Linux 搭建DNS服务器

系统环境：CentOS 6.5 mini

IP地址：192.168.100.100

1.安装相关软件包

#  yum install -y bind* caching-nameserver

2.防火墙端口开放

#  vi /etc/sysconfig/iptables

-AINPUT -m state --state NEW -m tcp -p tcp --dport 53 -j ACCEPT

-AINPUT -m state --state NEW -m udp -p udp --dport 53 -j ACCEPT

-AINPUT -m state --state NEW -m tcp -p tcp --dport 953 -j ACCEPT

#  service iptables restart

#  /etc/rc.d/init.d/iptables save

3.关闭selinux

#  vi /etc/selinux/config

SELINUX=disabled

4.修改named.conf

#  vi /etc/named.conf

listen-on port 53 { any; };
listen-on-v6 port 53 { any; };
allow-query     { any; };

5.在bind的主配置文件中添加该域

#  vi /etc/named.rfc1912.zones

zone "baidu.com" IN{
    type master;
    file "baidu.com.zone";
};

zone "doiido.com" IN{
    type master;
    file "doiido.com.zone";
};

zone "1.10.in-addr.arpa" IN {
    type master;
    file "1.10.zone";
};

6.创建域的zone文件

（这里的文件名必须是和上面一样）

#  cd /var/named

#  touch baidu.com.zone

#  touch doiido.com.zone

#  touch 1.10.zone

7.编辑zone文件

#  vi baidu.com.zone

$TTL 86400
@       IN SOA          ns.baidu.com. root (
                                        1       ; serial
                                        1D      ; refresh
                                        1H      ; retry
                                        1W      ; expire
                                        3H )    ; minimum
@       IN      NS      ns.baidu.com.
ns      IN      A       115.239.211.110
www     IN      A       115.239.211.110

#  vi doiido.com.zone

$TTL 86400
@       IN SOA          ns.doiido.com. root (
                                        1       ; serial
                                        1D      ; refresh
                                        1H      ; retry
                                        1W      ; expire
                                        3H )    ; minimum
@       IN      NS      ns.doiido.com.
ns      IN      A       1.1.1.1
www     IN      A       1.1.1.1

#  vi 1.10.zone

$TTL 86400
@       IN SOA           ns.doiido.com. ns.baidu.com. (
                                        12         ; serial
                                        28800      ; refresh
                                        14400      ; retry
                                        3600000    ; expire
                                        86400 )    ; minimum
@        IN      NS       ns.doiido.com.
1        IN      PTR      www.doiido.com.
110      IN      PTR      www.baidu.com.

8.修改刚才添加的域文件的权限

#  chmod o+r /var/named/*

9.修改resolv.conf文件

#  vi /etc/resolv.conf

nameserver 192.168.100.100

10.测试配置文件

#  named-checkzone doiido.com /var/named/doiido.com.zone

#  named-checkzone baidu.com /var/named/baidu.com.zone

11.重新启动named服务

#  service named restart