{"id":18705,"date":"2015-01-10T06:10:13","date_gmt":"2015-01-09T22:10:13","guid":{"rendered":"https:\/\/2blog.ilc.edu.tw\/25793\/2015\/01\/10\/%e5%9c%a8-debian-%e5%bb%ba%e7%bd%ae-chroot-%e7%9a%84-dns-server\/"},"modified":"2021-03-18T17:24:16","modified_gmt":"2021-03-18T09:24:16","slug":"%e5%9c%a8-debian-%e5%bb%ba%e7%bd%ae-chroot-%e7%9a%84-dns-server","status":"publish","type":"post","link":"https:\/\/2blog.ilc.edu.tw\/25793\/2015\/01\/10\/%e5%9c%a8-debian-%e5%bb%ba%e7%bd%ae-chroot-%e7%9a%84-dns-server\/","title":{"rendered":"\u5728 Debian \u5efa\u7f6e chroot \u7684 DNS Server"},"content":{"rendered":"

\u5728 Debian \u4e0a\u5b89\u88dd\u7684 DNS Server \u9810\u8a2d\u548c ArchLinux \u4e00\u6a23\u662f\u6c92\u6709 chroot \u7684\uff0c\u70ba\u4e86 DNS Server \u7684\u5b89\u5168\uff0c\u901a\u5e38\u90fd\u6703\u5efa\u8b70\u8981\u4ee5 chroot \u7684\u65b9\u5f0f\u4f86\u57f7\u884c\u3002
\u53c3\u8003\u7db2\u9801\uff1aMind Reference: How to chroot bind9 in Debian<\/a>
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 \u00a0 \u00a0 \u00a0 Bind9 – Debian Wiki<\/a>
\u5e95\u4e0b\u4ee5 Script \u6a94\u4f86\u81ea\u52d5\u8655\u7406\u9019\u9805\u5de5\u4f5c
[@more@]Script \u6a94\u6848\u4f86\u6e90<\/a>\uff0c\u7a0d\u505a\u4fee\u6539
1. \u5efa\u7acb chroot-bind9
# vim \/usr\/local\/bin\/chroot-bind9<\/span>
#!\/bin\/bash<\/span> <\/p>\n

\/etc\/init.d\/bind9 stop<\/span> <\/p>\n

mkdir -p \/var\/chroot\/bind9\/{etc,dev,var\/cache\/bind,var\/run\/bind\/run}<\/span>
chown -R bind:bind \/var\/chroot\/bind9\/var\/*<\/span> <\/p>\n

mknod \/var\/chroot\/bind9\/dev\/null c 1 3<\/span>
mknod \/var\/chroot\/bind9\/dev\/random c 1 8<\/span>
chmod 666 \/var\/chroot\/bind9\/dev\/{null,random}<\/span> <\/p>\n

mv \/etc\/bind \/var\/chroot\/bind9\/etc<\/span>
ln -s \/var\/chroot\/bind9\/etc\/bind \/etc\/bind<\/span> <\/p>\n

chown -R bind:bind \/etc\/bind\/*<\/span>
chmod -R g+w \/etc\/bind\/<\/span> <\/p>\n

echo “$AddUnixListenSocket \/var\/chroot\/bind9\/dev\/log” > \/etc\/rsyslog.d\/bind-chroot.conf<\/span> <\/p>\n

sed -e ‘s,”-u bind”,”-u bind -t \/var\/chroot\/bind9″,’ \/etc\/default\/bind9 > \/tmp\/x && mv \/tmp\/x \/etc\/default\/bind9<\/span> <\/p>\n

\/etc\/init.d\/bind9 start<\/span> <\/p>\n

2. \u7d66\u4e88 root \u57f7\u884c\u6b0a\u9650
# chmod 700 \/usr\/local\/bin\/chroot-bind9<\/span> <\/p>\n

3. \u57f7\u884c
# \/usr\/local\/bin\/chroot-bind9<\/span> <\/p>\n

4. \u9a57\u6536\u6210\u679c
# host 192.168.1.3 192.168.1.2<\/span>
Using domain server:<\/span>
Name: 192.168.1.2<\/span>
Address: 192.168.1.2#53<\/span>
Aliases:<\/span> <\/p>\n

3.1.168.192.in-addr.arpa domain name pointer ftp.test.ilc.edu.tw.<\/span> <\/p>\n

# host ftp.test.ilc.edu.tw 192.168.1.2<\/span>
Using domain server:<\/span>
Name: 192.168.1.2<\/span>
Address: 192.168.1.2#53<\/span>
Aliases:<\/span> <\/p>\n

ftp.test.ilc.edu.tw has address 192.168.1.3<\/span><\/p>\n

\u89e3\u6c7a\u57f7\u884c \/etc\/init.d\/bind9 status<\/span> \u6703\u51fa\u73fe\u7684\u932f\u8aa4\u8a0a\u606f
# \/etc\/init.d\/bind9 status<\/span>
\u00a0* bind9 is not running<\/span><\/p>\n

\u5148\u5c07 PIDFILE=\/var\/run\/named\/named.pid<\/span> \u524d\u9762\u52a0\u4e0a #<\/span> \u8a3b\u89e3
# sed -i ‘s\/^PIDFILE\/#PIDFILE\/’ \/etc\/init.d\/bind9<\/span>
\u5728 #PIDFILE<\/span> \u5f8c\u9762\u63d2\u5165\u4e00\u884c
# sed -i ‘\/#PIDFILE\/ a PIDFILE=\/var\/chroot\/bind9\/var\/run\/named\/named.pid’ \/etc\/init.d\/bind9<\/span><\/p>\n

#\u00a0 \/etc\/init.d\/bind9 status<\/span>
\u00a0* bind9 is running<\/span><\/p>\n","protected":false},"excerpt":{"rendered":"

\u5728 Debian \u4e0a\u5b89\u88dd\u7684 DNS Server \u9810\u8a2d\u548c ArchLinux \u4e00\u6a23\u662f\u6c92\u6709 chroot \u7684\uff0c\u70ba … <\/p>\n

\u95b1\u8b80\u5168\u6587\u3008\u5728 Debian \u5efa\u7f6e chroot \u7684 DNS Server\u3009<\/span><\/a><\/p>\n","protected":false},"author":55,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[179,148],"tags":[],"class_list":["post-18705","post","type-post","status-publish","format-standard","hentry","category-c-87877","category-c-78513"],"meta_key":{"_pingme":["1"],"_encloseme":["1"],"lt_post_id":["551553"]},"_links":{"self":[{"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/posts\/18705"}],"collection":[{"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/users\/55"}],"replies":[{"embeddable":true,"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/comments?post=18705"}],"version-history":[{"count":1,"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/posts\/18705\/revisions"}],"predecessor-version":[{"id":20320,"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/posts\/18705\/revisions\/20320"}],"wp:attachment":[{"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/media?parent=18705"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/categories?post=18705"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/tags?post=18705"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}