玉树藏族自治州网站建设_网站建设公司_导航菜单_seo优化

1、主DNS服务器部署

1.1、配置yum源

sed -i 's#SELINUX=enforcing#SELINUX=disabled#g' /etc/selinux/config

setenforce 0

cd /etc/yum.repos.d/

mkdir backup

mv CentOS-* backup/

curl -o /etc/yum.repos.d/CentOS-Base.repo http://mirrors.aliyun.com/repo/Centos-7.repo

yum clean all && yum makecache

1.2、安装dns

yum install -y bind bind-utils

1.3、配置主DNS服务器

vim /etc/named.conf

options {

listen-on port 53 { any; };

directory "/var/named";

allow-query { any; };

allow-transfer { 192.168.52.17; }; # 从服务器IP

recursion yes;

allow-recursion { any; }; # 新增

};

# 配置正向解析

zone "westos1.com" IN {

type master;

file "westos1.com.zone";

allow-transfer { 192.168.52.17; };

allow-update { none; };

};

# 配置反向解析

zone "52.168.192.in-addr.arpa" IN {

type master;

file "192.168.52.zone";

allow-transfer { 192.168.52.17; };

};

cd /var/named

cp named.empty westos1.com.zone

cp named.empty 192.168.52.zone

chown -R named.named 192.168.52.zone westos1.com.zone # 新增

vi westos1.com.zone

$TTL 3H

@ IN SOA @ rname.invalid. (

0 ; serial

1D ; refresh

1H ; retry

1W ; expire

3H ) ; minimum

NS dns.westos1.com.

dns IN A 192.168.52.15

www IN A 192.168.52.15

vi 192.168.52.zone

$TTL 3H

@ IN SOA @ rname.invalid. (

0 ; serial

1D ; refresh

1H ; retry

1W ; expire

3H ) ; minimum

NS dns.westos1.com.

15 IN PTR dns.westos1.com.

15 IN PTR www.westos1.com.

1.4、检查反向区域

named-checkzone westos1.com /var/named/westos1.com.zone

named-checkzone 52.168.192.in-addr.arpa /var/named/192.168.52.zone

1.5、启动named

systemctl restart named

systemctl enable named

systemctl status named

1.6、防火墙放行dns流量

firewall-cmd --permanent --add-service=dns

firewall-cmd --reload

2、从DNS服务器部署

2.1、配置yum源

sed -i 's#SELINUX=enforcing#SELINUX=disabled#g' /etc/selinux/config

setenforce 0

cd /etc/yum.repos.d/

mkdir backup

mv CentOS-* backup/

curl -o /etc/yum.repos.d/CentOS-Base.repo http://mirrors.aliyun.com/repo/Centos-8.repo

yum clean all && yum makecache

2.2、安装dns

yum install -y bind bind-utils

2.3、配置从DNS服务器

vi /etc/named.conf

options {

listen-on port 53 { any; };

directory "/var/named";

allow-transfer { none; };

recursion yes;

allow-recursion { any; };

};

zone "westos1.com" IN {

type slave;

file "westos1.com.zone";

masters { 192.168.52.15; };

allow-update { none; }; # 新增

};

cd /var/named

cp named.empty westos1.com.zone

chown -R named.named westos1.com.zone # 新增

vi westos1.com.zone

$TTL 3H

@ IN SOA @ rname.invalid. (

0 ; serial

1D ; refresh

1H ; retry

1W ; expire

3H ) ; minimum

NS westos1.com.

dns IN A 192.168.52.15

www IN A 192.168.52.15

2.4、启动named

systemctl restart named

systemctl enable named

systemctl status named

2.5、防火墙放行dns流量

firewall-cmd --permanent --add-service=dns

firewall-cmd --reload

3、dns验证

dig -t A www.westos1.com @192.168.52.15