Configure DNS Server

Configure DNS Server

I. Installation

Yum install bind-utils.x86_64

Yum install bind

Ii. Configuration

Vim/etc/named. conf

Edit the file content as follows:

######################################## ####################

Options {

Listen-on port 53 {127.0.0.1; 192.168.4.103 ;};

Directory "/var/named ";

Allow-query {any ;};

};

Zone "." IN {

Type hint;

File "named. ca ";

};

Zone "example.com" IN {

Type master;

File "example.com. zone ";

};

Include "/etc/named. rfc1912.zones ";

Include "/etc/named. root. key ";

[Root @ server03 Desktop] # cd/var/named/

[Root @ server03 named] # cp named. localhost example.com. zone-p

[Root @ server03 named] # vim example.com. zone

To:

$ TTL 1D

@ In soa @ root.server03.example.com .(

0; serial

1D; refresh

1 H; retry

1 W; expire

3 H); minimum

NS @

A 127.0.0.1

Server03 in a 192.168.4.103

[Root @ server03 named] #/etc/init. d/named restart

Specify DNS Server:

[Root @ server03 named] # vim/etc/sysconfig/network-scripts/ifcfg-eth0

Add:

DNS1 = 192.168.4.254

Restart NIC:

[Root @ server03 named] #/etc/init. d/network restart

Test:

[Root @ server03 named] # nslookup server03

Server: 192.168.4.103

Address: 192.168.4.103 #53

Name: server03.example.com

Address: 192.168.4.103

[Root @ server03 named] # nslookup server03.example.com

Server: 192.168.4.103

Address: 192.168.4.103 #53

Name: server03.example.com

Address: 192.168.4.103

3. resolve an IP address to a domain name

Edit the name. conf file:

Add content:

Zone "4.168.192.in-addr. arpa" IN {

Type master;

File "192.168.4.zone ";

};

[Root @ server03 named] # pwd

/Var/named

[Root @ server03 named] # cp example.com. zone 192.168.4.zone-p

Edit the 192.168.4.zone file:

To:

$ TTL 1D

@ In soa @ root.server03.example.com .(

0; serial

1D; refresh

1 H; retry

1 W; expire

3 H); minimum

NS @

A 127.0.0.1

103 in ptr server03.example.com.

Restart named

[Root @ server03 named] #/etc/init. d/named restart

Test:

[Root @ server03 named] # nslookup 192.168.4.103

Server: 192.168.4.103

Address: 192.168.4.103 #53

103.4.168.192.in-addr. arpa name = server03.example.com.

4. Make the DNS server secure

Install bind-chroot

!!! Stop the named service

[Root @ server03 named] # service named stop

Installation:

[Root @ server03 named] # yum install bind-chroot

[Root @ server03 named] # cd/var/named/chroot/etc/

[Root @ server03 etc] # cp/etc/named *./-p

[Root @ server03 etc] # cd ../var/named/

[Root @ server03 named] # It is normal if ls is empty

[Root @ server03 named] # cp-rp/var/named /*./

[Root @ server03 named] # rm-rf chroot/

[Root @ server03 named] # ls

192.168.4.zone dynamic named. ca named. localhost slaves

Data example.com. zone named. empty named. loopback

Cannot have chroot

[Root @ server03 named] # cd/var/named

[Root @ server03 named] # pwd

/Var/named

[Root @ server03 named] # rm-rf example.com. zone

[Root @ server03 named] # rm-rf 192.168.4.zone

Restart the service:

[Root @ server03 etc] #/etc/init. d/named restart

Stopping named: [OK]

Starting named: [OK]

Verification:

[Root @ server03 etc] # nslookup server03.example.com

Server: 192.168.4.103

Address: 192.168.4.103 #53

Name: server03.example.com

Address: 192.168.4.103

[Root @ server03 etc] # nslookup 192.168.4.103

Server: 192.168.4.103

Address: 192.168.4.103 #53

103.4.168.192.in-addr. arpa name = server03.example.com.

Now named. comf uses/var/named/chroot/etc/named. conf

OK!