天天看點
傳回

Linux 配置bind 服務

下載下傳bind，我下載下傳的是bind-9.3.1rc1.tar.gz 

我下載下傳的檔案放在/root目錄下 
進入目錄解壓縮 
[root@linux root]#tar xfz bind-9.3.1rc1.tar.gz 
進如剛解壓出來的目錄 
[root@linux root]# cd bind-9.3.1rc1 
編譯配置 
[root@linux bind-9.3.1rc1]#./configure --prefix=/usr/local/named --enable-threads #--enable-threads開啟多線程處理能力  
[root@linux bind-9.3.1rc1]#make 
[root@linux bind-9.3.1rc1]#make install 

進入/usr/local/named 建立etc目錄 
[root@linux bind-9.3.1rc1]#cd /usr/local/named 
[root@linux named]# mkdir etc 

生成rndc控制指令的key檔案 
[root@linux named]# sbin/rndc-confgen > etc/rndc.conf 

從rndc.conf檔案中提取named.conf用的key  


root@linux named]# cd etc 

[root@linux etc]# tail -10 rndc.conf | head -9 | sed s/#\ //g >named.conf  

自動在/usr/local/named/etc 生成named,conf檔案 
建立區檔案目錄 

[root@linux etc]# mkdir /var/named 
進入/var/named 
[root@linux etc]# cd /var/named 
建立localhost.zone檔案 
[root@linux named]#vi localhost.zone 
$TTL    86400 
$ORIGIN localhost. 
@                       1D IN SOA       @ root ( 
42              ; serial (d. adams) 
3H              ; refresh 
15M             ; retry 
1W              ; expiry 
1D )            ; minimum 

1D IN NS        @ 
1D IN A         127.0.0.1 

建立named.local檔案 

[root@linux named]#vi named.local 
$TTL 1D
@  IN SOA   @ rname.invalid. (
0  ; serial
1D ; refresh
1H ; retry
1W ; expire
3H )  ; minimum
   NS @
   A  127.0.0.1
   AAAA  ::1


dig指令直接生成named.root檔案 

[root@linux named]#dig >named.root 
建立test.com域名正向解析檔案 

[root@linux named]#vi test.zone 

$ttl    1D 
@               IN SOA  test.com.  root.test.com. ( 

1053891162 
3H 
15M 
1W 
1D ) 

IN NS          test.com. 
IN MX    5    test.com. 
www                IN A          220.202.19.82 

建立test.com域名反向解析檔案 
[root@linux named]#vi test.local 
$TTL 86400 
@ IN SOA test.com. root.test.com.( 
20031001; 
7200; 
3600; 
43200; 
86400); 
@ IN NS test.com. 
82 IN PTR dns.test.com. 

配置named.conf加如以下代碼 

[root@linux etc]# vi named.conf  

options {  
directory "/var/named"; #named區檔案目錄  
pid-file "named.pid"; #程序id檔案名  
};  
controls { 
   inet 127.0.0.1 allow { localhost; } keys { rndc-key; };
}; 
zone "." IN { 
        type hint; 
        file "named.root"; 
}; 

zone "localhost" IN { 
        type master; 
        file "localhost.zone"; 
        allow-update { none; }; 
}; 

zone "0.0.127.in-addr.arpa" IN { 
        type master; 
        file "named.local"; 
        allow-update { none; }; 
}; 

zone "test.com" IN { 
        type master; 
        file "test.zone"; 
        allow-update { none; }; 
}; 


zone "33.168.192.in-addr.arpa" IN { 
        type master; 
        file "test.local"; 
        allow-update { none; }; 
}; 



現在配置完了可以啟動BIND了 

/usr/local/named/sbin/named -c /usr/local/named/etc/named.conf & 





報錯:
v-dev-redis01:/usr/local/named/etc# tail -100 /var/log/messages


Jun 26 14:04:26 v-dev-redis01 named[31466]: ----------------------------------------------------
Jun 26 14:04:26 v-dev-redis01 named[31466]: BIND 9 is maintained by Internet Systems Consortium,
Jun 26 14:04:26 v-dev-redis01 named[31466]: Inc. (ISC), a non-profit 501(c)(3) public-benefit 
Jun 26 14:04:26 v-dev-redis01 named[31466]: corporation.  Support and training for BIND 9 are 
Jun 26 14:04:26 v-dev-redis01 named[31466]: available at https://www.isc.org/support
Jun 26 14:04:26 v-dev-redis01 named[31466]: ----------------------------------------------------
Jun 26 14:04:26 v-dev-redis01 named[31466]: adjusted limit on open files from 65535 to 1048576
Jun 26 14:04:26 v-dev-redis01 named[31466]: found 1 CPU, using 1 worker thread
Jun 26 14:04:26 v-dev-redis01 named[31466]: using 1 UDP listener per interface
Jun 26 14:04:26 v-dev-redis01 named[31466]: using up to 4096 sockets
Jun 26 14:04:26 v-dev-redis01 named[31466]: loading configuration from '/usr/local/named/etc/named.conf'
Jun 26 14:04:26 v-dev-redis01 named[31466]: /usr/local/named/etc/named.conf:15: unknown key 'rndckey'
Jun 26 14:04:26 v-dev-redis01 named[31466]: loading configuration: failure
Jun 26 14:04:26 v-dev-redis01 named[31466]: exiting (due to fatal error)



在添加一個zjtest3的域名:
v-dev-redis01:/usr/local/named/etc# cat named.conf  加入


zone "zjtest3.com" IN {
        type master;
        file "zjtest3.zone";
        allow-update { none; };
};


添加:
v-dev-redis01:/var/named# cat zjtest3.zone 
$TTL 1D
@  IN SOA   zjtest3.com.  rname.invalid. (
0  ; serial
1D ; refresh
1H ; retry
1W ; expire
3H )  ; minimum
   NS @
   A  127.0.0.1
   AAAA  ::1
www   IN      A   192.168.32.173



通路外網報錯:

v-dev-redis01:/usr/local/named/etc# tail -f /var/log/messages
Jun 26 14:46:29 v-dev-redis01 named[3378]: client 192.168.33.29#61819 (www.baidu.com): query (cache) 'www.baidu.com/A/IN' denied
Jun 26 14:46:29 v-dev-redis01 named[3378]: client 192.168.33.29#51412 (tip.f.360.cn): query (cache) 'tip.f.360.cn/A/IN' denied
Jun 26 14:46:31 v-dev-redis01 named[3378]: client 192.168.33.29#63190 (imgcache.qq.com): query (cache) 'imgcache.qq.com/A/IN' denied
Jun 26 14:46:38 v-dev-redis01 named[3378]: client 192.168.33.29#54703 (www.baidu.com): query (cache) 'www.baidu.com/A/IN' denied
Jun 26 14:46:38 v-dev-redis01 named[3378]: client 192.168.33.29#59213 (imgcache.qq.com): query (cache) 'imgcache.qq.com/A/IN' denied
Jun 26 14:46:38 v-dev-redis01 named[3378]: client 192.168.33.29#52891 (s.qhupdate.com): query (cache) 's.qhupdate.com/A/IN' denied
Jun 26 14:46:38 v-dev-redis01 named[3378]: client 192.168.33.29#63828 (p0.qhimg.com): query (cache) 'p0.qhimg.com/A/IN' denied
Jun 26 14:46:41 v-dev-redis01 named[3378]: client 192.168.33.29#61930 (imgcache.qq.com): query (cache) 'imgcache.qq.com/A/IN' denied
Jun 26 14:46:44 v-dev-redis01 named[3378]: client 192.168.33.29#53316 (s.qhupdate.com): query (cache) 's.qhupdate.com/A/IN' denied
Jun 26 14:46:44 v-dev-redis01 named[3378]: client 192.168.33.29#50529 (p0.qhimg.com): query (cache) 'p0.qhimg.com/A/IN' denied
Jun 26 14:46:48 v-dev-redis01 named[3378]: client 192.168.33.29#60619 (se.360.cn): query (cache) 'se.360.cn/A/IN' denied
Jun 26 14:46:48 v-dev-redis01 named[3378]: client 192.168.33.29#58231 (imgcache.qq.com): query (cache) 'imgcache.qq.com/A/IN' denied


Jun 26 14:46:50 v-dev-redis01 named[3378]: client 192.168.33.29#56891 (imgcache.qq.com): query (cache) 'imgcache.qq.com/A/IN' denied
Jun 26 14:46:54 v-dev-redis01 named[3378]: client 192.168.33.29#53647 (se.360.cn): query (cache) 'se.360.cn/A/IN' denied
Jun 26 14:46:56 v-dev-redis01 named[3378]: client 192.168.33.29#49777 (p0.qhimg.com): query (cache) 'p0.qhimg.com/A/IN' denied
Jun 26 14:46:58 v-dev-redis01 named[3378]: client 192.168.33.29#49514 (imgcache.qq.com): query (cache) 'imgcache.qq.com/A/IN' denied
Jun 26 14:47:00 v-dev-redis01 named[3378]: client 192.168.33.29#65498 (imgcache.qq.com): query (cache) 'imgcache.qq.com/A/IN' denied
Jun 26 14:47:01 v-dev-redis01 named[3378]: client 192.168.33.29#54451 (s.qhupdate.com): query (cache) 's.qhupdate.com/A/IN' denied


options {  
directory "/var/named"; #named??錄鎂目錄  
pid-file "named.pid"; #陸酶?錄鎂?  
allow-query     { any; };
}; 

添加allow-query     { any; };
Redis Linux c# 檔案目錄 解壓縮
上一篇: dns服務bind使用
下一篇: Bind 服務的簡單配置

繼續閱讀