DNS的服务器的编译安装，及缓存名称服务器配置
###################################废话不多说直接上货#############################################
###########这里我编译安装的版本是bind-9.10
实验前准备：
[[email protected] local]# yum groupinstall "server platform development" [[email protected] ~]# yum groupinstall "development tools" -y [[email protected] local]# groupadd -r -g 53 named [[email protected] local]# useradd -r -g 53 -u 53 named [[email protected] local]# id named uid=53(named) gid=53(named) groups=53(named)
[[email protected] src]# tar -xf bind-9.10.1-P1.tar.gz -C /usr/local/ [[email protected] bind-9.10.1-P1]# ./configure --prefix=/usr/local/bind9 --sysconfdir=/etc/named/ --disable-chroot --enable-threads --disable-ipv6 [[email protected] bind-9.10.1-P1]#make && make install [[email protected] init.d]# vim /etc/profile.d/named.sh ############添加环境变量 1 PATH=/usr/local/bind9/bin:/usr/local/bind9/sbin:$PATH [[email protected] init.d]# . /etc/profile.d/named.sh
注意：到此为止我们编译的named全部处理完毕但是，此时的named是没有配置文件的，根域的解析文件也没有。
###################################提供man文件##############################################
1，一次性查看man文件的方式 [[email protected] man]# man -M /usr/local/bind9/share/man/ named 2，通过添加man文件的方式 [[email protected] man1]# cp * /usr/share/man/man1/ [[email protected] man3]# cp * /usr/share/man/man3/ [[email protected] man5]# cp * /usr/share/man/man5/ [[email protected] man8]# cp * /usr/share/man/man8/ 3，通过指明man的文件变量的方式 43 MANPATH /usr/man 44 MANPATH /usr/share/man 45 MANPATH /usr/local/man 46 MANPATH /usr/local/share/man 47 MANPATH /usr/X11R6/man 48 MANPATH /usr/local/bind9/share/man ###添加路径，但是不会立即生效
[[email protected] man1]# mkdir /var/named/ #########创建跟区域解析库目录 [[email protected] ~]# dig -t NS . @172.16.0.1 > /var/named/named.ca ###生成根域解析文件 [[email protected] ~]# ls /var/named/ named.ca [[email protected] ~]# cd /var/named/ [[email protected] named]# ls named.ca [[email protected] named]# cat named.ca ; <<>> DiG 9.10.1-P1 <<>> -t NS . @172.16.0.1 ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 49896 ;; flags: qr rd ra ad; QUERY: 1, ANSWER: 13, AUTHORITY: 0, ADDITIONAL: 1 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 4096 ;; QUESTION SECTION: ;. IN NS ;; ANSWER SECTION: . 473316 IN NS i.root-servers.net. . 473316 IN NS h.root-servers.net. . 473316 IN NS j.root-servers.net. . 473316 IN NS l.root-servers.net. . 473316 IN NS m.root-servers.net. . 473316 IN NS e.root-servers.net. . 473316 IN NS b.root-servers.net. . 473316 IN NS k.root-servers.net. . 473316 IN NS a.root-servers.net. . 473316 IN NS g.root-servers.net. . 473316 IN NS d.root-servers.net. . 473316 IN NS f.root-servers.net. . 473316 IN NS c.root-servers.net. ;; Query time: 2 msec ;; SERVER: 172.16.0.1#53(172.16.0.1) ;; WHEN: Wed Feb 11 03:57:36 CST 2015 ;; MSG SIZE rcvd: 239
#########################################生成本地解析文件#######################################
########################################生成缓存名称服务器######################################
[[email protected] named]# vim /var/named/named.localhost ###正向解析文件 1 $TTL 1D 2 @ IN SOA @ rname.invalid. ( 3 0; 4 1D; 5 1H; 6 1W; 7 3H); 8 NS @ 9 A 127.0.0.1 [[email protected] named]# vim /var/named/named.loopback ###反向解析文件 1 $TTL 1D 2 @ IN SOA @ rname.invalid. ( 3 0; 4 1D; 5 1H; 6 1W; 7 3H); 8 NS localhost. 9 1 PTR localhost.
[[email protected] named]# chmod 640 * ######修改权限 [[email protected] named]# chown .named * ######注意这几个文件要求其他用户无权限访问，数组必须为named. [[email protected] named]# ll total 12 -rw-r-----. 1 root named 934 Feb 11 03:57 named.ca -rw-r-----. 1 root named 144 Feb 11 04:02 named.localhost -rw-r-----. 1 root named 127 Feb 11 04:52 named.loopback
##############################################生成配置文件###########################################
[[email protected] named]# rndc-confgen -r /dev/urandom > /etc/named/rndc.conf ##生成配置文件秘钥
[[email protected] named]# vim named.conf
[[email protected] run]# vim /etc/named/named.conf
1 options {
2 directory "/var/named/"; #########指定工作目录
3
4 };
5 zone "." IN { #########根域解析
6 type hint;
7 file "named.ca";
8 };
9 zone "localhost" IN {
10 type master;
11 file "name.localhost";
12 allow-update {none;};
13 };
14 zone "0.0.127.in-addr.arpa" IN {
15 type master;
16 file "named.loopback";
17 allow-update {none;};
18 };
19 key "rndc-key" {
20 algorithm hmac-md5;
21 secret "Ex9+5nYWlJ/y9xcAXzTxEg==";
22 };
23
24 controls {
25 inet 127.0.0.1 port 953
26 allow { 127.0.0.1; } keys { "rndc-key"; };
27 };
28 # End of named.conf
####################################检查这两个区域解析是否正常 #######################################
[[email protected] named]# named-checkzone "localhost" /var/named/named.localhost zone localhost/IN: loaded serial 0 OK [[email protected] man8]# named-checkzone "0.0.127.in-addr.arpa" /var/named/named.loopback zone 0.0.127.in-addr.arpa/IN: loaded serial 0 OK
######################################以上就是生成了一个缓存缓存名称服务器了#########################
[[email protected] named]# man -M /usr/local/bind9/share/man/ named ###一次查看man的方式
[[email protected] man]# named -u named -g ############# 前台启动
[[email protected] named]# ss -tnlp | grep 53
LISTEN 0 10 172.16.11.11:53 *:* users:(("named",19931,22))
LISTEN 0 10 127.0.0.1:53 *:* users:(("named",19931,21))
LISTEN 0 5 192.168.122.1:53 *:* users:(("dnsmasq",1444,6))
LISTEN 0 128 127.0.0.1:953 *:* users:(("named",19931,23))
########################################提供配置脚本###########################################
[[email protected] init.d]# vim named
[[email protected] run]# vim /etc/init.d/named
1 #!/bin/bash
2 #
3 #description: named daemon
4 pidfile=/usr/local/bind9/var/run/named/named.pid ###定义pid文件位置变量，
5 lockfile=/var/lock/subsys/named ###锁文件，用于后面判断，程序是否在运行
6 conffile=/etc/named/named.conf ###指明配置文件位置
7 named=/usr/local/bind9/sbin/named
8 prog=named ######程序名
9
10 [ -r /etc/rc.d/init.d/functions ] && . /etc/rc.d/init.d/functions #####调用函数
11
12 start() {
13 if [ -e $lockfile ]; then ####判断服务在不在启动就是判断锁文件在不在
14 echo "$prog is already runnig"
15 warning
16 exit 0
17 fi
18 echo "start $prog:"
19 daemon --pidfile $pidfile $named -u named -c $conffile ####启动服务
20 retval=$?
21 echo
22 if [ $retval -eq 0 ]; then
23 touch $lockfile
24 return $retval
25 else
26 rm -f $lockfile $pidfile
27 return 1
28 fi
29 }
30 stop() { ####停止服务的函数
31 if [ ! -e $lockfile ];then
32 echo "$prog is stopped"
33 warning
34 echo
35 exit 0
36 fi
37 echo -n "stopping $prog:"
38 killproc $prog ####killproc 停掉进程
39 retval=$?
40 echo
41 if [ $retval -eq 0 ]; then
42 rm -f $lockfile $pidfile
43 return 0
44 else
45 echo "can not stop $prog"
46 return 1
47 fi
48 }
49 restart() { ###重启的函数
50 stop
51 start
52 }
53 reload() { ###重载的函数
54 echo -n "Reload the $prog:"
55 killproc -HUP $prog
56 echo
57 return $retval
58
59 }
60 status() { ####状态查看的函数
61 if pidof $prog &> /dev/null; then
62 echo -n "$prog id running"
63 success
64 echo
65 else
66 echo -n "$prog is stopped."
67 success
68 echo
69 fi
70 }
71 usage() { ####帮助页面的查看
72 echo "Usage:named {start|stop|status|restart|reload}"
73 }
74
75 case $1 in ####case判断
76 start)
77 start;;
78 stop)
79 stop;;
80 status)
81 status;;
82 restart)
83 restart;;
84 reload)
85 reload;;
86 *)
87 usage
88 exit 1;;
89 esac
[[email protected] init.d]# bash -n named ###########检查语法
[[email protected] init.d]# chmod a+x named ###########提供执行权限
################################################启动测试##############################################
至此DNS的缓存名称服务器和编译安装配置完毕！！！！！！！！！！！！！！！！！！！
时间： 2024-12-10 00:08:22