DNS

1.dns服务器，是为了解决复杂的ip地址和常用的域名之间的转换问题

2.在centos5.5中安装dns服务器

1 yum install bind* -y
2 yum install caching-nameserver -y

2.修改配置文件

2.1修改主配置文件

 1 cd /var/named/chroot/etc/
 2 cp -p named.caching-nameserver.conf named.conf
 3 vim named.conf
 4 options {
 5         listen-on port 53 { 127.0.0.1; };  //将127.0.0.1改成any 监听所有地址
 6         listen-on-v6 port 53 { ::1; };
 7         directory       "/var/named";
 8         dump-file       "/var/named/data/cache_dump.db";
 9         statistics-file "/var/named/data/named_stats.txt";
10         memstatistics-file "/var/named/data/named_mem_stats.txt";
11         allow-query     { localhost; };  //将locahost 改成any
12         allow-query-cache { localhost; };  //将locahost 改成any
13 };
14 logging {
15         channel default_debug {
16                 file "data/named.run";
17                 severity dynamic;
18         };
19 };
20 view localhost_resolver {
21         match-clients      { localhost; };  //将locahost 改成any
22         match-destinations { localhost; };  //将locahost 改成any
23         recursion yes;
24         include "/etc/named.rfc1912.zones";
25 };

2.2修改域配置文件

 1 vim named.rfc1912.zones
 2 zone "sangmu2.com" IN {             //正向解析文件
 3         type master;
 4         file "sangmu2.com.zone";
 5         allow-update { none; };
 6 };  
 7 zone "10.168.192.in-addr.arpa" IN{  //反向解析文件，ip地址段需要反过来写
 8         type master;
 9         file "snagmu2.com.arpa";
10         allow-update { none; };
11 };
12 zone "10.168.192.in-addr.arpa" IN{  //从服务器配置文件
13         type slave;
14         file "slaves/sangmu.com.arpa";
15         allow-update { none; };
16         masters { 192.168.10.15; };  //从服务器地址
17 };
18 zone "ziyu.sangmu.com" IN {          //子域服务器配置文件
19         type master;
20         file "ziyu.sangmu.com.zone";
21         allow-update { none; };
22 };

2.3.1修改域名正向解析配置文件

 1 cp -p localhost.zone sangmu2.com.zone
 2 [root@test4 named]# vim sangmu2.com.zone 
 3 $TTL    86400
 4 @               IN SOA  test4.sangmu.com.  root (
 5                                         42              ; serial (d. adams)
 6                                         3H              ; refresh
 7                                         15M             ; retry
 8                                         1W              ; expiry
 9                                         1D )            ; minimum
10                 IN NS           test4.sangmu2.com.
11 test4           IN A            192.168.10.14
12 www             IN A            192.168.10.14

2.3.2修改域名反向解析配置文件

 1 [root@test4 named]# cp -p sangmu2.com.zone sangmu2.com.arpa
 2 [root@test4 named]# vim sangmu2.com.arpa 
 3 $TTL    86400
 4 @               IN SOA  test4.sangmu.com.  root (
 5                                         42              ; serial (d. adams)
 6                                         3H              ; refresh
 7                                         15M             ; retry
 8                                         1W              ; expiry
 9                                         1D )            ; minimum
10                 IN NS           test4.sangmu2.com.
11 14              IN A            test4.sangmu2.com.
12 14              IN A            www

2.3.3配置主从服务器的时候，需要主服务器允许读取数据

1  allow-transfer { any; };

2.3.4配置子域委派的时候，需要在父域解析文件中配置子服务器的地址

 1 [root@test4 named]# vim sangmu2.com.zone 
 2 ziyu
 3 $TTL    86400
 4 @               IN SOA  test4.sangmu.com.  root (
 5                                         42              ; serial (d. adams)
 6                                         3H              ; refresh
 7                                         15M             ; retry
 8                                         1W              ; expiry
 9                                         1D )            ; minimum
10                   IN NS           test4.sangmu2.com.
11 ziyu.test4   IN NS           ziyu.test4.sangmu2.com.
12 ziyu.test4   IN PTR           192.168.10.14
13 test4        IN PTR           192.168.10.14
14 www          IN PTR           192.168.10.14

如果父服务器想要解析子域服务器的域名，需要配置转发 forward

1 forwarders { 192.168.10.1；}；
2//或者
3     zone "ziyu.sangmu.com" IN {
4      type forward;
5      forwarders { 192.168.10.1; };
6      forward only|first;    // only 仅仅只是转发。first 先转发 没查询到则自己接着查询。
7 }

3.acl访问控制使用

1 acl sangmu { 192.168.10.1； }；
2 acl sangmu { 192.168.10.0/24； 192.168.10.1； }；//应用的时候 直接使用 命名  sangmu 如 allow-transfer { sangmu; };