電信dns服務器搭建

1、內蒙古電信DNS服務器搭建方案北京安普利信息技術有限公司 內蒙古電信分公司DNS服務器之前在天津搭建，北方區(qū)統一使用，今年總公司要求各省市自行搭建DNS服務器，據此，在今年8月中旬，我公司承接該工作，對內蒙古電信分公司的DNS進行搭建，現已搭建完畢。DNS服務器配置服務器型號IBM X345 X2服務器IP服務器名稱NMDX-DNS1NMDX-DNS2操作系統Red Hat 5.6_32位CPU4 Intel(R) Xeon(TM) CPU 2.40GHz 內存4G磁盤總大小36G X 2 READ(0+1)空間劃分/dev/sda2 32G /dev/sda1 97M電信提供的解析對照表網址

2、IP網址IP0 9nmg_ 6 2 7638 1 42 63 64 65 66 64 64 3、DNS服務器搭建方法加載光盤，安裝所有安裝包rootNMDX-DNS1 /# mount /dev/cdrom /media/mount: block device /dev/cdrom is write-protected, mounting read-onlymount: /dev/cdrom already mounted or /media/ busyrootNMDX-DNS1 /# cd /media/Server/rootNMDX-DNS1 Server# rpm -ivh bind-*

3、 -nodeps -forcewarning: bind-9.3.6-16.P1.el5.i386.rpm: Header V3 DSA signature: NOKEY, key ID 37017186Preparing. # 100% 1:bind-libs # 14% 2:bind # 29% 3:bind-utils # 43% 4:bind-chroot # 57% 5:bind-devel # 71% 6:bind-libbind-devel # 86% 7:bind-sdb # 100%rootNMDX-DNS1 Server# rpm -ivh caching-nameserv

4、er-9.3.6-16.P1.el5.i386.rpm -nodeps -forcewarning: caching-nameserver-9.3.6-16.P1.el5.i386.rpm: Header V3 DSA signature: NOKEY, key ID 37017186Preparing. # 100% 1:caching-nameserver # 100%進入/var/named/chroot/etc/修改主配置文件named.caching-nameserver.conf，只把五個地方改為any就可以了rootNMDX-DNS1 Server# cd /var/named/

5、chroot/etc/rootNMDX-DNS1 etc# lslocaltime named.caching-nameserver.conf named.rfc1912.zones rndc.keyrootNMDX-DNS1 etc# vi named.caching-nameserver.conf/ named.caching-nameserver.conf/ Provided by Red Hat caching-nameserver package to configure the/ ISC BIND named(8) DNS server as a caching only name

6、server/ (as a localhost DNS resolver only)./ See /usr/share/doc/bind*/sample/ for example named configuration files./ DO NOT EDIT THIS FILE - use system-config-bind or an editor/ to create named.conf - edits to this file will be lost on/ caching-nameserver package upgrade./options listen-on port 53

7、any; ; listen-on-v6 port 53 :1; ; directory /var/named; dump-file /var/named/data/cache_dump.db; statistics-file /var/named/data/named_stats.txt; memstatistics-file /var/named/data/named_mem_stats.txt; / Those options should be used carefully because they disable port / randomization / query-source

8、port 53; / query-source-v6 port 53; allow-query any; ; allow-query-cache any; ;logging channel default_debug file data/named.run; severity dynamic; ;view localhost_resolver match-clients any; ; match-destinations any; ; recursion yes; include /etc/named.rfc1912.zones;修改主配置文件的擴展文件named.rfc1912.zones正

9、域名為地址：如的域名為反域名為IP：如的域名為6.19.172.in-addr.arp（in-addr.arp標記為反向域）rootNMDX-DNS1 etc# vi named.rfc1912.zones / named.rfc1912.zones:/ Provided by Red Hat caching-nameserver package/ ISC BIND named zone configuration for zones recommended by/ RFC 1912 section 4.1 : localhost TLDs and address zones/ See /us

10、r/share/doc/bind*/sample/ for example named configuration files./ file named.ca; allow-update none; ;/ named.rfc1912.zones:/ Provided by Red Hat caching-nameserver package/ ISC BIND named zone configuration for zones recommended by/ RFC 1912 section 4.1 : localhost TLDs and address zones/ See /usr/s

11、hare/doc/bind*/sample/ for example named configuration files./ file named.ca; allow-update none; ;zone IN （開啟正域名叫：） type master; （類型為主域） file ; （配置文件名為） allow-update none; ;zone IN type master; file ; allow-update none; ;zone IN type master; file ; allow-update none; ;zone 22.24.172. IN （開啟反域名叫：22.2

12、4.172.） type master; （類型為主域） file 172.24.22.rev; （配置文件名為） allow-update none; ;zone 88.3.10. IN type master; file 10.3.88.rev; allow-update none; ;zone 11.19.172. IN type master; file 172.19.11.rev; allow-update none; ;zone 49.24.172. IN type master; file 172.24.49.rev; allow-update none; ;zone 31.24

13、.172. IN type master; file 172.24.31.rev; allow-update none; ;zone 24.224.136. IN type master; file 136.224.24.rev; allow-update none; ;zone 6.19.172. IN type master; file 172.19.6.rev; allow-update none; ;zone 251.19.172. IN type master; file 172.19.251.rev; allow-update none; ;zone 35.224.134. IN

14、type master; file 134.224.35.rev; allow-update none; ;zone 0.1.10. IN type master; file 10.1.0.rev; allow-update none; ;zone 255.3.10. IN type master; file 10.3.255.rev; allow-update none; ;#zone .0.0.0. IN # type master;# file named.ip6.local;# allow-update none; ;#;#zone 255. IN # type master;# fi

15、le named.broadcast;# allow-update none; ;#;#zone 0. IN # type master;# file named.zero;# allow-update none; ;#;named.rfc1912.zones 121L, 2414C written進入以下目錄建立域配置文件rootNMDX-DNS1 etc# cd /var/named/chroot/var/named/rootNMDX-DNS1 namedcp -p named.local rootNMDX-DNS1 namedcp -p named.local rootNMDX-DNS1

16、 namedcp -p named.local rootNMDX-DNS1 namedcp -p named.local rootNMDX-DNS1 namedcp -p named.local 10.1.0.revrootNMDX-DNS1 namedcp -p named.local 10.3.255.revrootNMDX-DNS1 namedcp -p named.local 10.3.88.revrootNMDX-DNS1 namedcp -p named.local 134.224.35.revrootNMDX-DNS1 namedcp -p named.local 136.224

17、.24.revrootNMDX-DNS1 namedcp -p named.local 172.19.11.revrootNMDX-DNS1 namedcp -p named.local 172.19.251.revrootNMDX-DNS1 namedcp -p named.local 172.19.6.revrootNMDX-DNS1 namedcp -p named.local 172.24.22.revrootNMDX-DNS1 namedcp -p named.local 172.24.31.revrootNMDX-DNS1 namedcp -p named.local 172.24

18、.49.revrootNMDX-DNS1 namedcp -p named.local 172.24.revrootNMDX-DNS1 named# ls -ltotal 104-rw-r- 1 root named 1577 Aug 28 12:20 -rw-r- 1 root named 422 Sep 9 13:05 10.1.0.rev-rw-r- 1 root named 436 Sep 4 12:53 10.3.255.rev-rw-r- 1 root named 439 Sep 4 17:30 10.3.88.rev-rw-r- 1 root named 440 Sep 4 12

19、:52 134.224.35.rev-rw-r- 1 root named 655 Sep 4 12:14 136.224.24.rev-rw-r- 1 root named 610 Sep 4 12:36 172.19.11.rev-rw-r- 1 root named 437 Sep 4 12:51 172.19.251.rev-rw-r- 1 root named 489 Sep 9 16:39 172.19.6.rev-rw-r- 1 root named 1225 Sep 12 16:26 172.24.22.rev-rw-r- 1 root named 474 Sep 4 12:1

20、0 172.24.31.rev-rw-r- 1 root named 637 Aug 28 15:34 172.24.49.rev-rw-r- 1 root named 1388 Aug 28 15:25 172.24.rev-rw-r- 1 root named 939 Sep 9 12:45 drwxrwx- 2 named named 4096 Aug 26 2004 data-rw-r- 1 root named 429 Sep 4 17:31 -rw-r- 1 root named 198 Dec 3 2010 localdomain.zone-rw-r- 1 root named

21、161 Sep 9 13:00 localhost.zone-rw-r- 1 root named 1340 Sep 12 16:26 -rw-r- 1 root named 427 Dec 3 2010 named.broadcast-rw-r- 1 root named 1892 Dec 3 2010 named.ca-rw-r- 1 root named 424 Dec 3 2010 named.ip6.local-rw-r- 1 root named 426 Dec 3 2010 named.local-rw-r- 1 root named 427 Dec 3 2010 named.z

22、ero-rw-r- 1 root named 897 Sep 4 13:14 drwxrwx- 2 named named 4096 Jul 27 2004 slaves添加配置記錄rootNMDX-DNS1 named# vi srmapp IN A 72$TTL 86400 IN SOA localhost. root.localhost. ( 42 ; Serial 28800 ; Refresh 14400 ; Retry 3600000 ; Expire 86400 ) ; Minimum IN NS localhost.NMDX-DNS1 IN A NMDX-DNS2 IN A portal IN A 02bfeccprd IN A 4bfsrmci IN A 9bfsrmap1 IN A 9bfsrmap2 IN A 0bfsrmap3 IN A 7bfgfapp IN A 90ssc IN A 76gjjline IN A 55fapp-nm IN A 72sso IN A