linux下智能DNS配置过程.docxVIP

linux下智能DNS配置过程摘要：对于配置智能DNS，主要用途为：1、解决网通与电信问题 2、实现区域规划（不同区域访问各自最近的服务器），下面以解决网通与电信连接问题的配置。至于实现2的功能，只需稍加更改即可。 一、DNS服务器安装1、 软件列表BIND 9.3.2/isc/bind9/9.3.2/bind-9.3.2.tar.gz/isc/bind9/9.4.0a6/bind-9.4.0a6.tar.gz2、 安装BIND 9安装BIND9：# tar zxvf bind-9.3.2.tar.gz# cd bind-9.3.2# ./configure --prefix=/usr/local/named --disable-ipv6# make make install建立BIND用户：# groupadd bind# useradd -g bind -d /usr/local/named -s /sbin/nologin bind创建配置文件目录：# mkdir –p /usr/local/named/etc# chown bind:bind /usr/local/named/etc# chmod 700 /usr/local/named/etc二、named.conf的配置创建主要的配置文件：# vi /usr/local/named/etc/named.conf===========================named.conf=======================acl trust-lan { /8; /16;};options {directory /usr/local/named/etc/;pid-file /var/run/named/named.pid;version 0.0.0;datasize 40M;allow-transfer {trust-lan;};recursion yes;allow-notify {trust-lan;};allow-recursion {trust-lan;};auth-nxdomain no;forwarders {;54;};};logging {channel warning{ file /var/log/named/dns_warnings versions 3 size 1240k;severity warning;print-category yes;print-severity yes;print-time yes;};channel general_dns{ file /var/log/named/dns_logs versions 3 size 1240k;severity info;print-category yes;print-severity yes;print-time yes;};category default { warning; };category queries { general_dns; };};zone . {type hint;file named.root;};acl CNC {/16;/17;/17;/16;/16;/16;/16;注：这些根据情况输入IP地址段};view view_cnc {match-clients { CNC; };zone . {type hint;file named.root;};zone 0.0.127.IN-ADDR.ARPA {type master;file localhost.rev;};include master/cnc.def;};view view_any {match-clients { any; };zone . {type hint;file named.root;};zone 0.0.127.IN-ADDR.ARPA {type master;file localhost.rev;};include master/telecom.def;};添加完成后，保存。三、更新根区文件：# cd /usr/local/named/etc/# wget /domain/named.root创建PID和日志文件：# mkdir /var/run/named/# chmod 777 /var/run/named/# chown bind:bind /var/run/named/# mkdir /var/log/named/# touch /var/log/named/dns_warnings# touch /var/log/named/dns_logs# chown bind:bind /var/log/named/*# mkdir master# touch m