Linux下DNS伺服器的搭建及區域委派！

示意圖：

一、父域(gjp.com)的配置Red Hat Enterprise Linux 5.4

1.安裝DNS

[root@gjp99 ~]# mount /dev/cdrom /mnt/cdrom

mount: block device /dev/cdrom is write-protected, mounting read-only

[root@gjp99 ~]# cd /mnt/cdrom/Server

[root@gjp99 Server]# ll bind*

-r--r--r-- 64 root root 1001253 Jul 31 2009 bind-9.3.6-4.P1.el5.i386.rpm

-r--r--r-- 64 root root 44959 Jul 31 2009 bind-chroot-9.3.6-4.P1.el5.i386.rpm

-r--r--r-- 73 root root 2900989 Jul 31 2009 bind-devel-9.3.6-4.P1.el5.i386.rpm

-r--r--r-- 73 root root 450930 Jul 31 2009 bind-libbind-devel-9.3.6-4.P1.el5.i386.rpm

-r--r--r-- 76 root root 877241 Jul 31 2009 bind-libs-9.3.6-4.P1.el5.i386.rpm

-r--r--r-- 64 root root 233804 Jul 31 2009 bind-sdb-9.3.6-4.P1.el5.i386.rpm

-r--r--r-- 64 root root 173772 Jul 31 2009 bind-utils-9.3.6-4.P1.el5.i386.rpm

[root@gjp99 Server]# rpm -ivh bind-9.3.6-4.P1.el5.i386.rpm

warning: bind-9.3.6-4.P1.el5.i386.rpm: Header V3 DSA signature: NOKEY, key ID 37017186

Preparing... ########################################### [100%]

1:bind ########################################### [100%]

[root@gjp99 Server]# rpm -ivh bind-chroot-9.3.6-4.P1.el5.i386.rpm

warning: bind-chroot-9.3.6-4.P1.el5.i386.rpm: Header V3 DSA signature: NOKEY, key ID 37017186

1:bind-chroot ########################################### [100%]

[root@gjp99 Server]# rpm -ivh caching-nameserver-9.3.6-4.P1.el5.i386.rpm

warning: caching-nameserver-9.3.6-4.P1.el5.i386.rpm: Header V3 DSA signature: NOKEY, key ID 37017186

1:caching-nameserver ########################################### [100%]

[root@gjp99 Server]# rpm -qip bind-9.3.6-4.P1.el5.i386.rpm

[root@gjp99 Server]# rpm -ql bind* //檢視安裝的檔案路徑

/etc/dbus-1/system.d/named.conf

/etc/logrotate.d/named

/etc/named.conf

/etc/rc.d/init.d/named

/etc/rndc.conf

/etc/rndc.key

2.DNS基本配置：

[root@gjp99 Server]# cd /var/named/chroot/

[root@gjp99 chroot]# ls

dev etc var

[root@gjp99 chroot]# cd etc

[root@gjp99 etc]# ll

total 16

-rw-r--r-- 1 root root 405 Aug 2 21:30 localtime

-rw-r----- 1 root named 1230 Jul 30 2009 named.caching-nameserver.conf

-rw-r----- 1 root named 955 Jul 30 2009 named.rfc1912.zones

-rw-r----- 1 root named 113 Aug 20 19:29 rndc.key

[root@gjp99 etc]# cp -p named.caching-nameserver.conf named.conf

不加-p的話 所屬組為root，服務啟動不了！ //拷貝樣例檔案

total 20

-rw-r----- 1 root named 1230 Jul 30 2009 named.caching-nameserver.conf

-rw-r----- 1 root named 1230 Jul 30 2009 named.conf

[root@gjp99 etc]# vim named.conf

options {

listen-on port 53 { any; }; //監聽端口

listen-on-v6 port 53 { ::1; };

directory "/var/named";檢測的真實路徑：/var/named/chroot/var/named

dump-file "/var/named/data/cache_dump.db";

statistics-file "/var/named/data/named_stats.txt";

memstatistics-file "/var/named/data/named_mem_stats.txt";

allow-query { any; }; //允許查詢

allow-query-cache { any; }; //允許查詢緩存

};

logging {

channel default_debug {

file "data/named.run";

severity dynamic;

};

view localhost_resolver {

match-clients { any; }; //比對用戶端

match-destinations { any; }; //目的

recursion yes;

include "/etc/named.rfc1912.zones"; // 引用該檔案

[root@gjp99 etc]# vim named.rfc1912.zones

增加以下資訊：

zone "gjp.com" IN {

type master;

file "gjp.com.zone"; //要生成該檔案

allow-update { none; };

[root@gjp99 chroot]# cd var/named/ //注意準确路徑

[root@gjp99 named]# ll

total 36

drwxrwx--- 2 named named 4096 Aug 26 2004 data

-rw-r----- 1 root named 198 Jul 30 2009 localdomain.zone

-rw-r----- 1 root named 195 Jul 30 2009 localhost.zone

-rw-r----- 1 root named 427 Jul 30 2009 named.broadcast

-rw-r----- 1 root named 1892 Jul 30 2009 named.ca

-rw-r----- 1 root named 424 Jul 30 2009 named.ip6.local

-rw-r----- 1 root named 426 Jul 30 2009 named.local

-rw-r----- 1 root named 427 Jul 30 2009 named.zero

drwxrwx--- 2 named named 4096 Jul 27 2004 slaves

[root@gjp99 named]# cp -p localhost.zone gjp.com.zone //-p可以換成-a

total 40

-rw-r----- 1 root named 195 Jul 30 2009 gjp.com.zone

-rw-r----- 1 root named 195 Jul 30 2009 localhost.zone

-rw-r----- 1 root named 1892 Jul 30 2009 named.ca //根訓示檔案

[root@gjp99 named]#vim gjp.com.zone

[root@gjp99 named]# named-checkzone gjp.com gjp.com.zone

zone gjp.com/IN: loaded serial 42 OK

[root@gjp99 named]# named-checkconf /var/named/chroot/etc/named.conf

[root@gjp99 named]# service named start

Starting named: [ OK ]

[root@gjp99 ~]# tail -f /var/log/messages //監控日志情況

用實機測試（hostonly 與 vmware1 連接配接）

[root@gjp99 named]# vim /etc/resolv.conf //編輯過之後，在linux下才能使用nslookup

[root@gjp99 named]

# rndc reload //無需重新開機服務，隻改變更新的！

server reload successful

[root@gjp99 named]# nslookup www.gjp.com

Server: 192.168.2.100

Address: 192.168.2.100#53

Name: www.gjp.com

Address: 192.168.2.100

二、配置子域bj.gjp.com

[root@gjp99 etc]# pwd

/var/named/chroot/etc

[root@gjp99 etc]# vim named.rfc1912.zones

zone "bj.gjp.com" IN {

file "bj.gjp.com.zone";

[root@gjp99 ~]# cd /var/named/chroot/var/named

[root@gjp99 named]# cp -p gjp.com.zone bj.gjp.com.zone

total 44

-rw-r----- 1 root named 274 Aug 20 20:11 bj.gjp.com.zone

drwxrwx--- 2 named named 4096 Aug 20 20:23 data

-rw-r----- 1 root named 274 Aug 20 20:11 gjp.com.zone

[root@gjp99 named]# vim bj.gjp.com.zone

[root@gjp99 etc]# rndc reload

[root@gjp99 etc]# nslookup www.bj.gjp.com

Address: 192.168.2.100#53

Name: www.bj.gjp.com

Address: 192.168.3.100

Windows下

三、委派子域 sh.gjp.com

[root@gjp99 named]# vim gjp.com.zone

[root@gjp99 named]# rndc reload

四、将被委派的主機配置: Red Hat Enterprise Linux 5.3

主機IP

Ping 父域所在的主機IP

安裝 過程與父域主機相同

[root@www etc]# cp -p named.caching-nameserver.conf named.conf

[root@www etc]# pwd

[root@www etc]# cat named.conf

listen-on port 53 { any; };

directory "/var/named";

allow-query { any; };

match-clients { any; };

match-destinations { any; };

include "/etc/named.rfc1912.zones";

[root@www etc]# vim named.rfc1912.zones

增加以下記錄：

26 zone "sh.gjp.com" IN {

27 type master;

28 file "sh.gjp.com.zone";

29 allow-update { none; };

30 };

産生 sh.gjp.com.zone 檔案

[root@www named]# pwd

/var/named/chroot/var/named

[root@www named]# cp -p localdomain.zone sh.gjp.com.zone

[root@www named]#vim sh.gjp.com.zone

[root@www named]# service named start

啟動 named： [确定]

[root@www named]# vim /etc/resolv.conf

[root@www named]# rndc reload

[root@www named]# nslookup www.sh.gjp.com

Server: 192.168.2.12

Address: 192.168.2.12#53

Name: www.sh.gjp.com

Address: 192.168.4.100

在父域主機上測試：

[root@gjp99 named]# rndc flush //清緩存！

[root@gjp99 named]# nslookup www.sh.gjp.com

Non-authoritative answer:

Name: www.sh.gjp.com

RHEL 5.3被委派端：

無條件轉發：

[root@www ~]# cd /var/named/chroot/etc

[root@www etc]# vim named.conf

無條件轉發：forwarders {空格ip ; 空格}；

[root@www etc]# nslookup www.gjp.com

Name: www.gjp.com

Address: 192.168.2.100

[root@www etc]# nslookup www.bj.gjp.com

Name: www.bj.gjp.com

有條件轉發：

先删除上面的無條件轉發：forwarders{ }

增加如下資訊：

26 zone "gjp.com" IN {

27 type forward;

28 forwarders { 192.168.2.100; };

29 };

[root@www etc]# rndc reload

[root@www etc]# rndc flush

[root@www etc]# nslookup www.gjp.com

Address: 192.168.2.100

四、用一台XP系統測試：

1.把DNS指向被委派的主機：（RHEL 5.3）

2.把DNS指向父域所在的dns伺服器IP

本文轉自 gjp0731 51CTO部落格，原文連結:http://blog.51cto.com/guojiping/969738

Linux下DNS伺服器的搭建及區域委派！

繼續閱讀

httpd服務的部署、啟動、配置和簡單優化一、部署二、啟動三、配置檔案

配置網頁内容通路

手動安裝Intel network I217-LM網卡的Linux驅動

Windows下配置Apache的SSL服務

禁止ubuntu系統彈出報錯界面

Mac｜Windows系統本地照片自動上傳到伺服器

Ubuntu Linux下Apache的配置檔案

27 Best Free Eclipse Plug-ins for Java Developer to be ProductiveCode Quality PluginsText Editor PluginsDependency ManagementVersion Control Integration PluginsFramework Development Continuous Integration Related PluginsOther Utility Plugins

C經典書籍筆記——C陷阱與缺陷②(文法陷阱之優先級)一、錯誤案列二、優先級規律

線性表之順序表的實作

samba伺服器的功能

C++判斷素數、求最大公約數代碼判斷一個數是否為素數求兩個數的最大公約數

【Linux】UDP廣播封包接收速率問題

SequoiaDB巨杉資料庫C++驅動概述

Linux裝置模型（中）之上層容器

PowerPC平台 Linux移植三