dns主從服務器配置

時間 2019-11-15

原文原文鏈接

一.DNS_IPADDR=10.10.54.61主dns服務器
[root@gyf ~]# vim /etc/named.conf

options {
        listen-on port 53 {any; };
        listen-on-v6 port 53 { ::1; };
        directory       "/var/named";
        dump-file       "/var/named/data/cache_dump.db";
        statistics-file "/var/named/data/named_stats.txt";
        memstatistics-file "/var/named/data/named_mem_stats.txt";
        allow-query     {any; };
        recursion yes;
#       forward only;
#       forwarders{
#       8.8.8.8;
#
#       };
zone "." IN {
        type hint;
        file "named.ca";
};
zone "ssr.com" IN {
        type master;
        file "named.ssr.com";
        allow-transfer{10.10.54.64;};

};
zone "54.10.10.in-addr.arpa" IN {
        type master;
        file "named.10.10.54";
        allow-transfer{10.10.54.64;};。。。。。。。。。。。。。。容許轉移

};
[root@gyf named]# /etc/init.d/named restart

[root@gyf named]# vim named.ssr.com
$TTL 86400
@       IN      SOA     ssr.com. root (
                                2014010801
                                1H
                                2M
                                1W
                                1D
                                        );

@                IN     NS              ssr.com.
ssr.com.         IN     A               10.10.54.61
@                IN     MX        3    ssr.com .....必須帶數字
                                      （10.10.54.61....錯誤 )
master.ssr.com. IN     A               10.10.54.61
slaver           IN     A               10.10.54.64
svn              IN     A               10.10.54.64
ftp              IN     CNAME           master.ssr.com.
hr              IN      A               10.10.54.50

[root@gyf named]# vim named.10.10.54
。。。。。。。。。。。。。。。。。。。。。。。。。。。
$TTL 86400
@       IN      SOA     ssr.com. root (
                                2014010801
                                1H
                                2M
                                1W
                                1D
                                        );
@                IN     NS              ssr.com.
這些正向反向都同樣
。。。。。。。。。。。。。。。。。。。。。。。。。。。。。。
61              IN      PTR             ssr.com.
61              IN      PTR             master.ssr.com.
61              IN      PTR             ftp.ssr.com.
50              IN      PTR             hr.ssr.com.
64              IN      PTR             slaver.ssr.com.
64              IN      PTR             svn.ssr.com.

二.ip:10.10.54.64從dns服務器
[root@gyf ~]# vim /etc/named.conf
options {
        listen-on port 53 { any; };
        listen-on-v6 port 53 { ::1; };
        directory       "/var/named";
        dump-file       "/var/named/data/cache_dump.db";
        statistics-file "/var/named/data/named_stats.txt";
        memstatistics-file "/var/named/data/named_mem_stats.txt";
        allow-query     { any; };。。。。。。。容許本身主機查詢
        recursion yes;。。。。。。。容許本身主機查詢

zone "." IN {
        type hint;
        file "named.ca";
};
zone "ssr.com" IN {
        type slave;
        file "slaves/named.ssr.com";
        masters{10.10.54.61;};

};
zone "54.10.10.in-addr.arpa" IN {
        type slave;
        file "slaves/named.10.10.54";
        masters{10.10.54.61;};

};

[root@gyf ~]# /etc/init.d/named restart

[root@gyf ~]# cd /var/named/slaves/
[root@gyf slaves]# ll
total 8
-rw-r--r-- 1 named named 436 1月   8 20:48 named.10.10.54
-rw-r--r-- 1 named named 414 1月   8 20:48 named.ssr.com

[root@Cent64 ~]# vim /var/named/slaves/named.ssr.com

$ORIGIN .
$TTL 86400      ; 1 day
ssr.com                 IN SOA ssr.com. root.ssr.com. (
                                2014010802 ; serial
                                3600       ; refresh (1 hour)
                                120        ; retry (2 minutes)
                                604800     ; expire (1 week)
                                86400      ; minimum (1 day)
                                )
                        NS      ssr.com.
                        A       10.10.54.61
                        MX      3 master.ssr.com.
$ORIGIN ssr.com.
ftp                     CNAME   master
hr                      A       10.10.54.50
master                  A       10.10.54.61
slaver                  A       10.10.54.64
svn                     A       10.10.54.64
www                     CNAME   ssr.com

[root@Cent64 ~]# vim /var/named/slaves/named.10.10.54
$ORIGIN .
$TTL 86400      ; 1 day
54.10.10.in-addr.arpa   IN SOA ssr.com. root.54.10.10.in-addr.arpa. (
                                2014010802 ; serial
                                3600       ; refresh (1 hour)
                                120        ; retry (2 minutes)
                                604800     ; expire (1 week)
                                86400      ; minimum (1 day)
                                )
                        NS      ssr.com.
$ORIGIN 54.10.10.in-addr.arpa.
50                      PTR     hr.ssr.com.
61                      PTR     ssr.com.
                        PTR     master.ssr.com.
                        PTR     ftp.ssr.com.
                        PTR     www.ssr.com.
64                      PTR     slaver.ssr.com.
                        PTR     svn.ssr.com.

ip:10.10.54.60
gyf@gyf-HP-Pro-3380-MT:~$ sudo vim /etc/resolv.conf

#nameserver 10.10.54.61
nameserver 10.10.54.64

測試：10.10.54.60
（1）備用服務器反向解析
gyf@gyf-HP-Pro-3380-MT:~$ dig -x 10.10.54.61

;; QUESTION SECTION:
;61.54.10.10.in-addr.arpa.   IN   PTR

;; ANSWER SECTION:
61.54.10.10.in-addr.arpa. 86400   IN   PTR   ftp.ssr.com.
61.54.10.10.in-addr.arpa. 86400   IN   PTR   ssr.com.
61.54.10.10.in-addr.arpa. 86400   IN   PTR   master.ssr.com.

;; AUTHORITY SECTION:
54.10.10.in-addr.arpa.   86400   IN   NS   ssr.com.

;; ADDITIONAL SECTION:
ssr.com.       86400   IN   A   10.10.54.61

;; Query time: 0 msec

;; SERVER: 10.10.54.64#53(10.10.54.64)

;; WHEN: Wed Jan 08 20:51:31 CST 2014
;; MSG SIZE rcvd: 143

(2)正向解析
gyf@gyf-HP-Pro-3380-MT:~$ dig ssr.com

;; QUESTION SECTION:
;ssr.com.           IN   A

;; ANSWER SECTION:
ssr.com.       86400   IN   A   10.10.54.61

;; AUTHORITY SECTION:
ssr.com.       86400   IN   NS   ssr.com.

;; Query time: 0 msec+
;; SERVER: 10.10.54.64#53(10.10.54.64)
;; WHEN: Wed Jan 08 20:58:10 CST 2014
;; MSG SIZE rcvd: 66

(3)同步更新修改10.10.54.61

[root@gyf named]# vim named.ssr.com

$TTL 86400
@       IN      SOA     ssr.com. root (
                                2014010802。。。。。。。。。。修改序列號

                                .......
www.ssr.com.    IN      CNAME            ssr.com.   。。。。。增長一行
[root@gyf named]# /etc/init.d/named restart
[root@gyf named]# vim named.10.10.54
$TTL 86400
@       IN      SOA     ssr.com. root (
                                2014010802。。。。。。修改序列號
          ..............................
61               IN     PTR              www.ssr.com.。。。。。。。。。。增長一行

2分鐘後查看10.10.54.64
[root@gyf slaves]# vim named.ssr.com
$ORIGIN .
$TTL 86400      ; 1 day
ssr.com                 IN SOA ssr.com. root.ssr.com. (
                                2014010802 ; serial
                     ..............................
www                     CNAME   ssr.com ......................自動增長

[root@gyf slaves]# vim named.10.10.54

$ORIGIN .
$TTL 86400      ; 1 day
54.10.10.in-addr.arpa   IN SOA ssr.com. root.54.10.10.in-addr.arpa. (
                                2014010802 ; serial
                    ...................................
61                      PTR     ssr.com.
                        PTR     master.ssr.com.
                        PTR     ftp.ssr.com.
                        PTR     www.ssr.com..................自動增長
(4)主服務器本身解析本身ip
[root@gyf ~]# dig ssr.com @127.0.0.1
[root@gyf ~]# dig -x 10.10.54.61 @127.0.0.1

vim