使用BIND來搭建簡單的主輔DNS伺服器

<b>文中有不對或者有不清楚的地方，請大家告訴我，謝謝！</b>

<b></b> 

<b>使用BIND來搭建簡單的主輔DNS伺服器</b>

<b>一．安裝BIND</b>

在系統中使用rpm –qa |grep bind檢視有沒有安裝BIND包。如果沒有安裝，則将系統盤挂載，使用rpm –ivh *bind* 安裝。

<a href="http://yuanbin.blog.51cto.com/attachment/200810/28/363003_1225192440sNhH.gif"></a>

<b>二．啟動BIND</b>

service named start

chkconfig --level 35 named on

<b>三．試驗拓撲</b>

試驗拓撲如下圖，使用bob.com域：

<a href="http://yuanbin.blog.51cto.com/attachment/200810/28/363003_1225192445geZH.jpg"></a>

<b>四．配置Master DNS</b>

<b>vi /etc/named.conf</b>

<b></b>

<b>2. </b><b>編輯區域資料檔案</b>

<b>vi /var/named/chroot/var/named/bob.com.dns</b>

<b>vi /var/named/chroot/var/named/bob.com.rev</b>

<b>$TTL 86400</b>

<b>@    IN    SOA   bob.com.   root.bob.com. (</b>

<b>                                                    2 ;              Serial</b>

<b>                                                    120 ;          Refresh</b>

<b>                                                    14400 ;      Retry</b>

<b>                                                    3600000 ;  Expire</b>

<b>                                                    86400 ) ;    Minimum</b>

<b>                     IN   NS      bob.com.</b>

<b>240               IN  PTR     master.bob.com.</b>

<b>241               IN  PTR     slave.bob.com.</b>

chown named.named /var/named/chroot/var/named/bob.com.*

<b>3. </b><b>測試</b>

<b>① </b>在Master DNS上使用host指令檢視資訊：<b></b>

[root@master /]#<b> host master.bob.com</b>

<b>master.bob.com has address 192.168.120.240</b>

[root@master /]#<b> host slave.bob.com</b>

<b>slave.bob.com has address 192.168.120.241</b>

<b>② </b>在Master DNS上使用nslookup指令檢視資訊：

[root@master /]#<b> nslookup</b>

<b>Server: 192.168.120.240</b>

<b>Address: 192.168.120.240#53</b>

<b>Address: 192.168.120.250</b>

<b>&gt; master.bob.com</b>

<b>Name: master.bob.com</b>

<b>Address: 192.168.120.240</b>

<b>&gt; 192.168.120.250</b>

<a href="http://yuanbin.blog.51cto.com/attachment/200810/28/363003_1225192448d9KS.jpg"></a>

<b>4. </b><b>檢視日志</b>

[root@master /]#<b>service named start</b>

[root@master /]#<b>cat /var/log/messages |grep named</b>

Sep 8 18:24:35 master named[15322]: <b>starting BIND 9.2.4 -u named -t /var/named/chroot</b>

Sep 8 18:24:35 master named[15322]: <b>using 1 CPU</b>

Sep 8 18:24:35 master named[15322]: <b>loading configuration from '/etc/named.conf'</b>

Sep 8 18:24:35 master named[15322]: <b>listening on IPv4 interface lo, 127.0.0.1#53</b>

Sep 8 18:24:35 master named[15322]: <b>listening on IPv4 interface eth0, 192.168.120.240#53</b>

Sep 8 18:24:35 master named[15322]: <b>command channel listening on 127.0.0.1#953</b>

Sep 8 18:24:35 master named[15322]: <b>command channel listening on ::1#953</b>

Sep 8 18:24:35 master named[15322]:<b> zone 0.0.127.in-addr.arpa/IN: loaded serial 1997022700</b>

Sep 8 18:24:35 master named[15322]: <b>zone 120.168.192.in-addr.arpa/IN: loaded serial 2</b>

Sep 8 18:24:35 master named[15322]:<b> zone bob.com/IN: loaded serial 2</b>

Sep 8 18:24:35 master named[15322]: <b>zone localhost/IN: loaded serial 42</b>

Sep 8 18:24:35 master named[15322]: <b>named startup succeeded</b>

Sep 8 18:24:35 master named[15322]: <b>running</b><b></b>

<b>5. </b><b>注意事項</b>

A.修改區域資料檔案在每次存盤時要注意增加Serial值，主要用來讓輔助伺服器同步主伺服器的區域資料檔案。

B.使用絕對域名時千萬别忘了後面要帶"."。

C.主配置檔案named.conf的";"不能少。

<b>五．配置Slave DNS</b>

<b>1. </b><b>編輯DNS的主配置檔案named.conf</b>

<b>2. </b><b>修改從主DNS複制過來的區域檔案存放目錄的權限</b>

<b>cd /var/named/chroot/var/named/slaves</b>

<b>① </b>在Slave DNS上檢視區域資料檔案有沒有從主DNS複制過來<b></b>

[root@slave /]#<b>ll /var/named/chroot/var/named/slaves</b>

<b>-rw------- 1 named named 406 Jun 13 23:50 bob.com.dns</b>

<b>-rw------- 1 named named 410 Jun 13 19:10 bob.com.rev</b>

<b>② </b>在Slave DNS上使用host指令檢視資訊

[root@slave /]#<b> host master.bob.com</b>

[root@slave /]#<b> host slave.bob.com</b>

<b>③ </b>在slave DNS上使用nslookup指令檢視資訊

[root@slave /]#<b> nslookup</b>

<b>Server: 192.168.120.241</b>

<b>Address: 192.168.120.241#53</b>

<a href="http://yuanbin.blog.51cto.com/attachment/200810/28/363003_1225192452uVoP.jpg"></a>

[root@slaves /]#<b>services named start</b>

[root@slaves /]#<b> cat /var/log/messages |grep named</b>

Jun 14 00:04:48 slave named[10083]: <b>starting BIND 9.2.4 -u named -t /var/named/chroot</b>

Jun 14 00:04:48 slave named[10083]: <b>using 1 CPU</b>

Jun 14 00:04:48 slave named[10083]:<b> loading configuration from '/etc/named.conf'</b>

Jun 14 00:04:48 slave named[10083]:<b> listening on IPv4 interface lo, 127.0.0.1#53</b>

Jun 14 00:04:48 slave named[10083]: <b>listening on IPv4 interface eth0, 192.168.120.241#53</b>

Jun 14 00:04:48 slave named[10083]: <b>command channel listening on 127.0.0.1#953</b>

Jun 14 00:04:48 slave named[10083]: <b>command channel listening on ::1#953</b>

Jun 14 00:04:49 slave named[10083]: <b>zone 0.0.127.in-addr.arpa/IN: loaded serial 1997022700</b>

Jun 14 00:04:49 slave named[10083]: <b>zone localhost/IN: loaded serial 42</b>

Jun 14 00:04:49 slave named[10083]: <b>named startup succeeded</b>

Jun 14 00:04:49 slave named[10083]: <b>running</b>

Jun 14 00:04:49 slave named[10083]: <b>zone 120.168.192.in-addr.arpa/IN: transferred serial 2</b>

Jun 14 00:04:49 slave named[10083]: <b>transfer of '120.168.192.in-addr.arpa/IN' from 192.168.120.240#53: end of transfer</b>

Jun 14 00:04:49 slave named[10083]: <b>zone bob.com/IN: transferred serial 2</b>

Jun 14 00:04:49 slave named[10083]: <b>transfer of 'bob.com/IN' from 192.168.120.240#53: end of transfer</b>

A.從主DNS複制過來的區域檔案存放目錄的權限。

B.主配置檔案named.conf的";"不能少。

     本文轉自yuanbin0710 51CTO部落格，原文連結：http://blog.51cto.com/yuanbin/108627，如需轉載請自行聯系原作者