Johnson的部落格

使用Redhat es4

確定有安裝以下這三個套件：
bind-9.2.4-2.i386.rpm
caching-nameserver-7.3-3.noarch.rpm
bind-chroot-9.2.4-2.i386.rpm (若需要Chroot 環境，要裝此套件)

name --> ip (正解)
ip --> name (反解)

在同機器建立example.corp 和 dm.org domain

此DNS Server 的IP：
172.16.0.254、192.168.12.50

在/var/named/chroot/etc/named.conf
1．這一段預設沒有，要自己加入，若查尋的名稱解析不是自己的domain ，
只回應localhost、172.16.0.0及192.168.12.0網段

options
{ directory "/var/named/chroot/var/named";
allow-recursion
{ 172.16.0.0/24;
192.168.12.0/24;
127.0.0.0/8;
};
};

2．最後加入：

zone "example.corp" IN {
type master;
file "example.corp.zone";
allow-update { none; };
};
zone "0.16.172.in-addr.arpa" IN {
type master;
file "example.corp.arpa";
allow-update { none; };
allow-transfer { 172.16.0.253/24; }; //slave dns 的ip

};
zone "dm.org" IN {
type master;
file "dm.org.zone";
allow-update { none; };
};
zone "12.168.192.in-addr.arpa" IN {
type master;
file "dm.org.arpa";
allow-update { none; };
};

example.corp 正解檔：/var/named/chroot/var/named/example.corp.zone

$TTL 86400
$ORIGIN example.corp.
@ IN SOA rhce root (
2006030601 ; serial (d. adams)
3H ; refresh
15M ; retry
1W ; expiry
1D ) ; minimum
IN NS rhce

rhce IN A 172.16.0.254
student18 IN A 172.16.0.18
student19 IN A 172.16.0.19
student20 IN A 172.16.0.20
student122 IN A 172.16.0.122
www IN CNAME student18
ftp IN CNAME student19
mail IN CNAME student20

example.corp 反解檔：/var/named/chroot/var/named/example.corp.arpa

$TTL 86400
@ IN SOA rhce root.example.corp. (
2006030501 ; serial (d. adams)
3H ; refresh
15M ; retry
1W ; expiry
1D ) ; minimum
IN NS rhce.example.corp.

18 IN PTR student18.example.corp.
19 IN PTR student19.example.corp.
20 IN PTR student20.example.corp.
254 IN PTR rhce.example.corp.

dm.org 正解檔：/var/named/chroot/var/named/dm.org.zone

$TTL 86400
$ORIGIN dm.org.
@ IN SOA rhce root (
2006030101 ; serial (d. adams)
3H ; refresh
15M ; retry
1W ; expiry
1D ) ; minimum
IN NS rhce.dm.org.
IN MX 10 vw
mail IN MX 10 vw

rhce IN A 192.168.12.50
vw IN A 192.168.12.100
ftp IN A 192.168.12.216
mail IN A 192.168.12.216
webmail IN A 192.168.12.216

dm.org 反解檔：/var/named/chroot/var/named/dm.org.arpa

$TTL 86400
@ IN SOA rhce root (
2006030101 ; serial (d. adams)
3H ; refresh
15M ; retry
1W ; expiry
1D ) ; minimum
IN NS rhce.dm.org.

50 IN PTR rhce.dm.org.
100 IN PTR vw.dm.org.
216 IN PTR mail.dm.org.

　
====================================================================================================

　
Slave DNS 的named.conf 設定法：
zone "example.corp" IN {

type slave;

file "example.corp.zone";

masters { 172.16.0.254; }; //為master dns 的ip

allow-transfer { none; };

};

zone "dm.org" IN {

type slave;

file "dm.org.zone";

masters { 172.16.0.254; }; //為master dns 的ip

allow-transfer { none; };

};

====================================================================================================

slave dns 相關問題確認：

ls -ld /var/named

============================================================================

finger named

Login: named Name:Named
Directory: /var/named shell: /shell/nologin
Never Logged in.
No mail.
No Plan.

============================================================================

ps auxw | grep -w named

named 24816 0.0 0.9 11760 2308 ? S xx:xx 0:00 /usr/sbin/named -u named
root 25578 0.0 0.1 336 pst/0 R xx:xx 0:00 grep -w named

============================================================================

☆☆☆

Slave dns 要確認以下目錄權限
chown named.named /var/named/chooot