Build a DNS server in Linux and a dns server in linuxSystem Environment: CentOS 6.5 miniIP Address: 192.168.100.1001. Install related software packages# Yum install-y bind * caching-nameserver2. Open firewall ports# Vi/etc/sysconfig/iptables-AINPUT-m state -- state NEW-m tcp-p tcp -- dport 53-j ACCEPT-AINPUT-m state -- state NEW-m udp-p udp -- dport 53-j ACCEPT-AINPUT-m state -- state NEW-m tcp-p tcp -- dpo
One, the type of DNS server①Primary DNS Server (Master)A domain's master server holds the zone configuration file for that domain, and all of the configuration and changes are made on that server, and this essay explains how to configure a domain's primary DNS server②Secondary DNS Server (Slave)Domain slave server is g
Henan (China Telecom)
Preferred DNS 222.88.88.88
Alternative DNS 222.85.85.85
Zhengzhou City, Henan Province (China Telecom)
Preferred DNS: 219.150.150.150
Backup DNS: 219.150. 32.132
Zhengzhou City, Henan Province (China Netcom)
Preferred DNS: 202.102.224.68
Tags: cal grep nslookup no direct directory netstat images resRelated concepts:Forward parsing: Resolving a domain name to an IP addressReverse parsing: Resolving IP addresses to domain namesEnvironment: Linux Server One, IP address: 192.168.80.10The first step: Getting Ready for work[[email protected] ~]# yum install bind//Installation DNS service[[email protected] ~]# systemctl stop FIREWALLD//Turn off firewall[[email protected] ~]# Setenforce 0//Tu
1. Because of the design requirements of Exchange 2010, we need to add the relevant DNS records and add the following records:
Automatic discovery is an automatic Outlook feature provided by Exchange 2007 and above, and if your Outlook is above the 2007 SP2 version, you can enjoy the flexibility that automatic discovery brings to your machine. So we add a Autodiscover record here:
Autodiscover.xxx.xxx CAS Server1
Autodiscover.xxx.xxx CAS Server2
B
transaction with the client on this lease. this is probably the last time the client was renewed.
FAQ
Problem 1: inode authentication failure (connect failed)
Solution: User Permissions? (Failed occurs when the Administrator uid is set to 0)
Change uid back to 1000, or the reason for the inode's execution permission, change its execution permission, or change the owner and group? Disconnect and reconnect. Or restart inode and try again.
Problem 2: inode connection timeout (overtime ).
Solution:
)
Subnet Mask ......: 255.255.255.0
Default Gateway...: 192.168.0.1
PPP adapter dial-up connection:
Connection-specific DNS suffix .:
IP address ......: 211.149.128.147
Subnet Mask ......: 255.255.255.255
Default Gateway ......: 211.149.128.147
C: \>
The netsh command has the following powerful functions:
C: \> netsh
Netsh>?
The following commands are valid:
Commands in this context:
...-Move to the context level of the previous layer.
? -Display the
being started. Named 8.2.2-p3 displays the BIND Software Version 2. When an HUP signal is sent to the DNS server to restart the DNS server, the following LOG_NOTICE-level log information is generated: Nov 28 10:37:45 www named [10134]: reloading nameserver Where: Nov 28 10:37:45 indicates the restart time of the server Www display the name of the machine where the DNS
:/var/named/chroot/var/named/record filenameBuild the mainDNSServerRequirements: XX company exists a Web server, The site name is www.bj.com, and the IP address of the Web server is 192.168.1.1; There is an FTP server with an FTP name of ftp.bj.com,ftp server with IP 192.168.1.2; You now want all employees to access the site server and FTP server by domain name1. Install bind software# RPM-IVH bind-9.8.2-0.10.rc1.el6.i686.rpm# RPM-IVH bind-chroot-9.8.2-0.10.rc1.el6.i686.rpm2. Generate named.conf
record has a priority attribute (0-99 );
A: FQDN --> IP address, dedicated to forward resolution Library
PTR: IP --> FQDN, used for reverse resolution Library
Aaaa: FQDN --> IPv6, dedicated to forward resolution Library
Cname: official name
Resource Record type:
SOA: Name region name, which can be abbreviated as @ value: FQDN of the primary DNS server, or the region name of the current region;
Format
@ In
DNS configuration in Fedora8-general Linux technology-Linux technology and application information. For details, refer to the following section. In order to differentiate each host in the network, a unique address must be assigned to each host. This address is called an "ip address ". However, these numbers are hard to remember, so they are replaced by domain names. When a host needs to communicate with other hosts, you can use the host name to query
resolves the library, it proactively notifies the slave serverZone transferZone transfer:Full transfer: Transfer the entire analytic libraryIncremental transfer: Pass the part of the resolution library changeDomain:fully qualified Domain name forward: FQDN-to-IPReverse: IP-to-FQDNResponsible for the forward and reverse parsing libraries for the local domain name:Forward ZoneReverse RegionDNS resolutionThe process through which a complete query request passes:Client-->hosts file-->
)
RRT (Resource record type)
VALUE
Starting Authority
The default setting is 60 Minutes
Internet (in)
SOA (start of authority sets the master-server synchronization, in fact the authorized object)
Owner name, DNS name of the server, serial number, refresh interval, retry time, Expiration time, minimum TTL
Host Name
Log a specific TTL time (if present), otherwise the region TTL
Internet (in)
, which is generally in, representing the internet.● Type: resource type, which is common as follows:Between In A → IPv4 address: used to set the corresponding record of the IP address of the Host NameRouting in AAAA → IPv6 addressMailbox in MX → mail record: used to provide the mail server nameAlias in cname → alias: Used to set an alias for the host name in the region FileForward in PTR → pointer (reverse resolution): syntax (IP address in PTR host
resolution:Name-->ip forward parsingIp--name Reverse parsing4, a complete domain name query request through the process:Local Client---> View local Hosts file--local cache--Primary DNS server--Primary DNS cache--Caching DNS servers--querying domain names by iterationIii. Description of the configuration file1. Resource record: Resource RECORD,RR each domain cont
library has and can have only one SOA record, and must be placed in the first article;Ns:name service, domain name services record; A zone resolution library can have multiple NS records; One of them is the main;A:address, address record, FQDN---IPv4;AAAA: Address record, FQDN---IPv6;Cname:canonical name, alias record;Ptr:pointer,ip to FQDNMx:mail eXchanger, mail exchanger;Priority: 0-99, the smaller the number, the higher the priority;Definition for
BKJIA exclusive Article] Editor's note: On the public network, intelligent DNS is used on most second-level domain names and some non-public network domain names. It has been operating quite stably for more than a year. Xiaohui summarized the operation steps and some experiences in deploying and using intelligent DNS over the past year and shared them with you.
Last year, due to the large increase in second
. News in a 192.168.2.101
153. China in a 192.168.2.58
154. Echo "nameserver 211.71.191.26">/etc/resolv. conf // configure the local machine DNS server as the local machine IP Address
155. Start named
156./usr/local/named/sbin/named
157. Check for any error message
158. Tail/var/log/message
159. Jun 25 14:28:48 localhost named [18506]: zone created 192.in-ADDR. Arpa/In: loaded serial 20031001
160. Jun 25 14:28:48 localhost named [18506
DNS ServerIt is a domain name system or Domain Name Service. The domain name system assigns domain name addresses and IP addresses to hosts on the Internet. DNS software is a target that hackers are keen on and may cause security problems. This article provides 10 most effective methods to protect DNS servers.
1. Use a DNS
Service Domain DNS:
Service
DNS Server
Common DNS:English domain DNSPrimary DNS name: ns11.xincache.comSecondary DNS name: ns12.xincache.comNote: There are 5 groups of DNS in the new network, the corresponding numbers are 11/12;13/14;15
The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion;
products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the
content of the page makes you feel confusing, please write us an email, we will handle the problem
within 5 days after receiving your email.
If you find any instances of plagiarism from the community, please send an email to:
info-contact@alibabacloud.com
and provide relevant evidence. A staff member will contact you within 5 working days.