Bind9多级授权

*. DNS *

#-------------------------------------------------------------------------
zone "." IN {
        type hint;
        file "named.ca";
};

zone "." IN {
        type master;
        file "root.zone";
        allow-update { none; };
};
#-------------------------------------------
$TTL    86400
@               IN SOA  @       root (  42 3H 15M 1W 1D )

                IN NS           @
                IN A            192.168.65.1

com             IN NS           ns.com.
ns.com.         IN A            192.168.65.2
#-------------------------------------------------------------------------

 

 

*COM. DNS *

#-------------------------------------------------------------------------
zone "." IN {
        type hint;
        file "named.ca";
};

zone "com" IN {
        type master;
        file "com.zone";
        allow-update { none; };
};
#-------------------------------------------
$TTL    86400
@               IN SOA  @       root (  42 3H 15M 1W 1D )

                IN NS           @
                IN A            192.168.65.2

sina            IN NS           ns.sina.com.  
ns.sina.com.    IN A            192.168.65.3  # 真正的ns.sina.com域名不会因这里定义所查询

# ＊ 合法的ns.sina.com域名A记录只有在IP：192.168.65.3这个DNS里定义
#-------------------------------------------------------------------------

 

*SINA.COM. DNS*

#-------------------------------------------------------------------------
zone "." IN {
        type hint;
        file "named.ca";
};

zone "sina.com" IN {
        type master;
        file "sina.com.zone";
        allow-update { none; };

#-------------------------------------------
$TTL    86400
@               IN SOA  @       root (  42 3H 15M 1W 1D )

                IN NS           @
                IN A            192.168.65.123

www             IN A            219.54.62.1
www             IN A            219.54.62.2
www             IN A            219.54.62.3
ns     IN A    123.123.123.123  # 合法的ns.sina.com域名A记录在这
#-------------------------------------------------------------------------