辅助DNS服务器
Server 192.168.1.10
首先，我们在主DNS服务器配置区域传输
[root@server named]# vim /etc/named.conf
| 在原有的正向查找和反向查找中添加了两句代码 | 允许区域传输 |
注意格式
zone "mydomain.com" IN {
type master;
file "mydomain.com.zone";
allow-update { none; };
notify yes;
allow-transfer { 192.168.1.11; };
};
zone "1.168.192.in-addr.arpa" IN{
type master;
file "1.168.192.zone";
allow-update { none; };
notify yes;
allow-transfer { 192.168.1.11; };
};
| 打开正向查找区域 | 修改序列号和添加名称服务器 |
#0修改为1
[root@server named]# vim /var/named/mydomain.com.zone
$TTL 1D
@ IN SOA server wangxiang.163.com. (
1 ; serial
1D ; refresh
1H ; retry
1W ; expire
3H ) ; minimum
NS server
NS server2
server2 A 192.168.1.11
server A 192.168.1.10
www A 192.168.1.100
mail A 192.168.1.110
@ MX 10 mail
ftp CNAME www
| 打开反向查找区域 | 修改序列号和添加名称服务器 |
[root@server named]# vim /var/named/1.168.192.zone
$TTL 1D
@ IN SOA @ wangxiang.163.com. (
1 ; serial
1D ; refresh
1H ; retry
1W ; expire
3H ) ; minimum
NS @
NS server2
A 192.168.1.10
server2 A 192.168.1.11
100 PTR www.mydomain.com.
100 PTR ftp.mydomain.com.
110 PTR mail.mydomain.com.
10 PTR server.mydomain.com.
#我可以明确地告诉你重启服务是检验一切的标准
[root@server named]# systemctl restart named
Server2 192.168.1.11
#当程序被占用时（不到万不得已不要用）
[root@server2 ~]# rm -f /var/run/yum.pid
[root@server2 ~]# yum update
#安装
[root@server2 ~]# yum install bind bind-utils -y
#服务器三部曲
[root@server2 ~]# systemctl start named
[root@server2 ~]# systemctl enable named
[root@server2 ~]# systemctl status named
#配置域名文件
[root@server2 ~]# vim /etc/named.conf
options {
listen-on port 53 { any; };
listen-on-v6 port 53 { ::1; };
directory "/var/named";
dump-file "/var/named/data/cache_dump.db";
statistics-file "/var/named/data/named_stats.txt";
memstatistics-file "/var/named/data/named_mem_stats.txt";
recursing-file "/var/named/data/named.recursing";
secroots-file "/var/named/data/named.secroots";
allow-query { localhost;192.168.1.0/24; };
dnssec-validation no;
底部添加
zone "mydomain.com" IN {
type slave;
file "slaves/mydomain.com.zone";
masters { 192.168.1.10; };
};
zone "1.168.192.in-addr.arpa" IN {
type slave;
file "slaves/1.168.192.zone";
masters { 192.168.1.10; };
};
#再次启动服务
[root@server2 ~]# systemctl restart named
#查看辅助区域创建的数据文件（主DNS一定要启动）
[root@server2 ~]# ls /var/named/slaves/
Client 192.168.1.20
#查看配置DNS状况
[root@client blue]# cat /etc/resolv.conf
# Generated by NetworkManager
nameserver 192.168.1.10
#修改网卡配置文件添加DNS服务器
[root@client blue]# vim /etc/sysconfig/network-scripts/ifcfg-ens33
| 添加参数 | DNS2=192.168.1.11 |
#修改网卡配置后要重启网卡
[root@client blue]# systemctl restart network
#再次查看DNS状况
[root@client blue]# cat /etc/resolv.conf
# Generated by NetworkManager
nameserver 192.168.1.10
nameserver 192.168.1.11
#先查询主机记录（做这步操作之前要关闭防火墙）
[root@client ~]# dig @192.168.1.11 www.mydomain.com a
#先屏蔽所有的信息标记，再指定需要的信息
[root@client ~]# dig @192.168.1.11 www.mydomain.com a +noall +answer
#从正向区域中读取完整信息
[root@client ~]# dig @192.168.1.11 mydomain.com axfr
#从反向区域中读取完整信息
[root@client ~]# dig @192.168.1.11 1.168.192.in-addr.arpa axfr
#dig后面不标记IP地址，默认是主DNS查询
[root@client ~]# dig www.mydomain.com
| ;; SERVER: 192.168.1.10#53(192.168.1.10) | 倒数第三条 |
根据上一条我们就stop主DNS，看看现在是不是辅助DNS查询；
下面转到
Server 192.168.1.10
#停止DNS服务
[root@server named]# systemctl stop named
再次转到
Client 192.168.1.20
测试结果IP地址为11，测试成功
[root@client ~]# dig www.mydomian.com
;; SERVER: 192.168.1.11#53(192.168.1.11)
区域复制限制
Server2 192.168.1.11
#为辅助DNS添加区域传输限制，不准向任何计算机传输数据（注意格式）
[root@server2 ~]# vim /etc/named.conf
zone "mydomain.com" IN {
type slave;
file "slaves/mydomain.com.zone";
masters { 192.168.1.10; };
allow-transfer { none; };
};
zone "1.168.192.in-addr.arpa" IN {
type slave;
file "slaves/1.168.192.zone";
masters { 192.168.1.10; };
allow-transfer { none; };
};
[root@client blue]# dig mydomain.com axfr
[root@client blue]# dig mydomain.com axfr @192.168.1.11
