DNS－BIND安装与配置的关键技术揭秘

[root@localhost root]#tar xzvf bind-9.3.1. tar.gz [root@localhost root]#cd bind-9.3.1 [root@localhost bind-9.3.1]#./configure [root@localhost bind-9.3.1]#make [root@localhost bind-9.3.1]#make install

[root@localhost root]# /usr/local/sbin/named -g

#!/bin/sh # # This script will be executed *after* all the other init scripts. # You can put your own initialization stuff in here if you don't # want to do the full Sys V style init stuff. touch /var/lock/subsys/local /usr/local/sbin/named

/* * log option */ logging { channel default_syslog { syslog local2; severity error; }; channel audit_log { file "/var/log/named.log"; severity error; print-time yes; }; category default { default_syslog; }; category general { default_syslog; }; category security { audit_log; default_syslog; }; category config { default_syslog; }; category resolver { audit_log; }; category xfer-in { audit_log; }; category xfer-out { audit_log; }; category notify { audit_log; }; category client { audit_log; }; category network { audit_log; }; category update { audit_log; }; category queries { audit_log; }; category lame-servers { audit_log; }; };

options { directory "/etc/namedb"; listen-on-v6 { any; }; // If you've got a DNS server around at your upstream provider, enter // its IP address here, and enable the line below. This will make you // benefit from its cache, thus reduce overall DNS traffic in the Internet. forwarders { your.upper.DNS.address; }; /* * If there is a firewall between you and nameservers you want * to talk to, you might need to uncomment the query-source * directive below. Previous versions of BIND always asked * questions using port 53, but BIND 8.1 uses an unprivileged * port by default. */ // query-source address * port 53; /* * If running in a sandbox, you may have to specify a different * location for the dumpfile. */ dump-file "/etc/named_dump.db"; };

// Setting up secondaries is way easier and the rough picture for this // is explained below. // // If you enable a local name server, don't forget to enter 127.0.0.1 // into your /etc/resolv.conf so this server will be queried first. // Also, make sure to enable it in /etc/rc.conf. zone "." { type hint; file "named.root"; }; zone "0.0.127.IN-ADDR.ARPA" { type master; file "localhost.rev"; };

zone "test.com" { type master; file "zone.test "; }; zone "0.168.192.in-addr.arpa" { type master; file "zone. test.rev"; }; zone "4.0.0.f.0.5.2.0.1.0.0.2.IP6.ARPA" { type master; allow-transfer { any;}; allow-query { any; }; file "ipv6.rev"; }; zone "lowerlevelzone.test.com" { type slave; masters { 192.168.1.1; }; };

; From: @(#)localhost.rev 5.1 (Berkeley) 6/30/90 ; $FreeBSD: src/etc/namedb/PROTO.localhost.rev,v 1.6 2000/01/10 15:31:40 peter Exp $ ; ; This file is automatically edited by the `make-localhost' script in ; the /etc/namedb directory. ; @ IN SOA ns.test.com. root.test.com.( 2005030116; Serial 3600 ; Refresh 900 ; Retry 3600000 ; Expire 3600 ) ; Minimum IN NS ns.test.com ; ns IN A 192.168.0.1 www6 IN AAAA 2001:250:f004::10 www IN A 192.168.0.2

; From: @(#)localhost.rev 5.1 (Berkeley) 6/30/90 ; $FreeBSD: src/etc/namedb/PROTO.localhost.rev,v 1.6 2000/01/10 15:31:40 peter Exp $ ; ; This file is automatically edited by the `make-localhost' script in ; the /etc/namedb directory. ; @ IN SOA ns.test.com. root.test.com.( 2005030116; Serial 3600 ; Refresh 900 ; Retry 3600000 ; Expire 3600 ) ; Minimum IN NS ns.test.com ; 1 IN PTR ns.test.com. 2 IN PTR www.test.com.

; From: @(#)localhost.rev 5.1 (Berkeley) 6/30/90 ; $FreeBSD: src/etc/namedb/PROTO.localhost.rev,v 1.6 2000/01/10 15:31:40 peter Exp $ ; ; This file is automatically edited by the `make-localhost' script in ; the /etc/namedb directory. ; @ IN SOA ns.test.com. root.test.com.( 2005030116; Serial 3600 ; Refresh 900 ; Retry 3600000 ; Expire 3600 ) ; Minimum IN NS ns.test.com ; 10.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0 IN www6.test.com.