在linux系统下安装DNS服务器bind

发布时间：2014-09-05 16:05:55作者：知识屋

BIND是一种开源的DNS（Domain Name System）协议的实现，包含对域名的查询和响应所需的所有软件。它是互联网上最广泛使用的一种DNS服务器，下面讲解在linux系统下如何安装DNS服务器bind。

1.从http://www.isc.org/products/BIND/bind9.html下载bind9的源文件。目前版本为9 .23，源文件为bind-9.2.3.tar.gz。

2.将源文件bind-9.2.3.tar.gz置于/usr/local/src目录下。

3.解压缩源文件bind-9.2.3.tar.gz

# tar -xzvf bind-9.2.3.tar.gz -C /usr/local/src

4.进入安装目录 www.zhishiwu.com

# cd bind-9.2.3

5.配置、编译

# ./configure

# make

6.安装

# make install

7.生成的可执行文件位于/usr/local/sbin目录下。最重要的可执行文件为named和rndc。

8.创建链接

# ln -s /usr/local/sbin/rndc /usr/sbin/rndc

# ln -s /usr/local/sbin/named /usr/sbin/named

9.创建rndc.conf配置文件。

# /usr/local/sbin/rndc-confgen > /etc/rndc.conf

# cat /etc/rndc.conf

输出为：

# Start of rndc.conf

key "rndc-key" {

algorithm hmac-md5;

secret "y9xvvfQjdWv9f/Fo7wquBg==";

};

options {

default-key "rndc-key";

default-server 127.0.0.1;

default-port 953;

};

# End of rndc.conf

# Use with the following in named.conf, adjusting the allow list as needed:

# key "rndc-key" {

# algorithm hmac-md5;

# secret "y9xvvfQjdWv9f/Fo7wquBg==";

# }; www.zhishiwu.com

# controls {

# inet 127.0.0.1 port 953

# allow { 127.0.0.1; } keys { "rndc-key"; };

# };

# End of named.conf

10.创建rndc.key文件。将rndc.conf文件中注释部分拷贝生成如下文件：

# vi /etc/rndc.key

key "rndc-key" {

algorithm hmac-md5;

secret "y9xvvfQjdWv9f/Fo7wquBg==";

};

controls {

inet 127.0.0.1 port 953

allow { 127.0.0.1; } keys { "rndc-key"; };

};

检查rndc是否正常工作:

#/usr/local/sbin/named -g

Jan 11 11:56:45.075 starting BIND 9.2.3 -g

Jan 11 11:56:45.076 using 1 CPU

Jan 11 11:56:45.079 loading configuration from '/etc/named.conf'

......

#/usr/local/sbin/rndc status

11.创建named.conf配置文件。

# vi /etc/named.conf

// generated by named-bootconf.pl

options { www.zhishiwu.com

directory "/var/named";

* If there is a firewall between you and nameservers you want

* to talk to, you might need to uncomment the query-source

* directive below. Previous versions of BIND always asked

* questions using port 53, but BIND 8.1 uses an unprivileged

* port by default.

// query-source address * port 53;

};

// a caching only nameserver config

zone "." IN {

type hint;

file "named.root";

};

zone "localhost" IN {

type master;

file "localhost.zone";

allow-update { none; };

};

zone "0.0.127.in-addr.arpa" IN {

type master;

file "named.local";

allow-update { none; };

}; www.zhishiwu.com

zone "domain1.net" IN { //新加domain1.net的域

type master;

file "domain1.net.zone";

allow-update { none; };

};

zone "252.177.61.in-addr.arpa" IN { //新加域的反向解析

type master;

file "named.61.177.252";

allow-update { none; };

};

include "/etc/rndc.key";

12.创建/var/named目录

# mkdir /var/named

# cd /var/named

13.匿名登录到ftp站点FTP.RS.INTERNIC.NET，获取/domain目录下的named.root文件和named.ca文件，将该文件置于/var/named目录下。

14.创建localhost.zone文件

# vi /var/named/localhost.zone

$TTL 86400

$ORIGIN localhost.

@ 1D IN SOA @ root (

42 ; serial (d. adams)

3H ; refresh

15M ; retry

1W ; expiry

1D ) ; minimum

1D IN NS @

1D IN A 127.0.0.1

15.创建named.local文件

# vi named.local

$TTL 86400

@ IN SOA localhost. root.localhost. (

1997022700 ; Serial www.zhishiwu.com

28800 ; Refresh

14400 ; Retry

3600000 ; Expire

86400 ) ; Minimum

IN NS localhost.

1 IN PTR localhost.

16.创建domain1.net.zone文件

# vi ycmail.net.zone

$TTL 86400

@ IN SOA localhost. root.localhost. (

2003061800 ; Serial

28800 ; Refresh

14400 ; Retry

3600000 ; Expire

86400 ) ; Minimum

IN NS localhost.

mail IN A 61.177.252.34

www IN CNAME mail

17.创建named.61.177.252文件

# vi named.61.177.252

$TTL 86400

@ IN SOA localhost. root.localhost. (

2003061800 ; Serial

28800 ; Refresh

14400 ; Retry

3600000 ; Expire

86400 ) ; Minimum

IN NS localhost.

34 IN PTR mail.domain1.net.

18.创建启动脚本

# vi /etc/rc.d/init.d/named

#!/bin/sh www.zhishiwu.com

# named This shell script takes care of starting and stopping

# named (BIND DNS server).

# chkconfig: 345 55 45

# description: named (BIND) is a Domain Name Server (DNS)

# that is used to resolve host names to IP addresses.

# probe: true

# Source function library.

. /etc/rc.d/init.d/functions

# Source networking configuration.

. /etc/sysconfig/network

# Check that networking is up.

[ $ = "no" ] && exit 0

[ -f /usr/sbin/named ] || exit 0

[ -f /etc/named.conf ] || exit 0

# See how we were called.

case "" in

start)

# Start daemons.

echo -n "Starting named: "

daemon named

echo

touch /var/lock/subsys/named

;;

stop)

# Stop daemons.

echo -n "Shutting down named: "

killproc named

rm -f /var/lock/subsys/named

echo www.zhishiwu.com

;;

status)

/usr/sbin/rndc status

exit $?

;;

restart)

stop

start

exit $?

;;

reload)

/usr/sbin/rndc reload

exit $?

;;

probe)

# named knows how to reload intelligently; we don't want linuxconf

# to offer to restart every time

/usr/sbin/rndc reload >/dev/null 2>&1 || echo start

exit 0

;;

echo "Usage: named "

exit 1

esac

exit 0

19.将/etc/rc.d/init.d/named变成可执行文件。

# chmod 755 /etc/rc.d/init.d/named

20.创建启动脚本symbollink

# ln -s /etc/rc.d/init.d/named /etc/rc.d/rc0.d/K45named

# ln -s /etc/rc.d/init.d/named /etc/rc.d/rc1.d/K45named

# ln -s /etc/rc.d/init.d/named /etc/rc.d/rc2.d/K45named

# ln -s /etc/rc.d/init.d/named /etc/rc.d/rc3.d/S55named

# ln -s /etc/rc.d/init.d/named /etc/rc.d/rc4.d/S55named

# ln -s /etc/rc.d/init.d/named /etc/rc.d/rc5.d/S55named

# ln -s /etc/rc.d/init.d/named /etc/rc.d/rc6.d/K45named

21.启动bind9 www.zhishiwu.com

# /etc/rc.d/init.d/named start

停止bind9

# /etc/rc.d/init.d/named stop

查看状态

# /etc/rc.d/init.d/named status

22.检查配置文件及域文件

# /usr/local/sbin/named-checkconf

# /usr/local/sbin/named-checkzone domain1.net /var/named/domain1.net.zone

本文来自护卫神网

（免责声明：文章内容如涉及作品内容、版权和其它问题，请及时与我们联系，我们将在第一时间删除内容，文章内容仅供参考）

上一篇:Linux任务计划crontab

下一篇:Linux TCP/IP调优参数

软件推荐

更多 >

游戏推荐

更多 >

精选栏目

手机游戏

手机软件

电脑软件

猜你喜欢

生活奇迹铃声即时财经资讯换装区块链腾讯休闲医疗辅助街机武侠不上征信系统投注体育闯关学习健康低息三国策略解谜角色唱歌吃鸡射击视频抖音导航战斗剧情西游网易借钱沙盒个人借贷办公理财赛车竞速宫斗回合旅游拍照模拟英语口语挂机

在linux系统下安装DNS服务器bind

相关知识

软件推荐

游戏推荐

精选栏目

win10

YLMF—OS

Win—XP

windows8

linux

windows7

热门推荐

手机游戏

手机软件

电脑软件

猜你喜欢