網路過客: 3月 2019

2019年3月3日星期日

Centos 7 BIND 建置

關閉 Firewalld 防火牆指令:
# systemctl stop firewalld.service

設定下次開機不會啟動 Firewalld 防火牆
# systemctl disable firewalld.service

關閉 SELinux:
# vi /etc/selinux/config

安裝 Wget 及Vim程式
# yum install -y wget

# yum install -y vim

安裝 ntpdate 程式
# yum install -y ntpdate
# ntpdate -u time2.google.com
=================================
update yum套件
# yum update -y

安裝 bind 軟體
# yum install bind -y
# yum install bind-utils -y

編輯 namd 的設定檔
# vi /etc/named.conf

啟動DNS服務：
# systemctl start named

檢查 named.conf 是否有錯誤
#named-checkconf /etc/named.conf

檢查正解的檔案是否有錯誤

#named-checkzone /var/named/forware.net

檢查反解的檔案是否有錯誤

#named-checkzone /var/named/reverse.net

# systemctl status named.service
# systemctl restart named.service -->重新啟動BIND

設定開機啟動：
# systemctl enable named

=============================
WEBMIN 安裝網址
Webmin bind 無法啟動更改位置

到 Configuration 設定裡面，有一項「Default PID file location(s)」路徑修改就可以了。
修改為「 /var/run/named/named.pid」再 Save 就可以。

=============================
Failed : Missing dig command 的錯誤訊息
# yum install bind-utils -y
=============================

出現下列這個錯誤訊息，是因為CentOS 7 Bind傳輸已經使用 RAW方式加密了。
This zone is in raw binary format, and so cannot be displayed as text.

On CentOS 7 / RHEL 7, which uses BIND 9.9.4, Webmin's BIND module will "blindly" convert a Slave zone to a Master, pointing to the existing zone file.

However, by default BIND 9.9 stores its Slave zones in a "raw" / binary format, which it can't successfully read when trying to parse a Master zone file. Attempting to do so will prevent named from starting. (It's also limiting in webmin, which can display records but not the 'zone file' contents).

The workaround I've enabled in my environment is to set the masterfile-format to text across the entire BIND instance, rather than the default of raw. The following config example in the master named.conf's options declaration helps.

解決方式如下：

BIND-wide config (in named.conf / etc)-->Master DNS

options {
    //
    // various named config options
    //
    masterfile-format text;
    //
    // the rest of the config
    //
    }

Zone-specific config (in named.conf / etc)-->Slave DNS

zone "somedomain.net" {
        type slave;
        masterfile-format text;
        masters {
                1,2,3,4;
                };
        file "/var/named/slaves/somedomain.net.hosts";
        };

參考來源 Why GitHub?