构建智能DNS域名解析服务器

[root@localhost ~]# vim /etc/named.conf
[root@localhost ~]# cd /var/named/
[root@localhost named]# cat /etc/named.conf
options {
directory "/var/named";
};

zone "crushlinux.com" IN {
type master;
file "crushlinux.zheng";
};

[root@localhost named]# ls
data     named.ca     named.localhost slaves
dynamic named.empty named.loopback
[root@localhost named]# vim crushlinux.zheng
[root@localhost named]# cat crushlinux.zheng
$TTL 86400
@ IN SOA crushlinux.com. admin.crushlinux.com. (
20190822
3H
10M
1W
1D
)
IN NS ns.crushlinux.com.
IN MX 10   mail.crushlinux.com.
ns IN A 192.168.116.66
mail IN A 192.168.116.67
www IN A 192.168.116.113
[root@localhost named]# chgrp named crushlinux.zheng
[root@localhost named]# systemctl restart named
[root@localhost named]# cat /etc/resolv.conf
# Generated by NetworkManager
nameserver 202.106.0.20
nameserver 192.168.116.68
[root@localhost named]# nslookup www.crushlinux.com
Server:  192.168.116.68
Address: 192.168.116.68#53

Name: www.crushlinux.com
Address: 192.168.116.113
[root@localhost named]# cp /etc/sysconfig/network-scripts/ifcfg-ens32 /etc/sysconfig/network-scripts/ifcfg-ens34
[root@localhost named]# vim /etc/sysconfig/network-scripts/ifcfg-ens34
[root@localhost named]# cat /etc/sysconfig/network-scripts/ifcfg-ens34
TYPE="Ethernet"
PROXY_METHOD="none"
BROWSER_ONLY="no"
BOOTPROTO="static"
DEFROUTE="yes"
IPV4_FAILURE_FATAL="no"
IPV6INIT="yes"
IPV6_AUTOCONF="yes"
IPV6_DEFROUTE="yes"
IPV6_ADDR_GEN_MODE="stable-privacy"
NAME="ens34"
DEVICE="ens34"
ONBOOT="yes"
IPADDR=172.16.1.1
NETMASK=255.255.255.0
[root@localhost named]# systemctl restart network
[root@localhost named]# cd
[root@localhost ~]# ip a
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 scope host lo
       valid_lft forever preferred_lft forever
    inet6 ::1/128 scope host
       valid_lft forever preferred_lft forever
2: ens32: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP group default qlen 1000
    link/ether 00:0c:29:47:77:a6 brd ff:ff:ff:ff:ff:ff
    inet 192.168.116.68/24 brd 192.168.116.255 scope global noprefixroute ens32
       valid_lft forever preferred_lft forever
    inet6 fe80::da68:b193:b117:d2a2/64 scope link noprefixroute
       valid_lft forever preferred_lft forever
3: ens34: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP group default qlen 1000
    link/ether 00:0c:29:47:77:b0 brd ff:ff:ff:ff:ff:ff
    inet 172.16.1.1/24 brd 172.16.1.255 scope global noprefixroute ens34
       valid_lft forever preferred_lft forever
    inet6 fe80::d304:a5a1:9979:c965/64 scope link noprefixroute
       valid_lft forever preferred_lft forever
[root@localhost ~]# vim /etc/hosts
[root@localhost ~]# cat /etc/hosts
127.0.0.1   localhost localhost.localdomain localhost4 localhost4.localdomain4
::1         localhost localhost.localdomain localhost6 localhost6.localdomain6
192.168.116.68 ns.crushlinux.com

首先将主机的网卡一张设置为V8net模式，一张设置为仅主机模式
配置完后在windos测试机进行测试
第一次测试将windos主机设置为V8net桥接模式
设置IPV4的IP地址
ip 192.168.116.100
netmast 255.255.255.0
默认网关 192.168.116.1
DNS 192.168.116.68
在终端中进行测试
ping www.baidu.com
ping 192.168.116.68
nslookup www.crushlinux.com
第二次测试将windos主机设置为V2仅主机模式 ,在虚拟机中
设置IPV4的IP地址
ip 172.16.1.1
netmast 255.255.255.0
在终端中进行测试
ping www.baidu.com //ping不通内网是不连接网络的
ping 172.16.1.1

接着在虚拟机进行以下操作（添加外网设置）
第一种方法指定
[root@ns ~]# vim /etc/named.conf
[root@ns ~]# cat /etc/named.conf
options {
directory "/var/named";
};
view "LAN" {
match-clients { 192.168.116.0/24; };
zone "crushlinux.com" IN {
type master;
file "crushlinux.zheng.lan";
};
};
view "WAN" {
match-clients { any; };
zone "crushlinux.com" IN {
type master;
file "crushlinux.zheng.wan";
};
};

[root@localhost named]# vim crushlinux.zheng.lan
[root@localhost named]# cat crushlinux.zheng.lan
$TTL 86400
@ IN SOA crushlinux.com. admin.crushlinux.com. (
20190822
3H
10M
1W
1D
)
IN NS ns.crushlinux.com.
IN MX 10   mail.crushlinux.com.
ns IN A 192.168.116.66
mail IN A 192.168.116.67
www IN A 192.168.116.113
[root@localhost named]# vim crushlinux.zheng.van
[root@localhost named]# cat crushlinux.zheng.van
$TTL 86400
@ IN SOA crushlinux.com. admin.crushlinux.com. (
20190822
3H
10M
1W
1D
)
IN NS ns.crushlinux.com.
IN MX 10     mail.crushlinux.com.
ns IN A 171.16.1.1
mail IN A 171.16.1.1
www IN A 171.16.1.1
[root@ns ~]# chgrp named /var/named/crushlinux.zheng.*
[root@ns ~]# ll -l /var/named/crushlinux.zheng.*
-rw-r--r-- 1 root named 212 8月 22 15:42 /var/named/crushlinux.zheng.lan
-rw-r--r-- 1 root named 212 8月 22 14:54 /var/named/crushlinux.zheng.wan
[root@ns ~]# systemctl start named

接着在windods客户机里面进行测试，首先用net模式进行测试
设置IPV4的IP地址
ip 192.168.116.100
netmast 255.255.255.0
默认网关 192.168.116.1
DNS 192.168.116.68
在终端中进行测试
ping www.baidu.com
ping 192.168.116.68
nslookup www.crushlinux.com
接着将Windows客户机的模式改成VM2仅主机模式
设置IPV4的IP地址
ip 172.16.1.2
netmast 255.255.255.0
DNS 172.16.1.1
接着在Windows客户机的终端里进行测试
nslookup www.crushlinux.com

[root@ns ~]# vim /etc/named/lan.txt
[root@ns ~]# cat /etc/named/lan.txt
acl lan {
192.168.116.0/24;
192.168.100.0/24;
};
第二种方法适合内网网段比较多，或者有时需要更新操作即计划任务
[root@ns ~]# vim /etc/named.conf
[root@ns ~]# cat /etc/named.conf
options {
directory "/var/named";
};
include
view "LAN" {
match-clients { 192.168.116.0/24; };
zone "crushlinux.com" IN {
type master;
file "crushlinux.zheng.lan";
};
};
view "WAN" {
match-clients { any; };
zone "crushlinux.com" IN {
type master;
file "crushlinux.zheng.wan";
};
};
[root@ns ~]# vim /etc/named/lan.txt
[root@ns ~]# cat /etc/named/lan.txt
acl lan {
192.168.116.0/24;
192.168.100.0/24;
............
............
};
[root@ns ~]# vim /etc/named/wan.txt
[root@ns ~]# cat /etc/named/wan.txt
acl wan {
any;
};
[root@ns ~]# systemctl start named

构建智能DNS域名解析服务器

猜你喜欢