在CentOS 7 上用dns 自建服务器

问题：

1、安装bind服务，使用自建dns服务器
2、dns服务器 10.0.0.200
www.oldboyedu.com 192.168.36.202
解答：

1、关掉防火墙，然后查看是否关闭成功
[root@oldboy ~]# systemctl stop firewalld
[root@oldboy ~]# systemctl disable firewalld
[root@oldboy ~]# sestatus
[root@oldboy ~]# setenforce 0
[root@oldboy ~]# sestatus

2、进入/etc/selinux/config 配置文件
[root@oldboy ~]# vim /etc/selinux/config
# This file controls the state of SELinux on the system.
# SELINUX= can take one of these three values:
#     enforcing - SELinux security policy is enforced.
#     permissive - SELinux prints warnings instead of enforcing.
#     disabled - No SELinux policy is loaded.
SELINUX=disabled
# SELINUXTYPE= can take one of three values:
#     targeted - Targeted processes are protected,
#     minimum - Modification of targeted policy. Only selected processes are protected. 
#     mls - Multi Level Security protection.
SELINUXTYPE=targeted

centos 7 安装bind（DNS服务）

1、安装 bind 
yum install bind bind-utils

2、修改bind的配置文件
vim /etc/named.conf
 
options {
    listen-on port 53 { any; }; #监听任何ip对53端口的请求
    listen-on-v6 port 53 { ::1; };
    directory   "/var/named";
    dump-file   "/var/named/data/cache_dump.db";
    statistics-file "/var/named/data/named_stats.txt";
    memstatistics-file "/var/named/data/named_mem_stats.txt";
    recursing-file  "/var/named/data/named.recursing";
    secroots-file   "/var/named/data/named.secroots";
    allow-query     { any; };  #接收任何来源查询dns记录
 
    /*
     - If you are building an AUTHORITATIVE DNS server, do NOT enable recursion.
     - If you are building a RECURSIVE (caching) DNS server, you need to enable
       recursion.
     - If your recursive DNS server has a public IP address, you MUST enable access
       control to limit queries to your legitimate users. Failing to do so will
       cause your server to become part of large scale DNS amplification
       attacks. Implementing BCP38 within your network would greatly
       reduce such attack surface
    */
    recursion yes;
 
    dnssec-enable yes;
    dnssec-validation yes;
 
    /* Path to ISC DLV key */
    bindkeys-file "/etc/named.iscdlv.key";
 
    managed-keys-directory "/var/named/dynamic";
 
    pid-file "/run/named/named.pid";
    session-keyfile "/run/named/session.key";
};
 
logging {
        channel default_debug {
                file "data/named.run";
                severity dynamic;
        };

 
}；
#增加一个a.com域名的解析，具体解析规则在/var/named/oldboyedu.zone里
zone "oldboyedu.com.com" IN {
    type master;
    file "oldboyedu.com.zone";

include "/etc/named.rfc1912.zones";
include "/etc/named.root.key";

3、配置解析文件

先用vim创建,在解析配置文件
vim /var/named/oldboyedu.com.zone
cat/var/named/oldboyedu.com.zone

@   IN SOA  @ root.a.com. (
                    0   ; serial
                    1D  ; refresh
                    1H  ; retry
                    1W  ; expire
                    3H )    ; minimum
    NS  @
    A         192.168.36.202
www     A             192.168.36.202
@       MX      10   192.168.36.202
    AAAA          ::1

4、启动bind

systemctl  start  named

5、最后使用ping命令，看是否能ping通，ip地址是否一致

ping oldboyqiangedu.com