1.安裝 bind 套件
#yum groupinstall "DNS Name Server"
2.複製設定檔範本進行修改
#cp /usr/share/doc/bind-9.3.4/sample/etc/* /var/named/chroot/etc
#cp /usr/share/doc/bind-9.3.4/sample/var/named/* /var/named/chroot/var/named
3.修改 named.conf 檔
#vi /var/named/chroot/etc/name.conf
================================================================
options
{
directory "/var/named"; // the default
dump-file "data/cache_dump.db";
statistics-file "data/named_stats.txt";
memstatistics-file "data/named_mem_stats.txt";
version "None";
//當別人查詢您的BIND版本時顯示的內容
allow-transfer { none; };
//是否允許傳送zone資料
forwarders { 168.95.1.1; 139.175.10.20; };
//若本身沒有資料庫,則前往 root (.) 或 forwarders 主機查詢
allow-query { any; };
// 允許被誰查詢
};
logging
{
channel default_debug {
file "data/named.run";
severity dynamic;
};
};
view "localhost_resolver"
{
match-clients { localhost; };
match-destinations { localhost; };
recursion yes;
include "/etc/named.root.hints";
include "/etc/named.rfc1912.zones";
};
view "external"
{
match-clients { any; };
match-destinations { any; };
recursion no;
include "/etc/named.root.hints";
zone "test.com.tw" {
type master;
file "named.test.com.tw";
};
zone "123.123.123.in-addr.arpa" {
type master;
file "named.123.123.123";
};
};
================================================================
這邊只做提供外部查詢的設定部分,若要做成內外部來查詢時會有不同的回應結果,
可在增加一個 view "internal" 搭配 acl 來達成。
4.編輯 zone 檔案
#vi /var/named/chroot/var/named/named.test.com.tw
================================================================
$TTL 86400
@ IN SOA dns.test.com.tw. root.test.com.tw. (
2009042001 ; Serial
28800 ; Refresh
14400 ; Retry
720000 ; Expiry
86400 ) ; Minimum
IN NS dns.test.com.tw.
IN MX 10 mail.test.com.tw.
dns IN A 123.123.123.123
mail IN A 123.123.123.124
www IN A 123.123.123.125
================================================================
#vi /var/named/chroot/var/named/named.123.123.123
================================================================
@ IN SOA dns.test.com.tw. root.test.com.tw. (
2009042001 ; serial
28800 ; refresh
14400 ; retry
720000 ; expiry
86400 ) ; minimum
IN NS test.com.tw.
123 IN PTR dns.test.com.tw.
124 IN PTR mail.test.com.tw.
125 IN PTR www.test.com.tw.
================================================================
5.啟動 named 服務,並設定為開機時啟動
#/etc/init.d/named restart
#chkconfig named on
沒有留言:
張貼留言