نصب سرور DNS در CentOS 7

1yum install bind bind-utils -y

1vi /etc/named.conf

1//2// named.conf3//4// Provided by Red Hat bind package to configure the ISC BIND named(8) DNS5// server as a caching only nameserver (as a localhost DNS resolver only).6//7// See /usr/share/doc/bind*/sample/ for example named configuration files.8//9options {10    listen-on port 53 { 127.0.0.1; <strong>192.168.1.101;</strong>}; <strong>### Master DNS IP ###</strong>11#    listen-on-v6 port 53 { ::1; };12    directory     "/var/named";13    dump-file     "/var/named/data/cache_dump.db";14    statistics-file "/var/named/data/named_stats.txt";15    memstatistics-file "/var/named/data/named_mem_stats.txt";16    allow-query     { localhost; <strong>192.168.1.0/24;</strong>}; <strong>### IP Range ###</strong>17    allow-transfer{ localhost; <strong>192.168.1.102;</strong> };   <strong>### Slave DNS IP ###</strong>18    /* 19     - If you are building an AUTHORITATIVE DNS server, do NOT enable recursion.20     - If you are building a RECURSIVE (caching) DNS server, you need to enable 21       recursion. 22     - If your recursive DNS server has a public IP address, you MUST enable access 23       control to limit queries to your legitimate users. Failing to do so will24       cause your server to become part of large scale DNS amplification 25       attacks. Implementing BCP38 within your network would greatly26       reduce such attack surface 27    */28    recursion yes;2930    dnssec-enable yes;31    dnssec-validation yes;32    dnssec-lookaside auto;3334    /* Path to ISC DLV key */35    bindkeys-file "/etc/named.iscdlv.key";36    managed-keys-directory "/var/named/dynamic";37    pid-file "/run/named/named.pid";38    session-keyfile "/run/named/session.key";39};4041logging {42        channel default_debug {43                file "data/named.run";44                severity dynamic;45        };46};4748zone "." IN {49    type hint;50    file "named.ca";51};5253<strong>zone "unixmen.local" IN {54type master;55file "forward.unixmen";56allow-update { none; };57};58zone "1.168.192.in-addr.arpa" IN {59type master;60file "reverse.unixmen";61allow-update { none; };62};</strong>6364include "/etc/named.rfc1912.zones";65include "/etc/named.root.key";</pre>66<pre>

1vi /var/named/forward.ariaservice

1$TTL 864002@   IN  SOA     masterdns.ariaservice.local. root.ariaservice.local. (3        2011071001  ;Serial4        3600        ;Refresh5        1800        ;Retry6        604800      ;Expire7        86400       ;Minimum TTL8)9@       IN  NS          masterdns.ariaservice.local.10@       IN  NS          secondarydns.ariaservice.local.11@       IN  A           192.168.1.10112@       IN  A           192.168.1.10213@       IN  A           192.168.1.10314masterdns       IN  A   192.168.1.10115secondarydns    IN  A   192.168.1.10216client          IN  A   192.168.1.103

1vi /var/named/reverse.ariaservice

1</pre>2<pre>$TTL 864003@   IN  SOA     masterdns.unixmen.local. root.unixmen.local. (4        2011071001  ;Serial5        3600        ;Refresh6        1800        ;Retry7        604800      ;Expire8        86400       ;Minimum TTL9)10@       IN  NS          masterdns.unixmen.local.11@       IN  NS          secondarydns.unixmen.local.12@       IN  A           192.168.1.10113@       IN  A           192.168.1.10214@       IN  A           192.168.1.10315masterdns       IN  A   192.168.1.10116secondarydns    IN  A   192.168.1.10217client          IN  A   192.168.1.103</pre>18<pre>

1systemctl enable named2systemctl start named

1firewall-cmd --permanent --add-port=53/tcp2firewall-cmd --permanent --add-port=53/udp

1firewall-cmd --reload

1chgrp named -R /var/named2chown -v root:named /etc/named.conf3restorecon -rv /var/named4restorecon /etc/named.conf

1named-checkconf /etc/named.conf

1named-checkzone ariaservice.local /var/named/forward.ariaservice

1zone ariaservice.local/IN: loaded serial 20110710012OK

1named-checkzone ariaservice.local /var/named/reverse.ariaservice

1zone ariaservice.local/IN: loaded serial 20110710012OK

1vi /etc/sysconfig/network-scripts/ifcfg-enp0s3

1TYPE=”Ethernet”2BOOTPROTO=”none”3DEFROUTE=”yes”4IPV4_FAILURE_FATAL=”no”5IPV6INIT=”yes”6IPV6_AUTOCONF=”yes”7IPV6_DEFROUTE=”yes”8IPV6_FAILURE_FATAL=”no”9NAME=”enp0s3”10UUID=”5d0428b3-6af2-4f6b-9fe3-4250cd839efa”11ONBOOT=”yes”12HWADDR=”08:00:27:19:68:73”13IPADDR0=”192.168.1.101”14PREFIX0=”24”15GATEWAY0=”192.168.1.1”16DNS=”192.168.1.101”17IPV6_PEERDNS=”yes”18IPV6_PEERROUTES=”yes”

1vi /etc/resolv.conf

1nameserver      192.168.1.101

1systemctl restart network

1dig masterdns.ariaservice.local

1</pre>2<pre>; <<>> DiG 9.9.4-RedHat-9.9.4-14.el7 <<>> masterdns.unixmen.local3;; global options: +cmd4;; Got answer:5;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 251796;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 278;; OPT PSEUDOSECTION:9; EDNS: version: 0, flags:; udp: 409610;; QUESTION SECTION:11;masterdns.unixmen.local.    IN    A1213;; ANSWER SECTION:14masterdns.unixmen.local. 86400    IN    A    192.168.1.1011516;; AUTHORITY SECTION:17unixmen.local.        86400    IN    NS    secondarydns.unixmen.local.18unixmen.local.        86400    IN    NS    masterdns.unixmen.local.1920;; ADDITIONAL SECTION:21secondarydns.unixmen.local. 86400 IN    A    192.168.1.1022223;; Query time: 0 msec24;; SERVER: 192.168.1.101#53(192.168.1.101)25;; WHEN: Wed Aug 20 16:20:46 IST 201426;; MSG SIZE  rcvd: 125

1nslookup ariaservice.local

1</pre>2<pre>Server:        192.168.1.1013Address:    192.168.1.101#5345Name:    unixmen.local6Address: 192.168.1.1037Name:    unixmen.local8Address: 192.168.1.1019Name:    unixmen.local10Address: 192.168.1.102</pre>11<pre>

1yum install bind bind-utils -y

1vi /etc/named.conf

1//2// named.conf3//4// Provided by Red Hat bind package to configure the ISC BIND named(8) DNS5// server as a caching only nameserver (as a localhost DNS resolver only).6//7// See /usr/share/doc/bind*/sample/ for example named configuration files.8//9options {10listen-on port 53 { 127.0.0.1; 192.168.1.102; };11listen-on-v6 port 53 { ::1; };12directory "/var/named";13dump-file "/var/named/data/cache_dump.db";14statistics-file "/var/named/data/named_stats.txt";15memstatistics-file "/var/named/data/named_mem_stats.txt";16allow-query     { localhost; 192.168.1.0/24; };17.18.19.20.21zone "." IN {22type hint;23file "named.ca";24};25zone "ariaservice.local" IN {26type slave;27file "slaves/ariaservice.fwd";28masters { 192.168.1.101; };29};30zone "1.168.192.in-addr.arpa" IN {31type slave;32file "slaves/ariaservice.rev";33masters { 192.168.1.101; };34};35include "/etc/named.rfc1912.zones";36include "/etc/named.root.key";

1systemctl enable named2systemctl start named

1ls /var/named/slaves/

1ariaservice.fwd  ariaservice.rev

1vi /etc/sysconfig/network-scripts/ifcfg-enp0s3

1TYPE="Ethernet"2BOOTPROTO="none"3DEFROUTE="yes"4IPV4_FAILURE_FATAL="no"5IPV6INIT="yes"6IPV6_AUTOCONF="yes"7IPV6_DEFROUTE="yes"8IPV6_FAILURE_FATAL="no"9NAME="enp0s3"10UUID="5d0428b3-6af2-4f6b-9fe3-4250cd839efa"11ONBOOT="yes"12HWADDR="08:00:27:19:68:73"13IPADDR0="192.168.1.102"14PREFIX0="24"15GATEWAY0="192.168.1.1"16DNS1="192.168.1.101"17DNS2="192.168.1.102"18IPV6_PEERDNS="yes"19IPV6_PEERROUTES="yes"

1vi /etc/resolv.conf

1nameserver 192.168.1.1012nameserver 192.168.1.102

1systemctl restart network

1firewall-cmd --permanent --add-port=53/tcp

1firewall-cmd –reload

1chgrp named -R /var/named2chown -v root:named /etc/named.conf3restorecon -rv /var/named4restorecon /etc/named.conf

1dig masterdns.ariaservice.local

1</pre>2<pre>; <<>> DiG 9.9.4-RedHat-9.9.4-14.el7 <<>> masterdns.unixmen.local3;; global options: +cmd4;; Got answer:5;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 182046;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 278;; OPT PSEUDOSECTION:9; EDNS: version: 0, flags:; udp: 409610;; QUESTION SECTION:11;masterdns.unixmen.local.    IN    A1213;; ANSWER SECTION:14masterdns.unixmen.local. 86400    IN    A    192.168.1.1011516;; AUTHORITY SECTION:17unixmen.local.        86400    IN    NS    masterdns.unixmen.local.18unixmen.local.        86400    IN    NS    secondarydns.unixmen.local.1920;; ADDITIONAL SECTION:21secondarydns.unixmen.local. 86400 IN    A    192.168.1.1022223;; Query time: 0 msec24;; SERVER: 192.168.1.102#53(192.168.1.102)25;; WHEN: Wed Aug 20 17:04:30 IST 201426;; MSG SIZE  rcvd: 125</pre>27<pre>

1dig secondarydns.ariaservice.local

1</pre>2<pre>; <<>> DiG 9.9.4-RedHat-9.9.4-14.el7 <<>> secondarydns.unixmen.local3;; global options: +cmd4;; Got answer:5;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 608196;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 278;; OPT PSEUDOSECTION:9; EDNS: version: 0, flags:; udp: 409610;; QUESTION SECTION:11;secondarydns.unixmen.local.    IN    A1213;; ANSWER SECTION:14secondarydns.unixmen.local. 86400 IN    A    192.168.1.1021516;; AUTHORITY SECTION:17unixmen.local.        86400    IN    NS    masterdns.unixmen.local.18unixmen.local.        86400    IN    NS    secondarydns.unixmen.local.1920;; ADDITIONAL SECTION:21masterdns.unixmen.local. 86400    IN    A    192.168.1.1012223;; Query time: 0 msec24;; SERVER: 192.168.1.102#53(192.168.1.102)25;; WHEN: Wed Aug 20 17:05:50 IST 201426;; MSG SIZE  rcvd: 125</pre>27<pre>

1nslookup ariaservice.local

1</pre>2<pre>Server:        192.168.1.1023Address:    192.168.1.102#5345Name:    unixmen.local6Address: 192.168.1.1017Name:    unixmen.local8Address: 192.168.1.1039Name:    unixmen.local10Address: 192.168.1.102</pre>11<pre>

1vi /etc/resolv.conf

1# Generated by NetworkManager2search ariaservice.local3nameserver 192.168.1.1014nameserver 192.168.1.102

1dig masterdns.ariaservice.local2dig secondarydns.ariaservice.local3dig client.ariaservice.local4nslookup ariaservice.local