[CentOS 5] 架設 DNS server

Posted on 2010 年 08 月 25 日 by Cifer

【cache-only/forwarding DNS server】

目的：讓 ssh, sendmail … 等一堆預設需要名稱解析的程序，反應時間快一點。(因為這些程序若找不到 dns server，這些程序會 hang 住，會讓人等到不耐煩)

step1. 必要的安裝套件：

  • bind (named 主程式)
  • bind-chroot (named 程式可視範圍/目錄只能在 /var/named/chroot/，用以加強安全性)
  • bind-utils (此套件會安裝 nslookup 等工具)
  • caching-nameserver (此套件會安裝必要的 conf 檔：註一)

step2. 檢視編輯 /var/named/chroot/etc/named.caching-nameserver.conf

  • allow-query     { any; };

setp3.  啟動 named 程序

  • shell# /etc/init.d/named start (啟動)
  • shell# /etc/init.d/named stop (停止)

setp4. 開機自動執行 named

  • shell# ntsysv (然後將 named 勾起來)

[註一]

  • /etc/named.caching-nameserver.conf => /var/named/chroot/etc/named.caching-nameserver.conf
  • /etc/named.rfc1912.zones => /var/named/chroot/etc/named.rfc1912.zones
  • /var/named/localdomain.zone => /var/named/chroot/var/named/localdomain.zone
  • /var/named/localhost.zone => /var/named/chroot/var/named/localhost.zone
  • /var/named/named.broadcast => /var/named/chroot/var/named/named.broadcast
  • /var/named/named.ca => /var/named/chroot/var/named/named.ca
  • /var/named/named.ip6.local => /var/named/chroot/var/named/named.ip6.local
  • /var/named/named.local => /var/named/chroot/var/named/named.local
  • /var/named/named.zero => /var/named/chroot/var/named/named.zero

[其他不錯的參考資料]

本篇發表於 科技。將永久鏈結加入書籤。

發表留言