{"id":18585,"date":"2014-11-06T06:47:30","date_gmt":"2014-11-05T22:47:30","guid":{"rendered":"https:\/\/2blog.ilc.edu.tw\/25793\/2014\/11\/06\/archlinux-%e5%bb%ba%e7%ab%8b-dns-server-chroot-%e7%92%b0%e5%a2%83\/"},"modified":"2021-03-18T17:24:10","modified_gmt":"2021-03-18T09:24:10","slug":"archlinux-%e5%bb%ba%e7%ab%8b-dns-server-chroot-%e7%92%b0%e5%a2%83","status":"publish","type":"post","link":"https:\/\/2blog.ilc.edu.tw\/25793\/2014\/11\/06\/archlinux-%e5%bb%ba%e7%ab%8b-dns-server-chroot-%e7%92%b0%e5%a2%83\/","title":{"rendered":"ArchLinux – \u5efa\u7acb DNS Server Chroot \u74b0\u5883"},"content":{"rendered":"

ArchLinux\u00a0\u597d\u50cf\u4e26\u6c92\u6709\u50cf CentOS Linux\uff0c\u5728 Bind DNS Server\u00a0\u6709\u76f4\u63a5\u63d0\u4f9b DNS Server Chroot(bind-chroot) \u7684\u5957\u4ef6\uff0c\u53ef\u4ee5\u65b9\u4fbf\u505a\u8a2d\u5b9a\uff0c\u6240\u4ee5\u8981\u7528\u624b\u52d5\u7684\u65b9\u5f0f\u4f86\u8a2d\u5b9a\u3002
\u5728 CentOS
# yum list | grep bind-chroot | awk ‘{print $1}’<\/span>
bind-chroot.x86_64<\/span><\/p>\n

\u5e95\u4e0b\u6587\u7ae0\u53c3\u8003\uff1a
How to install and set-up Slave Named (BIND) DNS server in ArchLinux | Stavrovski.Net<\/a><\/p>\n

[@more@]\u8a2d\u5b9a DNS Chroot\u00a0\u7684\u76ee\u9304
# CHROOT=\/var\/named\/chroot<\/span>
#\u00a0\u5efa\u7acb chroot\u00a0\u76ee\u9304
#<\/span> <\/span>mkdir -p “${CHROOT}”\/{dev,etc} “${CHROOT}”\/var\/{run,log,named,tmp}<\/span>
#<\/span> mkdir -p “${CHROOT}”\/usr\/lib\/bind “${CHROOT}”\/usr\/lib\/engines<\/span><\/p>\n

\u5efa\u7acb\u00a0 block devices
#<\/span> <\/span><\/span>mknod “${CHROOT}”\/dev\/null c 1 3<\/span>
#<\/span> <\/span><\/span>mknod “${CHROOT}”\/dev\/random c 1 8<\/span><\/p>\n

\u8907\u88fd\u00a0 \/usr\/lib\/libgost.so<\/span>\u5230 \/var\/named\/chroot\/usr\/lib\/engines\/<\/span>
#<\/span> <\/span><\/span>cp \/usr\/lib\/engines\/libgost.so “${CHROOT}”\/usr\/lib\/engines\/<\/span><\/p>\n

\u66f4\u6539\u76ee\u9304\u6b0a\u9650
#<\/span> <\/span><\/span>chown root:named “${CHROOT}”<\/span>
#<\/span> <\/span><\/span>chmod 750 “${CHROOT}”<\/span>
#<\/span> <\/span><\/span>chown -R named: “${CHROOT}”\/var\/named\/<\/span>
#<\/span> <\/span><\/span>chown named: “${CHROOT}”\/var\/{run,log}<\/span>
#<\/span> <\/span><\/span>chmod 666 “${CHROOT}”\/dev\/{null,random}<\/span><\/p>\n

\u642c\u79fb\u539f\u6709\u7684\u8a2d\u5b9a\u6a94\u5230 chroot\u00a0\u76ee\u9304
#<\/span> <\/span><\/span>mv \/etc\/named.conf “${CHROOT}”\/etc\/<\/span>
#<\/span> <\/span><\/span>mv \/etc\/rndc.key “${CHROOT}”\/etc\/<\/span>
# mv \/var\/named\/{root.hint,127.0.0.zone,localhost.zone,db.1.168.192,db.tces.ilc.edu.tw} “${CHROOT}”\/var\/named\/<\/span><\/p>\n

\u5efa\u7acb \/var\/named\/chroot\/etc\/named.conf\u00a0<\/span>\u7684\u9023\u7d50\u5230 \/etc<\/span>\u00a0\u76ee\u9304\u4e4b\u4e0b
#<\/span> <\/span><\/span>ln -s “${CHROOT}”\/etc\/named.conf \/etc\/<\/span><\/p>\n

\u8a2d\u5b9a\u76ee\u9304\u7684\u6b0a\u9650
#<\/span> <\/span><\/span>chown -R named: “${CHROOT}”\/var\/named\/<\/span><\/p>\n

\u5728 \/etc\/systemd\/system\u00a0\u76ee\u9304\u4e0b\u5efa\u7acb named.service\u00a0\u555f\u52d5\u6a94
# vim \/etc\/systemd\/system\/named.service<\/span><\/p>\n

[Unit]<\/span>
Description=Internet domain name server<\/span>
After=network.target<\/span><\/p>\n

[Service]<\/span>
ExecStart=\/usr\/bin\/named -f -u named -t \/var\/named\/chroot<\/span>
ExecReload=\/usr\/bin\/rndc reload<\/span>
ExecStop=\/usr\/bin\/rndc stop<\/span><\/p>\n

[Install]<\/span>
WantedBy=multi-user.target<\/span><\/p>\n

\u95dc\u9589\u539f\u6709\u7684 DNS Server\uff0c\u4e26\u555f\u52d5 chroot DNS Server
#<\/span> <\/span><\/span>systemctl stop named<\/span>
#<\/span> <\/span><\/span>systemctl disable named<\/span>
Removed symlink \/etc\/systemd\/system\/multi-user.target.wants\/named.service.<\/span>
#<\/span> <\/span><\/span>systemctl start named.service<\/span>
#<\/span> <\/span><\/span>systemctl enable named.service<\/span>
Created symlink from \/etc\/systemd\/system\/multi-user.target.wants\/named.service to \/etc\/systemd\/system\/named.service.<\/span><\/p>\n

\u6aa2\u67e5 DNS Server\u00a0\u662f\u5426\u6709\u6b63\u5e38\u555f\u52d5
# netstat -ant | grep :.*53<\/span>
tcp\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 0\u00a0\u00a0\u00a0\u00a0\u00a0 0 192.168.1.106:53\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 0.0.0.0:*\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 LISTEN<\/span>
tcp\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 0\u00a0\u00a0\u00a0\u00a0\u00a0 0 127.0.0.1:53\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 0.0.0.0:*\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 LISTEN<\/span>
tcp\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 0\u00a0\u00a0\u00a0\u00a0\u00a0 0 127.0.0.1:953\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 0.0.0.0:*\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 LISTEN<\/span><\/p>\n

\u6e2c\u8a66
# host free.test.ilc.edu.tw<\/span>
free.test.ilc.edu.tw has address 192.168.1.6<\/span><\/p>\n

# host 192.168.1.6<\/span>
6.1.168.192.in-addr.arpa domain name pointer free.test.ilc.edu.tw.<\/span><\/p>\n","protected":false},"excerpt":{"rendered":"

ArchLinux\u00a0\u597d\u50cf\u4e26\u6c92\u6709\u50cf CentOS Linux\uff0c\u5728 Bind DNS Server\u00a0\u6709\u76f4\u63a5\u63d0\u4f9b D … <\/p>\n

\u95b1\u8b80\u5168\u6587\u3008ArchLinux – \u5efa\u7acb DNS Server Chroot \u74b0\u5883\u3009<\/span><\/a><\/p>\n","protected":false},"author":55,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[167,148],"tags":[],"class_list":["post-18585","post","type-post","status-publish","format-standard","hentry","category-c-84386","category-c-78513"],"meta_key":{"_pingme":["1"],"_encloseme":["1"],"lt_post_id":["520622"]},"_links":{"self":[{"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/posts\/18585"}],"collection":[{"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/users\/55"}],"replies":[{"embeddable":true,"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/comments?post=18585"}],"version-history":[{"count":1,"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/posts\/18585\/revisions"}],"predecessor-version":[{"id":20212,"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/posts\/18585\/revisions\/20212"}],"wp:attachment":[{"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/media?parent=18585"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/categories?post=18585"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/tags?post=18585"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}