linux下的DNS视图

时间：2009-03-23 来源：sjhf

//
// a caching only nameserver config
//
controls {
inet 127.0.0.1 allow { localhost; } keys { rndckey; };
};

include "/etc/rndc.key";

acl wangtong { 192.168.0.0/24; };
acl dianxin { 10.0.0.0/8; };

view "abc01" {
match-clients { wangtong; };
recursion yes;
notify no;
zone "." {
type hint;
file "named.ca"; };
zone "localhost" {
type master;
file "named.local"; };
zone "baidu.com" {
type master;
file "baidu.com.zone";
allow-query { any; }; };
};

view "abc02" {
match-clients { dianxin; };
recursion no;
allow-query { none; };
zone "." {
type hint;
file "named.ca"; };
zone "localhost" {
type master;
file "named.local"; };
zone "baidu.com" {
type master;
file "baidu.com1.zone";
allow-query { any; }; };
};
在/VAR/NAMED/下建 baidu.com.zone 和baidu.com1.zone

// generated by named-bootconf.pl

options {
directory "/var/named";
/*
* If there is a firewall between you and nameservers you want
* to talk to, you might need to uncomment the query-source
* directive below. Previous versions of BIND always asked
* questions using port 53, but BIND 8.1 uses an unprivileged
* port by default.
*/
// query-source address * port 53;
};