Linux搭建DNS伺服器

Linux搭建DNS伺服器
系統內容：CentOS 6.5 mini
IP地址：192.168.100.100


1.安裝相關軟體包
# yum install -y bind* caching-nameserver


2.防火牆連接埠開放
# vi /etc/sysconfig/iptables
-AINPUT -m state --state NEW -m tcp -p tcp --dport 53 -j ACCEPT
-AINPUT -m state --state NEW -m udp -p udp --dport 53 -j ACCEPT
-AINPUT -m state --state NEW -m tcp -p tcp --dport 953 -j ACCEPT

# service iptables restart
# /etc/rc.d/init.d/iptables save


3.關閉selinux
# vi /etc/selinux/config
SELINUX=disabled


4.修改named.conf
# vi /etc/named.conf

listen-on port 53 { any; };listen-on-v6 port 53 { any; };allow-query     { any; };

5.在bind的主設定檔中添加該域

# vi /etc/named.rfc1912.zones

zone "baidu.com" IN{    type master;    file "baidu.com.zone";};zone "doiido.com" IN{    type master;    file "doiido.com.zone";};zone "1.10.in-addr.arpa" IN {    type master;    file "1.10.zone";};

6.建立域的zone檔案
（這裡的檔案名稱必須是和上面一樣）
# cd /var/named
# touch baidu.com.zone
# touch doiido.com.zone
# touch 1.10.zone


7.編輯zone檔案
# vi baidu.com.zone

$TTL 86400@       IN SOA          ns.baidu.com. root (                                        1       ; serial                                        1D      ; refresh                                        1H      ; retry                                        1W      ; expire                                        3H )    ; minimum@       IN      NS      ns.baidu.com.ns      IN      A       115.239.211.110www     IN      A       115.239.211.110

# vi doiido.com.zone

$TTL 86400@       IN SOA          ns.doiido.com. root (                                        1       ; serial                                        1D      ; refresh                                        1H      ; retry                                        1W      ; expire                                        3H )    ; minimum@       IN      NS      ns.doiido.com.ns      IN      A       1.1.1.1www     IN      A       1.1.1.1

# vi 1.10.zone

$TTL 86400@       IN SOA           ns.doiido.com. ns.baidu.com. (                                        12         ; serial                                        28800      ; refresh                                        14400      ; retry                                        3600000    ; expire                                        86400 )    ; minimum@        IN      NS       ns.doiido.com.1        IN      PTR      www.doiido.com.110      IN      PTR      www.baidu.com.

8.修改剛才添加的域檔案的許可權
# chmod o+r /var/named/*


9.修改resolv.conf檔案
# vi /etc/resolv.conf
nameserver 192.168.100.100


10.測試組態檔案
# named-checkzone doiido.com /var/named/doiido.com.zone
# named-checkzone baidu.com /var/named/baidu.com.zone


11.重新啟動named服務

# service named restart