一、要求
1.搭建dns服务器能够对自定义的正向或者反向域完成数据解析查询。
2.配置从DNS服务器,对主dns服务器进行数据备份。
二、代码
1.配置主服务器
[root@localhost ~]# dnf install bind
[root@localhost ~]# systemctl stop firewalld
[root@localhost ~]# setenforce 0####################主配置文件定义正反向解析域#####################
[root@localhost ~]# vim /etc/named.confoptions {listen-on port 53 { 192.168.199.129; };directory "/var/named";allow-query { any; };allow-transfer {192.168.199.128; };
};
zone "openlab.com" IN { //正向解析域type master; //主dns服务器file "named.openlab.com"; //正向解析的资源记录文件(数据文件)
};
zone "199.168.192.in-addr.arpa" IN { //网络位地址倒序表示type master;file "named.192";allow-update { none; };
};#######################正向解析资源记录文件#######################
[root@localhost ~]# vim /var/named/named.openlab.com$TTL 1D
@ IN SOA @ lxx.qq.com (20241030001M1M1M1M )IN NS ns.openlab.com.IN NS slave.openlab.com.
ns IN A 192.168.199.128 //主服务器ip
slave IN A 192.168.199.129 //从服务器ipwww IN A 192.168.199.111
ftp IN A 192.168.199.222
wwww IN CNAME www###########################反向解析记录文件########################
[root@localhost ~]# vim /var/named/named.192$TTL 1D
@ IN SOA @ rname.invalid. (0 ; serial1M ; refresh1M ; retry1M ; expire1M ) ; minimumNS ns.openlab.com.
132 PTR ns.openlab.com.
111 PTR www.openlab.com[root@localhost ~]# systemctl restart named #主服务器重启服务(在监听日志之后操作)########################解析测试#########################
[root@localhost ~]# nslookup
> server 192.168.199.129 #指定解析数据的dns服务器是192.168.199.129
Default server: 192.168.199.129
Address: 192.168.199.129#53
> www.openlab.com #正向解析查询域名对应的ip地址
Server: 192.168.199.129
Address: 192.168.199.129#53Name: www.openlab.com
Address: 192.168.199.111
2.配置从服务器
[root@localhost ~]# dnf install bind
[root@localhost ~]# systemctl stop firewalld
[root@localhost ~]# setenforce 0[root@localhost ~]# vim /etc/named.confoptions {listen-on port 53 { 192.168.199.128; };directory "/var/named";allow-query { any; };
};
zone "openlab.com" IN { type slave; file "named.openlab.com";master { 192.168.199.199; };
};
zone "199.168.192.in-addr.arpa" IN { type slave;file "named.192";master { 192.168.199.199; };
};[root@localhost ~]# tail -f /var/log/messages #从服务器中监听日志信息