bind-9.8.4配置样例.docx

Bind-9.8.4-p2版本功能测试时间：2013/4/16测试目的9.8.4-p2之前版本存在远程攻击者利用正则表达式对服务器进行拒绝服务（内存消耗）的漏洞，此版本是打过补丁之后的版本，现对该版本的一些基本功能进行测试。测试环境本次测试在虚拟机环境下进行，共四台RHEL5名称IP地址用途RHEL1RHEL20RHEL300RHEL41测试记录1．递归查询测试配置说明主机Ip地址Resolver serverRoot server0Com server00Client1BIND的安装过程不再此列出。参见《BIND服务器安装手册》。以下仅列出各主机上的BIND的配置文件供参考上的配置/home/bind/etc/named.conf注：所有server上的named.conf配置都一样，后面不再一一列出。#named.conf fileinclude “/home/bind/etc/named.conf.options”;include “/home/bind/etc/named.conf.acl”;include “/home/bind/etc/named.conf.controls”;include “/home/bind/etc/named.conf.server”;include “/home/bind/etc/named.conf.key”;include “/home/bind/etc/named.conf.dlz”;include “/home/bind/etc/named.conf.trusted-keys”;include “/home/bind/etc/named.conf.view”;include “/home/bind/etc/named.conf.zone”;#include “/home/bind/etc/named.rfc1912.zones”;/home/bind/etc/named.conf.options#ptions fileoptions { listen-on port 53 { any; }; allow-query { any; }; recursion yes; };注：其他内容可注释也可做相应配置/home/bind/etc/named.conf.zonezone “.” IN {Type hint;File “named.ca”;};/home/bind/var/named/named.ca; This file holds the information on root name servers needed to; initialize cache of Internet domain name servers; (e.g. reference this file in the cache . file; configuration file of BIND domain name servers).;; This file is made available by InterNIC ; under anonymous FTP as; file /domain/named.root; on server FTP.INTERNIC.NET; -OR- RS.INTERNIC.NET;; last update: Dec 12, 2008; related version of root zone: 2008121200;; formerly NS.INTERNIC.NET;.32029INNS.INA0启动服务/etc/init.d/named start0上的配置/home/bind/etc/named.conf的配置同上/home/bind/etc/named.conf.options#ptions fileoptions { listen-on port 53 { any; }; allow-query { any; }; recursion no;};/home/bind/etc/named.conf.zonezone “.” IN { type master; file “db.root”;};/home/bind/var/named/db.root$TTL 3600$OR