锐捷网络技能大赛-云平台部分-CentOS部分05-[DNS]

曾经终败给现在 2022-11-20 11:55 233阅读 0赞

# 锐捷网络技能大赛-云平台部分-CentOS部分05-\[DNS\] #

**声明：写这些比赛的文章只是便于有些地区上进同学学习，博主本人只是出于好心，因此，博主没有对个人服务的义务，更何况一分钱都得不到，之所以这样讲是因为某些加我问问题的同学态度恶劣，因此我删除了很多地方我本人的联系方式，这个比赛本身和我一点关系都没有，只与你自己个人学习能力有关，看不看得懂和我一点关系都没有，懂的人自然都懂，我尽力了，你们随意！**

--------------------

**实在解决不了当然我也可以提供一些付费业务**  
原因1：太多人问我  
原因2：有些同学素质没那么高尚

--------------------

## DNS ##

### 样题内容 ###

#### 2019年A卷 ####

*  配置DNS服务
 *  监听当前主机的所有地址
 *  允许所有主机进行查询
 *  区域定义均配置在/etc/named.conf文件中
 *  rj.com的区域数据文件名为rj.com.zone
 *  为www.rj.com添加A记录解析，解析至serverA的公网IP。
 *  为ftp.rj.com添加A记录解析，解析至serverB的公网IP。
 *  配置反向域数据文件名为172.16.0.zone
 *  为serverA、serverB的公网IP添加www、ftp的PTR解析记录

#修改 /etc/named.conf文件
    vim /etc/named.conf
    #修改下面两行为any
    listen-on port 53 {  any; };
    allow-query     {  any; };
    #在最后面添加
    zone "rj.com" IN { 
            type master;
            file "rj.com.zone";
            allow-update {  none; };
    };
    
    zone "0.16.172.in-addr.arpa" IN { 
            type master;
            file "172.16.0.zone";
            allow-update {  none; };
    };

#复制正反向区域配置文件 
    cd /var/named
    #不加-p选项的话要自己配置属组
    #配置属组使用chgrp命令
    cp -p named.localhost rj.com.zone
    cp -p named.loopback 172.16.0.zone
    #查看属组
    [root@serverA named]# ll
    总用量 24
    -rw-r----- 1 root  named  568 9月   5 03:03 172.16.0.zone
    drwxrwx--- 2 named named   22 9月   5 01:22 data
    drwxrwx--- 2 named named   30 9月   5 03:25 dynamic
    -rw-r----- 1 root  named 2281 5月  22 2017 named.ca
    -rw-r----- 1 root  named  152 12月 15 2009 named.empty
    -rw-r----- 1 root  named  152 6月  21 2007 named.localhost
    -rw-r----- 1 root  named  168 12月 15 2009 named.loopback
    -rw-r----- 1 root  named  543 9月   5 03:04 rj.com.zone
    drwxrwx--- 2 named named    6 10月 31 2018 slaves
    #*** 注意 DNS配置文件中的注释是";"而不是"#" ***#
    #正向区域文件
    [root@serverA named]# cat rj.com.zone 
    $TTL 1D
    @       IN SOA  rj.com. rname.invalid. (
                                            0       ; serial
                                            1D      ; refresh
                                            1H      ; retry
                                            1W      ; expire
                                            3H )    ; minimum
            NS      @
            A       127.0.0.1
            AAAA    ::1
            NS      ns.rj.com.
    ns      IN A    172.16.0.132
    ;ns      IN A    172.16.110.22
    www     IN A    172.16.0.132
    ftp     IN A    172.16.0.133
    
    #反向区域文件
    [root@serverA named]# cat 172.16.0.zone 
    $TTL 1D
    @       IN SOA  rj.com. rname.invalid. (
                                            0       ; serial
                                            1D      ; refresh
                                            1H      ; retry
                                            1W      ; expire
                                            3H )    ; minimum
            NS      @
            A       127.0.0.1
            AAAA    ::1
            PTR     localhost.
            NS      ns.rj.com.
    ns      A       172.16.0.132
    ;ns      A       172.16.110.22
    132     PTR     www.rj.com.
    133     PTR     ftp.rj.com.

#给网卡添加DNS并重启网卡重启DNS服务
    [root@serverA named]# ip a
    1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN 
        link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
        inet 127.0.0.1/8 scope host lo
           valid_lft forever preferred_lft forever
        inet6 ::1/128 scope host 
           valid_lft forever preferred_lft forever
    2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000
        link/ether fa:16:3e:1c:83:d7 brd ff:ff:ff:ff:ff:ff
        inet 172.16.110.22/24 brd 172.16.110.255 scope global dynamic eth0
           valid_lft 84453sec preferred_lft 84453sec
        inet6 fe80::f816:3eff:fe1c:83d7/64 scope link 
           valid_lft forever preferred_lft forever
    3: eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000
        link/ether fa:16:3e:2f:73:73 brd ff:ff:ff:ff:ff:ff
        inet 192.168.110.22/24 brd 192.168.110.255 scope global dynamic eth1
           valid_lft 84453sec preferred_lft 84453sec
        inet6 fe80::f816:3eff:fe2f:7373/64 scope link 
           valid_lft forever preferred_lft forever
    [root@serverA named]# cat /etc/sysconfig/network-scripts/ifcfg-eth0
    TYPE=Ethernet
    BOOTPROTO=dhcp
    DEFROUTE=yes
    IPV4_FAILURE_FATAL=no
    IPV6INIT=yes
    IPV6_AUTOCONF=yes
    IPV6_DEFROUTE=yes
    IPV6_FAILURE_FATAL=no
    NAME=eth0
    DEVICE=eth0
    ONBOOT=yes
    PEERDNS=yes
    PEERROUTES=yes
    IPV6_PEERDNS=yes
    IPV6_PEERROUTES=yes
    IPV6_PRIVACY=no
    DNS1=172.16.110.22
    [root@serverA named]# systemctl restart network
    [root@serverA named]# systemctl restart named
    [root@serverA named]# cat /etc/resolv.conf
    ; generated by /usr/sbin/dhclient-script
    search openstacklocal
    nameserver 114.114.114.114
    nameserver 172.16.110.22

#使用nslookup验证

[root@serverA network-scripts]# nslookup 
    > www.rj.com
    Server:		172.16.110.22
    Address:	172.16.110.22#53
    
    Name:	www.rj.com
    Address: 172.16.0.132
    > 172.16.0.133
    Server:		172.16.110.22
    Address:	172.16.110.22#53
    
    133.0.16.172.in-addr.arpa	name = ftp.rj.com.
    > ftp.rj.com
    Server:		172.16.110.22
    Address:	172.16.110.22#53
    
    Name:	ftp.rj.com
    Address: 172.16.0.133
    > 172.16.0.132
    Server:		172.16.110.22
    Address:	172.16.110.22#53
    
    132.0.16.172.in-addr.arpa	name = www.rj.com.