linux 搭建DNS 正向解析、反向解析、區域傳送、批量解析詳解
DNS
一、 概念
Domain Name Server 域名解析服務
1.1域名與主機名
例如
對於www.baidu.com www.google.com
域名(domain name)為www.google 主機名為.google.com .baidu.com
www.ksu.edu.tw(崑山科大伺服器)
對於.gov.tw
domain name: .tw hostname: dov
對於.ksu.edu.tw
domain name: .edu.tw. hostname:ksu
對於www.ksu.edu.tw
domain name: .ksu.edu.tw hostname: www
二、 實驗
2.1正向解析（從主機名查詢到IP）
2.1.1 安裝bind，開啟服務named
[[email protected] ~]# yum install bind –y
[[email protected] ~]# systemctl restart named
2.1.2 編輯配置檔案/etc/named.conf
注意：ip必須為自動獲取到的ip
[[email protected] ~]# vim /etc/named.conf
內容為:
options {
listen-on port 53 { 192.168.233.128; };
directory “/var/named”;
};
zone “
type master;
file “baidu.com.zone”;
};
解釋
；代表批註符號
檢視
[[email protected] ~]# cd /var/named
[[email protected] named]# ll
總用量 16
drwxrwx—. 2 named named 23 8月 2 21:28 data
drwxrwx—. 2 named named 60 8月 2 21:28 dynamic
-rw-r-----. 1 root named 2281 5月 22 2017 named.ca
-rw-r-----. 1 root named 152 12月 15 2009 named.empty
-rw-r-----. 1 root named 152 6月 21 2007 named.localhost
-rw-r-----. 1 root named 168 12月 15 2009 named.loopback
drwxrwx—. 2 named named 6 5月 22 2017 slaves
2.1.3編輯配置檔案/etc/named/ baidu.com.zone
[[email protected] named]# vim baidu.com.zone
$TTL 1D
@ IN SOA @ admin.baidu.com. (
0
1D
1H
1W
3H )
IN NS ns.baidu.com.
IN MX 10 mail.baidu.com.
ns IN A 192.168.233.128
mail IN A 192.168.233.1
www IN A 192.168.233.2
www IN A 192.168.233.3
ftp IN CNAME www
解釋
$TTL 快取記憶時間
@：代表zone(域的記錄)
SOA:start of Authority 開始驗證
NS:NameServer 後面記錄的資料是dns伺服器的意思
A:Address
0 序號
1D 更新頻率
1H 失敗重新嘗試時間
1W 失效時間
3H 快取時間
2.1.4.重啟服務named並檢視狀態
[[email protected] named]# systemctl restart named
[[email protected] named]# systemctl status named
● named.service - Berkeley Internet Name Domain (DNS)
Loaded: loaded (/usr/lib/systemd/system/named.service; disabled; vendor preset: disabled)
Active: active (running) since 四 2018-08-02 21:49:25 CST; 8s ago
2.1.5傳送域名查詢資訊包到域名伺服器
[[email protected] named]# dig -t A www.baidu.com @192.168.233.128
[[email protected] named]# dig -t MX www.baidu.com @192.168.233.128
[[email protected] named]# dig -t MS www.baidu.com @192.168.233.128
[[email protected] named]# dig -t NS www.baidu.com @192.168.233.128
[[email protected] named]# dig -t CNMAE ftp.baidu.com @192.168.233.128
顯示網路連線，路由表，介面狀態，偽裝連線，網路鏈路資訊和
組播成員組
[[email protected] ~]# netstat -lntup | grep named
[[email protected] ~]# ps aux | grep named
[[email protected] ~]# ps -ef | grep named
2.2反向解析（從ip查詢到主機名）
2.2.1 編輯配置檔案/etc/named.conf
注意：地址反向寫，檔案寫對
[[email protected] ~]# vim /etc/named.conf
內容為:
options {
listen-on port 53 { 192.168.233.134; };
directory “/var/named”;
};
zone “baidu.com.” IN {
type master;
file “baidu.com.zone”;
};
zone “233.168.192.in-addr.arpa” IN {
type master;
file “fanxiang.zone”;
};
2.2.2編輯配置檔案/etc/named/ fanxiang.zone(fanxiang.zone是自己建的檔案)
[[email protected] named]# vim fanxiang.zone
$TTL 1D
@ IN SOA ns.baidu.com. admin.baidu.com. (
0 ;serial
1D ;refresh
1H ;retry
1W ;expire
3H );minimum
IN NS ns.baidu.com.
200 IN PTR ns.baidu.com.
128 IN PTR www.baidu.com.
2.1.3.重啟服務named
[[email protected] named]# systemctl restart named
2.2.4 傳送ip查詢資訊包到域名伺服器
前面是查詢的地址(/etc/named/fanxiang.zone檔案的地址)，後面是主機地址
dig -x
[[email protected] named]# dig -x 192.168.233.128 @192.168.233.134
[[email protected] named]# dig -x 192.168.233.200 @192.168.233.134
2.3區域傳送
2.3.1 概念
區域傳送
將一個區域檔案複製到多個DNS伺服器的過程。
過程
通過從主伺服器上將區域檔案的資訊複製到輔助伺服器來實現,當主伺服器的區域有變化時，該變化會通過區域傳輸機制
完全區域傳送
當一個新的DNS伺服器新增到區域中並配置為從伺服器時，它會執行完全區域傳送。
增量區域傳送
為了保證資料同步，主域名伺服器有更新時也會及時通知輔助域名伺服器從而進行更新。
2.3.2 實驗
注意：服務及和客戶機要先關閉防火牆
[[email protected] named]# systemctl stop firewalld
主服務機ip為192.168.233.134 從服務機ip為192.168.233.131
主服務機配置
1）在配置檔案/etc/named.conf加allow-transfer { 192.168.233.131; };加上從服務機ip
[[email protected] ~]# vim /etc/named.conf
內容為：
options {
listen-on port 53 { 192.168.233.134; };
directory “/var/named”;
allow-transfer { 192.168.233.131; };
};
zone “baidu.com” IN {
type master;
file “baidu.com.zone”;
};
zone “233.168.192.in-addr.arpa” IN {
type master;
file “fanxiang.zone”;
};
2）重啟服務named,檢視服務狀態
[[email protected] ~]# systemctl restart named
[[email protected] ~]# systemctl status named
● named.service - Berkeley Internet Name Domain (DNS)
Loaded: loaded (/usr/lib/systemd/system/named.service; enabled; vendor preset: disabled)
Active: active (running) since 六 2018-08-04 19:11:31 CST; 12
從服務機配置
1）掛在映象並安裝bind
[[email protected] ~]# mount /dev/sr0 /mnt
mount: /dev/sr0 is write-protected, mounting read-only
[[email protected] ~]# yum install bind –y
2）在配置檔案/etc/named.conf
注意：在options 裡面寫從服務機地址，在zone裡面寫主服務機地址
[[email protected] ~]# vim /etc/named.conf
內容為
options {
listen-on port 53 { 192.168.233.131; };
directory “/var/named”;
};
zone “baidu.com” IN {
type slave;
file “slaves/baidu.com.zone”;
masters { 192.168.233.134; };
};
zone “233.168.192.in-addr.arpa” IN {
type slave;
file “slaves/fanxiang.zone”;
masters { 192.168.233.134; };
};
3）重啟服務named,檢視服務狀態
[[email protected] ~]# systemctl restart named
[[email protected] ~]# systemctl status named
● named.service - Berkeley Internet Name Domain (DNS)
Loaded: loaded (/usr/lib/systemd/system/named.service; enabled; vendor preset: disabled)
Active: active (running) since 六 2018-08-04 19:11:31 CST; 12
4）進入 /var/named/slaves/目錄下檢視檔案是否傳過來
[[email protected] ~]# cd /var/named/slaves/
[[email protected] slaves]# ll
total 8
-rw-r–r--. 1 named named 384 Aug 4 18:53 baidu.com.zone
-rw-r–r--. 1 named named 318 Aug 4 18:53 fanxiang.zone
2.4批量解析
2.4.1 正向解析
1）編輯配置檔案/var/named/ baidu.com.zone
[[email protected] ~]# vim /var/named/baidu.com.zone
內容為：
$TTL 1D
@ IN SOA @ admin.baidu.com. (
0
1D
1H
1W
3H )
IN NS ns.baidu.com.
IN MX 10 mail.baidu.com.
ns IN A 192.168.233.128
mail IN A 192.168.233.1
www IN A 192.168.233.2
www IN A 192.168.233.3
ftp IN CNAME www
$GENERATE 1-10 $ IN PTR $.baidu.com.
2）重啟服務，檢視狀態
[[email protected] ~]# systemctl restart named
[[email protected] ~]# systemctl status named
● named.service - Berkeley Internet Name Domain (DNS)
Loaded: loaded (/usr/lib/systemd/system/named.service; enabled; vendor preset: disabled)
Active: active (running) since 六 2018-08-04 20:16:41 CST; 9s ago
3）查詢
[[email protected] ~]# dig -t A www.baidu.com @192.168.233.134
2.4.2 反向解析
1）編輯配置檔案/var/named/fanxiang.zone，加上
$GENERATE 1-10 $ IN PTR $.baidu.com
[[email protected] ~]# vim /var/named/fanxiang.zone
內容為：
$TTL 1D
@ IN SOA ns.baidu.com. admin.baidu.com. (
0 ;serial
1D ;refresh
1H ;retry
1W ;expire
3H );minimum
IN NS ns.baidu.com.
200 IN PTR ns.baidu.com.
128 IN PTR www.baidu.com.
$GENERATE 1-10 $ IN PTR $.baidu.com
2）重啟服務，檢視狀態
[[email protected] ~]# systemctl restart named
[[email protected] ~]# systemctl status named
● named.service - Berkeley Internet Name Domain (DNS)
Loaded: loaded (/usr/lib/systemd/system/named.service; enabled; vendor preset: disabled)
Active: active (running) since 六 2018-08-04 20:16:41 CST; 9s ago
3）查詢
[[email protected] ~]# dig -x 192.168.233.1 @192.168.233.134
