国产一级a片免费看高清,亚洲熟女中文字幕在线视频,黄三级高清在线播放,免费黄色视频在线看

打開APP
userphoto
未登錄

開通VIP,暢享免費(fèi)電子書等14項(xiàng)超值服

開通VIP
DNS服務(wù)——BIND(named)

DNS服務(wù)——BIND(named)

(2009-09-09 22:43:36)

    域名解析的方法  
  •     HOSTS文件:適用于小型網(wǎng)絡(luò)(文本文件)
  •     NIS服務(wù)器:
  •     DNS服務(wù)器:分布式解析

    /etc/hosts ,也負(fù)責(zé)映射,但它通常是當(dāng)作DNS的備份出現(xiàn)的

 

    unix上dns客戶端的設(shè)置
  • /etc/resolv.conf文件
# vi /etc/resolv.conf
domain   xxx  
nameserver 192.168.2.1
search iei.com
  • /etc/nsswitch.conf文件   用于記錄主機(jī)名的搜索順序等信息
vi /etc/nsswitch.conf
hosts: files dns 
  
  • nslookup www.sun.com    nslookup測試


  /etc/resolv.conf 設(shè)DNS SERVER與nslookup測試DNS正確與否
[root@old145 mac]# cat /etc/resolv.conf
search iei.com
nameserver 219.142.217.166
[root@old145 mac]# nslookup www.cisco.com
Server:         219.142.217.166
Address:        219.142.217.166#53

Non-authoritative answer:
Name:   www.cisco.com
Address: 198.133.219.25


   nslookup也可以反查:查IP地址的域名
[root@old145 mac]# nslookup 198.133.219.25
Server:         219.142.217.166
Address:        219.142.217.166#53

Non-authoritative answer:
25.219.133.198.in-addr.arpa     name = www.cisco.com.

Authoritative answers can be found from:
219.133.198.in-addr.arpa        nameserver = ns1.cisco.com.
219.133.198.in-addr.arpa        nameserver = ns2.cisco.com.
ns1.cisco.com   internet address = 128.107.241.185
ns2.cisco.com   internet address = 64.102.255.44


    named 安裝配置步驟
    在Linux中都是用Bind來實(shí)現(xiàn)DNS,即“named進(jìn)程”
  •     /etc/named.conf
options {
        directory "/var/named";     
此目錄是形式上的目錄,其實(shí)其內(nèi)的zone文件是通過ln鏈接指令指向/var/named/chroot/var/named/ 
        dump-file "/var/named/data/cache_dump.db";
        statistics-file "/var/named/data/named_stats.txt";
};
zone “區(qū)域名”  IN {
type   master/slave/hint
        定義區(qū)域類型
    master   主DNS
    slave    輔DNS (很少用)
    hint 根,只用于下面的”.” named.ca
file “文件名”   區(qū)域文件名,此文件存于/var/named目錄下
};

zone "macg.com" IN {
        type master;
        file "macg.zone";
        allow-update { none; };
};
zone "." IN {                   根區(qū)域    
        type hint             類型:根   
        file "named.ca";          /var/named/named.ca 指向上級(jí)DNS(通常是公網(wǎng)頂級(jí)DNS)
                                  該文件不需要管理員更改,而是系統(tǒng)自帶  
};
   
  •     正向解析,區(qū)域文件格式 (域名---地址)
[root@localhost named]# more macg.zone
$TTL    86400
              IN SOA       root (       @則代表相應(yīng)的域名,macg.com
                                        42              
                                        3H       
                                        15M         
                                        1W            
                                        1D );

@ IN NS         192.168.1.12;     
  IN A          192.168.1.12;     
@則代表相應(yīng)的域名,macg.com 
NS:域名記錄, 一個(gè)zone文件,必須有NS條目,否則報(bào)錯(cuò)
A條目,真正的映射條目
域名都是兩條條目,一條NS條目,一條A條目

www IN A 192.168.1.12;      主機(jī)A條目:主機(jī)映射條目,“主機(jī)名 IN A 地址”
test IN A 192.168.1.12;
ftp IN A 192.168.1.12;
www1 IN CNAME www        CNAME:等價(jià)指令,即www1,等價(jià)于www,相當(dāng)于別名alias映射條目   


  IN不能打頭,前面應(yīng)該有域名,或@,或至少應(yīng)該有一個(gè)空格
  zone文件必須有NS條目
[root@localhost named]# vi macg.zone
IN NS           192.168.1.12;
IN A            192.168.1.12;
[root@localhost named]# /etc/init.d/named restart
Starting named:
macg.zone:9: NS record '192.168.1.12' appears to be an address
zone macg.com/IN: has no NS records
_default/macg.com/IN: bad zone
[root@localhost named]# vi macg.zone
@ IN NS         192.168.1.12;
  IN A          192.168.1.12;
[root@localhost named]# /etc/init.d/named restart
Starting named: [  OK  ]
總之,IN前可以空,但必須有一個(gè)空格,不能用IN頂頭

   IN語句的主機(jī)名前面不能留空格
[root@localhost named]# vi macg.zone
       www IN A 192.168.1.12;

[root@localhost named]# /etc/init.d/named restart
Starting named:
Error in named configuration:
macg.zone:11: unknown RR type 'www'
zone macg.com/IN: loading master file macg.zone: unknown class/type
_default/macg.com/IN: unknown class/type
[FAILED]
將www行之前的空格去掉,錯(cuò)誤解決
[root@localhost named]# vi macg.zone
@ IN NS         192.168.1.12;
 IN A            192.168.1.12;
www IN A 192.168.1.12;


    /var/named 目錄出錯(cuò)的問題
在/var/named下建立文件macg.zone
[root@localhost named]# ls
chroot  localdomain.zone  macg.com   named.broadcast  named.ip6.local  named.zero
data    localhost.zone    macg.zone  named.ca         named.local      slaves
但啟動(dòng)named出錯(cuò)
[root@localhost named]# /etc/init.d/named restart
Stopping named: [  OK  ]
Starting named:
Error in named configuration:
zone localdomain/IN: loaded serial 42
zone localhost/IN: loaded serial 42
zone 0.0.127.in-addr.arpa/IN: loaded serial 1997022700
zone 0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ip6.arpa/IN: loaded serial 1997022700
zone 255.in-addr.arpa/IN: loaded serial 42
zone 0.in-addr.arpa/IN: loaded serial 42
zone macg.com/IN: loading master file macg.zone: file not found 
_default/macg.com/IN: file not found
[FAILED]
原來zone文件的真正地點(diǎn)是/var/named/chroot/var/named/, 表面上的/var/named是建立的符號(hào)鏈接
[root@localhost named]# ls -l
total 68
drwxrwx---  6 root  named 4096 Nov 30 12:03 chroot
drwxrwx---  2 named named 4096 May 18  2005 data
lrwxrwxrwx  1 root  root    44 Nov  3 01:19 localdomain.zone -> /var/named/chroot/var/named/localdomain.zone
lrwxrwxrwx  1 root  root    42 Nov  3 01:19 localhost.zone -> /var/named/chroot/var/named/localhost.zone
-rwxrwxrwx  1 root  root   218 Nov 30 19:57 macg.zone
[root@localhost named]# cp macg.zone /var/named/chroot/var/named/

[root@localhost named]# ln -s /var/named/chroot/var/named/macg.zone macg.zone   
建立的符號(hào)鏈接


[root@localhost named]# ls -l
lrwxrwxrwx  1 root  root    37 Nov 30 20:24 macg.zone -> /var/named/chroot/var/named/macg.zone
啟動(dòng),問題解決


    一個(gè)基本的正向解析+測試
  • 配/etc/named.conf
[root@localhost named]# more /etc/named.conf
zone "macg.com" IN {
        type master;
        file "macg.zone";
        allow-update { none; };
};
  • 建立zone文件
在/var/named/chroot/var/named/建立macg.zone
在/var/named建立ln –s符號(hào)連接
[root@localhost named]# vi macg.zone
$TTL    86400
              IN SOA       root (
                                        42              ; serial (d. adams)
                                        3H              ; refresh
                                        15M             ; retry
                                        1W              ; expiry
                                        1D );

@ IN NS         192.168.1.12;
  IN A          192.168.1.12;
www IN A 192.168.1.12;
test IN A 192.168.1.12;  
ftp IN A 192.168.1.12;
  • 啟動(dòng)service
[root@localhost named]# /etc/init.d/named restart
Stopping named: [  OK  ]
Starting named: [  OK  ]
  • 測試
在其他PC上,設(shè)DNS指向linux
www訪問http://www.macg.com,http://test.macg.com,http://ftp.macg.com成功
ftp ftp.macg.com成功。
瀏覽器訪問ftp://ftp.macg.com成功(因?yàn)榕淞四涿?br>
[root@localhost named]# ping www.macg.com
PING www.macg.com (192.168.1.12) 56(84) bytes of data.
64 bytes from 192.168.1.12: icmp_seq=0 ttl=64 time=0.133 ms
64 bytes from 192.168.1.12: icmp_seq=1 ttl=64 time=0.093 ms
64 bytes from 192.168.1.12: icmp_seq=2 ttl=64 time=0.102 ms

[root@localhost named]# ping test.macg.com
PING test.macg.com (192.168.1.12) 56(84) bytes of data.
64 bytes from 192.168.1.12: icmp_seq=0 ttl=64 time=0.109 ms
64 bytes from 192.168.1.12: icmp_seq=1 ttl=64 time=0.096 ms
64 bytes from 192.168.1.12: icmp_seq=2 ttl=64 time=0.104 ms

[root@localhost named]# ping ftp.macg.com
PING ftp.macg.com (192.168.1.12) 56(84) bytes of data.
64 bytes from 192.168.1.12: icmp_seq=0 ttl=64 time=0.109 ms
64 bytes from 192.168.1.12: icmp_seq=1 ttl=64 time=0.126 ms
64 bytes from 192.168.1.12: icmp_seq=2 ttl=64 time=0.102 ms



    反向解析(地址---域名)
作用:通過查詢IP地址的PTR記錄
            得到該IP地址指向的域名,
用途:常用于MAIL SERVER 過濾垃圾郵件:
如果SERVER沒有做反向解析,那么對(duì)方mail服務(wù)器的反向解析驗(yàn)證就會(huì)失敗,對(duì)方mail服務(wù)器就會(huì)以我們是不明發(fā)送方而拒收我們發(fā)往的郵件,這也就是沒做反向解析時(shí)無法向sina.com、homail.com發(fā)信的原因
  •     修改/etc/named.conf
vi /etc/named.conf
zone "1.168.192.in-addr.arpa" IN {
           IP地址前三位倒敘+ in-addr.arpa
        type master;
        file "192.168.1";
        allow-update { none; };
};
  •    建立反向zone文件
在/var/named/chroot/var/named/下建立192.168.1
在/var/named建立符號(hào)鏈接
[root@localhost named]# ln -s /var/named/chroot/var/named/192.168.1 192.168.1

[root@localhost named]# ls -l
lrwxrwxrwx  1 root  root    37 Nov 30 22:38 192.168.1 -> /var/named/chroot/var/named/192.168.1
[root@localhost named]# vi 192.168.1
$TTL    86400
      IN      SOA     localhost. root.localhost.  (
                                      1997022700 ; Serial
                                      28800      ; Refresh
                                      14400      ; Retry
                                      3600000    ; Expire
                                      86400 )    ; Minimum

@ IN NS macg.com                   反向解析也要NS條目
@表示的是主機(jī)的IP地址最后一位(省略了網(wǎng)絡(luò)地址部分)

12 IN PTR www.macg.com      反向解析的標(biāo)準(zhǔn)條目,PTR條目
1 IN PTR www1.macg.com.
2 IN PTR test.macg.com.
2 IN PTR comp.macg.com.
  •     PC上ping -a實(shí)驗(yàn)
配前無顯示
D:\Documents and Settings\ >ping -a 192.168.1.12

Pinging 192.168.1.12 with 32 bytes of data:
Reply from 192.168.1.12: bytes=32 time<10ms TTL=64
Reply from 192.168.1.12: bytes=32 time<10ms TTL=64
Reply from 192.168.1.12: bytes=32 time<10ms TTL=64
Reply from 192.168.1.12: bytes=32 time<10ms TTL=64
實(shí)驗(yàn)后
D:\Documents and Settings >ping -a 192.168.1.12

Pinging www.macg.com.1.168.192.in-addr.arpa [192.168.1.12] with 32 bytes of data

Reply from 192.168.1.12: bytes=32 time<10ms TTL=64
Reply from 192.168.1.12: bytes=32 time<10ms TTL=64
Reply from 192.168.1.12: bytes=32 time<10ms TTL=64
Reply from 192.168.1.12: bytes=32 time<10ms TTL=64
本站僅提供存儲(chǔ)服務(wù),所有內(nèi)容均由用戶發(fā)布,如發(fā)現(xiàn)有害或侵權(quán)內(nèi)容,請(qǐng)點(diǎn)擊舉報(bào)。
打開APP,閱讀全文并永久保存 查看更多類似文章
猜你喜歡
類似文章
DNS服務(wù)及基于BIND的實(shí)現(xiàn)
架設(shè)您的 DNS 服務(wù)器 ( 可是BIND9 喲 )
BIND智能解析域名
Redhat DNS Bind配置詳解
架設(shè)DNS服務(wù)器BIND設(shè)置詳解 –
Linux下的dns設(shè)置詳解
更多類似文章 >>
生活服務(wù)
分享 收藏 導(dǎo)長圖 關(guān)注 下載文章
綁定賬號(hào)成功
后續(xù)可登錄賬號(hào)暢享VIP特權(quán)!
如果VIP功能使用有故障,
可點(diǎn)擊這里聯(lián)系客服!

聯(lián)系客服