從零開始部署bind9伺服器之二：部署快取服務器

標籤：從零開始部署bind9伺服器之二：部署快取服務器

所有操作均在192.168.1.104上進行

 

一、安裝bind9：

yum install -y bind

 

 

二、修改設定檔：

cp /etc/named.conf{,.back}              //先做備份

vim /etc/named.conf

650) this.width=650;" src="http://s4.51cto.com/wyfs02/M01/8C/52/wKiom1hqOj2CHUEcAAIIvK9tNW0151.png" title="b.PNG" alt="wKiom1hqOj2CHUEcAAIIvK9tNW0151.png" />

 

 

三、啟動服務：

chkconfig --level 35 named on          //設定開機啟動

service named start

 

 

驗證：

650) this.width=650;" src="http://s5.51cto.com/wyfs02/M01/8C/4E/wKioL1hqOm3Do_r3AADYj5LmZ5s755.png" title="b.PNG" alt="wKioL1hqOm3Do_r3AADYj5LmZ5s755.png" />

dig -t A www.souhu.com @192.168.1.104      //在192.168.1.0/24主機上操作

650) this.width=650;" src="http://s2.51cto.com/wyfs02/M02/8C/52/wKiom1hqOoOTnHVQAABcK98PPUw645.png" title="b.PNG" alt="wKiom1hqOoOTnHVQAABcK98PPUw645.png" />

 

 

dig -t A www.sina.com @192.168.1.104     //在非192.168.1.0/24主機上操作

650) this.width=650;" src="http://s1.51cto.com/wyfs02/M01/8C/4E/wKioL1hqOpyxr35WAAC2iMdEH2s621.png" title="b.PNG" alt="wKioL1hqOpyxr35WAAC2iMdEH2s621.png" />

 

 

附：

/etc/named.conf

//

// named.conf

//

// Provided byRed Hat bind package to configure the ISC BIND named(8) DNS

// server as acaching only nameserver (as a localhost DNS resolver only).

//

// See/usr/share/doc/bind*/sample/ for example named configuration files.

//

 

//自訂acl

acl myNet {

              192.168.1.0/24;      

};

 

options {

              listen-on port 53 { 192.168.1.104;127.0.0.1; };

//           listen-on-v6 port 53 { ::1; };

              directory             "/var/named";

              dump-file            "/var/named/data/cache_dump.db";

        statistics-file"/var/named/data/named_stats.txt";

        memstatistics-file"/var/named/data/named_mem_stats.txt";

              allow-query     { any; };     //允許任何主機查詢

              recursion yes;                //開啟遞迴查詢功能

              allow-recursion { myNet; };   //只允許指定的用戶端進行遞迴查詢

              dnssec-enable no;             //關閉dnssec

              dnssec-validation no;         //關閉dnssec

 

              /* Path to ISC DLV key */

//           bindkeys-file"/etc/named.iscdlv.key";

 

//           managed-keys-directory"/var/named/dynamic";

};

 

logging {

        channel default_debug {

                file"data/named.run";

                severity dynamic;

        };

};

 

zone"." IN {

              type hint;

              file "named.ca";

};

 

include"/etc/named.rfc1912.zones";

include"/etc/named.root.key";

 

從零開始部署bind9伺服器之二：部署快取服務器