Configure DNS secondary domain name and subdomain name server

Article Title: configure the DNS secondary domain name and subdomain name server. Linux is a technology channel of the IT lab in China. Includes basic categories such as desktop applications, Linux system management, kernel research, embedded systems, and open source.

　　I. Planning description:

Host A: Dual Nic

192.168.1.7 --> mydomain.org Primary Domain Name Server

192.168.10.7 --> myzone.org main Domain Name Server, which has two subdomains: market.myzone.org and develog.myzone.org

Host B: Dual Nic

192.168.1.6 --> mydomain.org secondary Domain Name Server

192.168.10.6 --> market.myzone.org subdomain name server

The two servers have DNS independent logs, which are used to record query (query_logs) Records and error (err_logs) records for later DNS management. This article only involves security issues.

For the installation process, refer to another article "Bind 9.4.0rc2 Installation notes (step by step to learn how to configure simple DNS )".

　Ii. host:

1. Main configuration file/etc/named. conf

options { directory "/var/named/"; version "0.0.0";};logging { channel dns_errors { file "/var/log/named/err_logs" versions 3 size 10m; severity error; print-category yes; print-severity yes; print-time yes; }; channel dns_queries { file "/var/log/named/query_logs" versions 3 size 10m; severity info; print-category yes; print-severity yes; print-time yes; }; category default { dns_errors; }; category queries { dns_queries; };};zone "." { type hint; file "named.ca";};zone "localhost" { type master; file "named.local";};zone "0.0.127.IN-addr.arpa" { type master; file "named.rev";};zone "mydomain.org" { type master; file "mydomain.org.zone"; allow-transfer { 192.168.1.6/32; };};zone "myzone.org" { type master; file "myzone.org.zone"; allow-transfer { 192.168.10.0/24; };};zone "10.168.192.in-addr.arpa" { type master; file "192.168.10.zone"; allow-transfer { 192.168.10.0/24; };};zone "1.168.192.in-addr.arpa" { type master; file "192.168.1.zone"; allow-transfer { 192.168.1.6/32; };};key "rndc-key" { algorithm hmac-md5; secret "oKLRLl8BolNj883OX1YcxQ==";};controls { inet 127.0.0.1 port 953 allow { 127.0.0.1; } keys { "rndc-key"; };}; # End of named.conf

[1] [2] [3] [4] [5] Next page