单一dns

centos7.4系统下搭建dns

[root@master ~]# cat /etc/redhat-release 
CentOS Linux release 7.4.1708 (Core) 

[root@master ~]# yum install bind bind-utils -y

修改dns主配置文件/etc/named.conf

[root@master ~]# cat /etc/named.conf

options {
    listen-on port 53 { any; }; #放开所有
    listen-on-v6 port 53 { ::1; };
    directory     "/var/named";
    dump-file     "/var/named/data/cache_dump.db";
    statistics-file "/var/named/data/named_stats.txt";
    memstatistics-file "/var/named/data/named_mem_stats.txt";
    recursing-file  "/var/named/data/named.recursing";
    secroots-file   "/var/named/data/named.secroots";
    allow-query     { any; }; #放开所有
    allow-transfer  { none; }; #禁止转发


    recursion yes;
    dnssec-enable yes;
    dnssec-validation yes;

    bindkeys-file "/etc/named.root.key";
    managed-keys-directory "/var/named/dynamic";
    pid-file "/run/named/named.pid";
    session-keyfile "/run/named/session.key";
};
logging {
        channel default_debug {
                file "data/named.run";
                severity dynamic;
        };
};


zone "." IN {
    type hint;
    file "named.ca";
};
zone "devin.vm" IN { #正向解析域
    type master;
    file "named.devin.vm";
};
zone "26.168.192.in-addr.arpa" IN { #反向解析域
    type master;
    file "named.192.168.26";
};

正向解析 /var/named/named.devin.vm

[root@master named]# cat /var/named/named.devin.vm 
$TTL 1D
@    IN SOA    devin.vm. ns2.devin.vm. (
                    0    ; serial
                    1D    ; refresh
                    1H    ; retry
                    1W    ; expire
                    3H )    ; minimum
@    IN    NS    master.devin.vm.
master    IN    A    192.169.26.51
@    IN    MX    10    ns2.devin.vm. #数字（1~15）指定域中邮件服务器的优先级，越小越优先。
ns2.devin.vm.    IN    A    192.168.26.53
ns1.devin.vm.    IN    A    192.168.26.52
client.devin.vm.    IN    A    192.168.26.52

www.devin.vm.    IN    A    192.168.26.52
ftp.devin.vm.    IN    CNAME    www.devin.vm.
dhcp.devin.vm.    IN    CNAME    www.devin.vm.

反向解析 /var/named/named.192.168.26

[root@master named]# cat /var/named/named.192.168.26 
$TTL 1D
@    IN SOA    devin.vm. ns2.devin.vm. (
                    0    ; serial
                    1D    ; refresh
                    1H    ; retry
                    1W    ; expire
                    3H )    ; minimum
@    IN    NS    master.devin.vm.
51    IN    PTR    master.devin.vm.
52    IN    PTR    ns1.devin.vm.
52    IN    PTR    client.devin.vm.
52    IN    PTR    www.devin.vm.
52    IN    PTR    ftp.devin.vm.
52    IN    PTR    dhcp.devin.vm.
53    IN    PTR    ns2.devin.vm.

检查配置文件

  named-checkzone devin.vm /var/named/named.devin.vm 
  named-checkzone 26.168.192.in-addr.arpa /var/named/named.192.168.26 
  named-checkconf -z /etc/named.conf

更改权限

  chown root:named named.devin.vm 
  chown root:named named.192.168.26

重启服务

systemctl stop firewalld
systemctl disable firewalld
setenforce 0
systemctl start named
systemctl enable named

客户端验证

[root@ns2 ~]# cat /etc/resolv.conf 
# Generated by NetworkManager
nameserver 192.168.26.51

[root@ns2 ~]# yum install bind-utils -y


[root@ns2 ~]# host www.devin.vm
www.devin.vm has address 192.168.26.52


[root@ns2 ~]# dig ns2.devin.vm
; <<>> DiG 9.11.4-P2-RedHat-9.11.4-16.P2.el7_8.6 <<>> ns2.devin.vm
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 25514
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 1, ADDITIONAL: 2
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;ns2.devin.vm.            IN    A
;; ANSWER SECTION:
ns2.devin.vm.        86400    IN    A    192.168.26.53
;; AUTHORITY SECTION:
devin.vm.        86400    IN    NS    master.devin.vm.
;; ADDITIONAL SECTION:
master.devin.vm.    86400    IN    A    192.169.26.51
;; Query time: 0 msec
;; SERVER: 192.168.26.51#53(192.168.26.51)
;; WHEN: Sun Aug 09 03:14:48 CST 2020
;; MSG SIZE  rcvd: 94


[root@ns2 ~]# nslookup ftp.devin.vm
Server:        192.168.26.51
Address:    192.168.26.51#53
ftp.devin.vm    canonical name = www.devin.vm.
Name:    www.devin.vm
Address: 192.168.26.52


[root@ns2 ~]# nslookup 192.168.26.52
52.26.168.192.in-addr.arpa    name = www.devin.vm.
52.26.168.192.in-addr.arpa    name = ns1.devin.vm.
52.26.168.192.in-addr.arpa    name = dhcp.devin.vm.
52.26.168.192.in-addr.arpa    name = ftp.devin.vm.
52.26.168.192.in-addr.arpa    name = client.devin.vm.