Fedora8下主辅DNS多域配置文件及区域文件的设置

Fedora8下主辅DNS多域配置文件及区域文件的设置主DNS IP地址：10.1.5.120 DNS:10.1.5.120辅助DNS IP地址：10.1.5.132 DNS:10.1.5.132测试机的IP地址：10.1.5.130 DNS:10.1.5.132如何安装bind包就不用多说了，下面的是named.conf文件和区域文件的配置例子。

主DNS配置Named.conf配置文件修改如下……………………………………配置如下……………………………………………………[root@localhost named]# vim /etc/named.conf//// named.caching-nameserver.conf//// Provided by Red Hat caching-nameserver package to configure the// ISC BIND named(8) DNS server as a caching only nameserver// (as a localhost DNS resolver only).//// See /usr/share/doc/bind*/sample/ for example named configuration files. //// DO NOT EDIT THIS FILE - use system-config-bind or an editor// to create named.conf - edits to this file will be lost on// caching-nameserver package upgrade.//options {listen-on port 53 { any; };listen-on-v6 port 53 { any; };directory "/var/named";dump-file "/var/named/data/cache_dump.db";statistics-file "/var/named/data/named_stats.txt";memstatistics-file "/var/named/data/named_mem_stats.txt";allow-query { any; };recursion yes;};logging {channel default_debug {file "data/named.run";severity dynamic;};};zone "." IN {type hint;file "named.ca";};zone "" IN {type master;file ".zone";allow-update { none ;};allow-transfer { 10.1.5.132 ;};notify yes;also-notify { 10.1.5.132 ;};};zone "" IN {type master;file ".zone";allow-transfer { 10.1.5.132 ;};allow-update { none ;};notify yes;also-notify { 10.1.5.132 ;};};zone "5.1.10.in-addr.arpa" IN {type master;file "10.1.5.arpa";allow-transfer { 10.1.5.132 ;};allow-update { none ;};notify yes;also-notify { 10.1.5.132 ;};};include "/etc/named.rfc1912.zones"; ……………………………………………………………………………………………………正向区域文件 .zone修改如下：……………………………………配置如下……………………………………………………[root@localhost etc]# vim /var/named/.zone$TTL 1D@ IN SOA . . (41 ; serial1D ; refresh1H ; retry1W ; expire3H ) ; minimumNS .ns1 A 10.1.5.120www A 10.1.5.120 …………………………………………………………………………………………………………正向区域文件 .zone修改如下：……………………………………配置如下…………………………………………………………[root@localhost named]# vim .zone$TTL 1D@ IN SOA . . (41 ; serial1D ; refresh1H ; retry1W ; expire3H ) ; minimumNS .ns2 A 10.1.5.120www A 10.1.5.120bbs A 10.1.5.120 …………………………………………………………………………………………………………反向区域文件10.1.5.arpa修改如下：……………………………………配置如下…………………………………………………………[root@localhost named]# vim 10.1.5.arpa$TTL 1D@ IN SOA . (41 ; serial1D ; refresh1H ; retry1W ; expire3H ) ; minimumNS .NS .120 PTR .120 PTR .120 PTR .120 PTR .120 PTR .120 PTR . …………………………………………………………………………………………………………配置辅助DNS服务器………………………………………配置如下………………………………………………………[root@localhost vsftpd]# cat /etc/named.conf//// named.caching-nameserver.conf//// Provided by Red Hat caching-nameserver package to configure the// ISC BIND named(8) DNS server as a caching only nameserver// (as a localhost DNS resolver only).//// See /usr/share/doc/bind*/sample/ for example named configuration files.//// DO NOT EDIT THIS FILE - use system-config-bind or an editor// to create named.conf - edits to this file will be lost on// caching-nameserver package upgrade.//options {listen-on port 53 { any; };listen-on-v6 port 53 { any; };directory "/var/named";dump-file "/var/named/data/cache_dump.db";statistics-file "/var/named/data/named_stats.txt";memstatistics-file "/var/named/data/named_mem_stats.txt"; allow-query { any; };recursion yes;};logging {channel default_debug {file "data/named.run";severity dynamic;};};zone "." IN {type hint;file "named.ca";};zone "" IN {type slave;masters { 10.1.5.120 ;};file "slaves/.zone";};zone "" IN {type slave;masters { 10.1.5.120 ;};file "slaves/.zone";};zone "5.1.10.in-addr.arpa" IN {type slave;masters { 10.1.5.120 ;};file "slaves/10.1.5.arpa";};include "/etc/named.rfc1912.zones"; …………………………………………………………………………………………说明：辅助DNS不需要安装正向反向查找区域在辅助DNS服务器下修改named目录的权限[root@localhost var]# ll总计 156……………………drwxr-x--- 5root named 4096 09-20 01:53 named 修改前为 root named ………………[root@localhost var]# chown named named[root@localhost var]# ll总计 156…………………drwxr-x--- 5 named named 4096 09-20 01:53 named 修改后为 named named …………………………………………………………………………………………………………在主DNS服务器下修改区域文件：.zone 10.1.5.arpa 的权限[root@localhost named]# chown named 10.1.5.arpa .zone .zone [root@localhost named]# ll总计 80-rw-r----- 1 named named 345 09-21 11:10 10.1.5.arpadrwxrwx--- 2 named named 4096 09-21 06:27 datadrwxrwx--- 2 named named 4096 2007-10-24 dynamic-rw-r----- 1 root named 2518 2006-03-07 named.ca-rw-r----- 1 root named 129 2007-06-21 named.empty-rw-r----- 1 root named 152 2007-06-21 named.localhost-rw-r----- 1 root named 145 2007-06-21 named.loopback-rw-r----- 1 named named 214 09-21 11:10 .zonedrwxrwx--- 2 named named 4096 2007-10-24 slaves-rw-r----- 1 named root 211 09-21 11:03 .zone测试在测试机上测试，正向解析如下：测试dig [root@localhost ~]# dig ……………………………………测试如下…………………………………………; <<>> DiG 9.5.0a6 <<>> ;; global options: printcmd;; Got answer:;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 54341;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 1, ADDITIONAL: 1;; QUESTION SECTION:;. IN A “.是要解析的地址”;; ANSWER SECTION:. 86400 IN A 10.1.5.120 “解析的结果”;; AUTHORITY SECTION:. 86400 IN NS . “提供解析的服务器”;; ADDITIONAL SECTION:. 86400 IN A 10.1.5.120 “服务器的地址”;; Query time: 5 msec;; SERVER: 10.1.5.132#53(10.1.5.132);; WHEN: Wed Sep 21 09:39:17 2011;; MSG SIZE rcvd: 79 …………………………………………………………………………………………测试[root@localhost named]# dig ……………………………………测试如下…………………………………………; <<>> DiG 9.5.0a6 <<>> ;; global options: printcmd;; Got answer:;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 62278;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 1, ADDITIONAL: 1 ;; QUESTION SECTION:;. IN A;; ANSWER SECTION:. 86400 IN A 10.1.5.120;; AUTHORITY SECTION:. 86400 IN NS .;; ADDITIONAL SECTION:. 86400 IN A 10.1.5.120;; Query time: 2 msec;; SERVER: 10.1.5.132#53(10.1.5.132);; WHEN: Wed Sep 21 11:41:58 2011;; MSG SIZE rcvd: 80 …………………………………………………………………………………………在测试机上测试，反向解析如下：[root@localhost ~]# dig -x 10.1.5.120……………………………………测试如下…………………………………………; <<>> DiG 9.5.0a6 <<>> -x 10.1.5.120;; global options: printcmd;; Got answer:;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 1515;; flags: qr aa rd ra; QUERY: 1, ANSWER: 6, AUTHORITY: 2, ADDITIONAL: 2 ;; QUESTION SECTION:;120.5.1.10.in-addr.arpa. IN PTR;; ANSWER SECTION:120.5.1.10.in-addr.arpa. 86400 IN PTR .120.5.1.10.in-addr.arpa. 86400 IN PTR .120.5.1.10.in-addr.arpa. 86400 IN PTR .120.5.1.10.in-addr.arpa. 86400 IN PTR .120.5.1.10.in-addr.arpa. 86400 IN PTR .120.5.1.10.in-addr.arpa. 86400 IN PTR .;; AUTHORITY SECTION:5.1.10.in-addr.arpa. 86400 IN NS .5.1.10.in-addr.arpa. 86400 IN NS .;; ADDITIONAL SECTION:. 86400 IN A 10.1.5.120. 86400 IN A 10.1.5.120;; Query time: 2 msec;; SERVER: 10.1.5.120#53(10.1.5.120);; WHEN: Tue Sep 20 04:28:16 2011;; MSG SIZE rcvd: 225 …………………………………………………………………………………………。