内网DNS之bind安装配置

一、概述

1、简介

 

二、安装

yum install -y bind bind-utils

 

三、配置

1、配置bind

vim /etc/named.conf
options {
        listen-on port 53 { any; };   //监听所有地址  
        //listen-on-v6 port 53 { ::1; };    //禁用ipv6
        directory       "/var/named";
        dump-file       "/var/named/data/cache_dump.db";
        statistics-file "/var/named/data/named_stats.txt";
        memstatistics-file "/var/named/data/named_mem_stats.txt";
        //allow-query     { localhost; };      //关闭仅支持本地解析
        recursion yes;
        dnssec-enable no;      //内网DNS对安全形要求不高，下面三条注释掉
        dnssec-validation no;
        dnssec-lookaside no;
        forwarders {114.114.114.114};   //配置转发器

        /* Path to ISC DLV key */
        bindkeys-file "/etc/named.iscdlv.key";

        managed-keys-directory "/var/named/dynamic";
};

//配置区域文件
zone "ehaofang.com" IN {
        type master;
        file "ehaofang.com.zone";
        notify yes;
        };
zone "6.168.192.in-addr.arpa" IN {
        type master;
        file "6.168.192.zone";
        notify yes;
        };

 

2、配置区域配置数据文件

正向解析

vim /var/named/ehaofang.com.zone
$TTL 600
@     IN     SOA     dns.ehaofang.com. root  (
    2018042316       ; serial
    30m      ; refresh
    10m      ; retry
    1W      ; expire
    3H )    ; minimum

@     IN      NS       dns.ehaofang.com.
dns   IN      A      192.168.6.250
crm   IN      A      192.168.6.6

 反正解析

vim /var/named/6.168.192.zone
$TTL 10m
@ IN SOA dns.ehaofang.com. root (
    2018042316       ; serial
    30m      ; refresh
    10m      ; retry
    1W      ; expire
    3H )    ; minimum

@ IN NS tao01.opjasee.com.
250 IN PTR dns.ehaofang.com
6 IN PTR crm.ehaofang.com

 

3、配置DNS流量转发

echo '1' > /proc/sys/net/ipv4/ip_forward

 

4、开机启动

chkconfig named on
/etc/init.d/named restart

 

 四、测试