1. 程式人生 > >centos7安裝dns服務器

centos7安裝dns服務器

tar var ref linux fresh bcd ddr 安裝dns服務器 keys

  • 安裝軟件:
    yum  -y  install  bind  bind-utils
  • 修改配置文件:
    a. 修改主配置文件:vim /etc/named.conf
    options {
    listen-on port 53 { 127.0.0.1;192.168.8.81; };
    listen-on-v6 port 53 { ::1; };
    directory   "/var/named";
    dump-file   "/var/named/data/cache_dump.db";
    statistics-file "/var/named/data/named_stats.txt";
    memstatistics-file "/var/named/data/named_mem_stats.txt";
    allow-query     { lee; };
    forwarders { 8.8.8.8;114.114.114.114; };
    recursion yes;
    dnssec-enable yes;
    dnssec-validation yes;
    bindkeys-file "/etc/named.iscdlv.key";
    managed-keys-directory "/var/named/dynamic";
    pid-file "/run/named/named.pid";
    session-keyfile "/run/named/session.key";
    };
    acl lee {
    192.168.8.0/24;
    };
    logging {
        channel default_debug {
                file "data/named.run";
                severity dynamic;
        };
    };
    zone "." IN {
    type hint;
    file "named.ca";
    };
    zone "lee.com" {
    type master;
    file "/etc/named/zones/lee.com.zone";
    };
    zone "168.192.in-addr.arpa" {
    type master;
    file "/etc/named/zones/192.168.zone";
    };
    include "/etc/named.rfc1912.zones";
    include "/etc/named.root.key";

    b. 創建正向解析域:vim /etc/named/zones/lee.com.zone

    $TTL 1D
    @       IN      SOA     ns1.lee.com. admin.lee.com. (
    3         ; Serial
    604800     ; Refresh
    86400     ; Retry
    2419200     ; Expire
    604800 
    )
    IN NS ns1.lee.com.
    ns1.lee.com. IN A 192.168.8.81
    www.lee.com. IN A 192.168.8.81
    blog.lee.com. IN A 192.168.8.82
    shop.lee.com. IN A 192.168.8.83

    c. 創建反向解析域:vim /etc/named/zones/192.168.zone

    
    $TTL 1D
    @       IN      SOA     ns1.lee.com. admin.lee.com. (
    3         ; Serial
    604800     ; Refresh
    86400     ; Retry
    2419200     ; Expire
    604800 
  • )
    IN NS ns1.lee.com.
    81.8 IN PTR ns1.lee.com.
    81.8 IN PTR www.lee.com.
    82.8 IN PTR blog.lee.com.
    83.8 IN PTR shop.lee.com.

    3. 檢查配置文件語法:
    a. 檢查主配置文件語法:

    named-checkconf

    b. 檢查正向解析域的語法:

    named-checkzone lee.com /etc/named/zones/lee.com.zone

    ![](http://i2.51cto.com/images/blog/201802/08/33fcaefd088280a141ef16ecb7fe1128.png?x-oss-process=image/watermark,size_16,text_QDUxQ1RP5Y2a5a6i,color_FFFFFF,t_100,g_se,x_10,y_10,shadow_90,type_ZmFuZ3poZW5naGVpdGk=)
    c. 檢查反向解析域的語法:

    named-checkzone 192.168.in-addr.arpa /etc/named/zones/192.168.zone

    ![](http://i2.51cto.com/images/blog/201802/08/870cf5408eb4dde17dde61cca05c0bcd.png?x-oss-process=image/watermark,size_16,text_QDUxQ1RP5Y2a5a6i,color_FFFFFF,t_100,g_se,x_10,y_10,shadow_90,type_ZmFuZ3poZW5naGVpdGk=)
    4. 啟動服務:

    systemctl start named

    5. 客戶端驗證:
    a. linux客戶端:
    a-1. 修改DNS服務器:vim  /etc/resolv.conf

    nameserver 192.168.8.81

    
    ![](http://i2.51cto.com/images/blog/201802/08/56d0fb88b12988af58e763d3141f621b.png?x-oss-process=image/watermark,size_16,text_QDUxQ1RP5Y2a5a6i,color_FFFFFF,t_100,g_se,x_10,y_10,shadow_90,type_ZmFuZ3poZW5naGVpdGk=)
    a-2. 驗證:
    ![](http://i2.51cto.com/images/blog/201802/08/8b4134acdf2357b7051bac7fec01bd87.png?x-oss-process=image/watermark,size_16,text_QDUxQ1RP5Y2a5a6i,color_FFFFFF,t_100,g_se,x_10,y_10,shadow_90,type_ZmFuZ3poZW5naGVpdGk=)
    b. windows客戶端:
    b-1. 修改DNS服務器:
    ![](http://i2.51cto.com/images/blog/201802/08/ab9c815ac66d0688a3d0ca3effdabd77.png?x-oss-process=image/watermark,size_16,text_QDUxQ1RP5Y2a5a6i,color_FFFFFF,t_100,g_se,x_10,y_10,shadow_90,type_ZmFuZ3poZW5naGVpdGk=)
    ![](http://i2.51cto.com/images/blog/201802/08/f4b3b3bc5863e5087be0a7cf4c5991dd.png?x-oss-process=image/watermark,size_16,text_QDUxQ1RP5Y2a5a6i,color_FFFFFF,t_100,g_se,x_10,y_10,shadow_90,type_ZmFuZ3poZW5naGVpdGk=)
    ![](http://i2.51cto.com/images/blog/201802/08/4fa411cc0b4b85a60c30a4fe698feecd.png?x-oss-process=image/watermark,size_16,text_QDUxQ1RP5Y2a5a6i,color_FFFFFF,t_100,g_se,x_10,y_10,shadow_90,type_ZmFuZ3poZW5naGVpdGk=)
    ![](http://i2.51cto.com/images/blog/201802/08/b538ed75cd03e2f70941db95d5c40056.png?x-oss-process=image/watermark,size_16,text_QDUxQ1RP5Y2a5a6i,color_FFFFFF,t_100,g_se,x_10,y_10,shadow_90,type_ZmFuZ3poZW5naGVpdGk=)
    ![](http://i2.51cto.com/images/blog/201802/08/61187013b98c8ce8efb44c6e7b93e2fa.png?x-oss-process=image/watermark,size_16,text_QDUxQ1RP5Y2a5a6i,color_FFFFFF,t_100,g_se,x_10,y_10,shadow_90,type_ZmFuZ3poZW5naGVpdGk=)
    ![](http://i2.51cto.com/images/blog/201802/08/ad3af6840a2c5b29698b895722f1f5d6.png?x-oss-process=image/watermark,size_16,text_QDUxQ1RP5Y2a5a6i,color_FFFFFF,t_100,g_se,x_10,y_10,shadow_90,type_ZmFuZ3poZW5naGVpdGk=)
    b-2. 驗證:
    ![](http://i2.51cto.com/images/blog/201802/08/f9900d18f871dcc9452c0ea555f34397.png?x-oss-process=image/watermark,size_16,text_QDUxQ1RP5Y2a5a6i,color_FFFFFF,t_100,g_se,x_10,y_10,shadow_90,type_ZmFuZ3poZW5naGVpdGk=)
    ![](http://i2.51cto.com/images/blog/201802/08/115d523539e062301dc29067fa695c19.png?x-oss-process=image/watermark,size_16,text_QDUxQ1RP5Y2a5a6i,color_FFFFFF,t_100,g_se,x_10,y_10,shadow_90,type_ZmFuZ3poZW5naGVpdGk=)

    centos7安裝dns服務器