主機(jī)A: 雙網(wǎng)卡

192.168.1.7 --> mydomain.org主域名服務(wù)器

192.168.10.7 --> myzone.org主域名服務(wù)器，其有兩個(gè)子域，為market.myzone.org和develog.myzone.org

主機(jī)B：雙網(wǎng)卡

192.168.1.6 --> mydomain.org輔助域名服務(wù)器

192.168.10.6 --> market.myzone.org子域名服務(wù)器

兩臺(tái)服務(wù)器均有DNS獨(dú)立的日志，用以記錄查詢(query_logs)記錄和錯(cuò)誤(err_logs)記錄，以便于DNS后期管理;本文不過多涉及安全方面的問題。安裝過程請(qǐng)參照另一篇文章“Bind 9.4.0rc2安裝筆記(一步步學(xué)習(xí)配置簡易DNS)”。

二、主機(jī)A：

1. 主配置文件/etc/named.conf

options {

directory "/var/named/";

version "0.0.0";

};

logging {

channel dns_errors

{ file "/var/log/named/err_logs" versions 3 size 10m;

severity error;

print-category yes;

print-severity yes;

print-time yes;

};

channel dns_queries

{ file "/var/log/named/query_logs" versions 3 size 10m;

severity info;

print-category yes;

print-severity yes;

print-time yes;

};

category default { dns_errors; };

category queries { dns_queries; };

};

zone　"." {

type hint;

file　"named.ca";

};

zone "localhost" {

type master;

file "named.local";

};

zone "0.0.127.IN-addr.arpa" {

type master;

file "named.rev";

};

zone "mydomain.org" {

type master;

file "mydomain.org.zone";

allow-transfer { 192.168.1.6/32; };

};

zone "myzone.org" {

type master;

file "myzone.org.zone";

allow-transfer { 192.168.10.0/24; };

};

zone "10.168.192.in-addr.arpa" {

type master;

file "192.168.10.zone";

allow-transfer { 192.168.10.0/24; };

};

zone "1.168.192.in-addr.arpa" {

type master;

file "192.168.1.zone";

allow-transfer { 192.168.1.6/32; };

};

key "rndc-key" {

algorithm hmac-md5;

secret "oKLRLl8BolNj883OX1YcxQ==";

};

controls {

inet 127.0.0.1 port 953

allow { 127.0.0.1; } keys { "rndc-key"; };

};

# End of named.conf