Linux 網域名稱伺服器配置

標籤：

cat /etc/redhat-release

CentOS Linux release 7.0.1406 (Core)

 

使用BIND構建DNS伺服器

1.BIND伺服器安裝

yum install bind* -y

2.修改配置

vim /etc/named.conf

//// named.conf//// Provided by Red Hat bind package to configure the ISC BIND named(8) DNS// server as a caching only nameserver (as a localhost DNS resolver only).//// See /usr/share/doc/bind*/sample/ for example named configuration files.//options {        listen-on port 53 { 192.168.124.129; };         listen-on-v6 port 53 { ::1; };        directory       "/var/named";        dump-file       "/var/named/data/cache_dump.db";        statistics-file "/var/named/data/named_stats.txt";        memstatistics-file "/var/named/data/named_mem_stats.txt";        allow-query     { localhost; };        /*          - If you are building an AUTHORITATIVE DNS server, do NOT enable recursion.         - If you are building a RECURSIVE (caching) DNS server, you need to enable            recursion.          - If your recursive DNS server has a public IP address, you MUST enable access            control to limit queries to your legitimate users. Failing to do so will           cause your server to become part of large scale DNS amplification            attacks. Implementing BCP38 within your network would greatly           reduce such attack surface         */        recursion yes;        dnssec-enable yes;        dnssec-validation yes;        dnssec-lookaside auto;        /* Path to ISC DLV key */        bindkeys-file "/etc/named.iscdlv.key";        managed-keys-directory "/var/named/dynamic";        pid-file "/run/named/named.pid";        session-keyfile "/run/named/session.key";};logging {        channel default_debug {                file "data/named.run";                severity dynamic;        };};zone "." IN {        type hint;        file "named.ca";};zone "nginxtest.com" IN {          type master;          file "nginxtest.com.zone";  };include "/etc/named.rfc1912.zones";include "/etc/named.root.key";

 

cp /var/named/named.localhost /var/named/nginxtest.com.zonevim /var/named/nginxtest.com.zone

3.建立正向地區檔案

$TTL 1D@       IN SOA  nginxtest.cn rname.invalid. (                                  0     ; serial                                  1D    ; refresh                                  1H    ; retry                                  1W    ; expire                                  3H )  ; minimum        NS      @@       A       192.168.124.130www     A       192.168.124.130mail    A       192.168.124.130

4.建立反向地區檔案

 

5.修改許可權

chmod 777 /var/named/nginxtest.com.zone

6.測試named.conf主設定檔 

named-checkconf 

7.測試地區檔案

named-checkzone nginxtest.com /var/named/nginxtest.com.zone 

8.配置DNS客戶機設定檔

vim /etc/resolv.conf

# Generated by NetworkManagerdomain localdomainsearch localdomainnameserver 192.168.124.129#nameserver 192.168.124.2

9.啟動DNS伺服器

systemctl daemon-reload systemctl start namedsystemctl status named

10.測試DNS伺服器

DNS伺服器的主要測試方法
使用nslookup、dig和host等專用工具可以對DNS伺服器進行較全面的測試 
nslookup命令在Linux和Windows系統中都預設安裝，是比較常用的測試載入器
進入nslookup命令交換環境

nslookup> server 192.168.124.129測試localhost主機網域名稱的正向解析 > localhost 測試localhost主機網域名稱的反向解析 > 127.0.0.1 測試互連網中的網域名稱解析> www.nginxtest.com 測試nginxtest.com域中的A記錄> mail.nginxtest.com 測試nginxtest.com域中的CNAME記錄> www.nginxtest.com 測試nginxtest.com域中的NS記錄> set type=ns                          （設定網域名稱查詢類型為NS即網域名稱記錄）> nginxtest.com 測試nginxtest.com域中的MX記錄> set type=mx                         （設定網域名稱查詢類型為MX即郵件交換記錄）> nginxtest.com 設定進行A記錄的測試> set type=a                            （設定網域名稱查詢類型為A即地址記錄）>mail.nginxtest.com

測試DNS解析是否成功

host www.nginxtest.com

www.nginxtest.com has address 192.168.124.130

配置nginx.conf

 

Linux 網域名稱伺服器配置