使用bind配置DNS實驗 一、實驗環境:Red Hat Enterprise Linux Server release 5.6主機名稱 www.2cto.com IP系統版本Host rolehotel01192.168.2.111OEL5.6serverhotel02192.168.2.112OEL5.6clienthotel03192.168.2.113OEL5.6client….. www.2cto.com 配置說明:NDS伺服器放在了hotel01(master)節點上,對hotel01、hotel02、hotel03節點的主機名稱進行解析。 二、安裝配置DNS1. 安裝bind、caching-nameserver軟體包--因使用的是未註冊的OEL版本,所以yum不能線上安裝bind軟體--安裝下面bind包,如果缺少可以在安裝盤上尋找並安裝[root@hotel01 ~]# rpm -qa|grep bindbind-utils-9.3.6-16.P1.el5ypbind-1.19-12.el5bind-chroot-9.3.6-16.P1.el5bind-9.3.6-16.P1.el5bind-libs-9.3.6-16.P1.el5bind-libbind-devel-9.3.6-16.P1.el5bind-devel-9.3.6-16.P1.el5bind-libs-9.3.6-16.P1.el5 [root@hotel01 ~]# rpm -qa|grep caching-nameservercaching-nameserver-9.3.6-16.P1.el5 2. 修改bind設定檔BIND的設定檔name.conf還有地區檔案都在/var/named/chroot/目錄下設定檔named.conf在/var/named/chroot/etc/下,地區設定檔在/var/named/chroot/var/named/下 1) 修改設定檔named.conf[root@hotel01 ~]# cd /var/named/chroot/etc[root@hotel01 etc]# cp -p named.caching-nameserver.conf named.conf[root@hotel01 etc]# vi named.confoptions { listen-on port 53 { any; }; --把127.0.0.1改成any listen-on-v6 port 53 { ::1; }; directory "/var/named"; dump-file "/var/named/data/cache_dump.db"; statistics-file "/var/named/data/named_stats.txt"; memstatistics-file "/var/named/data/named_mem_stats.txt"; // Those options should be used carefully because they disable port // randomization // query-source port 53; // query-source-v6 port 53; allow-query { any; }; allow-query-cache { any; };};logging { channel default_debug { file "data/named.run"; severity dynamic; };};view localhost_resolver { match-clients { any; }; --把localhost改成any match-destinations { any; }; --把localhost改成any recursion yes; include "/etc/named.rfc1912.zones";}; 2) 修改設定檔named.rfc1912.zones,在檔案中添加以下內容[root@hotel01 etc]# pwd/var/named/chroot/etc[root@hotel01 etc]# vi named.rfc1912.zones zone "licz.com" IN { //這是自己設定的網域名稱 type master; file "licz.com.zone"; allow-update { none; };}; zone "2.168.192.in-addr.arpa" IN { //這是反向設定檔 type master; file "2.168.192.in-addr.zone"; allow-update { none; };}; 3) 建立leonarding.com.zone和2.168.192.in-addr.zon 地區檔案[root@hotel01 etc]# cd /var/named[root@hotel01 named]# cp -p localdomain.zone chroot/var/named/licz.com.zone[root@hotel01 named]# cp -p named.local chroot/var/named/2.168.192.zone --修改leonarding.com.zone和2.168.192.in-addr.zon 地區檔案[root@hotel01 named]# cd /var/named/chroot/var/named[root@hotel01 named]# vi licz.com.zone $TTL 86400@ IN SOA localhost root ( 42 ; serial (d. adams) 3H ; refresh 15M ; retry 1W ; expiry 1D ) ; minimum IN NS localhost//添加下面的正向檔案內容hotel01 IN A 192.168.2.111hotel02 IN A 192.168.2.112hotel03 IN A 192.168.2.113 [root@hotel01 named]# vi 2.168.192.in-addr.zone$TTL 86400@ IN SOA localhost. root.localhost. ( 1997022700 ; Serial 28800 ; Refresh 14400 ; Retry 3600000 ; Expire 86400 ) ; Minimum IN NS localhost.//添加下面的反向向檔案內容111 IN PTR hotel01.licz.com112 IN PTR hotel02.licz.com113 IN PTR hotel03.licz.com 4) 修改各節點/etc/resolv.conf檔案[root@hotel01 named]# vi /etc/resolv.confnameserver 192.168.2.111 [root@hotel02 named]# vi /etc/resolv.confnameserver 192.168.2.111 [root@hotel03 named]# vi /etc/resolv.confnameserver 192.168.2.111 3. 驗證測試[root@hotel01 etc]# nslookup> hotel01.licz.comServer: 192.168.2.111Address: 192.168.2.111#53 Name: hotel01.licz.comAddress: 192.168.2.111> hotel02.licz.comServer: 192.168.2.111Address: 192.168.2.111#53 Name: hotel02.licz.comAddress: 192.168.2.112> hotel03.licz.comServer: 192.168.2.111Address: 192.168.2.111#53 Name: hotel03.licz.comAddress: 192.168.2.113 [root@hotel01 named]# ping hotel03.licz.comPING hotel03.licz.com (192.168.2.113) 56(84) bytes of data.64 bytes from hotel03 (192.168.2.113): icmp_seq=1 ttl=64 time=10.8 ms64 bytes from hotel03 (192.168.2.113): icmp_seq=2 ttl=64 time=0.360 ms64 bytes from hotel03 (192.168.2.113): icmp_seq=3 ttl=64 time=0.332 ms64 bytes from hotel03 (192.168.2.113): icmp_seq=4 ttl=64 time=0.299 ms64 bytes from hotel03 (192.168.2.113): icmp_seq=5 ttl=64 time=0.306 ms