bind 服务器搭建

ゝ一纸荒年。 2022-05-17 02:43 37阅读 0赞

###### Linux上DNS上服务器只要是BIND，是伯克利大学开发的。下面是主要的安装以及配置， ######

###### yum install bind\* ######

###### bind安装好之后主要的daemon是named，一般情况下会自动安装好bind-chroot，chroot的存在主要就是为了保护系统的安全性，就算bind被黑了，黑客也只能在chroot的目录里面活动，有点vsftpd里的味道，但是不相同。 ######

###### bind通用配置文件 /etc/named.conf bind通过对每个域名和IP映射关系形成zone来工作，每个zone的配置文件在 /var/named/ 下面，由于使用了chroot，bind会把 / 变更到 /var/named/chroot 下(默认yum安装好的情况),也就是说 /etc/named.conf   <==>   /var/named/chroot/etc/named.conf /var/named/         <==>  /var/named/chroot/var/named/ ######

###### 可以测试下，启动了bind-chroot之后，你对/etc/named.conf修改会同步到/var/named/chroot/etc/named.conf ，同样的也适用于/var/named/ 下的zone配置文件 ######

###### 下面介绍下named.conf ######

###### ================================================================================ <table style="margin:5px 0px 10px; padding:0px; border:0px; font-size:13px; vertical-align:baseline; line-height:1.4em; background-color:rgb(255,255,255); border-collapse:collapse"> <tbody style="margin:0px; padding:0px; border:0px; vertical-align:baseline; line-height:1.4em"> <tr style="margin:0px; padding:0px; border:0px; vertical-align:baseline; line-height:1.4em"> <td style="margin:0px; padding:5px; border-width:0px 1px 0px 0px; border-right-style:solid; border-right-color:rgb(159,159,159); font-size:13px; vertical-align:top; line-height:1.4em; font-family:Monaco,'Lucida Console',monospace; text-align:right; color:rgb(136,136,136); background-color:rgb(238,238,238)"> <div style="margin:0px; padding:0px; border:0px; vertical-align:baseline; line-height:1.4em; width:23px"> 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 </div> </td> <td style="margin:0px; padding:0px; border:0px; font-size:13px; vertical-align:top; line-height:1.4em; font-family:Monaco,'Lucida Console',monospace"> <div style="margin:0px; padding:5px; border:0px; vertical-align:baseline; line-height:1.4em; color:rgb(248,248,248); background-color:rgb(12,16,33)"> //named.conf options&nbsp; { &nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp; //通用配置 &nbsp; &nbsp; &nbsp; &nbsp; listen -on port&nbsp; 53&nbsp; { &nbsp;127.0.0.1 ;&nbsp; } ; &nbsp; &nbsp; &nbsp; &nbsp; listen -on -v6 port&nbsp; 53&nbsp; { &nbsp; :: 1 ;&nbsp; } ; &nbsp; &nbsp; &nbsp; &nbsp; directory &nbsp; &nbsp; &nbsp;&nbsp; "/var/named" ; &nbsp; &nbsp; &nbsp; &nbsp; dump -file &nbsp; &nbsp; &nbsp;&nbsp; "/var/named/data/cache_dump.db" ; &nbsp; &nbsp; &nbsp; &nbsp; statistics -file&nbsp; "/var/named/data/named_stats.txt" ; &nbsp; &nbsp; &nbsp; &nbsp; memstatistics -file&nbsp; "/var/named/data/named_mem_stats.txt" ; &nbsp; &nbsp; &nbsp; &nbsp; allow -query &nbsp; &nbsp;&nbsp; { &nbsp;localhost ;&nbsp; } ; &nbsp; &nbsp; &nbsp; &nbsp; recursion yes ; &nbsp; &nbsp; &nbsp; &nbsp; dnssec -enable yes ; &nbsp; &nbsp; &nbsp; &nbsp; dnssec -validation yes ; &nbsp; &nbsp; &nbsp; &nbsp; dnssec -lookaside&nbsp; auto ; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp; /* Path to ISC DLV key */ &nbsp; &nbsp; &nbsp; &nbsp; bindkeys -file&nbsp; "/etc/named.iscdlv.key" ; &nbsp; &nbsp; &nbsp; &nbsp; managed -keys -directory&nbsp; "/var/named/dynamic" ; } ; logging&nbsp; { &nbsp; &nbsp; &nbsp; &nbsp; channel default_debug&nbsp; { &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; file&nbsp; "data/named.run" ; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; severity dynamic ; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp; } ; } ; zone&nbsp; "."&nbsp;IN&nbsp; { &nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp; //定义根域的zone，对应的 /var/named/named.ca 列出所有根域名服务器 &nbsp; &nbsp; &nbsp; &nbsp; type hint ; &nbsp; &nbsp; &nbsp; &nbsp; file&nbsp; "named.ca" ;&nbsp; &nbsp;&nbsp; //可以在 /usr/share/doc/bind-9.8.2/sample/var/named/ 获取named.ca模板 } ; zone&nbsp; "localhost"&nbsp;IN&nbsp; { &nbsp;&nbsp; &nbsp; &nbsp;&nbsp; //定义“localhost”的zone，对应 /var/named/named.localhost&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; type master ;&nbsp; &nbsp; &nbsp; &nbsp;&nbsp; //master 就是主DNS Server &nbsp; &nbsp; &nbsp; &nbsp; file&nbsp; "named.localhost" ; } ; zone&nbsp; "0.0.127.in-addr.arpa"&nbsp;IN&nbsp; { &nbsp; &nbsp; &nbsp; &nbsp; type master ; &nbsp; &nbsp; &nbsp; &nbsp; file&nbsp; "named.127.0.0" ; } ; include&nbsp; "/etc/named.root.key" ; //以上可以是默认的基本配置，下面添加一个zone，域名是fire.net zone&nbsp; "fire.net"&nbsp;IN&nbsp; { &nbsp; &nbsp; &nbsp; &nbsp; type master ; &nbsp; &nbsp; &nbsp; &nbsp; file&nbsp; "fire.zone" ; } ; </div> </td> </tr> </tbody> </table> ================================================================================ 本地正向解析文件 /var/named/named.localhost <table style="margin:5px 0px 10px; padding:0px; border:0px; font-size:13px; vertical-align:baseline; line-height:1.4em; background-color:rgb(255,255,255); border-collapse:collapse"> <tbody style="margin:0px; padding:0px; border:0px; vertical-align:baseline; line-height:1.4em"> <tr style="margin:0px; padding:0px; border:0px; vertical-align:baseline; line-height:1.4em"> <td style="margin:0px; padding:5px; border-width:0px 1px 0px 0px; border-right-style:solid; border-right-color:rgb(159,159,159); font-size:13px; vertical-align:top; line-height:1.4em; font-family:Monaco,'Lucida Console',monospace; text-align:right; color:rgb(136,136,136); background-color:rgb(238,238,238)"> <div style="margin:0px; padding:0px; border:0px; vertical-align:baseline; line-height:1.4em; width:23px"> 1 2 3 4 5 6 7 8 9 </div> </td> <td style="margin:0px; padding:0px; border:0px; font-size:13px; vertical-align:top; line-height:1.4em; font-family:Monaco,'Lucida Console',monospace"> <div style="margin:0px; padding:5px; border:0px; vertical-align:baseline; line-height:1.4em; color:rgb(248,248,248); background-color:rgb(12,16,33)"> $TTL&nbsp; 3600 @ &nbsp; &nbsp; &nbsp; IN SOA &nbsp;localhost.&nbsp; root. localhost.&nbsp; (&nbsp; &nbsp;&nbsp; ;&nbsp;@就是代表对应 /etc /named. conf　zone对应的名字 zone&nbsp; "xxx" &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp; 0&nbsp;&nbsp; &nbsp; &nbsp;&nbsp; ;&nbsp;serial &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 1D &nbsp; &nbsp; &nbsp; ;&nbsp;refresh &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 1H &nbsp; &nbsp; &nbsp; ;&nbsp;retry &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 1W &nbsp; &nbsp; &nbsp; ;&nbsp;expire &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 3H&nbsp; )&nbsp;&nbsp; &nbsp; ;&nbsp;minimum @ &nbsp; &nbsp; &nbsp; IN &nbsp; &nbsp; &nbsp;NS &nbsp; &nbsp; &nbsp;localhost.&nbsp; &nbsp; &nbsp;&nbsp; ;&nbsp;IN 代表一条资源记录（RR），NS&nbsp; =&nbsp;NameServer 代表DNS Server localhost. &nbsp; &nbsp; &nbsp; IN&nbsp;&nbsp; &nbsp; &nbsp;A &nbsp; &nbsp; &nbsp; 127.0.0.1 &nbsp;&nbsp; ;&nbsp;A 是正向解析的标志， [hostname ]&nbsp;IN A&nbsp; [IP ]&nbsp;代表该主机对应该IP </div> </td> </tr> </tbody> </table> 本地反向解析文件 /var/named/named.127.0.0 <table style="margin:5px 0px 10px; padding:0px; border:0px; font-size:13px; vertical-align:baseline; line-height:1.4em; background-color:rgb(255,255,255); border-collapse:collapse"> <tbody style="margin:0px; padding:0px; border:0px; vertical-align:baseline; line-height:1.4em"> <tr style="margin:0px; padding:0px; border:0px; vertical-align:baseline; line-height:1.4em"> <td style="margin:0px; padding:5px; border-width:0px 1px 0px 0px; border-right-style:solid; border-right-color:rgb(159,159,159); font-size:13px; vertical-align:top; line-height:1.4em; font-family:Monaco,'Lucida Console',monospace; text-align:right; color:rgb(136,136,136); background-color:rgb(238,238,238)"> <div style="margin:0px; padding:0px; border:0px; vertical-align:baseline; line-height:1.4em; width:23px"> 1 2 3 4 5 6 7 8 9 </div> </td> <td style="margin:0px; padding:0px; border:0px; font-size:13px; vertical-align:top; line-height:1.4em; font-family:Monaco,'Lucida Console',monospace"> <div style="margin:0px; padding:5px; border:0px; vertical-align:baseline; line-height:1.4em; color:rgb(248,248,248); background-color:rgb(12,16,33)"> $TTL&nbsp; 600 @ &nbsp; &nbsp; &nbsp; IN SOA &nbsp;localhost.&nbsp; root. localhost.&nbsp; ( &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp; 0&nbsp;&nbsp; &nbsp; &nbsp;&nbsp; ;&nbsp;serial &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 1D &nbsp; &nbsp; &nbsp; ;&nbsp;refresh &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 1H &nbsp; &nbsp; &nbsp; ;&nbsp;retry &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 1W &nbsp; &nbsp; &nbsp; ;&nbsp;expire &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 3H&nbsp; )&nbsp;&nbsp; &nbsp; ;&nbsp;minimum @ &nbsp; &nbsp; &nbsp; IN NS localhost. 1&nbsp;&nbsp; &nbsp; &nbsp; IN PTR &nbsp;localhost.&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp; ;&nbsp;PTR为反向解析，与上面的 A 标志对应 </div> </td> </tr> </tbody> </table> 上面是基本配置，可以作为模块，下面是/var/named/fire.zone的配置。 <table style="margin:5px 0px 10px; padding:0px; border:0px; font-size:13px; vertical-align:baseline; line-height:1.4em; background-color:rgb(255,255,255); border-collapse:collapse"> <tbody style="margin:0px; padding:0px; border:0px; vertical-align:baseline; line-height:1.4em"> <tr style="margin:0px; padding:0px; border:0px; vertical-align:baseline; line-height:1.4em"> <td style="margin:0px; padding:5px; border-width:0px 1px 0px 0px; border-right-style:solid; border-right-color:rgb(159,159,159); font-size:13px; vertical-align:top; line-height:1.4em; font-family:Monaco,'Lucida Console',monospace; text-align:right; color:rgb(136,136,136); background-color:rgb(238,238,238)"> <div style="margin:0px; padding:0px; border:0px; vertical-align:baseline; line-height:1.4em; width:23px"> 1 2 3 4 5 6 7 8 9 10 11 12 </div> </td> <td style="margin:0px; padding:0px; border:0px; font-size:13px; vertical-align:top; line-height:1.4em; font-family:Monaco,'Lucida Console',monospace"> <div style="margin:0px; padding:5px; border:0px; vertical-align:baseline; line-height:1.4em; color:rgb(248,248,248); background-color:rgb(12,16,33)"> $TTL&nbsp; 3600 @ &nbsp; &nbsp; &nbsp; IN SOA &nbsp;fire. net.&nbsp; root. localhost.&nbsp; (&nbsp; ; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp; 0&nbsp;&nbsp; &nbsp; &nbsp;&nbsp; ;&nbsp;serial &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 1D &nbsp; &nbsp; &nbsp; ;&nbsp;refresh &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 1H &nbsp; &nbsp; &nbsp; ;&nbsp;retry &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 1W &nbsp; &nbsp; &nbsp; ;&nbsp;expire &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 3H&nbsp; )&nbsp;&nbsp; &nbsp; ;&nbsp;minimum @ &nbsp; &nbsp; &nbsp; IN &nbsp; &nbsp; &nbsp;NS &nbsp; &nbsp; &nbsp;localhost.&nbsp; &nbsp; &nbsp;&nbsp; ;&nbsp;@ 就是 fire. net (zone指定 ) ,寻找fire. net则向主机（NS）localhost. 发出查询 localhost. &nbsp; &nbsp; &nbsp; IN&nbsp;&nbsp; &nbsp; &nbsp;A &nbsp; &nbsp; &nbsp; 127.0.0.1 &nbsp;&nbsp; ;&nbsp;NS对应的IP记录 www &nbsp; &nbsp; IN &nbsp; &nbsp; &nbsp;A &nbsp; &nbsp; &nbsp; 1.1.1.1 &nbsp; &nbsp; &nbsp; &nbsp;&nbsp; ;&nbsp;这里就是真正的主机名的解析，www自动扩展成 www. fire. net FTP &nbsp; &nbsp; IN &nbsp; &nbsp; &nbsp;A &nbsp; &nbsp; &nbsp; 2.2.2.2 &nbsp; &nbsp; &nbsp; &nbsp;&nbsp; ;&nbsp;FTP. fire. net </div> </td> </tr> </tbody> </table> ######

###### 注意：对于/var/named下面的zone配置文件，宿主都必须是 root:named (chown root:namedzone\_file)!!! ######

###### bind的daemon主要是named ######

1.  ###### bind服务器启动  /etc/init.d/named start ######
2.  ###### bind服务器停止  /etc/init.d/names stop ######

###### 测试   vim /etc/resolv.conf   nameserver 127.0.0.1 ######

###### \[root@localhost named\]\# nslookup   > server   Default server: 127.0.0.1   Address: 127.0.0.1\#53   > localhost   Server: 127.0.0.1   Address: 127.0.0.1\#53 ######

###### Name: localhost   Address: 127.0.0.1   > 127.0.0.1   Server: 127.0.0.1   Address: 127.0.0.1\#53 ######

###### 1.0.0.127.in-addr.arpa name = localhost.   > www.fire.net   Server: 127.0.0.1   Address: 127.0.0.1\#53 ######

###### Name: www.fire.net   Address: 1.1.1.1   > FTP.fire.net   Server: 127.0.0.1   Address: 127.0.0.1\#53 ######

###### Name: FTP.fire.net   Address: 2.2.2.2 ######

###### 以上为完整的搭建流程! ######