DNS domain name resolution protocol

Catalog

principle

To configure

---

principle

DNS Domain name resolution process ：DNS Domain name resolution process _ Blog of cat who can't modulate and demodulate -CSDN Blog

---

 

To configure

Check if there is bind Tools , If it doesn't, it's directly yum install

yum install -y bind

  View the profile location

rpm -qc bind

  Modify area profile , Add forward zone configuration

vim  /etc/named.conf

options {
        listen-on port 53 { 192.168.150.30; };    # Listening port 
        listen-on-v6 port 53 { ::1; };
        directory       "/var/named";
        dump-file       "/var/named/data/cache_dump.db";
        statistics-file "/var/named/data/named_stats.txt";
        memstatistics-file "/var/named/data/named_mem_stats.txt";
        recursing-file  "/var/named/data/named.recursing";
        secroots-file   "/var/named/data/named.secroots";
        allow-query     { 192.168.150.0/24; };     Allowed network segment 

        /* 
         - If you are building an AUTHORITATIVE DNS server, do NOT enable recursion.
         - If you are building a RECURSIVE (caching) DNS server, you need to enable 
           recursion. 
         - If your recursive DNS server has a public IP address, you MUST enable access 
           control to limit queries to your legitimate users. Failing to do so will
           cause your server to become part of large scale DNS amplification 
           attacks. Implementing BCP38 within your network would greatly
           reduce such attack surface 

  continue

 vim  /etc/named.rfc1912.zones

among ：

zone "1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ip6.arpa" IN

It's the dividing line , Upward is forward parsing , Next is reverse parsing

Copy “ Demarcation line ” Configure the above example ：

zone "van.com" IN {
        type master;
        file "van.com.zone";
        allow-update { none; };
};

  Configure forward zone data file

touch  /var/named/van.com.zone 
cp -p named.localhost ./van.com.zone
vim   /var/named/van.com.zone   

$TTL 1D
@	IN SOA	van.com.  admin.van.com. (
					0	; serial
					1D	; refresh
					1H	; retry
					1W	; expire
					3H )	; minimum
	NS	van.com.
	A	192.168.150.30
	AAAA	::1
IN MX 10                      mail.vam.com.
WWW IN  A                     192.168.150.30
mail IN  A                    192.168.150.222
ftp     IN CNAME   www       
*       IN   A                192.168.150.200

Turn off firewall

systemctl stop firewalld 

Start the service

systemctl start named

View service status

systemctl status named 

---