linux dns服務(wù)器配置實驗報告猛
Linux 服務(wù)器配置項 目 報 告 ,姓名: 班級: 專業(yè):學(xué)號: ,一、 項目需求:根據(jù)某企業(yè)要求配置一個dns 服務(wù)器,從而達到所需要求。
Linux 服務(wù)器配置
項 目 報 告
,姓名: 班級: 專業(yè):
學(xué)號:
,一、 項目需求:
根據(jù)某企業(yè)要求配置一個dns 服務(wù)器,從而達到所需要求。
二、 項目內(nèi)容:
設(shè)置一個主DNS 服務(wù)器 1、實現(xiàn)解析 meng.com 域 2、具有郵件交換記錄 3、分別解析www 、mail 、 ftp 等常用地址
三、 項目實施環(huán)境:
硬件設(shè)備:計算機一臺以及RH Linux 系統(tǒng)安裝光盤; 軟件系統(tǒng):RH AS Linux 5.0
虛擬機ip 地址:10.129.33.100
www 地址為:10.129.33.101
mail 地址為:10.129.33.102
ftp 地址為:10.129.33.103
Linux 主機名:meng.com
服務(wù)器所需軟件包:
以及
基本配置文件路徑:
/etc/named.conf
/etc/named.rfc1912.zones
/etc/named.caching-nameserver.conf
/var/named/chroot/var/named/localdomain.zone /var/named/chroot/var/named/named.local /var/named/chroot/var/named/meng.com.zone /var/named/chroot/var/named/33.129.10.zone
四、 實驗步驟:
1. 配置環(huán)境
配置ip 地址:
2. 檢查是否安裝了bind 包:rpm - qa | grep bind
掛載系統(tǒng)光盤,安裝:mount /dev/cdrom /media
安裝bind 包: rpm – ivh bind* - -aid - -nodeps - -force 和caching-nameserver 包。
3. 生成主配置文件至/etc/named.conf。cp
/etc/named.caching-nameserver.conf /etc/named.conf
并作配置: vi /etc/named.conf
// named.caching-nameserver.conf
//
// Provided by Red Hat caching-nameserver package to configure the // ISC BIND named(8) DNS server as a caching only nameserver // (as a localhost DNS resolver only).
//
// See /usr/share/doc/bind*/sample/ for example named configuration files. //
// DO NOT EDIT THIS FILE - use system-config-bind or an editor // to create named.conf - edits to this file will be lost on
// caching-nameserver package upgrade.
//
options {
listen-on port 53 { any ; };
listen-on-v6 port 53 { ::1; };
directory "/var/named";
dump-file "/var/named/data/cache_dump.db"; statistics-file "/var/named/data/named_stats.txt";
memstatistics-file "/var/named/data/named_mem_stats.txt"; query-source port 53;
query-source-v6 port 53;
allow-query { any ; };
forwarders { 202.96.134.133 202.96.128.68; };
}; //此處添加的主機地址為解析外網(wǎng)所用的外網(wǎng)DNS 服務(wù)ip 地址 logging {
channel default_debug {
file "data/named.run";
severity dynamic;
};
,};
view localhost_resolver {
match-clients { any ; };
match-destinations { any ; };
recursion yes;
include "/etc/named.rfc1912.zones";
; };
4. 修改區(qū)域配置文件,添加本地域名區(qū)域: Vi /etc/named.rfc1912.zone
// named.rfc1912.zones:
//
// Provided by Red Hat caching-nameserver package
//
// ISC BIND named zone configuration for zones recommended by // RFC 1912 section 4.1 : localhost TLDs and address zones //
// See /usr/share/doc/bind*/sample/ for example named configuration files.
//
zone "." IN {
type hint;
file "named.ca";
};
zone "localdomain" IN {
type master;
file "localdomain.zone";
allow-update { none; };
};
zone "localhost" IN {
type master;
file "localhost.zone";
allow-update { none; };
};
zone "0.0.127.in-addr.arpa" IN {
type master;
file "named.local";
,allow-update { none; };
};
zone
"0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ip6.arpa" IN {
type master;
file "named.ip6.local";
allow-update { none; };
};
zone "255.in-addr.arpa" IN {
type master;
file "named.broadcast";
allow-update { none; };
};
zone "0.in-addr.arpa" IN {
type master;
file "named.zero";
allow-update { none; };
};
zone "meng.com" IN { //自己添加的正向區(qū)域 type master;
file "meng.com.zone"; //正向區(qū)域文件名
allow-update { none; };
};
zone "33.129.10.in-addr.arpa" IN { //自己添加的反向區(qū)域 type master;
file "33.129.10.zone"; //正向區(qū)域文件名
allow-update { none; };
"/etc/named.rfc1912.zones" 61L, 1144C
5. 生成正向區(qū)域文件和反向區(qū)域文件:
cp -p /var/named/chroot/var/named/localdomain.zone meng.com.zone //正向文件
,cp -p /var/named/chroot/var/named/named.local 33.129.10.zone
6. 在生成的正向區(qū)域好反向區(qū)域文件內(nèi)加入相應(yīng)記錄:
Vi /var/named/chroot/var/named/meng.com.zone
$TTL 86400
@ IN SOA meng.com. root .meng.com. (
42 ; serial (d. adams) 3H ; refresh 15M ; retry 1W ; expiry 1D ) ; minimum IN NS dns.meng.com.
IN MX 10 mail.meng.com. dns IN A 10.129.33.100
gw IN A 10.129.33.1
ftp IN A 10.129.33.103
www IN A 10.129.33.101 mail IN A 10.129.33.102
//反向文件
Vi /var/named/chroot/var/named/33.129.10.zone
@ IN SOA meng.com. root.meng.com. ( 1997022700 ; Serial
28800 ; Refresh
14400 ; Retry
3600000 ; Expire
86400 ) ; Minimum
IN NS dns.meng.com.
1 IN PTR gw.meng.com.
101 IN PTR www.meng.com.
102 IN PTR mail.meng.com.
103 IN PTR ftp.meng.com.
,7. 關(guān)閉防火墻并且定制允許進入的端口,在“其他端口”一欄輸入:53:tcp 53:udp
8. 開啟dns 服務(wù)
/etc/init.d/named restart
9. 用nslookup 測試,
正向解析: