Linux下源代码编译bind9.6安装和配置DNS服务器.docxVIP

Linux下源代码编译bind9.6安装和配置DNS服务器Linux下源代码编译bind9.6安装和配置DNS服务器/products/BIND/ 下载bind最新 bind-9.6.1rc1.tar.gz#./configure --prefix=/usr/local/named --enable-threads #--enable-threads开启多线程处理能力#make#make install#cd /var/named这是bsd的一个简单配置文件：options {directory /var/named;#我去哪找解析文件pid-file /var/run/named/pid;进程文件放这吧dump-file /var/dump/named_dump.db;statistics-file /var/stats/named.stats;listen-on { 3; };监听notify yes;logging {channelquery_log {file query.log;日志名severity info;级别和syslog差不多的那种print-time yes;print-category yes;};category queries {#分类Once a customized channel has been defined, a category option is used to categorize the channel and begin logging when named is restartedquery_log;};};forwarders {;5;};#我解析不了就给他};include acl.conf;view test {match-clients {xxx; }; #在acl.conf中定义recursion no;zone . {type hint;file named.root; #dig named.root或者这下：/domain/};全球的根域名服务器zone 0.0.127.IN-ADDR.ARPA {type master;file localhost.rev; #sh make-localhost或：$TTL 86400 @ IN SOA @ root.localhost (1 ; serial 28800 ; refresh 告诉某个区的辅域名服务器相隔多久检查该区的数据是否是最新的7200 ; retry 如果辅域名服务器超过刷新时间后无法访问主域名服务器那么就每隔一段重试时间就试着联系一次，重试时间通常比刷新时间要短604800 ; expire 如果期满时间内辅助域名服务器还是无法与主域名服务器联系上那么就宣布这个区失效，停止关于该区的任何查询应答86400 ; ttl否定缓存ttl值)官方推荐：刷新：24小时重试 2小时期满30天默认ttl 4天IN NS localhost.@ IN A };zone {type master;file fashionfree.fwd;};#zone 0.168.192. {# type master;# file master/test75.rev;#};使用rndc-confgen rndc.conf生成key文件然后通过tail -n10 rndc.conf | head -n9 | sed -e s/#\ //g named.conf将key文件写入name.confkey rndc-key {algorithm hmac-md5;secret YMVkQroow6D4rYGffjOkQw==;};controls {inet /* port 953allow { /any; } keys { rndc-key; };};这决定rndc用户要用什么加密密钥来验证身份才能给域名服务器发送控制消息　rndc是 bind 软件引进的远程控制通道，代替unix信号来控制 named 进程,可以用来对配置进行重新载入#named -c named.confnotify — Controls whether named notifies the slave servers when a zone is updated. It accepts the following options:yes — Notifies slave servers.no — Does not notify slave servers.explicit — Only notifies slave servers specified in an al