今晚，玩一玩linux上的DNS

老哥遇到的问题，

我先按正规方式操作一波。

一，安装dns服务

yum install bind bind-utils -y 

二，修改/etc/named.conf文件

options {
	listen-on port 53 { any; };
	listen-on-v6 port 53 { ::1; };
	directory 	"/var/named";
	dump-file 	"/var/named/data/cache_dump.db";
	statistics-file "/var/named/data/named_stats.txt";
	memstatistics-file "/var/named/data/named_mem_stats.txt";
	recursing-file  "/var/named/data/named.recursing";
	secroots-file   "/var/named/data/named.secroots";
	allow-query     { any; };

	recursion no;

	dnssec-enable no;
	dnssec-validation no;

	/* Path to ISC DLV key */
	bindkeys-file "/etc/named.iscdlv.key";

	managed-keys-directory "/var/named/dynamic";

	pid-file "/run/named/named.pid";
	session-keyfile "/run/named/session.key";
};

logging {
        channel default_debug {
                file "data/named.run";
                severity dynamic;
        };
};

zone "." IN {
	type hint;
	file "named.ca";
};

include "/etc/named.rfc1912.zones";
include "/etc/named.root.key";

三，修改/etc/named.rfc1912.zones文件

zone "localhost.localdomain" IN {
	type master;
	file "named.localhost";
	allow-update { none; };
};

zone "localhost" IN {
	type master;
	file "named.localhost";
	allow-update { none; };
};

zone "1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ip6.arpa" IN {
	type master;
	file "named.loopback";
	allow-update { none; };
};

zone "1.0.0.127.in-addr.arpa" IN {
	type master;
	file "named.loopback";
	allow-update { none; };
};

zone "0.in-addr.arpa" IN {
	type master;
	file "named.empty";
	allow-update { none; };
};

zone "linuxidc.cn" IN {
  type master;
  file "/var/named/linuxidc.cn.zone";
  allow-update { none; };
};

四，生成域名zone文件

可以先从demo文件里生成

cp -p /var/named/named.localhost /var/named/linuxidc.cn.zone

linuxidc.cn.zone文件修改后的内容

$TTL 1D
@	IN SOA	@ linuxidc.cn. (
					0	; serial
					1D	; refresh
					1H	; retry
					1W	; expire
					3H )	; minimum
	NS	@
	A	127.0.0.1
	AAAA	::1
admin	A	192.168.1.112
www	A	192.168.1.111

五，启动服务

在启动服务前，可以先用如下两条命令作一下check.

named-checkconf /etc/named.conf
named-checkzone linuxidc.cn.zone /var/named/linuxidc.cn.zone
systemctl restart named

六，修改/etc/resolv.conf文件

nameserver 192.168.1.111
#nameserver 192.168.1.1

七，nslookup测试

nslookup www.linuxidc.cn

输出如下：