Centos7配置DNS服务器
1. 安装bind服务
网络连接方式桥接或NAT
yum -y install bind
网络连接方式仅主机模式
2. 修改named配置文件
• Vi /etc/named.conf #打开文件 13 listen-on port 53 { any; }; //修改为any; 14 listen-on-v6 port 53 { any; }; //修改为any; 15 directory "/var/named"; 16 dump-file "/var/named/data/cache_dump.db"; 17 statistics-file "/var/named/data/named_stats.txt"; 18 memstatistics-file "/var/named/data/named_mem_stats.txt"; 19 recursing-file "/var/named/data/named.recursing"; 20 secroots-file "/var/named/data/named.secroots"; 21 allow-query { any; }; //修改为any; • Vi /etc/named.rfc1912.zones #打开文件 在该文件中添加需要解析的域名，这里解析的分别是 www.company.com，ftp.company.com • 把下面内容添加最后
zone "company.com" IN { //正向解析 type master; file "company.com.zone"; //文件名后缀可自定义 allow-update { none; }; }; zone "5.168.192.in-addr.arpa" IN { //反向解析 type master; file "192.168.5.arpa"; //文件名后缀可自定义 allow-update { none; }; };
3. 添加对应的文件
cd /var/named/ cp –a named.localhost company.com.zone cp –a named.localhost 192.168.5.arpa
4. 修改正向解析文件
Vi company.com.zone #打开文件 $TTL 1D @ IN SOA company.com. root.company.com. ( 0 ; serial 1D ; refresh 1H ; retry 1W ; expire 3H ) ; minimum NS @ A 127.0.0.1 AAAA ::1 www IN A 192.168.5.3 ftp IN A 192.168.5.3
5. 修改反向解析文件
Vi 192.168.5.arpa $TTL 1D @ IN SOA company.com. root.company.com. ( 0 ; serial 1D ; refresh 1H ; retry 1W ; expire 3H ) ; minimum NS @ AAAA ::1 3 PTR www.company.com. 3 PTR ftp.company.com.
6、测试文件是否修改正确
测试主配置文件：named-checkconf /etc/named.conf 测试区域数据文件：named-checkzone "company.com" company.com.zone named-checkzone "5.168.192.arpa" 192.168.5.arpa 结果类似截图：
7. 测试
启动DNS
systemctl restart named.service
将测试机器的IP地址改为IP：192.168.5.3 子网掩码：255.255.255.0 DNS：192.168.5.3 改完之后，将网络服务重启 systemctl restart network,使用nslookup测试是否解析成功
[root@localhost named]# nslookup
www.company.com
Server: 192.168.5.3
Address: 192.168.5.3#53
Name: www.company.com
Address: 192.168.5.3
ftp.company.com
Server: 192.168.5.3
Address: 192.168.5.3#53
Name: ftp.company.com
Address: 192.168.5.3
exit
8、外网测试：
关闭防火墙：systemctl stop firewalld
进入Windows Server2012，修改DNS服务器地址为192.168.5.3
然后进入Windows PowerShell
输入ping 192.168.5.3 测试连通性：
测试DNS的解析情况：ping www.company.com
如果失败了记得看一下两边的防火墙是不是都关上了！！！
