DNS服务器安装配置文档.docxVIP

DNS服务器安装配置记录环境说明说明：主机IP地址安装的程序主DNS服务器77采用编译安装从DNS服务器33Yum安装测试服务器96编译安装配置DNS主服务器安装所需软件包wget /isc/bind9/9.7.3/bind-9.7.3.tar.gz tar zxvf bind-9.7.3.tar.gzcd bind-9.7.3./configure --prefix=/usr/local/named --enable-threadsmakemake install创建 rndc.conf文件，用bind自带程序生成cd /usr/local/named/usr/local/named/sbin/rndc-confgen /usr/local/named/etc/rndc.conf把rndc.conf 中的key信息输出到 named.conf 中cd etc/tail -10 rndc.conf | head -9 | sed -e s/#\ //g named.conf修改named.conf文件[root@DnsMaster etc]# more named.conf key rndc-key { algorithm hmac-md5; secret GEmI3jnSB+BOTeOlgIHiQA==;};controls { inet port 953 allow { ; } keys { rndc-key; };};//include /etc/rndc.key;acl slave_servers { 33; };options { listen-on port 53 { any; }; //listen-on-v6 port 53 { ::1; }; directory /usr/local/named/etc; //dump-file /var/named/data/cache_dump.db; //statistics-file /var/named/data/named_stats.txt; //memstatistics-file /var/named/data/named_mem_stats.txt; allow-query { any; }; allow-transfer { slave_servers; }; recursion yes; dnssec-enable yes; dnssec-validation no; dnssec-lookaside auto;// rate-limit {// qps-scale 5000;// }; forwarders{ 8; }; /* Path to ISC DLV key */ //bindkeys-file /etc/named.iscdlv.key; //managed-keys-directory /var/named/dynamic;};logging { channel default_debug { file data/named.run; severity dynamic; };};zone . IN { type hint; file named.ca;};include /usr/local/named/etc/named.rfc1912.zones;//include /etc/named.root.key;2.5创建localhost.zonemkdir /usr/local/named/var/namedcd /usr/local/named/var/namedvim localhost.zone写入$TTL 86400$ORIGIN localhost.@ 1D IN SOA @ root ( 42 ; serial (d. adams) 3H