Centos5.8 下搭建 DNS 服务器
Centos5.8 下搭建 DNS 服务器
一、安装环境
虚拟机 v6.0 Centosv 5.8
二、软件安装包 Centos5.8 自带包：
(1)bind-9.3.4-6.P1.el5.i386.rpm ；
(2)bind-libbind-devel-9.3.4-6.P1.el5.i386.rpm
(3)bind-devel-9.3.4-6.P1.el5.i386.rpm
(4)bind-sdb-9.3.4-6.P1.el5.i386.rpm
三、安装过程
(5)caching-nameserver-9.3.4-6.P1.el5.i386.rpm
(6)bind-chroot-9.3.4-6.P1.el5.i386.rpm
(7)libqp.so.5
rpm �Cqa|grep bind，查看有无安装 rpm �Civh 上面的包，先检查安装前五个包。
再安装第六个包， bind-chroot 包之前，先将 /usr/share/doc/bind-9.3.3/sample/etc/named.conf 范本文件复制/etc/named.conf,因为要安装chroot 包就必须在/etc 下要有 named.conf 这个文件存在，否则可能会出错。然后再安装 bind-chroot 包。（若安装出现 libcyto.so.0.0.6 等依赖关系不对的，可以直接使用 yum �Cy install + 包）
[root@killgoogle ~]# cp �Cp /usr/share/doc/bind-9.3.3/sample/etc/named.conf /etc/named.conf 主配置文件 named.conf 的配置由于安装了 chroot，所以主配置文件 named.conf 在 /var/named/chroot/etc/下进行配置,命令如下：
#cd /var/named/chroot/etc由于安装了上面六个包后，这个目录下就默认会生成一个 named.conf 但这个 named.conf 文件只是个解释文档，所以我们要通过以下命令来把 named.conf 文件的模板拷贝一份。命令如下： [root@killgoogle etc]# cp -p named.caching-nameserver.conf named.conf
四、配置
1.几个有关文件及目录的名字
(1) /etc/resolv.conf
[root@centos54 etc]# cat resolv.conf
search abc.com
nameserver 192.168.1.254 //这是本台机器的 IP 地址，我们将要把这台机器作为 dns 服务器.
#nameserver 8.8.8.8 //这是 Googl.com 的 dns 地址，这台机器去访问外网的ＤＮＳ
[root@centos54 etc]#
(2)本机器的 dns 全名 [root@centos54 etc]# hostname centos54.abc.com
(3)named.conf 所在的目录及内容:
[root@centos54 etc]# pwd /var/named/chroot/etc 内容：
[root@centos54 etc]# cat named.conf
// Red Hat BIND Configuration Tool //
// Default initial "caching Only" name server configuration //
options {
directory "/var/named";
dump-file "/var/named/data/cache_dump.db";
statistics-file "/var/named/data/named_stats.txt";
/* * If there is a firewall between you and nameservers you want * to talk to, you might need to uncomment the query-source
* directive below. Previous versions of BIND always asked * questions using port 53, but BIND 8.1 uses an unprivileged * port by default. */
// query-source address * port 53; };
#zone "." IN {
#type hint; #file "named.root";
#};
zone "localdomain." IN {
type master;
file "localdomain.zone";
allow-update { none; };
};
zone "localhost." IN { type master;
file "localhost.zone";
allow-update { none; };
};
zone "0.0.127.in-addr.arpa." IN {
type master;
file "named.local";
allow-update { none; };
};
zone "0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ip6.arpa." IN {
type master;
file "named.ip6.local";
allow-update { none; };
};
zone "255.in-addr.arpa." IN {
type master;
file "named.broadcast";
allow-update { none; };
};
zone "0.in-addr.arpa." IN {
type master;
file "named.zero";
allow-update { none; };
};
zone "kkk.com" IN {
type master;
file "kkk.com.db";
};
zone "abc.com" IN {
type master; file "abc.com.zone";
};
zone "xyz.com" IN {
type master; file "xyz.com.zone";
};
zone "1.168.192.in-addr.arpa" IN {
type master;
file "1.168.192.in-addr.arpa.zone";
};
include "/etc/rndc.key";
其中斜体部分是我添加的三个域名部分内容
(4)建立区域文件: 区域文件所在的目录为：
[root@centos54 named]# pwd
/var/named/chroot/var/named 区域文件 kkk.com.db 内容:(其中加粗斜体是我加进去的)
$TTL 86400
@ IN SOA centos54.abc.com. root.abc.com. (
42 ; serial (d. adams)
3H ; refresh
15M ; retry
1W ; expiry
1D ) ; minimum
IN NS @
IN A 127.0.0.1
IN AAAA ::1 @
IN NS centos54.kkk.com. centos54
IN A 192.168.1.254
www IN A 192.168.1.203
ftp IN A 192.168.1.203
www1 IN CNAME www
区域文件 abc.com.zone 的内容：（斜体加粗的是我加进去的）
$TTL 86400
@ IN SOA centos54.abc.com. root.abc.com. (
42 ; serial (d. adams)
3H ; refresh
15M ; retry
1W ; expiry
1D ) ; minimum
IN NS @
IN A 127.0.0.1
IN AAAA ::1 @
IN NS centos54.abc.com. centos54
IN A 192.168.1.254
www IN A 192.168.1.254
www1 IN CNAME www
区域文件 xyz.com.zone 的内容：（斜体加粗是我加进去的）
$TTL 86400
@ IN SOA centos54.abc.com. root.abc.com. (
42 ; serial (d. adams)
3H ; refresh
15M ; retry
1W ; expiry
1D ) ; minimum
IN NS
@ IN A 127.0.0.1
IN AAAA ::1
@ IN NS centos54.xyz.com.
centos54 IN A 192.168.1.254
www IN A 192.168.1.254
www1 IN CNAME www
反向解析区域文件
1.168.192.in-addr.arpa.zone 内容(其中)
$TTL 86400
@ IN SOA dns.abc.com. root.abc.com. (
42 ; serial (d. adams)
3H ; refresh
15M ; retry
1W ; expiry
1D ) ; minimum
IN NS
@ IN A 127.0.0.1
IN AAAA ::1
@ IN NS centos54.abc.com.
254 IN PTR centos54.abc.com.
254 IN PTR www.abc.com.
254 IN PTR www.xyz.com.
254 IN PTR centos54.xyz.com.
203 IN PTR www.kkk.com.
203 IN PTR ftp.kkk.com.
(5)检查区域配置文件和区域文件的正确性
[root@centos54 named]# named-checkzone abc.com abc.com.zone
zone abc.com/IN: loaded serial 42 OK
[root@centos54 named]# named-checkzone xyz.com xyz.com.zone
zone xyz.com/IN: loaded serial 42 OK
[root@centos54 named]# named-checkzone kkk.com kkk.com.db
zone kkk.com/IN: loaded serial 42 OK
[root@centos54 named]# named-checkzone kkk.com 1.168.192.in-addr.arpa.zone
zone kkk.com/IN: loaded serial 42 OK
注意：如果以上检查都得到了正确结果，但是此时开启服务失败的话，就应该去配置这些文件的权限
2.(文件权限设置) 改变这些配置文件为 named 组
[root@centos54 named]# chgrp named 1.168.192.in-addr.arpa.zone
[root@centos54 named]# chgrp named xyz.com.zone
[root@centos54 named]# chgrp named abc.com.zone
[root@centos54 named]# chgrp named kkk.com.db
[root@centos54 etc]# chgrp named named.conf 这一步骤很重要
3.开启服务 [root@centos54 etc]# service named restart
停止 named： [确定]
启动 named： [确定]
4.检验: [root@centos54 etc]# nslookup
> www.abc.com
Server: 192.168.1.254
Address: 192.168.1.254#53
Name: www.abc.com
Address: 192.168.1.254
> 192.168.1.254
Server: 192.168.1.254
Address: 192.168.1.254#53
254.1.168.192.in-addr.arpa
name = www.abc.com.
254.1.168.192.in-addr.arpa
name = www.xyz.com. 254.1.168.192.in-addr.arpa
name = centos54.abc.com. 254.1.168.192.in-addr.arpa
name = centos54.xyz.com.