Linux下架設(shè)DNS服務(wù)器的架設(shè).doc

DNS服務(wù)器的架設(shè)實驗環(huán)境：AS4最小化安裝實驗?zāi)繕?biāo)：架設(shè)DNS服務(wù)器編輯： crazylinux 2007.03.22聯(lián)系方式： 大家好！這次我們來學(xué)習(xí)Linux系統(tǒng)中的DNS服務(wù)器的配置。首先我們需要安裝bind軟件，它位于AS4的第四章光盤中，rootlocalhost # rpm -ivh /media/cdrom/RedHat/RPMS/bind-9.2.4-2.i386.rpmrootlocalhost # rpm -ivh /media/cdrom/RedHat/RPMS/caching-nameserver-7.3-3.noarch.rpmrootlocalhost # rpm -qa | grep bindbind-utils-9.2.4-2bind-9.2.4-2bind-libs-9.2.4-2ypbind-1.17.2-3rootlocalhost # rpm -qa | grep cachingcaching-nameserver-7.3-3我們架設(shè)DNS服務(wù)器需要這些軟件，實例情況：主域名服務(wù)器的地址是 ,從域名服務(wù)器的地址是 winxpIP地址是74在主域名服務(wù)器中添加域名區(qū)域下面我們就來架設(shè)主域名服務(wù)器1，軟件安裝完后我們修改配置文件rootlocalhost # vi /etc/named.conf修改完后的named.conf如下：rootlocalhost # cat /etc/named.conf/ named.conf for Red Hat caching-nameserver /options directory /var/named; dump-file /var/named/data/cache_dump.db; statistics-file /var/named/data/named_stats.txt; /* * If there is a firewall between you and nameservers you want * to talk to, you might need to uncomment the query-source * directive below. Previous versions of BIND always asked * questions using port 53, but BIND 8.1 uses an unprivileged * port by default. */ / query-source address * port 53;/ / a caching only nameserver config/ controls inet allow localhost; keys rndckey; ;zone . IN type hint; file named.ca;zone localdomain IN type master; file localdomain.zone; allow-update none; ;zone localhost IN type master; file localhost.zone; allow-update none; ;zone IN type master; file .zone;zone 1.168.192. IN type master; file 192.168.1.rev;zone 0.0.127. IN type master; file named.local; allow-update none; ;zone .......0.0.0. IN type master; file named.ip6.local; allow-update none; ;zone 255. IN type master; file named.broadcast; allow-update none; ;zone 0. IN type master; file named.zero; allow-update none; ;include /etc/rndc.key;2建立正向和反向區(qū)域文件 rootlocalhost named# cd /var/named/rootlocalhost named# cp localhost.zone .zone 把localhost的摸版cp后修改嘿嘿修改完后的.zone的文件如下rootlocalhost named# cat .zone $TTL 86400 IN SOA . . ( 42 ; serial (d. adams) 3H ; refresh 15M ; retry 1W ; expiry 1D ) ; minimum IN NS . IN NS .ns1 IN A ns2 IN A host1 IN A 74mail IN CNAME . IN MX 5 .rootlocalhost named# cp .zone 192.168.1.rev 把修改完后的.zone cp一份作為反向配置文件，修改后如下rootlocalhost named# cat 192.168.1.rev $TTL 86400 IN SOA . . ( 42 ; serial (d. adams) 3H ; refresh 15M ; retry 1W ; expiry 1D ) ; minimum IN NS . IN NS .2 IN PTR .3 IN PTR .174 IN PTR .3,對區(qū)域文件的測試對named.conf的測試rootlocalhost named# named-checkconf 如沒語法錯誤就沒任何信息對區(qū)域文件測試rootlocalhost named# named-checkzone /var/named/.zone zone /IN: loaded serial 42OKrootlocalhost named# named-checkzone 1.168.192. /var/named/192.168.1.rev zone 1.168.192./IN: loaded serial 42OK4，rootlocalhost named# cat /etc/resolv.conf 把服務(wù)器的DNS地址指向自己nameserver search localdomain5，啟動named 服務(wù)rootlocalhost named# service named restartStopping named: OK Starting named: OK 6，測試主域名服務(wù)rootlocalhost named# host has address rootlocalhost named# host has address rootlocalhost named# host has address 74rootlocalhost named# host -t mx mail is handled by 5 .rootlocalhost named# host 92. domain name pointer .rootlocalhost named# host 92. domain name pointer .rootlocalhost named# host 7492. domain name pointer .嘿嘿 今天很順利，一次OK 下面我們就來架設(shè)緩存域名服務(wù)器緩存服務(wù)器的架設(shè)很easy，我們只需要安裝caching-nameserver軟件包就OK下面我們就來架設(shè)從域名服務(wù)器 （在中做）首先從服務(wù)器設(shè)置從主服務(wù)器中獲取域的正向和反向區(qū)域文件，同時他也提供域名解析1， 安裝軟件包rootlocalhost RPMS# rpm -ivh bind-9.2.4-2.i386.rpm warning: bind-9.2.4-2.i386.rpm: V3 DSA signature: NOKEY, key ID db42a60ePreparing. # 100% 1:bind # 100% rootlocalhost RPMS# rpm -ivh caching-nameserver-7.3-3.noarch.rpm warning: caching-nameserver-7.3-3.noarch.rpm: V3 DSA signature: NOKEY, key ID db42a60ePreparing. # 100% 1:caching-nameserver warning: /etc/named.conf saved as /etc/named.conf.rpmorig# 100%2， 設(shè)置named.conf在從域名服務(wù)器的named.conf中添加域和其反向解析區(qū)域的設(shè)置 ，內(nèi)容如下rootlocalhost RPMS# cat /etc/named.conf/ named.conf for Red Hat caching-nameserver /options directory /var/named; dump-file /var/named/data/cache_dump.db; statistics-file /var/named/data/named_stats.txt; /* * If there is a firewall between you and nameservers you want * to talk to, you might need to uncomment the query-source * directive below. Previous versions of BIND always asked * questions using port 53, but BIND 8.1 uses an unprivileged * port by default. */ / query-source address * port 53;/ / a caching only nameserver config/ controls inet allow localhost; keys rndckey; ;zone . IN type hint; file named.ca;zone localdomain IN type master; file localdomain.zone; allow-update none; ;zone localhost IN type master; file localhost.zone; allow-update none; ;zone IN type slave; file slaves/.zone; masters ; ;zone 1.168.192. IN type slave; file slaves/192.168.1.rev; masters 192.168.