• Centos7 DNS 服务器配置步骤

    DNS 服务器配置

    第一步:利用centos镜像做yum源安装bind服务包

    [root@localhost ~]# mkdir /opt/centos           //创建目录/opt/centos 
    [root@localhost ~]#mount /dev/cdrom  /opt/centos    //挂载光盘到/opt/centos 下

    mount: /dev/sr0 写保护，将以只读方式挂载

    [root@localhost ~]# mv /etc/yum.repos.d/* /home        //移动文件到/home下

    制作用于安装的yum 源文件。

    [root@localhost ~]#vim /etc/yum.repos.d/local.repo

    [centos]

    name=centos

    baseurl=file:///opt/centos

    gpgcheck=0

    enabled=1

    1.   [root@localhost yum.repos.d]# yum  clean  all
    2.  
    3.   [root@localhost yum.repos.d]# yum  install  bind*

    第二步：查看bind是否安装完成

    [root@localhost yum.repos.d]# rpm -aq |grep bind

    查看DNS服务器IP地址信息

    [root@localhost ~]# vim /etc/sysconfig/network-scripts/ifcfg-ens33

    TYPE=Ethernet

    PROXY_METHOD=none

    BROWSER_ONLY=no

    BOOTPROTO=static

    DEFROUTE=yes

    IPV4_FAILURE_FATAL=no

    IPV6INIT=yes

    IPV6_AUTOCONF=yes

    IPV6_DEFROUTE=yes

    IPV6_FAILURE_FATAL=no

    IPV6_ADDR_GEN_MODE=stable-privacy

    NAME=ens33

    UUID=9f92031e-cb20-4cde-b796-6935a082ba86

    DEVICE=ens33

    ONBOOT=yes

    IPADDR=192.168.10.1

    NETMASK=255.255.255.0

    GATEWAY=192.168.10.254

    DNS1=192.168.10.1

    [root@localhost ~]# systemctl restart network     //重启网络

    [root@localhost ~]# ip add          //查看并检查配置的网络

    第三步：配置主文件 

    [root@Centos7-1 ~]# vim /etc/named.conf


      ......                                     //略
    options{     
    listen-on port 53 { 127.0.0.1;);    //指定BIND侦听的DNS查询请求的本  //机IP地址及端口
    listen-on-v6 port 53{::1;};       //限于 IPv6
    directory "/var/named";  /  /指定区域配置文件所在的路径



    dump-file "/var/named/data/cache_dump.db";
    statistics-file "/var/named/data/named_stats.txt";
    memstatistics-file "/var/named/data/named_mem_stats.txt";
    allow-query { localhost;};      //指定接收DNS查询请求的客户端
    recursion yes;
    dnssec-enable yes;
    dnssec-validation yes;      //改为no可以忽略SELinux影响
    dnssec-lookaside auto;
    .....
    };

    //以下用于指定BIND服务的日志参数

    logging {
             channel default debug {
             file "data/named.run";
             severity dynamic;
       };

    };
    zone “.”  IN  {  //用于指定根服务器的配置信息，一般不能改动
    type hint;
    file "named.ca";
    };
    include”/etc/named.zones”； //指定主配置文件，一定根据实际修改
    include "/etc/named.root.key";

    [root@Centos7-1 ~]#cp -p /etc/named.rfc1912.zones /etc/named.zones

    ​​​​​​​

    [root@localhost ~]# vim  /etc/named.conf

    options {

            listen-on port 53 { any; };

            listen-on-v6 port 53 { any; };

            directory       "/var/named";

            dump-file       "/var/named/data/cache_dump.db";

            statistics-file "/var/named/data/named_stats.txt";

            memstatistics-file "/var/named/data/named_mem_stats.txt";

            allow-query     { any; };

       recursion yes;

            dnssec-enable no;

            dnssec-validation no;

    logging {

            channel default_debug {

                    file "data/named.run";

                    severity dynamic;

            };

    };

    zone "." IN {

            type hint;

            file "named.ca";

    };

    zone "ssx.com" IN {     //正向根域文件的定义

          type master;    //作为根域

          file "ssx.com.hosts";  //根域正向解析文件名

    };

    Zone “10.168.192 .in-addr.arpa" IN {   //反向根域文件的定义

          type master;                //作为根域

          file "ssx.com.back";          //根域反向解析文件名

    };

    include "etc/named.zones";

    include "/etc/named.root.key";

    检查主配置文件有没有问题 ：

    [root@localhost ~]# named-checkconf

    第四步：配置正向解析文件

    先将/var/named/named.localhost 进行复制到/var/named/ssx.com.hosts中，目的是为了保存文件格式

    [root@localhost ~]#cp -p  /var/named/named.localhost  /var/named/ssx.com.hosts
    [root@localhost ~]#vim  /var/named/ssx.com.hosts

    $TTL 1D

    @       IN SOA  @  root.ssx.com. (

                                            0       ; serial

                                            1D      ; refresh

                                            1H      ; retry

                                            1W      ; expire

                                            3H )    ; minimum

    @       IN      NS      dns.ssx.com.

    dns      IN      A       192.168.10.100

    www    IN      A       192.168.10.101

    smb     IN      A       192.168.10.102

    ftp      IN      A       192.168.10.103

    第五步：检查正向解析文件

    [root@localhost ~]# named-checkzone  ssx.com  /var/named/ssx.com.hosts

    zone ssx.com/IN: loaded serial 0

    OK

    第六步：配置反向解析文件

    先将正向解析文件拷贝至/var/named/ssx.com.back

    [root@localhost ~]#cp -p /var/named/ssx.com.hosts /var/named/ssx.com.back
    1. [root@localhost ~]#vim  /var/named/ssx.com.back
    2. $TTL 1D
    3.  
    4. @       IN SOA  @  root.ssx.com. (
    5.  
    6.                                         0       ; serial
    7.  
    8.                                         1D      ; refresh
    9.  
    10.                                         1H      ; retry
    11.  
    12.                                         1W      ; expire
    13.  
    14.                                         3H )    ; minimum
    15.  
    16. @       IN      NS      dns.ssx.com.
    17.  
    18. 100     IN      PTR     dns.ssx.com
    19.  
    20. 101     IN      PTR     www.ssx.com
    21.  
    22. 102     IN      PTR     smb.ssx.com
    23.  
    24. 103     IN      PTR     ftp.ssx.com
    25.  
    26. ~     

                                         

    第七步：检查反向解析文件

    [root@localhost ~]#named-checkzone  10.168.192.in-addr.arpa  /var/named/ssx.com.back

    zone 10.168.192.in-addr.arpa/IN: loaded serial 0

    OK

    [root@localhost ~]# 

    第八步：启动named服务，再去查看named服务工作是否正常！

    1. [root@localhost ~]# systemctl start named
    2.  
    3. [root@localhost ~]# systemctl restart named
    4.  
    5. [root@localhost ~]# systemctl status named

    ● named.service - Berkeley Internet Name Domain (DNS)

       Loaded: loaded (/usr/lib/systemd/system/named.service; disabled; vendor preset: disabled)

       Active: active (running) since 日 2019-06-02 14:03:52 CST; 5s ago

      Process: 4860 ExecStop=/bin/sh -c /usr/sbin/rndc stop > /dev/null 2>&1 || /bin/kill -TERM $MAINPID (code=exited, status=0/SUCCESS)

      Process: 3348 ExecReload=/bin/sh -c /usr/sbin/rndc reload > /dev/null 2>&1 || /bin/kill -HUP $MAINPID (code=exited, status=0/SUCCESS)

      Process: 4872 ExecStart=/usr/sbin/named -u named -c ${NAMEDCONF} $OPTIONS (code=exited, status=0/SUCCESS)

      Process: 4870 ExecStartPre=/bin/bash -c if [ ! "$DISABLE_ZONE_CHECKING" == "yes" ]; then /usr/sbin/named-checkconf -z "$NAMEDCONF"; else echo "Checking of zone files is disabled"; fi (code=exited, status=0/SUCCESS)

     Main PID: 4874 (named)

        Tasks: 4

       CGroup: /system.slice/named.service

               └─4874 /usr/sbin/named -u named -c /etc/named.conf

    6月 02 14:03:52 www.ssx.com named[4874]: zone 10.168.192.in-addr.arpa/IN: loaded ... 0

    6月 02 14:03:52 www.ssx.com named[4874]: zone 1.0.0.127.in-addr.arpa/IN: loaded s... 0

    6月 02 14:03:52 www.ssx.com named[4874]: zone localhost.localdomain/IN: loaded se... 0

    6月 02 14:03:52 www.ssx.com named[4874]: zone ssx.com/IN: loaded serial 0

    6月 02 14:03:52 www.ssx.com named[4874]: zone localhost/IN: loaded serial 0

    6月 02 14:03:52 www.ssx.com named[4874]: all zones loaded

    6月 02 14:03:52 www.ssx.com named[4874]: running

    6月 02 14:03:52 www.ssx.com systemd[1]: Started Berkeley Internet Name Domain (DNS).

    6月 02 14:03:52 www.ssx.com named[4874]: zone ssx.com/IN: sending notifies (serial 0)

    6月 02 14:03:52 www.ssx.com named[4874]: zone 10.168.192.in-addr.arpa/IN: sending...0)

    Hint: Some lines were ellipsized, use -l to show in full.

    第九步：检测正向解析

    1. [root@centos7 ~]# nslookup smb.ssx.com
    2.  
    3. Server: 127.0.0.1
    4.  
    5. Address: 127.0.0.1#53
    6.  
    7.  
    8.  
    9. Name: smb.ssx.com
    10.  
    11. Address: 192.168.10.102

    第十步：检测反向解析

    [root@localhost ~]# nslookup  192.168.10.101

    Server: 192.168.10.200

    Address: 192.168.10.200#53

    101.10.168.192.in-addr.arpa name = www.ssx.com.

    Linux客户机测试（前提是必须保证Client1与DNS服务器的通信畅通。)

    [root@Client1 ~]# vim /etc/resolv.conf

       nameserver 192.168.10.100

       search  ssx.com

    在Linux客户机验证前关闭防火墙

    [root@Client1 ~]#systemctl  stop  firewalld
    1. [root@client1 ~]# nslookup
    2.  
    3. > server     //显示真实本机NDS server信息
    4.  
    5. > www.ssx.com      //显示真实本机配置信息
    6.  
    7. > 192.168.10.102      / 显示真实本机配置信息

  • 相关阅读:
    python自动化之BeautifulReport显示异常的解决方案
    Java 面向对象进阶（二）
    关于js_事件委托(代理)的介绍和简单使用
    unique_ptr的常规使用
    langchain加载.doc、.docx遇到的问题
    Python+大数据-知行教育(六)-hive的相关的优化
    【编译原理】概述
    LeetCode-44-通配符匹配
    【网络编程】TCP传输控制协议（Transmission Control Protocol）
    【物联网设备端开发】FastBee平台设备 Arduino SDK接入指南
  • 原文地址：https://blog.csdn.net/m0_63624418/article/details/128138800