智能dns搭建（Intelligent DNS build）.docVIP

智能dns搭建（Intelligent DNS build） First, the implementation of intelligent DNS Approximate process: Installing the configuration template view (equivalent to the conditional judgment in shell) - the view is read from different regional files based on a ACL list (which classifies and names IP in different regions) Get ready: host name Close the firewall, Selinux Synchronization time 1. Classify the IP of each line Install ripe-dbase-client-v3 Download Netcoms IP Whois3, -h, , -l, -i, MB, MAINT-CNCGROUP /tmp/test/cnc Download Telecom IP Whois3, -h, , -l, -i, MB, MAINT-CHINANET /tmp/test/china These files need two handles Here to achieve simulation, write two IP ACL Network using =20 # VIM /var/named/chroot/var/named/data/acl_cnc ACL cnc{ ; 0; 3; 00; 04; 192.168.20/24; }; / / - dont forget; China Telecom IP # VIM /var/named/chroot/var/named/data/acl_china ACL china{ 46; 68; 87; }; 2, configure DNS Install the template file caching-nameserver Rename the original file first # MV named.conf named.conf.bk # MV named.caching-nameserver.conf named.conf Options { Listen-on port {any 53;}; //---### Listen-on-v6 port 53 {:: 1}; Directory /var/named; Dump-file /var/named/data/cache_dump.db; Statistics-file /var/named/data/named_stats.txt; Memstatistics-file /var/named/data/named_mem_stats.txt; Allow-query {any}; //---###; Forwarders {;}; }; Logging { Channel default_debug { File data/named.run; Severity dynamic; }; }; / / view //view localhost_resolver { {localhost} / / match-clients; {localhost} / / match-destinations; Recursion / / yes; /etc/named.rfc1912.zones / / include; //}; Include data/acl_cnc; Include data/acl_china; View cnc_resolver { Match-clients {CNC; 9;}; Zone in { Type master; File data/.zone; }; }; View china_resolver { Match-clients {China; 1;}; Zone in { Type master; File data/.zone; }; }; View other { Match-clients {any;}; Zone in { Type master; File data/.zone; }; }; ////////////////////////////////////////////// If [con_1]; then Command1; Elif [con_2]; th