如何快速在内网搭建一个DNS服务器( 四 ) _云知道

3、启动服务# systemctl restart named
# systemctl status named
# systemctl enable named
4、检查服务# ls /var/named/chroot
# ps -ef|grep named
# netstat -tnlp|grep 53

5、配置bind配置文件位置：/etc/named.conf

1）授权DNS 服务器管理wuqingyan.top区域，并把该区域的区域文件命名为wuqingyan.top.zone，修改配置文件：

【如何快速在内网搭建一个DNS服务器】

# named-checkconf //检查配置文件的语法和完整性
2）添加wuqingyan.top.zone正向解析域配置
# cp -p /var/named/named.empty /var/named/wuqingyan.top.zone
# vim /var/named/wuqingyan.top.zone
$TTL 1D
wuqingyan.top. IN SOA wuqingyan.top. root.wuqingyan.top. (
0 ; serial
1D ; refresh
1H ; retry
1W ; expire
3H ) ; minimum
wuqingyan.top. IN NS dns.wuqingyan.top.
dns.wuqingyan.top. IN A 192.168.0.152
www.wuqingyan.top. IN A 192.168.0.153
www.wuqingyan.top. IN A 192.168.0.154
@ IN MX 10 mail.wuqingyan.top.
mail.wuqingyan.top. IN A 192.168.20.152
www1.wuqingyan.top. CNAME www.wuqingyan.top.
一个域名对应多个A记录，代表可以轮询

另外一种写法：

3)、添加192.168.0.zone反向域解析配置
# cp -p /var/named/named.empty /var/named/192.168.0.zone
# vim 192.168.0.zone
$TTL 3H
@ IN SOA 0.168.192.in-addr.arpa. wuqingyan (
0 ; serial
1D ; refresh
1H ; retry
1W ; expire
3H ) ; minimum
@ IN NS dns.wuqingyan.top.
152 IN PTR dns.wuqingyan.top.
153 IN PTR www.wuqigyan.top.
154 IN PTR www.wuqingyan.top.

3）检查配置文件
named-checkzone检查区域解析库文件的语法和完整性
用法：named-checkzone zonename filename
# named-checkzone wuqingyan.top /var/named/wuqingyan.top.zone
# named-checkzone wuqingyan.top /var/named/192.168.168.zone

4）修改权限
# chown root:named /var/named/wuqingyan.top.zone
# chown root:named /var/192.168.168.zone
# chmod 640 /var/named/wuqingyan.top.zone
# chmod 640 /var/named/192.168.168.zone
5）重启named服务
# systemctl restart named
# systemctl status named

6）配置客户端在客户端配置好DNS服务器地址。
# vim /etc/resolv.conf
nameserver 192.168.0.152
# vim /etc/sysconfig/network-scripts/ifcfg-eth0
DNS1=192.168.0.152
# systemctl restart network
7）测试# ping www.wuqingyan.top

# ping www1.wuqingyan.top

# dig wuiqngyan.top @192.168.0.152

其他：
# dig -t A www.wuqingyan.top @192.168.0.152 //检查A记录
# dig -t NS www.wuqingyan.top @192.168.0.152 //检查NS记录
# dig -x 192.168.0.153 @192.168.0.152 //检查反向查询