CentOS7 搭建 DNS 域名解析服务器

CentOS7 搭建 DNS 域名解析服务器

1. 安装 BIND 服务器软件并启动

yum -y install bind bind-chroot bind-utils
systemctl start named.service   //启动服务
systemctl enable named          //设为开机启动

1.1. 查看named进程是否正常启动

ps -eaf|grep named  //检查进程
ss -nult | grep :53   //检查监听端口

1.2. 开放 TCP 和 UDP 的 53 端口

firewall-cmd --permanent --add-port=53/tcp
firewall-cmd --permanent --add-port=53/udp
firewall-cmd --reload  //重新加载防火墙配置，让配置生效

2. DNS 服务的相关配置文件

2.1. 修改主要文件 /etc/named.conf

修改前先备份： cp -p /etc/named.conf /etc/named.conf.bak // 参数-p表示备份文件与源文件的属性一致。 修改配置：vi /etc/named.conf ， 配置内容如下：

options {
        listen-on port 53 { any; };  //127.0.0.1; 修改成any;
        listen-on-v6 port 53 { any; }; //::1; 修改成 any;
        directory       "/var/named";
        dump-file       "/var/named/data/cache_dump.db";
        statistics-file "/var/named/data/named_stats.txt";
        memstatistics-file "/var/named/data/named_mem_stats.txt";
        recursing-file  "/var/named/data/named.recursing";
        secroots-file   "/var/named/data/named.secroots";
        allow-query     { any; }; // localhost; 修改成 any;

        recursion yes;

        dnssec-enable yes;
        dnssec-validation yes;

        /* Path to ISC DLV key */
        bindkeys-file "/etc/named.root.key";

        managed-keys-directory "/var/named/dynamic";

        pid-file "/run/named/named.pid";
        session-keyfile "/run/named/session.key";
};

logging {
        channel default_debug {
                file "data/named.run";
                severity dynamic;
        };
};

zone "." IN {
        type hint;
        file "named.ca";
};

include "/etc/named.rfc1912.zones";
include "/etc/named.root.key";

named-checkconf  //检查named.conf是否有语法问题

2.2. 配置正向解析

2.2.1. 修改/etc/named.rfc1912.zones

添加配置： vi /etc/named.rfc1912.zones ， 配置内容如下

zone "xhj.com" IN{
    type master;
    file "xhj.com";
    allow-update { none; };
};

2.2.2. 添加正向解析域

基于 name.localhost 模板，创建配置文件：

cp -p /var/named/named.localhost /var/named/xhj.com

***** 如果权限不对解析不生效 *****

chown -R root.named xhj.com

配置正向域名解析文件 xhj.com ： vi /var/named/xhj.com ，配置内容如下：

$TTL 1D
@     IN     SOA   @ www.xhj.com. (
                            0 ; serial
                            1D; refresh
                            1H; retry
                            1W; expire
                            1H);minimun
        NS       	@
        A	127.0.0.1
        AAAA 	::1

www     IN    A    192.168.2.125

named-checkzone "xhj.com" "/var/named/xhj.com"

编辑/etc/resolv.conf

/etc/resolv.conf

添加

nameserver 127.0.0.1

2.2.4. 重启 named 服务，让配置生效

systemctl restart named

2.named 命令允许动态更新

rndc reload

bug调试

nslookup www.xhj.com

host www.xhj.com

ping www.xhj.com