bind主从服务器设置

bind主服务器IP:192.168.1.134

bind从服务器IP:192.168.1.113

 

在客户端

vi /etc/resolv.conf

 添加

nameserver 192.168.1.134
nameserver 192.168.1.113

 

主服务器named.conf

 

 

options {

 

  directory "/etc/named/etc";

 

  auth-nxdomain no;

  listen-on-v6 { any; };

 

  allow-recursion { any; };

  allow-query { any; };

 

  recursion yes;

 

  sortlist {

 

   { 192.168.1.31/32;

     192.168.0.31/32; };

 

 

   { 192.168.1.138/32;

     192.168.1.113/32; };

 

  };

};  

# End of options

 

 

key myddns-key. {

 algorithm hmac-md5;

 secret "vkUf8ub4BPcLWcuqhrpk7Q==";

};

 

server 192.168.1.134 {

 keys { myddns-key. ;};

};

 

logging {

 

channel default_debug {

 file "/var/log/named/named.log"; 

 severity info; 

 print-category yes;

 print-time yes;

};

 

category queries { default_debug; };

category default { default_debug; };

category unmatched { default_debug; };

 

};

zone "mydomain.com" {

 type master;

 file "mydomain.com.db";

 allow-transfer { 192.168.1.113;};

 notify yes;

 also-notify{ 192.168.1.113;};

 

};

 

zone "1.168.192.in-addr.arpa" {

  type master; 

  file "192.168.1.db";

  allow-transfer { 192.168.1.113;};

  notify yes;       

  also-notify{ 192.168.1.113;};

};

 

zone "." {

 type hint;

 file "named.ca";

};

从服务器named.conf

 

 

options {

 

  directory "/etc/named/etc";

 

  auth-nxdomain no;

  listen-on-v6 { any; };

 

  allow-recursion { any; };

  allow-query { any; };

 

  recursion yes;

 

  sortlist {

 

   { 192.168.1.31/32;

     192.168.0.31/32; };

 

  };

};  

# End of options

 

 

key myddns-key. {

 algorithm hmac-md5;

 secret "vkUf8ub4BPcLWcuqhrpk7Q==";

};

 

server 192.168.1.113 {

 keys { myddns-key. ;};

};

 

logging {

 

channel default_debug {

 file "/var/log/named/named.log"; 

 severity info; 

 print-category yes;

 print-time yes;

};

 

category queries { default_debug; };

category default { default_debug; };

category unmatched { default_debug; };

 

};

 

zone "mydomain.com" {

  type slave;

  file "slaves/domain.salve";

  masters{192.168.1.134;};

};

 

zone "1.168.192.in-addr.arpa" {

 type slave;

 file "slaveslave.zone";

 masters{192.168.1.134;};

};

 

zone "." {

 type hint;

 file "named.ca";

};

 请注意两个conf文件的红字部分,红字部分是主要修改的内容

 

另外需要注意的地方: 

1.在/etc/named/etc 下mkdir slaves,因在从服务器上设置了这个路径

2.启动bind时,先启动主服务器

3.将主服务器的named.ca copy到从服务器

 

遇到的问题:

1.couldn't open pid file '/var/run/named/named.pid': Permission denied

解决方法:

 

chmod 777 /var/run/named

 

当我们主DNS服务器上修改完成后重启服务，会主动传送notify值，如果辅助DNS服务器没有收到才参考Refresh，Refresh 不成功,则参考Retry ，Retry 一直不成功, 则参考 Expire，如果Expire也不成功，则选择放弃zone transfer的过程。