BIND9 - Master / Slave DNS 基本設定備忘
* named.conf 重點內容* Slave 主機向 Master 要求傳送 Zone File 的時機
* Zone File 檔案結構
named.conf 重點內容
Master:
vi /etc/named.conf
acl "trusted" { 127.0.0.1; 192.168.1.0/24; };
options {
allow-recursion { trusted; }; //避免變成 Open DNS
allow-transfer { none; }; //預設禁止 Zone Transfer
notify no; //預設不通知轄區 DNS Server
};
zone "mydomain.com" in {
type master;
file "mydomain.com.zone";
allow-transfer { slave.ip.address; };
notify yes;
};
zone "1.168.192.in-addr.arpa" in {
type master;
file "192.168.1.zone";
allow-transfer { slave.ip.address; };
notify yes;
};
Slave:
vi /etc/named.conf
zone "mydomain.com" in {
type slave;
file "slave/mydomain.com.zone";
masters { master.ip.address; };
};
zone "1.168.192.in-addr.arpa" in {
type slave;
file "slave/192.168.1.zone";
masters { master.ip.address; };
};
Slave 主機向 Master 要求傳送 Zone File 的時機
1. master 主機上的 named 啟動、Reload 時, 發送 dns notify 信號通知 NS 主機 (除本身外) 比對 zone file serial, 且 master serial 大於 slave serial 時.
2. slave 主機上的 named 啟動時, 發現 master serial 大於 slave serial, 或無 zone file 存在時.
3. slave 主機每隔 refresh 時間, 向 master 查詢 zone file serial, 發現 master serial 大於 slave serial 時.
Zone File 檔案結構
Forward Lookup / 正解
$TTL 1W
@ IN SOA master_dns_fqdn zone_admin (
2006092001 ;serial
2D ;refresh
4H ;retry
6W ;expire
1W ) ;TTL
IN NS master_dns_fqdn
IN NS slave_dns_fqdn
IN MX 10 mail_server_fqdn
master_dns_hostname IN A ip_address
slave_dns_hostname IN A ip_address
mail_server_hostname IN A ip_address
some_hostname IN CNAME another_hostname_has_A_record
Reverse Lookup / 反解
$TTL 1W
@ IN SOA master_dns_fqdn zone_admin (
2006092001 ;serial
2D ;refresh
4H ;retry
6W ;expire
1W ) ;TTL
IN NS master_dns_fqdn
entry_in_*.in-addr.arpa IN PTR some_host_fqdn
ex1. zone: 20.10.150.in-addr.arpa
in the zone file: 1 IN PTR ms1.mydomain.com
retult: ms1.mydomain.com=150.10.20.1
ex2. zone: 10.150.in-addr.arpa
in the zone file: 2.20 IN PTR ms1.mydomain.com
retult: ms1.mydomain.com=150.10.20.2
Ref: Microsoft Support - Description of DNS Reverse Lookups
Root Domain Zone File: [url]ftp://ftp.internic.net/domain/named.root[/url] lz怎么看起来都是繁体呢！
台湾人么！呵呵 The Mainland China
Work needs.
页:
[1]