linux 下DNS的配置三 辅DNS的配置

linux 下DNS的配置三 辅DNS的配置

接上一篇

实验环境VMware 6.5.2 + RedHat Enterprise 5

已经建好了一个DNS的主要区域，这次试着做一个辅DNS

辅DNS只是负责分流，防止主DNS 由于负载过重而导致客户端解析时间过长

一旦主DNS不存在了，那辅DNS 也就起不到解析的作用了，

首先 禁掉防火墙，配ip

[root@localhost ~]# setup

<a href="http://yuzeying.blog.51cto.com/attachment/200904/27/644976_1240831660sOcA.jpg"></a>

先选择 防火墙配置 （使用tab键切换）

<a href="http://yuzeying.blog.51cto.com/attachment/200904/27/644976_1240831663Hx7a.jpg"></a>

用tab键切换 ，空格选择 上下箭头移动

[root@localhost ~]# vi /etc/resolv.conf

把dns指向自己

; generated by /sbin/dhclient-script

search router

nameserver 192.168.0.6

保存退出

下一步 挂光盘 安装DNS所需的四个rpm包

[root@localhost ~]# cd /mnt

[root@localhost mnt]# ls

cdrom hgfs

[root@localhost mnt]# mount /dev/cdrom /mnt/cdrom

mount: block device /dev/cdrom is write-protected, mounting read-only

[root@localhost mnt]# cd /mnt/cdrom/Server

[root@localhost Server]#

[root@localhost Server]# rpm -ivh bind-

bind-9.3.3-10.el5.i386.rpm

bind-chroot-9.3.3-10.el5.i386.rpm

bind-devel-9.3.3-10.el5.i386.rpm

bind-libbind-devel-9.3.3-10.el5.i386.rpm

bind-libs-9.3.3-10.el5.i386.rpm

bind-sdb-9.3.3-10.el5.i386.rpm

bind-utils-9.3.3-10.el5.i386.rpm

[root@localhost Server]# rpm -ivh bind-9.3.3-10.el5.i386.rpm

warning: bind-9.3.3-10.el5.i386.rpm: Header V3 DSA signature: NOKEY, key ID 37017186

Preparing... ########################################### [100%]

1:bind ########################################### [100%]

[root@localhost Server]# rpm -ivh bind-utils-9.3.3-10.el5.i386.rpm

warning: bind-utils-9.3.3-10.el5.i386.rpm: Header V3 DSA signature: NOKEY, key ID 37017186

package bind-utils-9.3.3-10.el5 is already installed

[root@localhost Server]# rpm -ivh cach

cachefilesd-0.8-2.el5.i386.rpm

caching-nameserver-9.3.3-10.el5.i386.rpm

[root@localhost Server]# rpm -ivh caching-nameserver-9.3.3-10.el5.i386.rpm

warning: caching-nameserver-9.3.3-10.el5.i386.rpm: Header V3 DSA signature: NOKEY, key ID 37017186

1:caching-nameserver ########################################### [100%]

[root@localhost Server]# rpm -ivh bind-chroot-9.3.3-10.el5.i386.rpm

warning: bind-chroot-9.3.3-10.el5.i386.rpm: Header V3 DSA signature: NOKEY, key ID 37017186

1:bind-chroot ########################################### [100%]

下一步 编辑配置文件

[root@localhost Server]# cd /var/named/chroot/etc

[root@localhost etc]# ls

localtime named.caching-nameserver.conf named.rfc1912.zones rndc.key

[root@localhost etc]# vi named.conf

关键部位配置文件如下

// generated by named-bootconf.pl

options {

directory "/var/named";

/*

* If there is a firewall between you and nameservers you want

* to talk to, you might need to uncomment the query-source

* directive below. Previous versions of BIND always asked

* questions using port 53, but BIND 8.1 uses an unprivileged

* port by default.

*/

// query-source address * port 53;

};

//

// a caching only nameserver config

controls {

inet 127.0.0.1 allow { localhost; } keys { rndckey; };

zone "." IN {

type hint;

file "named.ca";

zone "localhost" IN {

type master;

file "localhost.zone";

allow-update { none; };

zone "0.0.127.in-addr.arpa" IN {

file "named.local";

zone "sina.com" IN {

type slave;

file "slaves/sina.zone";

masters { 192.168.0.5; };

zone "0.168.192.in-addr.arpa" IN {

file "slaves/sina.local";

zone "sohu.com" IN {

file "slaves/sohu.zone";

include "/etc/rndc.key";

-- INSERT --

这里需要注意的是，建议源文件尽量不要动，复制后在进行操作，注意标点符号(;)少了没有

这里类型 换成辅DNS （type slave;）

存储位置 应该是（file "slaves/sina.zone";）

还有就是标明哪个是主DNS （masters { 192.168.0.5; };）注意里面的空格

[root@localhost etc]# service network restart

Shutting down interface eth0: [ OK ]

Shutting down loopback interface: [ OK ]

Bringing up loopback interface: [ OK ]

Bringing up interface eth0: [ OK ]

[root@localhost etc]#

重启服务

这时我们可以ping一下 看看网通不通

[root@localhost etc]# ping 192.168.0.5

PING 192.168.0.5 (192.168.0.5) 56(84) bytes of data.

64 bytes from 192.168.0.5: icmp_seq=1 ttl=64 time=1.20 ms

64 bytes from 192.168.0.5: icmp_seq=2 ttl=64 time=0.165 ms

64 bytes from 192.168.0.5: icmp_seq=3 ttl=64 time=0.164 ms

64 bytes from 192.168.0.5: icmp_seq=4 ttl=64 time=0.186 ms

64 bytes from 192.168.0.5: icmp_seq=5 ttl=64 time=0.180 ms

--- 192.168.0.5 ping statistics ---

5 packets transmitted, 5 received, 0% packet loss, time 4000ms

rtt min/avg/max/mdev = 0.164/0.380/1.205/0.412 ms

也可以 telnet一下他的53号端口

[root@localhost etc]# telnet 192.168.0.5 53

Trying 192.168.0.5...

Connected to [url]www.sina.com[/url] (192.168.0.5).

Escape character is '^]'.

^]

telnet&amp;gt; quit

Connection closed.

（^]）这个符号是按住ctrl + 右（]}）的，之后选择quit 退出

这时我们找到slaves目录，看看他的下面有没有把主DNS中的正向和反向区域文件复制过来

[root@localhost etc]# cd /var/named/chroot/var/named

[root@localhost named]# ls

data localhost.zone named.ca named.local slaves

localdomain.zone named.broadcast named.ip6.local named.zero

[root@localhost named]# cd slaves

[root@localhost slaves]# ls

sina.local sina.zone sohu.zone

[root@localhost slaves]#

文件复制的没有问题，接下来我们来测试一下

[root@localhost slaves]# nslookup [url]www.sina.com[/url]

Server: 127.0.0.1

Address: 127.0.0.1#53

Name: [url]www.sina.com[/url]

Address: 192.168.0.5

[root@localhost slaves]# nslookup [url]www.sohu.com[/url]

Name: [url]www.sohu.com[/url]

[root@localhost slaves]# nslookup 192.168.0.5

5.0.168.192.in-addr.arpa name = [url]www.sohu.com.[/url]

5.0.168.192.in-addr.arpa name = [url]www.sina.com.[/url]

ok，正向和反向都没有问题

成功解析

写到最后，此次试验如果不成功，首先检查自己的拼写错误，注意文件名中的.和,的 区别

谨祝各位实验顺利

本文转自 yuzeying1 51CTO博客，原文链接:http://blog.51cto.com/yuzeying/153728