DNS 服务搭建.
2018-06-09 09:52
295 查看
DNS服务图解:
关闭防火墙:
[root@localhost ~]# setenforce 0
[root@localhost ~]# systemctl stop firewalld.service
[root@localhost ~]# systemctl disable firewalld.service
[root@localhost ~]# systemctl enable firewalld
一:下载BIND软件完成DNS解析功能
[root@localhost named]# yum install -y bind bind-utils
二:编辑配置文件(怎么访问?访问域?)
[root@localhost ~]# vim /etc/named.conf
//
// See /usr/share/doc/bind*/sample/ for example named configuration files.
//
// See the BIND Administrator's Reference Manual (ARM) for details about the
// configuration located in /usr/share/doc/bind-{version}/Bv9ARM.html
options {
listen-on port 53 { any; };
listen-on-v6 port 53 { any; };
directory "/var/named";
dump-file "/var/named/data/cache_dump.db";
statistics-file "/var/named/data/named_stats.txt";
memstatistics-file "/var/named/data/named_mem_stats.txt";
allow-query { any; };
};
logging {
channel default_debug {
file "data/named.run";
severity dynamic;
};
};
zone "." IN {
type hint;
file "named.ca";
};
zone "jd.com" IN {
type master;
file "jd.com.zone";
allow-update { none;};
};
include "/etc/named.rfc1912.zones";
include "/etc/named.root.key";
三:修改配置文件
[root@localhost named]# vim jd.com.zone
$TTL 600
@ IN SOA @ root (
0 ; serial
1D ; refresh
1H ; retry
1W ; expire
3H ) ; minimum
@ IN NS dns
dns IN A 192.168.1.182
ftp A 2.3.4.5
A 127.0.0.1
AAAA ::1
~
或者):
关闭防火墙:
[root@localhost ~]# setenforce 0
[root@localhost ~]# systemctl stop firewalld.service
[root@localhost ~]# systemctl disable firewalld.service
[root@localhost ~]# systemctl enable firewalld
一:下载BIND软件完成DNS解析功能
[root@localhost named]# yum install -y bind bind-utils
二:编辑配置文件(怎么访问?访问域?)
[root@localhost ~]# vim /etc/named.conf
//
// See /usr/share/doc/bind*/sample/ for example named configuration files.
//
// See the BIND Administrator's Reference Manual (ARM) for details about the
// configuration located in /usr/share/doc/bind-{version}/Bv9ARM.html
options {
listen-on port 53 { any; };
listen-on-v6 port 53 { any; };
directory "/var/named";
dump-file "/var/named/data/cache_dump.db";
statistics-file "/var/named/data/named_stats.txt";
memstatistics-file "/var/named/data/named_mem_stats.txt";
allow-query { any; };
/* - If you are building an AUTHORITATIVE DNS server, do NOT enable recursion. - If you are building a RECURSIVE (caching) DNS server, you need to enable recursion. - If your recursive DNS server has a public IP address, you MUST enable access control to limit queries to your legitimate users. Failing to do so will cause your server to become part of large scale DNS amplification attacks. Implementing BCP38 within your network would greatly reduce such attack surface */ recursion yes; dnssec-enable yes; dnssec-validation yes; /* Path to ISC DLV key */ bindkeys-file "/etc/named.iscdlv.key"; managed-keys-directory "/var/named/dynamic"; dnssec-validation yes; /* Path to ISC DLV key */ bindkeys-file "/etc/named.iscdlv.key"; managed-keys-directory "/var/named/dynamic"; pid-file "/run/named/named.pid"; session-keyfile "/run/named/session.key";
};
logging {
channel default_debug {
file "data/named.run";
severity dynamic;
};
};
zone "." IN {
type hint;
file "named.ca";
};
zone "jd.com" IN {
type master;
file "jd.com.zone";
allow-update { none;};
};
include "/etc/named.rfc1912.zones";
include "/etc/named.root.key";
三:修改配置文件
[root@localhost named]# vim jd.com.zone
$TTL 600
@ IN SOA @ root (
0 ; serial
1D ; refresh
1H ; retry
1W ; expire
3H ) ; minimum
@ IN NS dns
dns IN A 192.168.1.182
ftp A 2.3.4.5
A 127.0.0.1
AAAA ::1
~
或者):
相关文章推荐
- 使用 bind 搭建 DNS 服务(二)
- 使用Bind搭建DNS服务
- DNS主从服务搭建
- kubernetes---dns服务搭建指南
- 在k8s中搭建可解析hostname的DNS服务
- 《搭建DNS内外网的解析服务》RHEL6
- 搭建DNS主、从服务实验
- Bind搭建DNS服务
- 百晓生带你玩转linux系统服务搭建系列----DNS服务的搭建一(正向解析)
- 使用Bind搭建DNS服务
- CentOS5.6 搭建DNS域名服务
- LINUX6 上搭建DNS服务
- 使用Bind搭建DNS服务
- DNS_主从服务_详细搭建&&配置
- Linux学习–(DNS服务搭建)
- CentOS 6.8使用bind搭建内网DNS主从服务
- DNS基础及服务的搭建
- 搭建DNS服务
- 搭建DNS服务,反向解析ip