﻿{"id":713,"date":"2020-12-01T11:11:22","date_gmt":"2020-12-01T03:11:22","guid":{"rendered":"http:\/\/blog.sway.com.cn\/?p=713"},"modified":"2020-12-04T12:05:20","modified_gmt":"2020-12-04T04:05:20","slug":"%e7%ae%80%e6%98%93%e6%90%ad%e5%bb%ba%e5%b1%80%e5%9f%9f%e7%bd%91%e5%86%85%e9%83%a8dns%e6%9c%8d%e5%8a%a1%e5%99%a8","status":"publish","type":"post","link":"http:\/\/blog.sway.com.cn\/?p=713","title":{"rendered":"\u7b80\u6613\u642d\u5efa\u5c40\u57df\u7f51\u5185\u90e8dns\u670d\u52a1\u5668"},"content":{"rendered":"<p>\u5728\u505aAPP\u5f00\u53d1\u6d4b\u8bd5\uff0c\u7531\u4e8e\u624b\u673a\u4e0d\u80fd\u50cf\u7535\u8111\u4fee\u6539host\u6587\u4ef6\u90a3\u6837\u65b9\u4fbf\u7684\u6620\u5c04dns\uff0c\u6240\u4ee5\u5728\u5c40\u57df\u7f51\u8fdb\u884c\u8c03\u8bd5\u65f6\uff0c\u9700\u8981\u642d\u5efa\u4e00\u53f0DNS\u670d\u52a1\u5668\u7528\u4e8e\u7ed9\u79fb\u52a8\u8bbe\u5907\u8fdb\u884c\u89e3\u6790\u3002<\/p>\n<div>\n<div>\n<p>\u51c6\u5907\u4e24\u53f0\u6700\u5c0f\u5316Centos 7 \u670d\u52a1\u5668\uff0c\u4e00\u53f0\u7528\u6765\u642d\u5efadns\u670d\u52a1\u5668\uff0c\u4e00\u53f0\u7528\u6765\u6d4b\u8bd5dns\uff1b\u4e00\u53f0window 10 \u7528\u6765\u6d4b\u8bd5dns,\u673a\u5668IP\u5982\u4e0b\uff1a<\/p>\n<ul>\n<li>dns \u670d\u52a1\u5668 IP:192.168.122.254<\/li>\n<li>linux \u5ba2\u6237\u7aefIP\uff1a192.168.0.71<\/li>\n<li>window \u5ba2\u6237\u7aefIP\uff1a192.168.0.254<\/li>\n<\/ul>\n<\/div>\n<h1>\u5b9e\u73b0\u6b65\u9aa4<\/h1>\n<ul>\n<li>\u6211\u4eec\u6d4b\u8bd5\u7684\u57df\u540d\uff1asway.com.cn<\/li>\n<li>\u4f7f\u7528bind\u642d\u5efadns\u670d\u52a1\u5668<\/li>\n<li>\u9632\u706b\u5899\u5f00\u542f53\u7aef\u53e3\u8bbf\u95ee<\/li>\n<li>\u914d\u7f6e\u5ba2\u6237\u7aef\u7684dsn\u670d\u52a1<\/li>\n<li>\u6d4b\u8bd5dns\u4f7f\u7528<\/li>\n<\/ul>\n<h1>1\u3001\u914d\u7f6e\u90e8\u7f72\u670d\u52a1\u7aef<\/h1>\n<p>\u5728\u9700\u8981\u642d\u5efadns\u670d\u52a1\u7684centos 7\u673a\u5668\u4e0a\u64cd\u4f5c<\/p>\n<ul>\n<li>\u5b89\u88c5bind<\/li>\n<\/ul>\n<pre class=\"lang:default decode:true\">yum -y install bind  bind-chroot bind-utils<\/pre>\n<p>\u5b89\u88c5\u5b8c\u540e\uff0c\u76f8\u5173\u7684\u914d\u7f6e\u4e3b\u8981\u6d89\u53ca\u4ee5\u4e0b\u51e0\u4e2a\u76ee\u5f55\u7684\u6587\u4ef6\uff1a<\/p>\n<p>\/etc\/named.conf #\u4e3b\u914d\u7f6e\u6587\u4ef6<br \/>\n\/etc\/named.rfc1912.zones #\u62d3\u5c55\u914d\u7f6e\u6587\u4ef6<br \/>\n\/var\/named\/ #zone \u914d\u7f6e\u6587\u4ef6\u76ee\u5f55<\/p>\n<ul>\n<li>named\u7684\u6838\u5fc3\u914d\u7f6e\u6587\u4ef6\uff1a\/etc\/named.conf\uff1a<\/li>\n<\/ul>\n<p><span style=\"color: #ff0000;\">1\u3001\u4fee\u6539 listen-on port 53 { 127.0.0.1; }; \u4e3a any<\/span><\/p>\n<p><span style=\"color: #ff0000;\">2\u3001\u4fee\u6539 allow-query { localhost; }; \u4e3a any<\/span><\/p>\n<\/div>\n<pre class=\"line-numbers  language-php\"><code class=\"  language-php\">listen<span class=\"token operator\">-<\/span>on port <span class=\"token number\">53<\/span> <span class=\"token punctuation\">{<\/span> any<span class=\"token punctuation\">;<\/span> <span class=\"token punctuation\">}<\/span><span class=\"token punctuation\">;<\/span>\r\n\r\nvim <span class=\"token operator\">\/<\/span>etc<span class=\"token operator\">\/<\/span>named<span class=\"token punctuation\">.<\/span>conf\r\noptions <span class=\"token punctuation\">{<\/span>\r\n    listen<span class=\"token operator\">-<\/span>on port <span class=\"token number\">53<\/span> <span class=\"token punctuation\">{<\/span> any<span class=\"token punctuation\">;<\/span> <span class=\"token punctuation\">}<\/span><span class=\"token punctuation\">;<\/span>  <span class=\"token shell-comment comment\">#\u76d1\u542c0.0.0.0 53\u7aef\u53e3\uff0cipv4<\/span>\r\n    listen<span class=\"token operator\">-<\/span>on<span class=\"token operator\">-<\/span>v6 port <span class=\"token number\">53<\/span> <span class=\"token punctuation\">{<\/span> <span class=\"token punctuation\">:<\/span><span class=\"token punctuation\">:<\/span><span class=\"token number\">1<\/span><span class=\"token punctuation\">;<\/span> <span class=\"token punctuation\">}<\/span><span class=\"token punctuation\">;<\/span> <span class=\"token shell-comment comment\">#\u76d1\u542c0.0.0.0 53\u7aef\u53e3\uff0cipv6<\/span>\r\n    directory   <span class=\"token double-quoted-string string\">\"\/var\/named\"<\/span><span class=\"token punctuation\">;<\/span>     <span class=\"token shell-comment comment\">#zone \u76ee\u5f55<\/span>\r\n    dump<span class=\"token operator\">-<\/span>file   <span class=\"token double-quoted-string string\">\"\/var\/named\/data\/cache_dump.db\"<\/span><span class=\"token punctuation\">;<\/span> <span class=\"token shell-comment comment\">#\u670d\u52a1\u5668\u5b58\u653e\u6570\u636e\u5e93\u6587\u4ef6\u7684\u8def\u5f84\u540d<\/span>\r\n    statistics<span class=\"token operator\">-<\/span>file <span class=\"token double-quoted-string string\">\"\/var\/named\/data\/named_stats.txt\"<\/span><span class=\"token punctuation\">;<\/span>  <span class=\"token shell-comment comment\">#<\/span>\r\n    memstatistics<span class=\"token operator\">-<\/span>file <span class=\"token double-quoted-string string\">\"\/var\/named\/data\/named_mem_stats.txt\"<\/span><span class=\"token punctuation\">;<\/span>\r\n    recursing<span class=\"token operator\">-<\/span>file  <span class=\"token double-quoted-string string\">\"\/var\/named\/data\/named.recursing\"<\/span><span class=\"token punctuation\">;<\/span>\r\n    secroots<span class=\"token operator\">-<\/span>file   <span class=\"token double-quoted-string string\">\"\/var\/named\/data\/named.secroots\"<\/span><span class=\"token punctuation\">;<\/span>\r\n    allow<span class=\"token operator\">-<\/span>query     <span class=\"token punctuation\">{<\/span> any<span class=\"token punctuation\">;<\/span> <span class=\"token punctuation\">}<\/span><span class=\"token punctuation\">;<\/span> <span class=\"token shell-comment comment\">#\u5141\u8bb8\u67e5\u8be2<\/span>\r\n    recursion yes<span class=\"token punctuation\">;<\/span> <span class=\"token shell-comment comment\">#\u8fd0\u884c\u8fed\u4ee3<\/span>\r\n    dnssec<span class=\"token operator\">-<\/span>enable yes<span class=\"token punctuation\">;<\/span> \r\n    dnssec<span class=\"token operator\">-<\/span>validation yes<span class=\"token punctuation\">;<\/span>\r\n\r\n    <span class=\"token comment\">\/* Path to ISC DLV key *\/<\/span>\r\n    bindkeys<span class=\"token operator\">-<\/span>file <span class=\"token double-quoted-string string\">\"\/etc\/named.iscdlv.key\"<\/span><span class=\"token punctuation\">;<\/span>\r\n\r\n    managed<span class=\"token operator\">-<\/span>keys<span class=\"token operator\">-<\/span>directory <span class=\"token double-quoted-string string\">\"\/var\/named\/dynamic\"<\/span><span class=\"token punctuation\">;<\/span>\r\n\r\n    pid<span class=\"token operator\">-<\/span>file <span class=\"token double-quoted-string string\">\"\/run\/named\/named.pid\"<\/span><span class=\"token punctuation\">;<\/span>\r\n    session<span class=\"token operator\">-<\/span>keyfile <span class=\"token double-quoted-string string\">\"\/run\/named\/session.key\"<\/span><span class=\"token punctuation\">;<\/span>\r\n<span class=\"token punctuation\">}<\/span><span class=\"token punctuation\">;<\/span>\r\n\r\nlogging <span class=\"token punctuation\">{<\/span>\r\n        channel default_debug <span class=\"token punctuation\">{<\/span>\r\n                file <span class=\"token double-quoted-string string\">\"data\/named.run\"<\/span><span class=\"token punctuation\">;<\/span>\r\n                severity dynamic<span class=\"token punctuation\">;<\/span>\r\n        <span class=\"token punctuation\">}<\/span><span class=\"token punctuation\">;<\/span>\r\n<span class=\"token punctuation\">}<\/span><span class=\"token punctuation\">;<\/span>\r\n\r\nzone <span class=\"token double-quoted-string string\">\".\"<\/span> <span class=\"token constant\">IN<\/span> <span class=\"token punctuation\">{<\/span>\r\n    type hint<span class=\"token punctuation\">;<\/span>\r\n    file <span class=\"token double-quoted-string string\">\"named.ca\"<\/span><span class=\"token punctuation\">;<\/span>\r\n<span class=\"token punctuation\">}<\/span><span class=\"token punctuation\">;<\/span>\r\n\r\n<span class=\"token keyword\">include<\/span> <span class=\"token double-quoted-string string\">\"\/etc\/named.rfc1912.zones\"<\/span><span class=\"token punctuation\">;<\/span> <span class=\"token shell-comment comment\">#\u6269\u5c55\u914d\u7f6e\u6587\u4ef6<\/span>\r\n<span class=\"token keyword\">include<\/span> <span class=\"token double-quoted-string string\">\"\/etc\/named.root.key\"<\/span><span class=\"token punctuation\">;<\/span><\/code><\/pre>\n<ul>\n<li>\u5411\u62d3\u5c55\u914d\u7f6e\u6587\u4ef6\u52a0\u5165\u60a8\u7684\u57df\u540d\u4fe1\u606f\uff1a\/etc\/named.rfc1912.zones<\/li>\n<\/ul>\n<pre class=\"lang:default decode:true\">zone \"szlz.com\" IN {\r\n        type master;\r\n        file \"sway.com.cn.zone\";\r\n};<\/pre>\n<ul>\n<li>\u5728\/var\/named\/ #zone\u76ee\u5f55\u521b\u5efa\u60a8\u7684\u57df\u540d\u89e3\u6790\u6587\u4ef6sway.com.cn.zone\uff1a<\/li>\n<\/ul>\n<pre class=\"lang:default decode:true\">$TTL 1D\r\n@       IN SOA  @ dns.sway.com.cn. (\r\n                                        0       ; serial\r\n                                        1D      ; refresh\r\n                                        1H      ; retry\r\n                                        1W      ; expire\r\n                                        3H )    ; minimum\r\n@       NS      dns\r\ndns     A       192.168.122.254\r\nweb1    A       192.168.122.8\r\nmail    A       192.168.122.2\r\n        MX      10 mail.sway.com.cn.\r\ntest1   A       192.168.0.71<\/pre>\n<ul>\n<li>\u4f7f\u7528named-checkzone\u547d\u4ee4\u68c0\u6d4b\u60a8\u7684\u914d\u7f6e\u6587\u4ef6\uff1a<\/li>\n<\/ul>\n<pre class=\"lang:default decode:true\">named-checkzone\r\nnamed-checkzone sway.com.cn \/var\/named\/sway.com.cn.zone<\/pre>\n<ul>\n<li>\u542f\u52a8bind\u5e76\u5f00\u673a\u81ea\u542f\u52a8<\/li>\n<\/ul>\n<pre class=\"lang:default decode:true \">systemctl start named\r\nsystemctl enable named<\/pre>\n<p>&nbsp;<\/p>\n<h1>2\u3001\u914d\u7f6elinux\u5ba2\u6237\u7aef\u7684dns<\/h1>\n<p>\u4fee\u6539\/etc\/resolv.conf\u6587\u4ef6\u8bbe\u7f6edns\u670d\u52a1\u5668\uff1a<\/p>\n<pre class=\"lang:default decode:true \">nameserver 192.168.122.254\r\nnameserver 114.114.114.114<\/pre>\n<p>&nbsp;<\/p>\n<h1>3\u3001\u914d\u7f6ewindows\u5ba2\u6237\u7aef\u7684dns<\/h1>\n<p>\u4fee\u6539\u7f51\u5361\u5c5e\u6027\uff0c\u8bbe\u7f6eipv4\u534f\u8bae\u4e2d\u7684dns\u670d\u52a1\u5668\u4e3a\uff1a192.168.122.254<\/p>\n<h1>4\u3001\u4f7f\u7528ping\u547d\u4ee4\u6d4b\u8bd5<\/h1>\n<p>\u4f7f\u7528ping dns.sway.com.cn\u67e5\u770b\u89e3\u6790\u662f\u5426\u6b63\u786e\u5373\u53ef<\/p>\n<h1>5\u3001\u5f00\u542f\u9632\u706b\u5899(\u5982\u679c\u6709\u5f00\u9632\u706b\u5899\u7684\u8bdd)<\/h1>\n<pre class=\"lang:default decode:true \">systemctl stop firewalld\r\nsystemctl disable firewalld\r\nsystemctl status firewalld\r\niptables -A INPUT -p tcp --dport 53 -j ACCEPT<\/pre>\n<p>&nbsp;<\/p>\n","protected":false},"excerpt":{"rendered":"<p>\u5728\u505aAPP\u5f00\u53d1\u6d4b\u8bd5\uff0c\u7531\u4e8e\u624b\u673a\u4e0d\u80fd\u50cf\u7535\u8111\u4fee\u6539host\u6587\u4ef6\u90a3\u6837\u65b9\u4fbf\u7684\u6620\u5c04dns\uff0c\u6240\u4ee5 &hellip; <a href=\"http:\/\/blog.sway.com.cn\/?p=713\">Continue reading <span class=\"meta-nav\">&rarr;<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[4],"tags":[219],"class_list":["post-713","post","type-post","status-publish","format-standard","hentry","category-linux","tag-dns"],"_links":{"self":[{"href":"http:\/\/blog.sway.com.cn\/index.php?rest_route=\/wp\/v2\/posts\/713","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/blog.sway.com.cn\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/blog.sway.com.cn\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/blog.sway.com.cn\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"http:\/\/blog.sway.com.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=713"}],"version-history":[{"count":6,"href":"http:\/\/blog.sway.com.cn\/index.php?rest_route=\/wp\/v2\/posts\/713\/revisions"}],"predecessor-version":[{"id":719,"href":"http:\/\/blog.sway.com.cn\/index.php?rest_route=\/wp\/v2\/posts\/713\/revisions\/719"}],"wp:attachment":[{"href":"http:\/\/blog.sway.com.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=713"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/blog.sway.com.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=713"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/blog.sway.com.cn\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=713"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}