Linux bind 域名服务器安装配置

系统环境
CentOS 5.5 x64

检查是否安装 BIND

# rpm -qa|grep bind
bind-libs-9.3.6-4.P1.el5_4.2
ypbind-1.19-12.el5
bind-9.3.6-4.P1.el5_4.2
bind-chroot-9.3.6-4.P1.el5_4.2
bind-utils-9.3.6-4.P1.el5_4.2

不然
rpm -ivh /mnt/CentOS/bind-*.rpm

卸载已安装的 bind
rpm -qa | grep '^bind' | while read line
>do                                                                     
>rpm -e --nodeps $line                                  
>done  

检查是否安装 caching-nameserver
# rpm -qa|grep caching-nameserver
不然就安装
/mnt/CentOS/caching-nameserver*.rpm
卸载已安装的 caching-nameserver
rpm -e caching-nameserver --nodeps

完成安装后，

配置本机ip和dns

本机ip:   192.168.0.212
子网掩码: 255.255.255.0
默认网关: 192.168.0.254
dns:      192.168.0.212


vim /etc/resolv.conf
search localhost
nameserver 192.168.0.212

修改
/var/named/chroot/var/named/etc/named.caching-nameserver.conf

options {
        listen-on port 53 { any; };
        listen-on-v6 port 53 { any; };
        directory       "/var/named";
        dump-file       "/var/named/data/cache_dump.db";
        statistics-file "/var/named/data/named_stats.txt";
        memstatistics-file "/var/named/data/named_mem_stats.txt";

        // Those options should be used carefully because they disable port
        // randomization
        // query-source    port 53;
        // query-source-v6 port 53;

        allow-query     { any; };
        allow-query-cache { any; };
        forwarders { 8.8.8.8; }; //将解析不了的域名跳转到其他域名服务器进行解析
};
logging {
        channel default_debug {
                file "data/named.run";
                severity dynamic;
        };
};
view localhost_resolver {
        match-clients      { any; };
        match-destinations { any; };
        recursion yes;
        include "/etc/named.rfc1912.zones";
};
将 localhost 都修改为 any

检查配置文件
# cd /var/named/chroot/var/named/etc/
# named-checkconf named.caching-nameserver.conf

修改 
/var/named/chroot/var/named/etc/named.rfc1912.zones

添加正向解析 zone
zone "jackie.com" IN {
        type master;
        file "jackie.com.zone";
        allow-update { none; };
};

添加反向解析 zone
zone "0.168.192.in-addr.arpa" IN {
        type master;
        file "192.168.0.rev";
        allow-update { none; };
};

然后
cd /var/named/chroot/var/named/
复制
cp localhost.zone jackie.com.zone
cp named.local 192.168.0.rev

vim jackie.com.zone
$TTL    86400
@               IN SOA  www.jackie.com.  mail.jackie.com. (
                                        42              ; serial (d. adams)
                                        3H              ; refresh
                                        15M             ; retry
                                        1W              ; expiry
                                        1D )            ; minimum

                IN NS           www.jackie.com.
IN NS           dns.jackie.com.
IN NS           dns1.jackie.com.
IN MX 5 mail.jackie.com.
www             IN A            192.168.0.212
dns             IN A            192.168.0.213
dns1            IN A            192.168.0.214
mail IN CNAME dns1.jackie.com.

vim 192.168.0.rev

$TTL    86400
@       IN      SOA     www.jackie.com. mail.jackie.com.  (
                                      1997022700 ; Serial
                                      28800      ; Refresh
                                      14400      ; Retry
                                      3600000    ; Expire
                                      86400 )    ; Minimum
          IN      NS      dns.test.cn.
212       IN      PTR     www.jackie.com.
213       IN      PTR     dns.jackie.com.
214       IN      PTR     dns1.jackie.com.

配置完成后

检查配置文件
# cd /var/named/chroot/var/named
named-checkzone jackie.com jackie.com.zone

service named restart

nslookup www.jackie.com

Server:         192.168.0.212
Address:        192.168.0.212#53

Name:   www.jackie.com
Address: 192.168.0.212



nslookup 192.168.0.212

Server:         192.168.0.212
Address:        192.168.0.212#53

212.0.168.192.in-addr.arpa      name = www.jackie.com.
212.0.168.192.in-addr.arpa      name = dns.test.cn.


配置跳转服务器

vim /var/named/chroot/etc/named.rfc1921.zones

zone "jackie.com" IN {
        type forward;
forward only;
forwarders { 192.168.0.212;};
};
将 jackie.com 域的域名跳转到 192.168.0.212 进行解析;


nslookup 用法
nslookup www.jackie.com  //显示  www.jackie.com 域名的解析
以下效果相同
nslookup
> www.jackie.com

nslookup
> server 192.168.0.200     //将当前服务器的 dns 设置为 192.168.0.200

本机解析ok
如果要让其他机器也能解析，将客户端 dns 改成 192.168.0.200
然后解析服务器防火墙开放 53 端口就可以
iptables -A INPUT -p tcp --dport 53 -j ACCEPT
service iptables save
service iptables restart

完成解析


设置解析类型
> set type=MX 
> jackie.com      //显示jackie.com 域下的 MX 记录解析
以下类同
> set type=NS
> set type=A

dig 用法
dig @192.168.0.212 jackie.com NS

显示 192.168.0.21 域名服务器 jackie.com 域下的 NS 解析