CentOS 6.5 BIND建置(Mater/Slave)

首先關閉/停用 Linux Firewall (Red hat/CentOS/Fedora Core)

# /etc/init.d/iptables save 存檔
# /etc/init.d/iptables stop 停止

開機時停用防火牆
# chkconfig iptables off
====================================
輸入下方指令安裝 DNS(BIND) Server
# yum install -y bind*

啟動 DNS(BIND) Server
# service named start

設定開機自動啟動DNS(BIND) Server
#chkconfig named on

====================================

裝好之後輸入指令編輯配置檔案：(先安裝Master DNS)
# vi /etc/named.conf


//
// named.conf
//
// Provided by Red Hat bind package to configure the ISC BIND named(8) DNS
// server as a caching only nameserver (as a localhost DNS resolver only).
//
// See /usr/share/doc/bind*/sample/ for example named configuration files.
//

options {
listen-on port 53 {
                               127.0.0.1;
                             };
listen-on-v6 port 53 { ::1; };
directory "/var/named";
dump-file "/var/named/data/cache_dump.db";
 statistics-file "/var/named/data/named_stats.txt";
 memstatistics-file "/var/named/data/named_mem_stats.txt";
allow-query     { any; }; //允許任何IP都可以過來查詢。

         /* 防止 DDos攻擊*/
version "Don't DDos My DNS Server OK";
recursion yes;

 /*內部允許查詢的IP*/
 allow-recursion {
192.168.0.0/16;
};
dnssec-enable yes;
dnssec-validation yes;

/* Path to ISC DLV key */
bindkeys-file "/etc/named.iscdlv.key";

managed-keys-directory "/var/named/dynamic";
};

logging {
        channel default_debug {
                file "data/named.run";
                severity dynamic;
        };
};

zone "." IN {
type hint;
file "named.ca";
};

/*正解*/
zone "edu.tw"  IN {
        type master;
        file "forware.net";
};

/*反解*/
zone "100.168.192.in-addr.arpa" IN {
        type master;
        file "reverse.net";
};

include "/etc/named.rfc1912.zones";
include "/etc/named.root.key";

=========================================
正解設定
#vi /var/named/forware.net

@ IN SOA dns1.edu.tw. root.dns1.edu.tw. (
2017081901
86400
3600
604800
259200 )

 IN  NS dns1.edu.tw. //Master DNS
 IN  NS dns2.edu.tw. //Slave   DNS



localhost  IN  A 127.0.0.1

dns1.edu.tw. IN A 192.168.100.1
dns2.edu.tw. IN A 192.168.100.2
www.edu.tw. IN A 192.168.100.3
mail.edu.tw     IN A 192.168.100.4
www.edu.tw. IN CNAME web.edu.tw.
edu.tw.            IN  MX      10   mail.edu.tw
===================================================
反解設定
#vi /var/named/reverse.net


@ IN SOA dns1.edu.tw. root.dns1.edu.tw. (
2017081901
86400
3600
604800
259200 )

 IN  NS dns1.edu.tw. //Master DNS
 IN  NS dns2.edu.tw. //Slave   DNS

localhost IN A 127.0.0.1

www.edu.tw. IN CNAME web.edu.tw.
edu.tw.         IN  MX      10   mail.edu.tw
1.100.168.192.in-addr.arpa. IN PTR   dns1.edu.tw.
2.100.168.192.in-addr.arpa. IN PTR   dns2.edu.tw.
3.100.168.192.in-addr.arpa. IN PTR   www.edu.tw.
4.100.168.192.in-addr.arpa. IN PTR   mail.edu.tw.
=============================================
=============================================

如果 Master DNS 裝好後，再來要裝第二台 CentOS 系統

一樣要輸入下方指令安裝 DNS(BIND) Server
# yum install -y bind*

啟動 DNS(BIND) Server
# service named start

設定開機自動啟動DNS(BIND) Server
#chkconfig named on
=============================================
裝好之後輸入指令編輯配置檔案：(安裝Slave DNS)
# vi /etc/named.conf


//
// named.conf
//
// Provided by Red Hat bind package to configure the ISC BIND named(8) DNS
// server as a caching only nameserver (as a localhost DNS resolver only).
//
// See /usr/share/doc/bind*/sample/ for example named configuration files.
//

options {
listen-on port 53 {
                                       127.0.0.1;
                                      };
listen-on-v6 port 53 { ::1; };
directory  "/var/named";
dump-file  "/var/named/data/cache_dump.db";
        statistics-file "/var/named/data/named_stats.txt";
        memstatistics-file "/var/named/data/named_mem_stats.txt";
allow-query     { any; }; //允許任何IP都可以過來查詢。

         /* 防止 DDos攻擊*/
version "Don't DDos My DNS Server OK";
recursion yes;

   /*內部允許查詢的IP*/
  allow-recursion {
192.168.0.0/16;
};
dnssec-enable yes;
dnssec-validation yes;

/* Path to ISC DLV key */
bindkeys-file "/etc/named.iscdlv.key";

managed-keys-directory "/var/named/dynamic";
};

logging {
        channel default_debug {
                file "data/named.run";
                severity dynamic;
        };
};

zone "." IN {
type hint;
file "named.ca";
};

/*正解*/
zone "edu.tw"  IN {
        type slave;
        file "slaves/forware.net";
masters { 192.168.100.1; };
};

/*反解*/
zone "100.168.192.in-addr.arpa" IN {
        type slave;
        file "slaves/reverse.net";
masters { 192.168.100.1; };
};

include "/etc/named.rfc1912.zones";
include "/etc/named.root.key";