搭建伺服器之DNS

標籤：style   blog   http   color   io   os   ar   for   檔案   

DNS伺服器，實用軟體為bind，服務守護進程為named，一下記錄一下自己的搭建過程：

1.yum install bind*  其中包括bind本身軟體，測試dns的一些工具dig，nslookup等，還有chroot

2.vim /etc/named.conf

options {        listen-on port 53 { any; };        listen-on-v6 port 53 { any; };        directory       "/var/named";        dump-file       "/var/named/data/cache_dump.db";        statistics-file "/var/named/data/named_stats.txt";        memstatistics-file "/var/named/data/named_mem_stats.txt";        allow-query     { any; };        recursion yes;                dnssec-enable yes;        dnssec-validation yes;        dnssec-lookaside auto;        /* Path to ISC DLV key */        bindkeys-file "/etc/named.iscdlv.key";        managed-keys-directory "/var/named/dynamic";};logging {        channel default_debug {                file "data/named.run";                severity dynamic;        };};zone "." IN {        type hint;        file "named.ca";};zone "workstation." IN {        type master;        file "named.workstation";};

在此筆者設定了一個workstation的頂級域，檔案位於/var/named下。檔案內容如下：

$TTL 600@       IN SOA master.workstation. afu.master.workstation. (                2014091901 3H 15M 1W 1D)@       IN NS master.workstation.master.workstation. IN A 10.103.25.156www.workstation. IN A 10.103.27.166nfs.workstation. IN A 10.103.25.34ftp.workstation. IN CNAME www.workstation.samba.workstation. IN CNAME nfs.workstation.~                                               

實驗用筆者未設定反解檔案，以上配置即可讓區域網路內主機取得網域名稱解析服務了。

3.service named start

　　chkconfig named on

　　設定開機啟動解析服務

4.開啟防火牆53連接埠，vim /etc/sysconfig/iptables

*filter:INPUT ACCEPT [0:0]:FORWARD ACCEPT [0:0]:OUTPUT ACCEPT [0:0]-A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT-A INPUT -p icmp -j ACCEPT-A INPUT -i lo -j ACCEPT-A INPUT -m state --state NEW -m tcp -p tcp --dport 22 -j ACCEPT-A INPUT -m state --state NEW -m tcp -p tcp --dport 53 -j ACCEPT-A INPUT -m state --state NEW -m udp -p udp --dport 53 -j ACCEPT-A INPUT -j REJECT --reject-with icmp-host-prohibited-A FORWARD -j REJECT --reject-with icmp-host-prohibitedCOMMIT~               

service iptables restart

5.將用戶端dns地址指向本機。解析內網www.workstation。或者外網www.baidu.com成功。

 

搭建伺服器之DNS