域名系统 – CentOS BIND DNS疑难解答?

前端之家收集整理的这篇文章主要介绍了域名系统 – CentOS BIND DNS疑难解答?前端之家小编觉得挺不错的,现在分享给大家,也给大家做个参考。
我正在尝试为小型本地网络设置我的第一个BIND9 DNS服务器,但似乎无法使其正常工作.我想创建一个max.app的“本地”域

据我所知,命名是运行,但它似乎没有提供我的域记录?

  1. service named start

返回OK,恶魔正在启动时运行.

如果我尝试ping mac1,我会得到:未知主机mac1

如果我尝试ping mac1.max.app我得到:未知主机mac1

当我尝试nslookup时,我得到:

  1. nslookup max.app
  2. Server: 8.8.8.8
  3. Address: 8.8.8.8#53
  4.  
  5. Non-authoritative answer:
  6. Name: max.app
  7. Address: 67.192.47.244

正如您所看到的,我不是从本地绑定服务提供记录(192.168.100.10)

我的/etc/resolv.conf文件如下所示:

  1. # Generated by NetworkManager
  2. search max.app
  3. nameserver 192.168.100.10
  4. nameserver 8.8.8.8
  5. nameserver 8.8.4.4

我的/etc/named.conf文件如下所示:

  1. acl local-network { 192.168.100.0/24; };
  2.  
  3. options {
  4. listen-on port 53 { 127.0.0.1; 192.168.100.10; };
  5. listen-on-v6 port 53 { ::1; };
  6. directory "/var/named";
  7. dump-file "/var/named/data/cache_dump.db";
  8. statistics-file "/var/named/data/named_stats.txt";
  9. memstatistics-file "/var/named/data/named_mem_stats.txt";
  10. allow-query { local-network; };
  11. recursion yes;
  12.  
  13. query-source address * port 53;
  14.  
  15. dnssec-enable yes;
  16. dnssec-validation yes;
  17. dnssec-lookaside auto;
  18.  
  19. /* Path to ISC DLV key */
  20. bindkeys-file "/etc/named.iscdlv.key";
  21. };
  22.  
  23.  
  24. logging {
  25. channel default_debug {
  26. file "data/named.run";
  27. severity dynamic;
  28. };
  29. };
  30.  
  31.  
  32. zone "max.app" IN {
  33. type master;
  34. file "max.app.zone";
  35. allow-update { none; };
  36. };
  37.  
  38. zone "100.168.192.in-addr.arpa" IN {
  39. type master;
  40. file "max.app.rr.zone";
  41. allow-update { none; };
  42. };

我的/var/named/max.app.zone文件如下所示:

  1. $ORIGIN max.app.
  2. $TTL 86400
  3. @ IN SOA dns1.max.app. email.gmail.com. (
  4. 2001062501 ; serial
  5. 21600 ; refresh after 6 hours
  6. 3600 ; retry after 1 hour
  7. 604800 ; expire after 1 week
  8. 86400 ) ; minimum TTL of 1 day
  9.  
  10.  
  11. IN NS dns1.max.app.
  12.  
  13. dns1 IN A 192.168.100.10
  14. CentOS1 IN A 192.168.100.15
  15. CentOS2 IN A 192.168.100.25
  16.  
  17. mac1 IN A 192.168.100.50
  18. mac2 IN A 192.168.100.55
  19. mac3 IN A 192.168.100.60
  20.  
  21. www IN CNAME CentOS1

我的/var/named/max.app.rr.zone文件如下所示:

  1. $ORIGIN 100.168.192.in-addr.arpa.
  2. $TTL 86400
  3. @ IN SOA dns1.max.app. email.gmail.com. (
  4. 2001062501 ; serial
  5. 21600 ; refresh after 6 hours
  6. 3600 ; retry after 1 hour
  7. 604800 ; expire after 1 week
  8. 86400 ) ; minimum TTL of 1 day
  9.  
  10. IN NS dns1.max.app.
  11.  
  12. 10 IN PTR dns1.max.app.
  13. 15 IN PTR CentOS1.max.app.
  14. 20 IN PTR CentOS2.max.app.
  15.  
  16. 50 IN PTR mac1.max.app.
  17. 55 IN PTR mac1.max.app.
  18. 60 IN PTR mac1.max.app.

服务命名状态返回:

  1. version: 9.7.0-P2-RedHat-9.7.0-5.P2.el6_0.1
  2. cpus found: 2
  3. worker threads: 2
  4. number of zones: 15
  5. debug level: 0
  6. xfers running: 0
  7. xfers deferred: 0
  8. soa queries in progress: 0
  9. query logging is OFF
  10. recursive clients: 0/0/1000
  11. tcp clients: 0/100
  12. server is up and running
  13. named (pid 1121) is running.

这个“区数:15”似乎有点奇怪?当我在named.conf中只定义了1个区域时

更新7月14日下午5:45 CST

好的,我已经按照下面的建议,但似乎仍然没有工作.

添加到/ etc / sysconfig / iptables

  1. -A RH-Firewall-1-INPUT -p udp -m udp --dport 53 -j ACCEPT
  2. -A RH-Firewall-1-INPUT -p tcp -m tcp --dport 53 -j ACCEPT

挖掘@ 192.168.100.10 mac1.max.app a返回:

  1. ; <<>> DiG 9.6.0-APPLE-P2 <<>> @192.168.100.10 mac1.max.app a
  2. ; (1 server found)
  3. ;; global options: +cmd
  4. ;; Got answer:
  5. ;; ->>HEADER<<- opcode: QUERY,status: NOERROR,id: 48036
  6. ;; flags: qr aa rd ra; QUERY: 1,ANSWER: 1,AUTHORITY: 1,ADDITIONAL: 1
  7.  
  8. ;; QUESTION SECTION:
  9. ;mac1.max.app. IN A
  10.  
  11. ;; ANSWER SECTION:
  12. mac1.max.app. 86400 IN A 192.168.100.15
  13.  
  14. ;; AUTHORITY SECTION:
  15. max.app. 86400 IN NS dns1.max.app.
  16.  
  17. ;; ADDITIONAL SECTION:
  18. dns1.max.app. 86400 IN A 192.168.100.10
  19.  
  20. ;; Query time: 8 msec
  21. ;; SERVER: 192.168.100.10#53(192.168.100.10)
  22. ;; WHEN: Thu Jul 14 17:30:53 2011
  23. ;; MSG SIZE rcvd: 85

dig @ 192.168.100.10 mac1.max.app ns返回

; <<>> DiG 9.6.0-APPLE-P2 <<>> @192.168.100.10 mac1.max.app ns ; (1
server found) ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<-
opcode: QUERY,id: 28099 ;; flags: qr aa rd ra;
QUERY: 1,ANSWER: 0,ADDITIONAL: 0

;; QUESTION SECTION: ;mac1.max.app. IN NS

;; AUTHORITY SECTION: max.app. 86400 IN SOA dns1.max.app.
email.gmail.com. 2001062501 21600 3600 604800 86400

;; Query time: 8 msec ;; SERVER: 192.168.100.10#53(192.168.100.10) ;;
WHEN: Thu Jul 14 17:18:23 2011 ;; MSG SIZE rcvd: 94

nslookup显示named在端口53上列出

  1. tcp 0 0 dns1:53 *:* LISTEN 2880/named
  2. tcp 0 0 localhost.localdomain:53 *:* LISTEN 2880/named
一些建议:

从resolv.conf中删除两个google名称服务器.您的名称服务器失败,但您没有获得太多有用的信息,因为nslookup正在进入下一个名称服务器.

如果是nslookup,请使用dig. dig的状态响应有助于排除故障.

  1. dig @192.168.100.10 mac1.max.app. a
  2. dig @192.168.100.10 max.app. ns

确保检查日志以查看您的区域是否实际正在加载.

检查netstat以确保named正在侦听相应接口的端口53.

猜你在找的CentOS相关文章