vim /etc/named.conf
zone "123.com"IN {
type master;
file "123.com.zone";
};
//末行加以上配置

[root@Client ~]# named-checkconf //检测主配置文件有无错误

[root@Client ~]# cat/var/named/named.localhost
[root@Client ~]# vim /var/named/123.com.zone
$TTL 1D
@ IN SOA @ admin.123.com. (
20150723 ; serial
1D ; refresh
1H ;retry
1W ; expire
3H) ; minimum
IN NS ns.123.com.
ns IN A 192.168.137.23
www IN A 11.11.11.11
IN MX 5 mail.123.com.
mail IN A 192.168.137.23

[root@Client ~]# named-checkzone"123.com" /var/named/123.com.zone
zone 123.com/IN: loaded serial 20150723
OK
//检测配置文件无错误

[root@Client ~]# vim /etc/named.conf
listen-on port 53 { 127.0.0.1;192.168.137.23; };
//添加一个监听的主机
[root@Client ~]# /etc/init.d/named restart
[root@Client ~]# dig @192.168.137.23mail.123.com
mail.123.com. 86400 IN A 192.168.137.23
[root@Client ~]# dig @192.168.137.23www.123.com
www.123.com. 86400 IN A 11.11.11.11
//可被解析出

做反向解析配置
[root@Client ~]# vim /etc/named.conf
zone "123.com" IN {
type master;
file "123.com.zone";
};

zone"137.168.192.in-addr.arpa" IN {
type master;
file "137.168.192.zone";
};

[root@Client ~]# vim/var/named/137.168.192.zone
$TTL 1D
@ IN SOA @ admin.123.com. (
20150723 ; serial
1D ; refresh
1H ; retry
1W ; expire
3H) ; minimum
IN NS ns.123.com.
23 IN RPT ns.123.com.
23 IN RPT mail.123.com.

[root@Client ~]# named-checkconf
[root@Client ~]# named-checkzone"123.com" /var/named/123.com.zone
zone 123.com/IN: loaded serial 20150723
OK
[root@Client ~]# named-checkzone"137.168.192.in-addr.arpa" /var/named/137.168.192.zone
zone 137.168.192.in-addr.arpa/IN: loaded serial20150723
OK
[root@Client ~]# /etc/init.d/named restart

[root@Client ~]# dig @192.168.137.23-x192.168.137.23
23.137.168.192.in-addr.arpa. 86400 IN PTR ns.123.com.
23.137.168.192.in-addr.arpa. 86400 IN PTR mail.123.com.
//反解析成功

DNS主从配置
另开一台虚拟机
从上：
[root@client ~]# ifconfig
eth0 inet addr:192.168.137.21
[root@client ~]# yum install -y bind
[root@client ~]# vim /etc/named.conf
// listen-on port 53 {127.0.0.1; }; //注释了默认注释所有地址
// listen-on-v6 port 53 {::1; };

zone "123.com"IN {
type slave;
file "slaves/123.com.zone";
masters { 192.168.137.23; };
};

zone"137.168.192.in-addr.arpa" IN {
type slave;
file "slaves/137.168.192.zone";
masters { 192.168.137.23; };
};

[root@client ~]# /etc/init.d/named start

[root@client ~]# ls /var/named/slaves/ //查看有无文件生成，已产生
123.com.zone 137.168.192.zone
[root@client ~]# cat/var/named/slaves/123.com.zone
$ORIGIN .
$TTL 86400 ; 1 day
123.com IN SOA 123.com. admin.123.com. (
20150723 ; serial
86400 ; refresh (1 day)
3600 ; retry (1 hour)
604800 ; expire (1 week)
10800 ; minimum (3 hours)
)
NS ns.123.com.
$ORIGIN 123.com.
mail A 192.168.137.23
ns A 192.168.137.23
www A 11.11.11.11
MX 5 mail
//查看该文件为从主上自动同步过来

主上：
[root@Client ~]# vim/var/named/123.com.zone
20150723改成20150725
//没发生改变，该值会加1.从上以此判断有无改变
wang IN A 111.111.111.111 //增加一条记录

[root@Client ~]# vim /etc/named.conf
zone "123.com" IN {
type master;
file "123.com.zone";
notify yes;
also-notify { 192.168.137.21; };

};

zone "137.168.192.in-addr.arpa"IN {
type master;
file "137.168.192.zone";
notify yes;
also-notify { 192.168.137.21; };
};

[root@Client ~]# named-checkconf
[root@Client ~]# /etc/init.d/named restart
[root@Client ~]# dig @192.168.137.23wang.123.com
wang.123.com. 86400 IN A 111.111.111.111

从上：
[root@client ~]# dig @192.168.137.21wang.123.com
wang.123.com. 86400 IN A 111.111.111.111
[root@client ~]# cat/var/named/slaves/123.com.zone
$ORIGIN .
$TTL 86400 ; 1 day
123.com IN SOA 123.com. admin.123.com. (
20150725 ;serial
86400 ; refresh (1 day)
3600 ; retry (1 hour)
604800 ; expire (1 week)
10800 ; minimum (3 hours)
)
NS ns.123.com.
$ORIGIN 123.com.
mail A 192.168.137.23
ns A 192.168.137.23
wang A 111.111.111.111
www A 11.11.11.11
MX 5 mail

//已自动同步

配置参考
主上：
[root@Client ~]# vim /etc/named.conf
//
// named.conf
//
// Provided by Red Hat bind package toconfigure the ISC BIND named(8) DNS
// server as a caching only nameserver (asa localhost DNS resolver only).
//
// See /usr/share/doc/bind*/sample/ forexample named configuration files.
//

options {
listen-on port 53 { 127.0.0.1;192.168.137.23; };
listen-on-v6 port 53 { ::1; };
directory "/var/named";
dump-file "/var/named/data/cache_dump.db";
statistics-file "/var/named/data/named_stats.txt";
memstatistics-file "/var/named/data/named_mem_stats.txt";
allow-query { localhost; };
recursion yes;

dnssec-enable yes;
dnssec-validation yes;
dnssec-lookaside auto;

/* Path to ISC DLV key */
bindkeys-file "/etc/named.iscdlv.key";

managed-keys-directory "/var/named/dynamic";
};

logging {
channel default_debug {
file"data/named.run";
severity dynamic;
};
};

zone "." IN {
type hint;
file "named.ca";
};
include"/etc/named.rfc1912.zones";
include "/etc/named.root.key";

zone "123.com" IN {
type master;
file "123.com.zone";
notify yes;
also-notify { 192.168.137.21; };

};

zone "137.168.192.in-addr.arpa"IN {
type master;
file "137.168.192.zone";
notify yes;
also-notify { 192.168.137.21; };
};

[root@Client ~]# vim/var/named/123.com.zone
$TTL 1D
@ IN SOA @ admin.123.com. (
20150725 ; serial
1D ; refresh
1H ; retry
1W ; expire
3H ) ; minimum
IN NS ns.123.com.
ns IN A 192.168.137.23
www IN A 11.11.11.11
IN MX 5 mail.123.com.
mail IN A 192.168.137.23
wang IN A 111.111.111.111

[root@Client ~]# vim/var/named/137.168.192.zone
$TTL 1D
@ IN SOA @ admin.123.com. (
20150723 ; serial
1D ; refresh
1H ; retry
1W ; expire
3H) ; minimum
IN NS ns.123.com.
23 IN PTR ns.123.com.
23 IN PTR mail.123.com.

从上配置：
[root@client ~]# vim /etc/named.conf
//
// named.conf
//
// Provided by Red Hat bind package toconfigure the ISC BIND named(8) DNS
// server as a caching only nameserver (asa localhost DNS resolver only).
//
// See /usr/share/doc/bind*/sample/ forexample named configuration files.
//

options {
// listen-on port 53 { 127.0.0.1; };
// listen-on-v6 port 53 { ::1; };
directory "/var/named";
dump-file "/var/named/data/cache_dump.db";
statistics-file"/var/named/data/named_stats.txt";
memstatistics-file "/var/named/data/named_mem_stats.txt";
allow-query { localhost; };
recursion yes;

dnssec-enable yes;
dnssec-validation yes;
dnssec-lookaside auto;

/* Path to ISC DLV key */
bindkeys-file "/etc/named.iscdlv.key";

managed-keys-directory "/var/named/dynamic";
};

logging {
channel default_debug {
file"data/named.run";
severity dynamic;
};
};

zone "." IN {
type hint;
file "named.ca";
};

include"/etc/named.rfc1912.zones";
include "/etc/named.root.key";

zone "123.com" IN {
type slave;
file "slaves/123.com.zone";
masters { 192.168.137.23; };
};

zone "137.168.192.in-addr.arpa"IN {
type slave;
file "slaves/137.168.192.zone";
masters { 192.168.137.23; };
};