BIND部署DNS.docxVIP

DNS理论知识DNS分类主DNS、从DNS、转发DNS、缓存DNSDNS中记录类型SOA可以理解为一段为自己dns做备注说明的文本，一般与ns一致比如： ns域的授权名称服务器NSDName: DNS的FQDN.64899IN NS .64899IN NS.64899IN NS.mx域的邮件交换器，要跟着一个优先值，越小越高.7200IN MX20.7200IN MX20 .a ipv4主机地址aaaa ipv6主机地址ptr接卸ip的指针，反向记录cname 权威（正式）名称，定义别名记录.1154IN CNAME.DNS命名规范26个英文字母0,1,2,3,4,5,6,7,8,9 是个数字-（英文中的连词号）最多63字节长度master-view文件上配置check-names ignore;忽略域名检查规范。域名解析测试host、nslookup、dig部署bind部署单台dns配置yum源使用centos6自带的yum源yum安装bindyum install bind-utils bind bind-devel bind-chrootrpm –qa|grep bind编辑/etc/named.conf 主配置文件option{version“ ”;listen-on port 53{any;};directory“/var/named/chroot/etc/”;pid-file“/var/named/chroot/var/run/named/named.pid”;allow-query{any;};Dump-file “/var/named/chroot/var/log/binddump.db”;Statistics-file “/var/named/chroot/var/log/named_stats”;zone-statistics yes;memstatistics-file “log/mem_stats”;empty-zones-enable no;forwarders{;;};};key“rndc-key”{algorithm hmac-md5;secret“Eqw4hc1GExUWeDkKBX/pBg==”;};controls{inet port 953allowd {;}keys{“rndc-key”;};};logging{channel warning{file “/var/named/chroot/var/log/dns_warning” versions 10 size 10m;severity warning;print-category yes;print-severity yes;print-time yes;};channel general_dns{file “/var/named/chroot/var/log/dns_log”versions 10 size 100m;severity info;print-category yes;print-severity yes;print-time yes;};caegory default{warning;};category queries{general_dns;};};include”/var/named/chroot/etc/view.conf”;检测md5值 md5sum /etc/named.conf570816bbc442241250e90c7112e4d53b /etc/named.conf编辑/etc/rndc.key,rndc的key也就是rndc客户端访问bind服务器的key定义到客户端key“rndc-key”{algorithm hmac-md5;secret“Eqw4hc1GExUWeDkKBX/pBg==”;};编辑/etc/rndc.conf，rndc配置文件，key需要与rhdc.key一致。key“rndc-key”{algorithm hmac-md5;secret“Eqw4hc1GExUWeDkKBX/pBg==”;};opetions{default-key “rndc-key”;default-server;default-port 953;};编辑/var/named/chroot/etc/view.confview “view”{zone “”{ type master; file “.zone”; allowd-transfer{ 11;};notify yes;also-notify{11;};};};编辑/var/named/chroot/etc/.zone$ORIGIN.;声明配置文件在.下生效$TTL3600;1 IN SOA . .(2000;serial 修改mast