« »
2008-02-031.Application

634

BIND9 – Master / Slave DNS 基本設定備忘

  • named.conf 重點內容
  • Slave 主機向 Master 要求傳送 Zone File 的時機
  • Zone File 檔案結構

named.conf 重點內容

Master:

vi /etc/named.conf

acl “trusted” { 127.0.0.1; 192.168.1.0/24; };

options {

allow-recursion { trusted; }; //避免變成 Open DNS
allow-transfer { none; }; //預設禁止 Zone Transfer
notify no; //預設不通知轄區 DNS Server

};

zone “mydomain.com” in {

type master;
file “mydomain.com.zone”;
allow-transfer { slave.ip.address; };
notify yes;

};

zone “1.168.192.in-addr.arpa” in {

type master;
file “192.168.1.zone”;
allow-transfer { slave.ip.address; };
notify yes;

};

Slave:

vi /etc/named.conf

zone “mydomain.com” in {

type slave;
file “slave/mydomain.com.zone”;
masters { master.ip.address; };

};

zone “1.168.192.in-addr.arpa” in {

type slave;
file “slave/192.168.1.zone”;
masters { master.ip.address; };

};

Slave 主機向 Master 要求傳送 Zone File 的時機

  1. master 主機上的 named 啟動、Reload 時, 發送 dns notify 信號通知 NS 主機 (除本身外) 比對 zone file serial, 且 master serial 大於 slave serial 時.
  2. slave 主機上的 named 啟動時, 發現 master serial 大於 slave serial, 或無 zone file 存在時.
  3. slave 主機每隔 refresh 時間, 向 master 查詢 zone file serial, 發現 master serial 大於 slave serial 時.

Zone File 檔案結構

Forward Lookup / 正解

$TTL 1W @			IN	SOA	master_dns_fqdn zone_admin ( 					2006092001	;serial 					2D		;refresh 					4H		;retry 					6W		;expire 					1W )		;TTL  			IN	NS	master_dns_fqdn 			IN	NS	slave_dns_fqdn 			IN	MX 10	mail_server_fqdn  master_dns_hostname	IN	A	ip_address slave_dns_hostname	IN	A	ip_address mail_server_hostname	IN	A	ip_address some_hostname		IN	CNAME	another_hostname_has_A_record

Reverse Lookup / 反解

$TTL 1W @			IN	SOA	master_dns_fqdn zone_admin ( 					2006092001	;serial 					2D		;refresh 					4H		;retry 					6W		;expire 					1W )		;TTL  			IN	NS	master_dns_fqdn  entry_in_*.in-addr.arpa	IN	PTR	some_host_fqdn
ex1. zone: 20.10.150.in-addr.arpa
in the zone file: 1 IN PTR ms1.mydomain.com
retult: ms1.mydomain.com=150.10.20.1
ex2. zone: 10.150.in-addr.arpa
in the zone file: 2.20 IN PTR ms1.mydomain.com
retult: ms1.mydomain.com=150.10.20.2

Ref: Microsoft Support – Description of DNS Reverse Lookups

Root Domain Zone File: ftp://ftp.internic.net/domain/named.root

Resources:

您还可能感兴趣的内容

日志信息 »

该日志于2008-02-03 16:27由 x72 发表在1.Application分类下， 通告目前不可用，你可以至底部留下评论。

没有评论▼

发表评论 »


返回顶部