RHEL DNS(二)求助!!

建立分离、主从解析的域名服务器

案例:

域名服务器架设在企业网关服务器中,ip地址为173.16.16.1。

所负责的DNS域为“jgd.com”,在internet中的公共域名为“www.jgd.com”和“mail.jgd.com”均解析为网关服务器的ip地址“173.16.16.1”。

公司的网站、邮件服务器均位于局域网内,两台主机的ip地址分别为“192.168.0.2”和“192.168.0.3”

局域网内192.168.0.0/24内的主机均将DNS服务器的地址设为192.168.0.60,当局域网内的用户访问地址“www.jgd.com”和“mail.jgd.com”时分别解析为内部服务器的ip地址“192.168.0.2”和”192.168.0.3“

为上述服务器提供反向解析

(一)建立主域名服务器:

(1)布置环境,在机子上多加快网卡

(2)装包(4个bind包)

(3)确定本机的主机名、ip地址

[root@ns2 slaves]# vim /etc/hosts
 

192.168.0.61          ns1.jgd.com    ns1

192.168.0.62           ns2.jgd.com  ns2

[root@ns2 slaves]# vim /etc/resolv.conf
search jgd.com
nameserver 192.168.0.60
 

nameserver 192.168.0.61

nameserver 173.16.16.1

nameserver 173.16.16.2

(4)建立主配置文件

[root@jgd etc]# vim named.conf

options {

        listen-on port 53 { 192.168.0.60;173.16.16.1; };                  //监听的网口
        listen-on-v6 port 53 { ::1; };
        directory       "/var/named";
        dump-file       "/var/named/data/cache_dump.db";
        statistics-file "/var/named/data/named_stats.txt";
        memstatistics-file "/var/named/data/named_mem_stats.txt";
        query-source    port 53;        
        query-source-v6 port 53;
        allow-query     { 192.168.0.0/24;173.16.16.0/24; };       //允许DNS查询的客户端

};
logging {
        channel default_debug {
                file "data/named.run";
                severity dynamic;
        };
};
view "LAN" {                                           //建立内网视图
match-clients {192.168.0.0/24;};            //匹配条件为来自内网的客户端
zone "jgd.com" IN {
        type master;
        file "lan.jgd.com.zone";
        allow-transfer{ 192.168.0.61; 173.16.16.2; };                  //允许从域名服务器下载该区域的地址数据库
};

zone "0.168.192.in-addr.arpa" IN {
        type master;
        file "lan.192.168.0.arpa";
        allow-transfer{ 192.168.0.61; 173.16.16.2; };
};
};
view "WAN" {                                  //建立外网视图
match-clients {any; };
zone "jgd.com" IN {
        type master;
        file "wan.jgd.com.zone";
        allow-transfer{ 192.168.0.61; 173.16.16.2; };

};
zone "16.16.173.in-addr.arpa" IN {
        type master;
        file "wan.173.16.16.arpa";
        allow-transfer{ 192.168.0.61; 173.16.16.2; };
};
};
(5)建立区域数据库文件
 

[root@jgd named]# vim lan.jgd.com.zone                        //内网正向解析数据库文件

$TTL    86400
@               IN SOA  jgd.com.       admin.jgd.com. (
                                        44             ; serial (d. adams)
                                        3H              ; refresh
                                        15M             ; retry
                                        1W              ; expiry
                                        1D )            ; minimum

                IN NS           ns1.jgd.com.
                IN NS           ns2.jgd.com.
               IN MX 10         mail.jgd.com.
ns1             IN A            192.168.0.60
ns2             IN A            192.168.0.61
mail            IN A            192.168.0.3
www             IN A            192.168.0.2
 

[root@jgd named]# vim lan.192.168.0.arpa                    //内网反向解析数据库文件

$TTL    86400
@               IN SOA  jgd.com.       admin.jgd.com. (
                                        44              ; serial (d. adams)
                                        3H              ; refresh
                                        15M             ; retry
                                        1W              ; expiry
                                        1D )            ; minimum

                IN NS           ns1.jgd.com.
                IN NS           ns2.jgd.com.
60              IN PTR          ns1.jgd.com.
62              IN PTR          ns2.jgd.com.
2               IN PTR          www.jgd.com.
3               IN PTR          mail.jgd.com.
 

[root@jgd named]# vim wan.jgd.com.zone                    //外网正向解析数据库文件

$TTL    86400
@               IN SOA  jgd.com.       admin.jgd.com. (
                                        45      ; serial (d. adams)
                                        3H              ; refresh
                                        15M             ; retry
                                        1W              ; expiry
                                        1D )            ; minimum

                IN NS           ns1.jgd.com.
                IN NS           ns2.jgd.com.
               IN MX 10         mail.jgd.com.
ns1             IN A            173.16.16.1
ns2             IN A            173.16.16.2
mail            IN A            173.16.16.1
www             IN A            173.16.16.1
 

[root@jgd named]# vim wan.173.16.16.arpa    //外网反向解析数据库文件

$TTL    86400
@               IN SOA  jgd.com.       admin.jgd.com. (
                                        45              ; serial (d. adams)
                                        3H              ; refresh
                                        15M             ; retry
                                        1W              ; expiry
                                        1D )            ; minimum

                IN NS           ns1.jgd.com.
                IN NS           ns2.jgd.com.
1               IN PTR          www.jgd.com.
 

(6)重新启动服务  service named restart

(7)验证主域名服务器

C:\Documents and Settings\Administrator>nslookup
Default Server:  ns1.jgd.com
Address:  192.168.0.60

> www.jgd.com
Server:  ns1.jgd.com
Address:  192.168.0.60

Name:    www.jgd.com
 

Address:  192.168.0.2                     //内视图验证成功

C:\Documents and Settings\Administrator>nslookup
Default Server:  www.jgd.com
Address:  173.16.16.1

> www.jgd.com
Server:  www.jgd.com
Address:  173.16.16.1

Name:    www.jgd.com
Address:  173.16.16.1                      //外视图验证成功
 

(二)建立从域名服务器

(1)布置环境,在机子上多加快网卡

(2)装包(4个bind包)

(3)确定本机的主机名、ip地址

[root@ns2 slaves]# vim /etc/hosts
 

192.168.0.61          ns1.jgd.com    ns1

192.168.0.62           ns2.jgd.com  ns2

[root@ns2 slaves]# vim /etc/resolv.conf
search jgd.com
nameserver 192.168.0.60
 

nameserver 192.168.0.61

nameserver 173.16.16.1

nameserver 173.16.16.2

(4)建立主配置文件

[root@ns2 etc]# vim named.conf
options {
        listen-on port 53 { 192.168.0.61;173.16.16.2; };   //设置监听的网卡
        listen-on-v6 port 53 { ::1; };
        directory       "/var/named";
        dump-file       "/var/named/data/cache_dump.db";
        statistics-file "/var/named/data/named_stats.txt";
        memstatistics-file "/var/named/data/named_mem_stats.txt";
        query-source    port 53;       
        query-source-v6 port 53;
        allow-query     { 192.168.0.0/24;173.16.16.0/24; };    //允许DNS查询的客户端

};
logging {
        channel default_debug {
                file "data/named.run";
                severity dynamic;
        };
};
view "LAN" {                                  //设置内网试图
match-clients {192.168.0.0/24;};
zone "jgd.com" IN {
        type slave;
        masters { 192.168.0.60; 173.16.16.1; };
        file "slaves/lan.jgd.com.zone";
};

zone "0.168.192.in-addr.arpa" IN {
        type slave;
        masters { 192.168.0.60; 173.16.16.1; };
        file "slaves/lan.192.168.0.arpa";
};
};
view "WAN" {                          //设置外网试图
match-clients {any; };
zone "jgd.com" IN {
        type slave;
        file "slaves/wan.jgd.com.zone";
        masters{ 192.168.0.60; 173.16.16.1; };

};
zone "16.16.173.in-addr.arpa" IN {
        type slave;
        file "slaves/wan.173.16.16.arpa";
        masters{ 192.168.0.60; 173.16.16.1; };
};
};
 

(5)重新启动服务:service named restart

(6)验证从域名服务器:

C:\Documents and Settings\Administrator>nslookup
*** Can't find server name for address 192.168.0.61: Non-existent domain
Default Server:  UnKnown
Address:  192.168.0.61

> www.jgd.com
Server:  UnKnown
Address:  192.168.0.61

Name:    www.jgd.com
 

Address:  192.168.0.2                         //验证内视图成功

C:\Documents and Settings\Administrator>nslookup
*** Can't find server name for address 173.16.16.2: Non-existent domain
Default Server:  UnKnown
Address:  173.16.16.2

> www.jgd.com
Server:  UnKnown
Address:  173.16.16.2

Name:    www.jgd.com
 

Address:  173.16.16.1                //验证外试图成功

唉!。。其实这个实验困扰我好久了,不知道怎么了,从服务器下载过来的数据跟主服务器的数据不一样,总是解析出错,到了从服务器上就不分内外了,即使你在外网验证还是解析的真正服务器的IP,不能把外网查询解析成网关地址,很让我痛苦万分,后来我在主服务器上把区域数据库的刷新时间改大了点,突然好了,但没过一段时间又出现问题了,我接着改改区域数据库中的刷新时间又貌似好点了,让我痛苦万分,所以我把配置文件都贴了出来,希望那天有哥们能帮我解答这个问题~~求助!!

你可能感兴趣的:(dns)