bind9 安装：部署自建dns系统

Dear 丶 2023-10-06 12:03 11阅读 0赞

#aliyun  yum源
    curl -O /etc/yum.repos.d/CentOS-Base.repo http://mirrors.aliyun.com/repo/CentOS-7.repo
    或
    wget -O /etc/yum.repos.d/CentOS-Base.repo http://mirrors.aliyun.com/repo/Centos-7.repo
    
    yum install epel-release
    yum install wget net-tools telnet tree nmap sysstat lrzsz dos2unix bind-utils -y
    
    nslookup www.qq.com
    yum install bind -y
    [root@master-0 ~]# rpm -qa bind
    bind-9.11.4-16.P2.el7_8.6.x86_64
    
    vim /etc/named.conf  改动如下：
    listen-on port 53 {
         192.168.116.101; };
    //listen-on-v6 port 53 {
         ::1; }; //注释掉
    allow-query     {
         any; }; //允许所有局域网内机器访问
    forwarders      {
         192.168.116.1; }; //网关地址
    recursion yes; //采用递归的方式
    dnssec-enable no; //关闭
    dnssec-validation no;
    
    #检查配置是否正确，无异常输出表示正常
    [root@master-0 ~]# named-checkconf
    [root@master-0 ~]#
    
    #查看网关地址
    [root@master-0 ~]# netstat   -rn
    Kernel IP routing table
    Destination     Gateway         Genmask         Flags   MSS Window  irtt Iface
    0.0.0.0         192.168.116.1   0.0.0.0         UG        0 0          0 enp1s0
    
    #区域配置文件
    vim /etc/named.rfc1912.zones
     43 zone "host.com" IN {
        
     44         type master;
     45         file "host.com.zone";
     46         allow-update {
         192.168.116.101; };
     47 };
     48
     49 zone "od.com" IN {
        
     50         type master;
     51         file "od.com.zone";
     52         allow-update {
         192.168.116.101; };
     53 };
    
    vim /var/named/host.com.zone
    ;是注释
      1 $ORIGIN host.com.
      2 $TTL 600 ;  10 minutes
      3 @  IN SOA dns.host.com. dnsadmin.host.com. (
      4                         2020062901      ; serial
      5                         10800           ; refresh (3 hours)
      6                         900             ; retry (15 minutes)
      7                         604800          ; expire (1 week)
      8                         86400           ; minimum (1 day)
      9                         )
     10                 NS      dns.host.com.
     11 $TTL 60 ; 1 minute
     12 dns             A       192.168.116.101
     13 master-0        A       192.168.116.101
     14 worker-01       A       192.168.101.118
     15 worker-02       A       192.168.101.119
     16 worker-04       A       192.168.101.121
     17 worker-05       A       192.168.101.122
    
    vim /var/named/od.com.zone
    1 $ORIGIN od.com.
      2 $TTL 600 ;  10 minutes
      3 @  IN SOA dns.od.com. dnsadmin.od.com. (
      4                         2020062901      ; serial
      5                         10800           ; refresh (3 hours)
      6                         900             ; retry (15 minutes)
      7                         604800          ; expire (1 week)
      8                         86400           ; minimum (1 day)
      9                         )
     10                 NS      dns.od.com.
     11 $TTL 60 ; 1 minute
     12 dns             A       192.168.116.101
    
    #检查配置
    [root@master-0 ~]# named-checkconf
    [root@master-0 ~]#
    
    #启动
    systemctl start named
    
    [root@master-0 ~]# netstat -luntp|grep 53
    tcp        0      0 192.168.116.101:53      0.0.0.0:*               LISTEN      26475/named
    tcp        0      0 127.0.0.1:953           0.0.0.0:*               LISTEN      26475/named
    tcp        0      0 0.0.0.0:44453           0.0.0.0:*               LISTEN      -
    tcp6       0      0 :::31538                :::*                    LISTEN      10484/kube-proxy
    tcp6       0      0 ::1:953                 :::*                    LISTEN      26475/named
    tcp6       0      0 :::443                  :::*                    LISTEN      8538/docker-proxy
    udp        0      0 192.168.116.101:53      0.0.0.0:*                           26475/named
    [root@master-0 ~]#
    
    #dig一下
    [root@master-0 ~]# dig -t A master-0.host.com @192.168.116.101 +short
    192.168.116.101
    [root@master-0 ~]#
    
    
    vim /etc/sysconfig/network-scripts/ifcfg-enp1s0
    改为
    DNS1=192.168.116.101
    #备份
    21 DNS1=202.103.24.68
    22 DNS2=202.103.44.150
    
    systemctl restart network
    
    vim /etc/resolv.conf
    search host.com  #add这一行  restart network后会自动添加add

win客户端改DNS服务器：  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2E3NzIzMDQ0MTk_size_16_color_FFFFFF_t_70]  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2E3NzIzMDQ0MTk_size_16_color_FFFFFF_t_70 1]  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2E3NzIzMDQ0MTk_size_16_color_FFFFFF_t_70 2]

![在这里插入图片描述][20200629200956243.png]

yum install bind -y
    
    rpm -qa bind
    
    vim  /etc/named.conf
    
    #检查配置是否正常
    named-checkconf

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2E3NzIzMDQ0MTk_size_16_color_FFFFFF_t_70 3]  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2E3NzIzMDQ0MTk_size_16_color_FFFFFF_t_70 4]

vim  /etc/named.rfc1912.zones

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2E3NzIzMDQ0MTk_size_16_color_FFFFFF_t_70 5]  
空格和空行都严格保持一致！！！  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2E3NzIzMDQ0MTk_size_16_color_FFFFFF_t_70 6]

vim /var/named/host.com.zone

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2E3NzIzMDQ0MTk_size_16_color_FFFFFF_t_70 7]  
启动named服务：  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2E3NzIzMDQ0MTk_size_16_color_FFFFFF_t_70 8]  
验证：  
![在这里插入图片描述][2020062821223312.png]  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2E3NzIzMDQ0MTk_size_16_color_FFFFFF_t_70 9]![在这里插入图片描述][20200628212634969.png]![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2E3NzIzMDQ0MTk_size_16_color_FFFFFF_t_70 10]  
![在这里插入图片描述][20200628212724441.png]  
![在这里插入图片描述][20200628212657990.png]

[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2E3NzIzMDQ0MTk_size_16_color_FFFFFF_t_70]: https://img-blog.csdnimg.cn/2020063009403184.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2E3NzIzMDQ0MTk=,size_16,color_FFFFFF,t_70
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2E3NzIzMDQ0MTk_size_16_color_FFFFFF_t_70 1]: https://img-blog.csdnimg.cn/20200630093734631.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2E3NzIzMDQ0MTk=,size_16,color_FFFFFF,t_70
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2E3NzIzMDQ0MTk_size_16_color_FFFFFF_t_70 2]: https://img-blog.csdnimg.cn/20200629212436994.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2E3NzIzMDQ0MTk=,size_16,color_FFFFFF,t_70
[20200629200956243.png]: https://img-blog.csdnimg.cn/20200629200956243.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2E3NzIzMDQ0MTk_size_16_color_FFFFFF_t_70 3]: https://img-blog.csdnimg.cn/20200628211444797.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2E3NzIzMDQ0MTk=,size_16,color_FFFFFF,t_70
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2E3NzIzMDQ0MTk_size_16_color_FFFFFF_t_70 4]: https://img-blog.csdnimg.cn/20200628211502948.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2E3NzIzMDQ0MTk=,size_16,color_FFFFFF,t_70
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2E3NzIzMDQ0MTk_size_16_color_FFFFFF_t_70 5]: https://img-blog.csdnimg.cn/20200628211412731.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2E3NzIzMDQ0MTk=,size_16,color_FFFFFF,t_70
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2E3NzIzMDQ0MTk_size_16_color_FFFFFF_t_70 6]: https://img-blog.csdnimg.cn/20200628211854601.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2E3NzIzMDQ0MTk=,size_16,color_FFFFFF,t_70
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2E3NzIzMDQ0MTk_size_16_color_FFFFFF_t_70 7]: https://img-blog.csdnimg.cn/20200628211755426.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2E3NzIzMDQ0MTk=,size_16,color_FFFFFF,t_70
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2E3NzIzMDQ0MTk_size_16_color_FFFFFF_t_70 8]: https://img-blog.csdnimg.cn/20200628212153153.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2E3NzIzMDQ0MTk=,size_16,color_FFFFFF,t_70
[2020062821223312.png]: https://img-blog.csdnimg.cn/2020062821223312.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2E3NzIzMDQ0MTk_size_16_color_FFFFFF_t_70 9]: https://img-blog.csdnimg.cn/20200628212428829.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2E3NzIzMDQ0MTk=,size_16,color_FFFFFF,t_70
[20200628212634969.png]: https://img-blog.csdnimg.cn/20200628212634969.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2E3NzIzMDQ0MTk_size_16_color_FFFFFF_t_70 10]: https://img-blog.csdnimg.cn/20200628212619215.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2E3NzIzMDQ0MTk=,size_16,color_FFFFFF,t_70
[20200628212724441.png]: https://img-blog.csdnimg.cn/20200628212724441.png
[20200628212657990.png]: https://img-blog.csdnimg.cn/20200628212657990.png