centos7 dns(仅bind)安装配置

1.安装bind

yum install -y bind  bind-utils

2.配置/etc/named.conf，主要修改两个127.0.0.1为any

3.  配置/etc/named.rfc1912.zones

增加一个正向解析与一个反向解析的配置，可以拷贝其他的zone 配置，如下所示server.com和56.168.192.in-addr.arpa两个zone是新增的

zone "abc.com" IN {
        type master;
        file "abc.com.zone";
        allow-update { none; };
};
zone "71.168.192.in-addr.arpa" IN {
        type master;
        file "abc.com.local";
        allow-update { none; };
};

4. 拷贝/var/named/目录下named.localhost和named.loopback分别为我们在named.rfc1912.zones中设置的正向解析文件server.com.zone和反向解析文件server.com.local，注意文件名的对应。

[root@test-dns etc]# cd /var/named
[root@test-dns named]# cp -p named.localhost  abc.com.zone
[root@test-dns named]# vim abc.com.zone

$TTL 1D
@       IN SOA  abc.com. rname.invalid. (
                                        0       ; serial
                                        1D      ; refresh
                                        1H      ; retry
                                        1W      ; expire
                                        3H )    ; minimum
        NS      @
        A       127.0.0.1
        AAAA    ::1
        NS      ns.abc.com.
ns      IN A    192.168.71.124
www     IN A    192.168.71.124
email   IN A    192.168.71.124

修改反向解析

[root@test-dns named]# cp -p named.localhost  abc.com.local
[root@test-dns named]# vim abc.com.local

$TTL 1D
@       IN SOA  abc.com. rname.invalid. (
                                        0       ; serial
                                        1D      ; refresh
                                        1H      ; retry
                                        1W      ; expire
                                        3H )    ; minimum
        NS      @
        A       127.0.0.1
        AAAA    ::1
        PTR     localhost.
        NS      ns.abc.com.
ns      A       192.168.71.124
124     PTR     www.abc.com.
124     PTR     email.abc.com.

 6、这一步可选，如果反向解析文件server.com.local的所属组不是named，那么将其修改为named。

7、配置本机DNS1(用于测试)

[root@test-dns ~]# vim /etc/sysconfig/network-scripts/ifcfg-ens192 

TYPE=Ethernet
PROXY_METHOD=none
BROWSER_ONLY=no
BOOTPROTO=static
DEFROUTE=yes
IPV4_FAILURE_FATAL=no
IPV6INIT=yes
IPV6_AUTOCONF=yes
IPV6_DEFROUTE=yes
IPV6_FAILURE_FATAL=no
IPV6_ADDR_GEN_MODE=stable-privacy
NAME=ens192
DEVICE=ens192
ONBOOT=yes
IPADDR=192.168.71.137
NETMASK=255.255.255.0
GATEWAY=192.168.71.254
DNS1=192.168.71.137

8、重启网络，启动named服务。

9、验证：nslookup www.abc.com   /  nslookup 192.168.71.214

[root@test-dns named]# nslookup www.abc.com 
Server:		192.168.71.137
Address:	192.168.71.137#53

Name:	www.abc.com
Address: 192.168.71.124

[root@test-dns named]# nslookup 192.168.71.124
124.71.168.192.in-addr.arpa	name = www.abc.com.
124.71.168.192.in-addr.arpa	name = email.abc.com.