安装DNS步骤：
1.挂载光盘并安装主程序和伪装包
mount /dev/cdrom /mnt
cd /mnt/Packages/
rpm -ivh bind-9.7.0-5.P2.el6.i686.rpm
rpm -ivh bind-chroot-9.7.0-5.P2.el6.i686.rpm
2.复制主配置文件和区域配置文件并改变所有者为named
cp -p /etc/named.conf /var/named/chroot/etc/
cp -p /var/named/named.empty /var/named/chroot/var/named/jiangwenhui.com.zone
cp -p /var/named/named.empty /var/named/chroot/var/named/192.168.100.zone
cp -p /var/named/named.* /var/named/chroot/var/named/
chown named /var/named/chroot/var/named/
3.修改主配置文件
options {
listen-on port 53 { any; };
listen-on-v6 port 53 { ::1; };
forwarders { 8.8.8.8; };
directory "/var/named";
dump-file "/var/named/data/cache_dump.db";
statistics-file "/var/named/data/named_stats.txt";
memstatistics-file "/var/named/data/named_mem_stats.txt";
allow-query { any; };
recursion yes;
在最后一行前添加如下内容
forwarders { 8.8.8.8; };
zone "jiangwenhui.com" IN {
type master;
file "jiangwenhui.com.zone";
};
zone "100.168.192.in-addr.arpa" IN {
type master;
file "192.168.100.zone";
};
4.修改区域配置文件
cd /var/named/chroot/var/named
vim jiangwenhui.com.zone
$TTL 3H
@ IN SOA @ rname.invalid. (
0 ; serial
1D ; refresh
1H ; retry
1W ; expire
3H ) ; minimum
NS ns.jiangwenhui.com.
ns IN A 192.168.100.254
ftp IN A 192.168.100.254
www IN A 192.168.100.254
mail IN A 192.168.100.254
vim 192.168.100.zone
$TTL 3H
@ IN SOA @ rname.invalid. (
0 ; serial
1D ; refresh
1H ; retry
1W ; expire
3H ) ; minimum
NS ns.jiangwenhui.com.
254 IN PTR ns.jiangwenhui.com.
254 IN PTR ftp.jiangwenhui.com.
254 IN PTR www.jiangwenhui.com.
5.启动服务并关闭selinux和防火墙
service named start
setenforce 0
service iptables stop
二、构建主从DNS
规划好IP 主DNS192.168.1.111 从DNS192.168.1.112
1.修改主DNS配置文件
zone "jiangwenhui.com" IN {
type master;
file "jiangwenhui.com.zone";
allow-transfer { 192.168.100.25; };
};
zone "100.168.192.in-addr.arpa" IN {
type master;
file "192.168.100.zone";
allow-transfer { 192.168.100.25; };
};
2.在从DNS服务器上安装主程序和伪装包
同上安装过程
3.复制主配置文件
cp -p /etc/named.conf /var/named/chroot/etc/
4.修改从DNS的主配置文件
zone "winsnet.com" IN {
type slave;
file "slave/winsnet.com.zone";
masters { 192.168.1.111; };
};
zone "1.168.192.in-addr.arpa" IN {
type slave;
file "slave/192.168.1.zone";
masters { 192.168.1.111; };
};
5.在区域配置文件目录创建slave用于存储从DNS区域配置问价
cd /var/named/chroot/var/named
mkdir slave
cp -p /var/named/named.* /var/named/chroot/var/named
chown -R named /var/named/chroot/var/named
6.重启服务并查看slave目录是否同步成功区域配置文件
注意：在实验过程中要关闭防火墙和selinux