Linux 篇：DNS正反解析

拼搏现实的明天。 2024-03-16 21:02 80阅读 0赞

安装Bind服务程序 BIND(Berkeley Internet Name Domain，伯克利因特网名称域)服务是全球范围内使用最广泛、最安全可靠且高效的域名解析服务程序。DNS域名解析服务作为互联网基础设施服务，其责任之重可想而知，因此建议大家在生产环境中安装部署bind服务程序时加上chroot(俗称牢笼机制)扩展包，以便有效地限制bind服务程序仅能对自身的配置文件进行操作，以确保整个服务器的安全。 `[root@uplooking ~]# yum install -y bind*`

在Linux系统中，bind服务程序的名称为named。首先需要在/etc目录中找到该服务程序的主配置文件，然后把第11行和第17行的地址均修改为any，分别表示服务器上的所有IP地址均可提供DNS域名解析服务，以及允许所有人对本服务器发送DNS查询请求。这两个地方一定要修改准确。

编辑主配置文件： \`\`\` \[root@uplooking ~\]\# vim /etc/named.conf // // named.conf // // Provided by Red Hat bind package to configure the ISC BIND named(8) DNS // server as a caching only nameserver (as a localhost DNS resolver only). // // See /usr/share/doc/bind\*/sample/ for example named configuration files. //

options \{ listen-on port 53 \{ any; \}; listen-on-v6 port 53 \{ ::1; \}; directory "/var/named"; dump-file "/var/named/data/cache*dump.db"; statistics-file "/var/named/data/named*stats.txt"; memstatistics-file "/var/named/data/named*mem*stats.txt"; allow-query \{ any; \};

/\* - If you are building an AUTHORITATIVE DNS server, do NOT enable re cursion. 1,1 Top - If you are building a RECURSIVE (caching) DNS server, you need to enable recursion. - If your recursive DNS server has a public IP address, you MUST en able access control to limit queries to your legitimate users. Failing to do so will cause your server to become part of large scale DNS amplification attacks. Implementing BCP38 within your network would greatly reduce such attack surface \*/ recursion yes;

dnssec-enable yes; dnssec-validation yes; dnssec-lookaside auto; //添加这一行

/\* Path to ISC DLV key \*/ bindkeys-file "/etc/named.iscdlv.key";

managed-keys-directory "/var/named/dynamic";

pid-file "/run/named/named.pid"; session-keyfile "/run/named/session.key"; \};

logging \{ channel default\_debug \{ file "data/named.run"; severity dynamic; \}; \};

zone "." IN \{ type hint; file "named.ca"; \};

include "/etc/named.rfc1912.zones"; include "/etc/named.root.key";

正向解析

编辑区域配置文件： \[root@localhost ~\]\# vim /etc/named.rfc1912.zones

## 在最后一行追加如下内容 ##

zone "uplookingclass.cn" IN \{ type master; file "uplookingclass.cn.zone"; allow-update \{ none; \}; \};

\[root@localhost named\]\# cd /var/named/ \[root@localhost named\]\# cp -a named.localhost uplookingclass.cn.zone \[root@localhost named\]\# ll total 20 drwxr-x---. 7 root named 61 Nov 28 23:58 chroot drwxrwx---. 2 named named 6 Sep 26 2016 data drwxrwx---. 2 named named 6 Sep 26 2016 dynamic drwxrwx---. 2 root named 6 Sep 21 2016 dyndb-ldap -rw-r-----. 1 root named 2076 Jan 28 2013 named.ca -rw-r-----. 1 root named 152 Dec 15 2009 named.empty -rw-r-----. 1 root named 152 Jun 21 2007 named.localhost -rw-r-----. 1 root named 168 Dec 15 2009 named.loopback drwxrwx---. 2 named named 6 Sep 26 2016 slaves -rw-r-----. 1 root named 152 Jun 21 2007 uplookingclass.cn.zone \[root@localhost named\]\# vim uplookingclass.cn.zone $TTL 1D @ IN SOA uplookingclass.cn. root.uplookingclass.cn. ( 0 ; serial 1D ; refresh 1H ; retry 1W ; expire 3H ) ; minimum

NS      ns.uplookingclass.cn.

ns IN A 192.168.10.89 www IN A 192.168.10.89 bbs IN A 192.168.10.90 \[root@localhost named\]\# systemctl restart named

更改网卡配置： \[root@localhost named\]\# vim /etc/sysconfig/network-scripts/ifcfg-ens33 TYPE=Ethernet BOOTPROTO=static DEFROUTE=yes PEERDNS=yes PEERROUTES=yes IPV4*FAILURE*FATAL=no NAME=ens33 DEVICE=ens33 ONBOOT=yes IPADDR=192.168.10.89 GATEWAY=192.168.10.2 NETMASK=255.255.255.0 DNS1=192.168.10.89 \[root@localhost named\]\# systemctl restart network \[root@localhost named\]\# cat /etc/resolv.conf

## Generated by NetworkManager ##

nameserver 192.168.10.89

用nslookup工具验证DNS域名解析服务是否正常

\[root@localhost named\]\# nslookup

> www.uplookingclass.cn Server: 192.168.10.89 Address: 192.168.10.89\#53

Name: www.uplookingclass.cn Address: 192.168.10.89

> bbs.uplookingclass.cn Server: 192.168.10.89 Address: 192.168.10.89\#53

Name: bbs.uplookingclass.cn Address: 192.168.10.90

用 iptables -F 把服务端和客户端的防火墙都清掉，然后在客户端测试：

\[root@localhost ~\]\# ifconfig ens33: flags=4163 mtu 1500 inet 192.168.10.90 netmask 255.255.255.0 broadcast 192.168.10.255 inet6 fe80::250:56ff:fe3e:33bc prefixlen 64 scopeid 0x20> ether 00:50:56:3e:33:bc txqueuelen 1000 (Ethernet) RX packets 706 bytes 61740 (60.2 KiB) RX errors 0 dropped 0 overruns 0 frame 0 TX packets 492 bytes 66346 (64.7 KiB) TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0

lo: flags=73 mtu 65536 inet 127.0.0.1 netmask 255.0.0.0 inet6 ::1 prefixlen 128 scopeid 0x10 loop txqueuelen 1 (Local Loopback) RX packets 120 bytes 10156 (9.9 KiB) RX errors 0 dropped 0 overruns 0 frame 0 TX packets 120 bytes 10156 (9.9 KiB) TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0 \[root@localhost ~\]\# vim /etc/resolv.conf

## Generated by NetworkManager ##

nameserver 192.168.10.89 \[root@localhost ~\]\# systemctl restart network \[root@localhost ~\]\# ping www.uplookingclass.cn PING www.uplookingclass.cn (192.168.10.89) 56(84) bytes of data. 64 bytes from 192.168.10.89 (192.168.10.89): icmp*seq=1 ttl=64 time=0.453 ms 64 bytes from 192.168.10.89 (192.168.10.89): icmp*seq=2 ttl=64 time=0.350 ms 64 bytes from 192.168.10.89 (192.168.10.89): icmp*seq=3 ttl=64 time=0.259 ms 64 bytes from 192.168.10.89 (192.168.10.89): icmp*seq=4 ttl=64 time=0.192 ms ^C --- www.uplookingclass.cn ping statistics --- 4 packets transmitted, 4 received, 0% packet loss, time 3001ms rtt min/avg/max/mdev = 0.192/0.313/0.453/0.099 ms \[root@localhost ~\]\# ping bbs.uplookingclass.cn PING bbs.uplookingclass.cn (192.168.10.90) 56(84) bytes of data. 64 bytes from localhost.localdomain (192.168.10.90): icmp*seq=1 ttl=64 time=0.029 ms 64 bytes from localhost.localdomain (192.168.10.90): icmp*seq=2 ttl=64 time=0.031 ms 64 bytes from localhost.localdomain (192.168.10.90): icmp*seq=3 ttl=64 time=0.082 ms 64 bytes from localhost.localdomain (192.168.10.90): icmp*seq=4 ttl=64 time=0.030 ms ^C --- bbs.uplookingclass.cn ping statistics --- 4 packets transmitted, 4 received, 0% packet loss, time 3000ms rtt min/avg/max/mdev = 0.029/0.043/0.082/0.022 ms \[root@localhost ~\]\# nslookup -bash: nslookup: command not found \[root@localhost ~\]\# yum install -y *nslookup* \[root@localhost ~\]\# nslookup www.uplookingclass.cn Server: 192.168.10.89 Address: 192.168.10.89\#53

Name: www.uplookingclass.cn Address: 192.168.10.89

\[root@localhost ~\]\# nslookup bbs.uplookingclass.cn Server: 192.168.10.89 Address: 192.168.10.89\#53

Name: bbs.uplookingclass.cn Address: 192.168.10.90

反向解析

编辑区域配置文件： \[root@localhost named\]\# vim /etc/named.rfc1912.zones zone "uplookingclass.cn" IN \{ type master; file "uplookingclass.cn.zone"; allow-update \{ none; \}; \};

zone "10.168.192.in-addr.arpa" IN \{ type master; file "192.168.10.arpa"; \};

复制模版文件： \[root@localhost named\]\# cp -a named.loopback 192.168.10.arpa \[root@localhost named\]\# ll total 24 -rw-r-----. 1 root named 168 Dec 15 2009 192.168.10.arpa drwxr-x---. 7 root named 61 Nov 28 23:58 chroot drwxrwx---. 2 named named 23 Nov 29 02:23 data drwxrwx---. 2 named named 60 Nov 29 02:33 dynamic drwxrwx---. 2 root named 6 Sep 21 2016 dyndb-ldap -rw-r-----. 1 root named 2076 Jan 28 2013 named.ca -rw-r-----. 1 root named 152 Dec 15 2009 named.empty -rw-r-----. 1 root named 152 Jun 21 2007 named.localhost -rw-r-----. 1 root named 168 Dec 15 2009 named.loopback drwxrwx---. 2 named named 6 Sep 26 2016 slaves -rw-r-----. 1 root named 252 Nov 29 02:32 uplookingclass.cn.zone

编辑反向解析配置文件： \[root@localhost named\]\# vim 192.168.10.arpa $TTL 1D @ IN SOA uplookingclass.cn. root.uplookingclass.cn. ( 0 ; serial 1D ; refresh 1H ; retry 1W ; expire 3H ) ; minimum NS ns.uplookingclass.cn. ns A 192.168.10.89 89 PTR ns.uplookingclass.cn. 89 PTR www.uplookingclass.cn. 90 PTR bbs.uplookingclass.cn. \[root@localhost named\]\# systemctl restart named

用nslookup工具验证DNS反向解析是否正常： \[root@localhost named\]\# ifconfig ens33: flags=4163 mtu 1500 inet 192.168.10.89 netmask 255.255.255.0 broadcast 192.168.10.255 inet6 fe80::250:56ff:fe35:9980 prefixlen 64 scopeid 0x20> ether 00:50:56:35:99:80 txqueuelen 1000 (Ethernet) RX packets 5596 bytes 640618 (625.6 KiB) RX errors 0 dropped 0 overruns 0 frame 0 TX packets 3417 bytes 528402 (516.0 KiB) TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0

lo: flags=73 mtu 65536 inet 127.0.0.1 netmask 255.0.0.0 inet6 ::1 prefixlen 128 scopeid 0x10 loop txqueuelen 1 (Local Loopback) RX packets 186 bytes 16824 (16.4 KiB) RX errors 0 dropped 0 overruns 0 frame 0 TX packets 186 bytes 16824 (16.4 KiB) TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0

\[root@localhost named\]\# nslookup 192.168.10.89 Server: 192.168.10.89 Address: 192.168.10.89\#53

89.10.168.192.in-addr.arpa name = ns.uplookingclass.cn. 89.10.168.192.in-addr.arpa name = www.uplookingclass.cn.

\[root@localhost named\]\# nslookup 192.168.10.90 Server: 192.168.10.89 Address: 192.168.10.89\#53

90.10.168.192.in-addr.arpa name = bbs.uplookingclass.cn.

\[root@localhost named\]\# nslookup www.uplookingclass.cn Server: 192.168.10.89 Address: 192.168.10.89\#53

Name: www.uplookingclass.cn Address: 192.168.10.89

\[root@localhost named\]\# nslookup bbs.uplookingclass.cn Server: 192.168.10.89 Address: 192.168.10.89\#53

Name: bbs.uplookingclass.cn Address: 192.168.10.90

\[root@localhost ~\]\# ifconfig ens33: flags=4163 mtu 1500 inet 192.168.10.90 netmask 255.255.255.0 broadcast 192.168.10.255 inet6 fe80::250:56ff:fe3e:33bc prefixlen 64 scopeid 0x20> ether 00:50:56:3e:33:bc txqueuelen 1000 (Ethernet) RX packets 1888 bytes 143546 (140.1 KiB) RX errors 0 dropped 0 overruns 0 frame 0 TX packets 1870 bytes 464848 (453.9 KiB) TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0

89.10.168.192.in-addr.arpa name = www.uplookingclass.cn. 89.10.168.192.in-addr.arpa name = ns.uplookingclass.cn.

\[root@localhost ~\]\# nslookup 192.168.10.90 Server: 192.168.10.89 Address: 192.168.10.89\#53

90.10.168.192.in-addr.arpa name = bbs.uplookingclass.cn.

\[root@localhost ~\]\# nslookup www.uplookingclass.cn Server: 192.168.10.89 Address: 192.168.10.89\#53

Name: www.uplookingclass.cn Address: 192.168.10.89

\[root@localhost ~\]\# nslookup bbs.uplookingclass.cn Server: 192.168.10.89 Address: 192.168.10.89\#53

Name: bbs.uplookingclass.cn Address: 192.168.10.90

用脚本配置DSN正反解析

开发confdns.sh脚本 \[root@localhost ~\]\# vim confdns.sh

## !/bin/bash ##

## 配置DNS正反解析 ##

## 优化环境 ##

sed -i 's/SELINUX=enforcing/SELINUX=disabled/' /etc/selinux/config &> /dev/null setenforce 0 iptables -F systemctl stop NetworkManager &> /dev/null systemctl disable NetworkManager &> /dev/null

## 描述:将动态获取的IP地址静态化。 ##

## 注意：本脚本只适合于配置一张网卡，以DHCP方式运行的RHEL7系列主机。 ##

## 检测当前主机是否拥有合法 IP地址 ##

conn=`ip a | grep "\<inet\>" | grep -v "127.0.0.1" | wc -l`

if \[ $conn -eq 0 \] then echo "未检测到当前合法IP地址，请检查网络连接..."  
exit 0 fi

## 获取当前的 IP地址，网卡名称，网关地址，IP最后一位 ##

ip=`ip a | grep "\<inet\>" | grep -v "127.0.0.1" | tr '/' ' ' | awk '{print $2}' | head -1` gw=`route -n | grep "^0.0.0.0" | awk '{print $2}'` name=`ifconfig | head -1 | tr -d : | awk '{print $1}'`

## 修改网卡配置文件为静态配置 ##

cat > /etc/sysconfig/network-scripts/ifcfg-$name <

## 重启网络 ##

systemctl restart network

## 检查yum源是否配置好，如果没有配置好则配置yum源 ##

yum clean all 1> /dev/null 2>&1 && yum makecache &> /dev/null if \[ $? -ne 0 \];then

cd /etc/yum.repos.d

cat >>rhel7.repo<

mkdir -p /media/cdrom mount /dev/cdrom /media/cdrom &> /dev/null sed -i -e '/iso9660/d' /etc/fstab echo "/dev/cdrom /media/cdrom iso9660 defaults 0 0" >> /etc/fstab yum clean all &> /dev/null && yum makecache &> /dev/null

## 配置DNS正向解析 ##

## 安装bind服务程序 ##

yum install -y bind\*

## 修改DNS主配置文件 ##

sed -i 's/\{ .\*; \}/\{ any; \}/' /etc/named.conf sed -i -e '/dnssec-validation yes;/a\\tdnssec-lookaside auto;' /etc/named.conf

echo "请确保输入正确的域名和IP信息！" read -p "请输入对应主IP的域名1(注意不要输入www前缀)：" DN1 read -p "请输入其他域名前缀1：" ODNP1 read -p "请输入除主IP之外的其他IP: " OIP1

## 编辑区域配置文件 ##

cat >> /etc/named.rfc1912.zones << EOF zone "$DN1" IN \{ type master; file "$DN1.zone"; allow-update \{ none; \}; \}; EOF

cd /var/named && cp -a named.localhost $DN1.zone

cat > $DN1.zone << EOF \\$TTL 1D @ IN SOA $DN1. root.$DN1. ( 0 ; serial 1D ; refresh 1H ; retry 1W ; expire 3H ) ; minimum

NS      ns.$DN1.

ns IN A $ip www IN A $ip $ODNP1 IN A $OIP1 EOF

echo nameserver $ip > /etc/resolv.conf

systemctl restart named systemctl restart network

## 配置DNS反向解析 ##

## 修改DNS主配置文件 ##

## 截取主IP各段信息 ##

F1=`ip a | grep "\<inet\>" | grep -v "127.0.0.1" | tr '/' ' ' | awk '{print $2}' | head -1 | awk -F . '{print $1}'` F2=`ip a | grep "\<inet\>" | grep -v "127.0.0.1" | tr '/' ' ' | awk '{print $2}' | head -1 | awk -F . '{print $2}'` F3=`ip a | grep "\<inet\>" | grep -v "127.0.0.1" | tr '/' ' ' | awk '{print $2}' | head -1 | awk -F . '{print $3}'` F4=`ip a | grep "\<inet\>" | grep -v "127.0.0.1" | tr '/' ' ' | awk '{print $2}' | head -1 | awk -F . '{print $4}'`

## 编辑区域配置文件 ##

cat >> /etc/named.rfc1912.zones << EOF zone "$F3.$F2.$F1.in-addr.arpa" IN \{ type master; file "$F1.$F2.$F3.arpa"; \}; EOF

cd /var/named && cp -a named.loopback $F1.$F2.$F3.arpa

OF4=`echo $OIP1 | awk -F . '{print $4}'` cat > $F1.$F2.$F3.arpa << EOF \\$TTL 1D @ IN SOA $DN1. root.$DN1. ( 0 ; serial 1D ; refresh 1H ; retry 1W ; expire 3H ) ; minimum

NS      ns.$DN1.

ns A $ip $F4 PTR ns.$DN1. $F4 PTR www.$DN1. $OF4 PTR $ODNP1.$DN1. EOF

echo nameserver $ip > /etc/resolv.conf

systemctl restart named systemctl restart network

echo "DNS正向解析信息如下：" nslookup www.$DN1 nslookup $ODNP1.$DN1

echo "DNS反向解析信息如下："

nslookup $ip nslookup $OIP1

运行confdns.sh脚本

\[root@localhost ~\]\# chmod 755 confdns.sh \[root@localhost ~\]\# ./confdns.sh Loaded plugins: product-id, search-disabled-repos, subscription-manager This system is not registered to Red Hat Subscription Management. You can use subscription-manager to register. Resolving Dependencies --> Running transaction check ---> Package bind.x86*64 32:9.9.4-37.el7 will be installed ---> Package bind-chroot.x86*64 32:9.9.4-37.el7 will be installed ---> Package bind-dyndb-ldap.x86*64 0:10.0-5.el7 will be installed ---> Package bind-libs.x86*64 32:9.9.4-37.el7 will be installed ---> Package bind-libs-lite.x86*64 32:9.9.4-37.el7 will be installed ---> Package bind-license.noarch 32:9.9.4-37.el7 will be installed ---> Package bind-pkcs11.x86*64 32:9.9.4-37.el7 will be installed ---> Package bind-pkcs11-libs.x86*64 32:9.9.4-37.el7 will be installed ---> Package bind-pkcs11-utils.x86*64 32:9.9.4-37.el7 will be installed ---> Package bind-utils.x86\_64 32:9.9.4-37.el7 will be installed --> Finished Dependency Resolution

Dependencies Resolved

======================================================================================================

## Package Arch Version Repository Size ##

Installing: bind x86*64 32:9.9.4-37.el7 yum 1.8 M bind-chroot x86*64 32:9.9.4-37.el7 yum 84 k bind-dyndb-ldap x86*64 10.0-5.el7 yum 120 k bind-libs x86*64 32:9.9.4-37.el7 yum 1.0 M bind-libs-lite x86*64 32:9.9.4-37.el7 yum 729 k bind-license noarch 32:9.9.4-37.el7 yum 83 k bind-pkcs11 x86*64 32:9.9.4-37.el7 yum 295 k bind-pkcs11-libs x86*64 32:9.9.4-37.el7 yum 1.1 M bind-pkcs11-utils x86*64 32:9.9.4-37.el7 yum 196 k bind-utils x86\_64 32:9.9.4-37.el7 yum 201 k

## Transaction Summary ##

Install 10 Packages

Total download size: 5.6 M Installed size: 14 M

### Downloading packages: ###

Total 218 MB/s | 5.6 MB 00:00:00  
Running transaction check Running transaction test Transaction test succeeded Running transaction Installing : 32:bind-license-9.9.4-37.el7.noarch 1/10 Installing : 32:bind-libs-9.9.4-37.el7.x86*64 2/10 Installing : 32:bind-9.9.4-37.el7.x86*64 3/10 Installing : 32:bind-pkcs11-libs-9.9.4-37.el7.x86*64 4/10 Installing : 32:bind-pkcs11-utils-9.9.4-37.el7.x86*64 5/10 Installing : 32:bind-pkcs11-9.9.4-37.el7.x86*64 6/10 Installing : 32:bind-chroot-9.9.4-37.el7.x86*64 7/10 Installing : bind-dyndb-ldap-10.0-5.el7.x86*64 8/10 Enabling SELinux boolean named*write*master*zones Installing : 32:bind-utils-9.9.4-37.el7.x86*64 9/10 Installing : 32:bind-libs-lite-9.9.4-37.el7.x86*64 10/10 Verifying : 32:bind-chroot-9.9.4-37.el7.x86*64 1/10 ▽ Verifying : 32:bind-pkcs11-utils-9.9.4-37.el7.x86*64 2/10 Verifying : 32:bind-utils-9.9.4-37.el7.x86*64 3/10 Verifying : 32:bind-license-9.9.4-37.el7.noarch 4/10 Verifying : 32:bind-libs-lite-9.9.4-37.el7.x86*64 5/10 Verifying : bind-dyndb-ldap-10.0-5.el7.x86*64 6/10 Verifying : 32:bind-9.9.4-37.el7.x86*64 7/10 Verifying : 32:bind-pkcs11-libs-9.9.4-37.el7.x86*64 8/10 Verifying : 32:bind-pkcs11-9.9.4-37.el7.x86*64 9/10 Verifying : 32:bind-libs-9.9.4-37.el7.x86\_64 10/10

Installed: bind.x86*64 32:9.9.4-37.el7 bind-chroot.x86*64 32:9.9.4-37.el7  
bind-dyndb-ldap.x86*64 0:10.0-5.el7 bind-libs.x86*64 32:9.9.4-37.el7  
bind-libs-lite.x86*64 32:9.9.4-37.el7 bind-license.noarch 32:9.9.4-37.el7  
bind-pkcs11.x86*64 32:9.9.4-37.el7 bind-pkcs11-libs.x86*64 32:9.9.4-37.el7  
bind-pkcs11-utils.x86*64 32:9.9.4-37.el7 bind-utils.x86\_64 32:9.9.4-37.el7

Complete! 请确保输入正确的域名和IP信息！ 请输入对应主IP的域名1(注意不要输入www前缀)：uplookingclass.cn 请输入其他域名前缀1：bbs 请输入除主IP之外的其他IP: 192.168.10.90 DNS正向解析信息如下： Server: 192.168.10.89 Address: 192.168.10.89\#53

Name: www.uplookingclass.cn Address: 192.168.10.89

Server: 192.168.10.89 Address: 192.168.10.89\#53

Name: bbs.uplookingclass.cn Address: 192.168.10.90

DNS反向解析信息如下： Server: 192.168.10.89 Address: 192.168.10.89\#53

89.10.168.192.in-addr.arpa name = ns.uplookingclass.cn. 89.10.168.192.in-addr.arpa name = www.uplookingclass.cn.

Server: 192.168.10.89 Address: 192.168.10.89\#53

90.10.168.192.in-addr.arpa name = bbs.uplookingclass.cn.

清理DSN配置脚本cleandns.sh \[root@localhost ~\]\# vim cleandns.sh

## !/bin/bash ##

## 清理DNS配置 ##

yum remove -y bind\* rm -rf /etc/named\* rm -rf /var/named

清理DNS配置 \[root@localhost ~\]\# ./cleandns.sh Loaded plugins: product-id, search-disabled-repos, subscription-manager This system is not registered to Red Hat Subscription Management. You can use subscription-manager to register. Resolving Dependencies --> Running transaction check ---> Package bind.x86*64 32:9.9.4-37.el7 will be erased ---> Package bind-chroot.x86*64 32:9.9.4-37.el7 will be erased ---> Package bind-dyndb-ldap.x86*64 0:10.0-5.el7 will be erased ---> Package bind-libs.x86*64 32:9.9.4-37.el7 will be erased ---> Package bind-libs-lite.x86*64 32:9.9.4-37.el7 will be erased ---> Package bind-license.noarch 32:9.9.4-37.el7 will be erased ---> Package bind-pkcs11.x86*64 32:9.9.4-37.el7 will be erased ---> Package bind-pkcs11-libs.x86*64 32:9.9.4-37.el7 will be erased ---> Package bind-pkcs11-utils.x86*64 32:9.9.4-37.el7 will be erased ---> Package bind-utils.x86\_64 32:9.9.4-37.el7 will be erased --> Finished Dependency Resolution

Dependencies Resolved

============================================================================================================================================================================

## Package Arch Version Repository Size ##

Removing: bind x86*64 32:9.9.4-37.el7 @yum 4.3 M bind-chroot x86*64 32:9.9.4-37.el7 @yum 3.3 k bind-dyndb-ldap x86*64 10.0-5.el7 @yum 310 k bind-libs x86*64 32:9.9.4-37.el7 @yum 2.6 M bind-libs-lite x86*64 32:9.9.4-37.el7 @yum 1.7 M bind-license noarch 32:9.9.4-37.el7 @yum 25 k bind-pkcs11 x86*64 32:9.9.4-37.el7 @yum 578 k bind-pkcs11-libs x86*64 32:9.9.4-37.el7 @yum 3.8 M bind-pkcs11-utils x86*64 32:9.9.4-37.el7 @yum 533 k bind-utils x86\_64 32:9.9.4-37.el7 @yum 434 k

## Transaction Summary ##

Remove 10 Packages

Installed size: 14 M Downloading packages: Running transaction check Running transaction test Transaction test succeeded Running transaction Erasing : 32:bind-chroot-9.9.4-37.el7.x86*64 1/10 Erasing : 32:bind-pkcs11-9.9.4-37.el7.x86*64 2/10 Erasing : bind-dyndb-ldap-10.0-5.el7.x86*64 3/10 Disabling SELinux boolean named*write*master*zones Erasing : 32:bind-9.9.4-37.el7.x86*64 4/10 warning: /etc/named.rfc1912.zones saved as /etc/named.rfc1912.zones.rpmsave warning: /etc/named.conf saved as /etc/named.conf.rpmsave Erasing : 32:bind-libs-lite-9.9.4-37.el7.x86*64 5/10 Erasing : 32:bind-utils-9.9.4-37.el7.x86*64 6/10 Erasing : 32:bind-pkcs11-utils-9.9.4-37.el7.x86*64 7/10 Erasing : 32:bind-pkcs11-libs-9.9.4-37.el7.x86*64 8/10 Erasing : 32:bind-libs-9.9.4-37.el7.x86*64 9/10 Erasing : 32:bind-license-9.9.4-37.el7.noarch 10/10 Verifying : 32:bind-chroot-9.9.4-37.el7.x86*64 1/10 Verifying : 32:bind-pkcs11-utils-9.9.4-37.el7.x86*64 2/10 Verifying : 32:bind-utils-9.9.4-37.el7.x86*64 3/10 Verifying : 32:bind-license-9.9.4-37.el7.noarch 4/10 Verifying : 32:bind-libs-lite-9.9.4-37.el7.x86*64 5/10 Verifying : bind-dyndb-ldap-10.0-5.el7.x86*64 6/10 Verifying : 32:bind-9.9.4-37.el7.x86*64 7/10 Verifying : 32:bind-pkcs11-libs-9.9.4-37.el7.x86*64 8/10 Verifying : 32:bind-pkcs11-9.9.4-37.el7.x86*64 9/10 Verifying : 32:bind-libs-9.9.4-37.el7.x86\_64 10/10

Removed: bind.x86*64 32:9.9.4-37.el7 bind-chroot.x86*64 32:9.9.4-37.el7 bind-dyndb-ldap.x86*64 0:10.0-5.el7 bind-libs.x86*64 32:9.9.4-37.el7  
bind-libs-lite.x86*64 32:9.9.4-37.el7 bind-license.noarch 32:9.9.4-37.el7 bind-pkcs11.x86*64 32:9.9.4-37.el7 bind-pkcs11-libs.x86*64 32:9.9.4-37.el7  
bind-pkcs11-utils.x86*64 32:9.9.4-37.el7 bind-utils.x86\_64 32:9.9.4-37.el7

Complete! \`\`\`