当前位置:网站首页>DNS server configuration
DNS server configuration
2022-07-07 08:04:00 【redcell5】
linux build dns The server
Requirements are as follows : Configure the domain name :test.com—>192.168.114.2
Modify the following documents :
/etc/named.conf
/var/named/named.domain.zones
/var/named/named. Custom domain name .zone, Such as :/var/named/named.test.com.zone
First step : edit /var/named/named.test.com.zone, The contents are as follows
$TTL 1D
@ IN SOA @ rname.invalid. (
0 ; serial
1D ; refresh
1H ; retry
1W ; expire
3H ; minimum
)
NS @
A 192.168.114.2
www A 192.168.114.2
The second step : edit /var/named/named.domain.zones, The contents are as follows
zone "test.com" IN {
type master;
file "named.test.com.zone";
};
The third step : Set up dns port , Modify the following contents in the file :/etc/named.conf
//
// Provided by Red Hat bind package to configure the ISC BIND named(8) DNS
// server as a caching only nameserver (as a localhost DNS resolver only).
//
// See /usr/share/doc/bind*/sample/ for example named configuration files.
//
options {
listen-on port 53 {
any; };
listen-on-v6 port 53 {
any; };
directory "/var/named";
dump-file "/var/named/data/cache_dump.db";
statistics-file "/var/named/data/named_stats.txt";
memstatistics-file "/var/named/data/named_mem_stats.txt";
secroots-file "/var/named/data/named.secroots";
recursing-file "/var/named/data/named.recursing";
allow-query {
any; };
/*
- If you are building an AUTHORITATIVE DNS server, do NOT enable recursion.
- If you are building a RECURSIVE (caching) DNS server, you need to enable
recursion.
- If your recursive DNS server has a public IP address, you MUST enable access
control to limit queries to your legitimate users. Failing to do so will
cause your server to become part of large scale DNS amplification
attacks. Implementing BCP38 within your network would greatly
reduce such attack surface
*/
recursion yes;
dnssec-enable yes;
dnssec-validation yes;
managed-keys-directory "/var/named/dynamic";
pid-file "/run/named/named.pid";
session-keyfile "/run/named/session.key";
/* https://fedoraproject.org/wiki/Changes/CryptoPolicy */
include "/etc/crypto-policies/back-ends/bind.config";
};
logging {
channel default_debug {
file "data/named.run";
severity dynamic;
};
};
zone "." IN {
type hint;
file "named.ca";
};
include "/etc/named.rfc1912.zones";
include "/etc/named.root.key";
include "/var/named/named.domain.zones";
Step four : restart dns service
systemctl restart named
Step five :linux Specify domain name server
[[email protected] ~]# cat /etc/resolv.conf
# Generated by NetworkManager
# nameserver 200.200.10.199
nameserver 192.168.114.2
Step six : test
[[email protected] ~]# nslookup test.com
Server: 192.168.114.2
Address: 192.168.114.2#53
Name: test.com
Address: 192.168.114.2
[[email protected] ~]# nslookup www.test.com
Server: 192.168.114.2
Address: 192.168.114.2#53
Name: www.test.com
Address: 192.168.114.2
[[email protected] ~]#
Reference material :https://www.cnblogs.com/reader/p/5616181.html
Learn knowledge
"sed -i 's/port\s+\d+\s*{/port hash[:port]{/g' /etc/named.conf"
"sed -i '/named.domain.zones/d' /etc/named.conf" # Delete include named.domain.zones Line of string
"echo 'include \"#{domain_zones_file}\";' >> /etc/named.conf"
"sed 's/::1;/any;/g' -i #{named_conf_file}" # Replace a string
边栏推荐
- Linux server development, MySQL transaction principle analysis
- Chip design data download
- 贝叶斯定律
- Quickly use Jacobo code coverage statistics
- Why should we understand the trend of spot gold?
- Linux server development, detailed explanation of redis related commands and their principles
- Padavan manually installs PHP
- 2022焊工(初级)判断题及在线模拟考试
- 大视频文件的缓冲播放原理以及实现
- 【数字IC验证快速入门】15、SystemVerilog学习之基本语法2(操作符、类型转换、循环、Task/Function...内含实践练习)
猜你喜欢
快速使用 Jacoco 代码覆盖率统计
Linux server development, detailed explanation of redis related commands and their principles
Shell 脚本的替换功能实现
misc ez_ usb
微信小程序基本组件使用介绍
2022 Inner Mongolia latest advanced fire facility operator simulation examination question bank and answers
Visualization Document Feb 12 16:42
Detailed explanation of Kalman filter for motion state estimation
即刻报名|飞桨黑客马拉松第三期等你挑战
[2022 ciscn] replay of preliminary web topics
随机推荐
Zsh shell adds automatic completion and syntax highlighting
Padavan manually installs PHP
Installing postgresql11 database under centos7
Linux server development, redis protocol and asynchronous mode
青龙面板--花花阅读
Pytest+allure+jenkins environment -- completion of pit filling
[SUCTF 2019]Game
B. Value sequence thinking
2022 recurrent training question bank and answers of refrigeration and air conditioning equipment operation
[VHDL parallel statement execution]
Cnopendata American Golden Globe Award winning data
Content of string
C language flight booking system
pytest+allure+jenkins环境--填坑完毕
Explore Cassandra's decentralized distributed architecture
Record a stroke skin bone error of the skirt
Visualization Document Feb 12 16:42
Paddlepaddle 29 dynamically modify the network structure without model definition code (relu changes to prelu, conv2d changes to conv3d, 2D semantic segmentation model changes to 3D semantic segmentat
2022制冷与空调设备运行操作复训题库及答案
mysql多列索引(组合索引)特点和使用场景