{"id":18579,"date":"2014-11-04T06:41:14","date_gmt":"2014-11-03T22:41:14","guid":{"rendered":"https:\/\/2blog.ilc.edu.tw\/25793\/2014\/11\/04\/archlinux-%e6%9e%b6%e8%a8%ad-dns-server\/"},"modified":"2021-03-18T17:24:09","modified_gmt":"2021-03-18T09:24:09","slug":"archlinux-%e6%9e%b6%e8%a8%ad-dns-server","status":"publish","type":"post","link":"https:\/\/2blog.ilc.edu.tw\/25793\/2014\/11\/04\/archlinux-%e6%9e%b6%e8%a8%ad-dns-server\/","title":{"rendered":"ArchLinux – \u67b6\u8a2d DNS Server"},"content":{"rendered":"

\u53c3\u8003\u7db2\u7ad9\uff1a
Linux Pi\u7684\u5947\u5e7b\u65c5\u7a0b(28)-DNS – iT\u90a6\u5e6b\u5fd9::IT\u77e5\u8b58\u5206\u4eab\u793e\u7fa4<\/a>
BIND – ArchWiki<\/a>
How to setup a DNS server master \/ slave with BIND<\/a>
How to install and set-up Slave Named (BIND) DNS server in ArchLinux | Stavrovski.Net<\/a><\/p>\n

\u5b89\u88dd bind \u53ca dnsutils \u5957\u4ef6
# pacman -S bind dnsutils<\/span><\/p>\n

\u5099\u4efd\u8a2d\u5b9a\u6a94
# cp \/etc\/named.conf \/etc\/named.conf.$(date +%F)<\/span>[@more@]
\u4fee\u6539\u8a2d\u5b9a\u6a94 \/etc\/named.conf<\/span>
# vim \/etc\/named.conf<\/span>
\/\/<\/span>
\/\/ \/etc\/named.conf<\/span>
\/\/<\/span><\/p>\n

options {<\/span>
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 directory “\/var\/named”;<\/span>
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 pid-file “\/run\/named\/named.pid”;<\/span>
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 auth-nxdomain yes;<\/span>
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 datasize default;<\/span>
\/\/ Uncomment these to enable IPv6 connections support<\/span>
\/\/ IPv4 will still work:<\/span>
\/\/\u00a0\u00a0\u00a0\u00a0\u00a0 listen-on-v6 { any; };<\/span>
\/\/ Add this for no IPv4:<\/span>
\/\/\u00a0\u00a0\u00a0\u00a0\u00a0 listen-on { none; };<\/span><\/p>\n

\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 \/\/ Default security settings.<\/span>
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 allow-recursion { 127.0.0.1; };<\/span>
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 allow-transfer { none; };<\/span>
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 allow-update { none; };<\/span>
\u00a0\u00a0\u00a0 version none;<\/span>
\u00a0\u00a0\u00a0 hostname none;<\/span>
\u00a0\u00a0\u00a0 server-id none;<\/span>
};<\/span><\/p>\n

zone “localhost” IN {<\/span>
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 type master;<\/span>
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 file “localhost.zone”;<\/span>
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 allow-transfer { any; };<\/span>
};<\/span><\/p>\n

zone “0.0.127.in-addr.arpa” IN {<\/span>
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 type master;<\/span>
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 file “127.0.0.zone”;<\/span>
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 allow-transfer { any; };<\/span>
};<\/span><\/p>\n

zone “.” IN {<\/span>
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 type hint;<\/span>
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 file “root.hint”;<\/span>
};<\/span><\/p>\n

zone “test.ilc.edu.tw” IN {<\/span>
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 type master;<\/span>
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 file “test.ilc.edu.tw.zone”;<\/span>
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 allow-update { none; };<\/span>
};<\/span><\/p>\n

zone “1.168.192.in-addr.arpa” IN {<\/span>
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 type master;<\/span>
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 file “1.168.192.zone”;<\/span>
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 allow-update { none; };<\/span>
};<\/span><\/p>\n

\/\/zone “example.org” IN {<\/span>
\/\/\u00a0\u00a0\u00a0\u00a0\u00a0 type slave;<\/span>
\/\/\u00a0\u00a0\u00a0\u00a0\u00a0 file “example.zone”;<\/span>
\/\/\u00a0\u00a0\u00a0\u00a0\u00a0 masters {<\/span>
\/\/\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 192.168.1.100;<\/span>
\/\/\u00a0\u00a0\u00a0\u00a0\u00a0 };<\/span>
\/\/\u00a0\u00a0\u00a0\u00a0\u00a0 allow-query { any; };<\/span>
\/\/\u00a0\u00a0\u00a0\u00a0\u00a0 allow-transfer { any; };<\/span>
\/\/};<\/span><\/p>\n

logging {<\/span>
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 channel xfer-log {<\/span>
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 file “\/var\/log\/named.log”;<\/span>
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 print-category yes;<\/span>
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 print-severity yes;<\/span>
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 print-time yes;<\/span>
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 severity info;<\/span>
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 };<\/span>
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 category xfer-in { xfer-log; };<\/span>
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 category xfer-out { xfer-log; };<\/span>
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 category notify { xfer-log; };<\/span>
};<\/span><\/p>\n

#\u00a0\u8a2d\u5b9a\u6b0a\u9650
# chown -R root:named \/var\/named<\/span><\/p>\n

\u5efa\u7acb log \u6a94
# touch \/var\/log\/named.log<\/span><\/p>\n

\u66f4\u6539\u6a94\u6848\u64c1\u6709\u8005\u53ca\u7fa4\u7d44
# chown named:named \/var\/log\/named.log<\/span><\/p>\n

\u555f\u52d5 DNS Server
# systemctl start named<\/span><\/p>\n

\u8a2d\u5b9a\u958b\u6a5f\u6642\u555f\u52d5 DNS Server
# systemctl enable named<\/span>
Created symlink from \/etc\/systemd\/system\/multi-user.target.wants\/named.service to \/usr\/lib\/systemd\/system\/named.service.<\/span><\/p>\n

DNS Server 192.168.1.106
# cat \/etc\/resolv.conf<\/span>
nameserver 192.168.1.106<\/span><\/p>\n

\u6e2c\u8a66
# host free.test.ilc.edu.tw<\/span>
free.test.ilc.edu.tw has address 192.168.1.6<\/span><\/p>\n

# host 192.168.1.6<\/span>
6.1.168.192.in-addr.arpa domain name pointer free.test.ilc.edu.tw.<\/span><\/p>\n

\u9632\u706b\u7246\u4e0a\u7684\u8a2d\u5b9a
# iptables -A INPUT -p udp -m state –state NEW -m udp –dport 53 -j ACCEPT<\/span><\/p>\n","protected":false},"excerpt":{"rendered":"

\u53c3\u8003\u7db2\u7ad9\uff1aLinux Pi\u7684\u5947\u5e7b\u65c5\u7a0b(28)-DNS – iT\u90a6\u5e6b\u5fd9::IT\u77e5\u8b58\u5206\u4eab\u793e\u7fa4BIND … <\/p>\n

\u95b1\u8b80\u5168\u6587\u3008ArchLinux – \u67b6\u8a2d DNS Server\u3009<\/span><\/a><\/p>\n","protected":false},"author":55,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[167,148],"tags":[],"class_list":["post-18579","post","type-post","status-publish","format-standard","hentry","category-c-84386","category-c-78513"],"meta_key":{"_pingme":["1"],"_encloseme":["1"],"lt_post_id":["520424"]},"_links":{"self":[{"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/posts\/18579"}],"collection":[{"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/users\/55"}],"replies":[{"embeddable":true,"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/comments?post=18579"}],"version-history":[{"count":1,"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/posts\/18579\/revisions"}],"predecessor-version":[{"id":20207,"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/posts\/18579\/revisions\/20207"}],"wp:attachment":[{"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/media?parent=18579"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/categories?post=18579"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/tags?post=18579"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}