11 listen-on port 53 { any;}; ##允許任何人打開ipv4端口
17 allow-query { any; }; ##允許任何人dns查詢地址
55zone westos.com IN {
56 type hint;
57 filewestos.com.zone;
58};
3.vim /etc/named.rfc1912.zones
25 zone westos.com IN{
26 type master;
27 filewestos.com.zone;
28 allow-update { none; };
29 };
4.cp -p /var/named/named.localhost /var/named/westos.com.zone
vim /var/named/westos.com.zone
$TTL 1D
@ IN SOA dns.westos.com. root.westos.com. (
0 ; serial
1D ; refresh
1H ; retry
1W ; expire
3H ) ; minimum
NS dns.westos.com.
dns A 172.25.254.60
www A 172.25.254.162
music CNAME music.a.westos.com.
music.a A 172.25.254.111
music.a A 172.25.254.222
westos.com. MX 1 172.25.254.60.
5.測試
*)vim /etc/resolv.conf
nameserver 172.25.254.60
*）dig www.westos.com
*）dig -t mx westos.com
*）dig music.westos.com
二.正向解析
1.cp -p westos.com.zone westos.com.inter
2.vim westos.com.inter
$TTL 1D
@ IN SOA dns.westos.com. root.westos.com. (
0 ; serial
1D ; refresh
1H ; retry
1W ; expire
3H ) ; minimum
NS dns.westos.com.
dns A 172.25.62.60
www A 172.25.62.162
music CNAME music.a.westos.com.
music.a A 172.25.62.111
music.a A 172.25.62.222
westos.com. MX 1 172.25.62.60.
3.cp -p /etc/named.rfc1912.zones /etc/named.rfc1912.inter
4.vim /etc/named.rfc1912.inter
zone westos.com IN {
type master;
filewestos.com.inter;
allow-update { none; };
};
5.vim /etc/named.conf
50 /*
51 zone . IN {
52 type hint;
53 file named.ca;
54 };
55
56 include/etc/named.rfc1912.zones;
57 include/etc/named.root.key;
58 */
59
60 view localnet {
61 match-clients { 172.25.254.0/24;};
62 zone . IN {
63 type hint;
64 filenamed.ca;
65 };
66 include/etc/named.rfc1912.zones;
67 };
68
69 view internet {
70 match-clients { 172.25.62.0/24;};
71 zone . IN {
72 type hint;
73 filenamed.ca;
74 };
75 include/etc/named.rfc1912.inter;
76 };
6.測試
*)vim /etc/resolv.conf
nameserver 172.25.62.60
*)[root@dns-client162 ~]# dig www.westos.com
三.反向解析
1.vim /etc/named.rfc1912.zones
zone 254.25.172.in-addr.arpa IN {
type master;
filewestos.com.ptr;
allow-update { none; };
};
2.cp -p /var/named/named.loopback /var/named/westos.com.ptr
3.vim /var/named/westos.com.ptr
$TTL 1D
@ IN SOA dns.westos.com. root.westos.com. (
0 ; serial
1D ; refresh
1H ; retry
1W ; expire
3H ) ; minimum
NS dns.westos.com.
dns A 127.25.254.60
111 PTR www.westos.com.
222 PTR bbs.westos.com.
4.測試
[root@dns-client162 ~]# dig -x 172.25.254.222
四.dns更新
1.備份westos.com.zone
cp -p /var/named/westos.com.zone /mnt
2.允許172.25.254.162更新
vim /etc/named.rfc1912.zones
25 zone westos.com IN {
26 type master;
27 filewestos.com.zone;
28 allow-update {172.25.254.162; };
29 };
3.修改權(quán)限
chmod 770 /var/named/
4.打開named_write_master_zones 服務(wù)
setsebool -P named_write_master_zones 1
5.測試
[root@dns-client162 ~]# nsupdate
> server 172.25.254.60
> update add haha.westos.com 86400 A 172.25.254.222
> send
五.dns加密更新
1.加密
dnssec-keygen -a HMAC-MD5 -b 128 -n HOST westoskey ##名字westoskey
2.密鑰
cp -p /etc/rndc.key /etc/westos.key
vim /etc/westos.key
key westoskey {
algorithm hmac-md5;
secretcO4YCYcToTDA7mWqZSRRtA==;
};
3.配置dns服務(wù)
*)vim /etc/named.conf
43 include /etc/westos.key;
*)vim /etc/named.rfc1912.zones
25 zone westos.com IN{
26 type master;
27 filewestos.com.zone;
28 allow-update { key westoskey;};
29 };
4.測試
*)scp /mnt/Kwestoskey. 157 37962.* root@172.25.254.162:/mnt
*)在172.25.254.162主機
[root@dns-client162 ~]# nsupdate -k /mnt/Kwestoskey. 157 37962.private
> server 172.25.254.60
> update add haha.westos.com 86400 A 172.25.254.222
> send
>
六.通過主機名訪問查詢
1.安裝dhcp服務(wù)
yum install dhcp -y
2.建立dhcp服務(wù)配置
cp /usr/share/doc/dhcp-4.2.5/dhcpd.conf.example /etc/dhcp/dhcpd.conf
3.修改配置文件
vim /etc/dhcp/dhcpd.conf
7 option domain-namewestos.com;
8 option domain-name-servers172.25.254.60;
14 ddns-update-style interim;
30 subnet 172.25.254.0 netmask255.255.255.0 {
31 range 172.25.254.46 172.25.254.55;
32 option routers 172.25.254.250;
33 }
34
35 key westoskey {
36 algorithm hmac-md5;
37 secret cO4YCYcToTDA7mWqZSRRtA==;
38 };
39
40 zone westos.com {
41 primary 127.0.0.1;
42 key westoskey;
43 }
*)vim /etc/named.conf ##修改主配置文件
4.測試
*）拔掉網(wǎng)線
*)在客戶端主機中
hostnamectl set-hostname haha.westos.com ##修改主機名
*)vim /etc/sysconfig//network-scripts/ifcfg-eth0 ##更改網(wǎng)絡(luò)為動態(tài)
DEVICE=eth0
BOOTPROTO=dhcp
ONBOOT=yes
:wq
*)重啟網(wǎng)絡(luò)
systemctl restart network
*）查詢
*)hostnamectl set-hostname haha.westos.com ##更改主機名為haha.westos.com
*)dig haha.westos.com
*)hostnamectl set-hostname test.westos.com ##更改主機名為test.westos.com
*)dig test.westos.com
更多關(guān)于云服務(wù)器，域名注冊，虛擬主機的問題，請訪問三五互聯(lián)官網(wǎng)：m.shinetop.cn