1、系統(tǒng)環(huán)境說(shuō)明

[[email?protected] etc]# cat /etc/redhat-release

CentOS Linux release7.3.1611(Core)

防火墻和Selinux關(guān)閉

[[email?protected]-server etc]# systemctl status firewalld.service

● firewalld.service- firewalld -dynamic firewall daemon

Loaded: loaded (/usr/lib/systemd/system/firewalld.service; disabled; vendor preset: enabled)

Active: inactive (dead)

Docs:man:firewalld(1)

Oct11 09:46:22 localhost.localdomain systemd[1]: Starting firewalld -dynamic firewall daemon...

Oct11 09:46:23 localhost.localdomain systemd[1]: Started firewalld -dynamic firewall daemon.

Oct11 09:48:35 localhost.localdomain systemd[1]: Stopping firewalld -dynamic firewall daemon...

Oct11 09:48:35 localhost.localdomain systemd[1]: Stopped firewalld -dynamic firewall daemon.

[[email?protected]-server etc]# getenforce

Permissive

[[email?protected]-server etc]# hostname -I10.0.3.57

2、安裝bind

[[email?protected] ~]# yum install bind* -ql bind/etc/named.conf # 主配置文件/etc/named.rfc1912.zones # 區(qū)域解析庫(kù)文件/var/log/named.log #日志文件/var/named #服務(wù)根目錄

3、修改配置文件

[[email?protected] ~]# cp /etc/named.conf{,.bak}

[[email?protected]-server ~]# vim /etc/named.conf

#刪除IPv6地址，修改監(jiān)聽(tīng)地址options { listen-on port 53 { 10.0.3.57; };

.... allow-query { localhost;any; }; //允許DNS查詢(xún)客戶(hù)端

...

}

4、啟動(dòng)bind服務(wù)

named.conf

#啟動(dòng)bind服務(wù)

[[email?protected]-server ~]# systemctl start named

[[email?protected]-server ~]# netstat -lntup|grep 53tcp0 0 10.0.3.57:53 0.0.0.0:* LISTEN 8053/named

tcp0 0 127.0.0.1:953 0.0.0.0:* LISTEN 8053/named

tcp60 0 ::1:953 :::* LISTEN 8053/named

udp0 0 10.0.3.57:53 0.0.0.0:* 8053/named

#測(cè)試DNS服務(wù)器 dig @表示指定NDS服務(wù)器

[[email?protected]-server ~]# dig baidu.com @10.0.3.57;<<>> DiG 9.9.4-RedHat-9.9.4-61.el7_5.1 <<>> baidu.com @10.0.3.57;; global options:+cmd

;; Got answer:

;;->>HEADER<

; EDNS: version:0, flags:; udp: 4096;; QUESTION SECTION:

;baidu.com. IN A

;; ANSWER SECTION:

baidu.com.600 IN A 123.125.115.110baidu.com.600 IN A 220.181.57.216;; AUTHORITY SECTION:

baidu.com.172082IN NS ns2.baidu.com.

baidu.com.172082IN NS ns7.baidu.com.

baidu.com.172082IN NS dns.baidu.com.

baidu.com.172082IN NS ns4.baidu.com.

baidu.com.172082IN NS ns3.baidu.com.

;; ADDITIONAL SECTION:

dns.baidu.com.172082 IN A 202.108.22.220ns2.baidu.com.172082 IN A 61.135.165.235ns3.baidu.com.172082 IN A 220.181.37.10ns4.baidu.com.172082 IN A 220.181.38.10ns7.baidu.com.172082 IN A 119.75.219.82;; Querytime: 6msec

;; SERVER:10.0.3.57#53(10.0.3.57)

;; WHEN: Thu Oct11 16:51:46 CST 2018;; MSG SIZE rcvd:240

5、搭建內(nèi)網(wǎng)DNS服務(wù)器

讓當(dāng)前的DNS解析qipai.com域名

/etc/named.conf

include"/etc/named.rfc1912.zones";

include"/etc/named.root.key";

主配置文件中指定了/etc/named.rfc1912.zones文件

01.將域名 IP 關(guān)系存儲(chǔ)在DNS上，在/etc/named.rfc1912.zones 文件中進(jìn)行添加

[[email?protected]~]# vim /etc/named.rfc1912.zones

zone"qipai.com"IN { # qipai.com是域名

type master; # 表示權(quán)威DNS，即第一個(gè)file "qipai.com.zone"; # 域數(shù)據(jù)庫(kù)，默認(rèn)位于/var/named/下面，只需告知文件名qipai.com.zone是庫(kù)文件名

};

02.以/var/named目錄下的named.localhost為模板，創(chuàng)建nmtui.com.zone文件，創(chuàng)建區(qū)域數(shù)據(jù)庫(kù)

[[email?protected] ~]# cd /var/named/

[[email?protected] named]#cp -av named.localhost qipai.com.zone‘named.localhost‘ -> ‘nmtui.com.zone‘ ## 注意cp -a 保持原有屬性

03.解析區(qū)域數(shù)據(jù)庫(kù)格式，存放域名與IP的對(duì)應(yīng)關(guān)系[[email?protected] named]# catqipai.com.zone$TTL 1D

@ IN SOA @ qipai.top. (30; serial 1M ; refresh 1M ; retry 1M ; expire 3M ) ; minimum NS @ admin A10.0.3.10gm2.admin A10.0.3.10@ A10.0.3.10

6、檢查配置文件，重啟bind服務(wù)

[[email?protected] named]# named-checkzone qipai.com /var/named/qipai.com.zone

zone qipai.com/IN: loaded serial 30

7、測(cè)試DNS是否生效

Linux測(cè)試

[[email?protected] named]# dig qipai.com @10.0.3.57;<<>> DiG 9.9.4-RedHat-9.9.4-61.el7_5.1 <<>> qipai.com @10.0.3.57;; global options:+cmd

;; Got answer:

;;->>HEADER<

; EDNS: version:0, flags:; udp: 4096;; QUESTION SECTION:

;qipai.com. IN A

;; ANSWER SECTION:

qipai.com.86400 IN A 10.0.3.10;; AUTHORITY SECTION:

qipai.com.86400IN NS qipai.com.

;; Querytime: 1msec

;; SERVER:10.0.3.57#53(10.0.3.57)

;; WHEN: Thu Oct11 18:26:21 CST 2018;; MSG SIZE rcvd:68

修改網(wǎng)卡配置文件(/etc/sysconfig/network-scripts/ifcfg-eth0)或/etc/resolv.conf 指定DNS解析

Windows測(cè)試，指定DNS服務(wù)器

更多詳情參考 bind9中文手冊(cè)https://www.centos.bz/manual/BIND9-CHS.pdfhttps://www.linuxprobe.com/set-up-dns-server.html

總結(jié)

以上是生活随笔為你收集整理的linux7.3搭建dns,Centos7.3搭建DNS服务器--BIND的全部?jī)?nèi)容，希望文章能夠幫你解決所遇到的問(wèn)題。

如果覺(jué)得生活随笔網(wǎng)站內(nèi)容還不錯(cuò)，歡迎將生活随笔推薦給好友。