Chinaunix

标题: 求助：Freebsd配置DNS服务器问题 [打印本页]

作者: ryanmm 时间: 2006-11-30 10:29
标题: 求助：Freebsd配置DNS服务器问题
域名无法正常解析，我又找不到问题之所在
求助诸位~~~
感谢！！！

配置过程如下：

1) 新安装的FreeBSD6.1
cvsup、buildworld
本机IP为 192.168.0.5
需解析的域名为 ensata.com

2) cd /usr/ports/dns/bind9
make install clean

3) cd /etc/namedb/
vi named.conf

添加:

zone "ensata.com" {
      type master;
      file "/etc/namedb/hosts/ensata.com.hosts";
};

zone "0.168.192.in-addr.arpa" {
      type master;
      file "/etc/namedb/hosts/ensata.com.rev";

4) cd /etc/namedb
mkdir hosts
chown bind:bind hosts
chmod 750 hosts
chmod 755 make-localhost
./make-localhost (在master目录下生成 localhost.rev)
cp master/localhost.rev hosts/ensata.com.hosts
cp master/localhost.rev hosts/ensata.com.rev

vi ensata.com.hosts
如下：

$TTL 3600

@    IN    SOA    Firewall.ensata.com. root.Firewall.ensata.com.  (
                              20061130       ; Serial
                              3600 ; Refresh
                              900    ; Retry
                              3600000 ; Expire
                              3600 )  ; Minimum
      IN    NS    Firewall.ensata.com.
dns    IN    A    192.168.0.5

vi ensata.com.rev
如下：

$TTL 3600

@    IN    SOA    Firewall.ensata.com. root.Firewall.ensata.com.  (
                              20061130       ; Serial
                              3600 ; Refresh
                              900    ; Retry
                              3600000 ; Expire
                              3600 )  ; Minimum
      IN    NS    Firewall.ensata.com.
5    IN    PTR    dns.ensata.com.

5) rndc-confgen > rndc.key
将rndc.key的以下内容 copy到named.conf中：

key "rndc-key" {
      algorithm hmac-md5;
      secret "dBQrqqplIjgUM4xWrLb2gg==";
};

controls {
      inet 127.0.0.1 port 953
            allow { 127.0.0.1; } keys { "rndc-key"; };
};

6) 编辑 /etc/rc.conf
添加 named_enble="YES"

编辑 /etc/resolv.conf
添加 nameserver 192.168.0.5

7) 重启

8）  nslookup dns.ensata.com
显示：

connection timed out; no servers could be reached

9) netstat -a
显示：

Active Internet connections (including servers)
Proto Recv-Q Send-Q  Local Address       Foreign Address       (state)
tcp4    0    0  192.168.0.5.ssh       192.168.0.1.2108    ESTABLISHED
tcp4    0    0  *.ssh                *.*                   LISTEN
tcp4    0    0  localhost.rndc       *.*                   LISTEN
tcp4    0    0  localhost.domain    *.*                   LISTEN
udp4    0    0  *.60556             *.*
udp4    0    0  localhost.domain    *.*
udp4    0    0  *.syslog             *.*

10)tail /var/log/messages
显示（部分）：

Nov 30 10:06:01 Firewall named[556]: starting BIND 9.3.2-P2 -c /etc/namedb/named.conf -t /var/named -u bind
Nov 30 10:06:02 Firewall named[556]: command channel listening on 127.0.0.1#953
Nov 30 10:06:02 Firewall named[556]: running

11) named -g
显示：

30-Nov-2006 10:11:45.525 starting BIND 9.3.2-P2 -g
30-Nov-2006 10:11:45.525 found 1 CPU, using 1 worker thread
30-Nov-2006 10:11:45.558 loading configuration from '/etc/namedb/named.conf'
30-Nov-2006 10:11:45.561 no IPv6 interfaces found
30-Nov-2006 10:11:45.562 listening on IPv4 interface lo0, 127.0.0.1#53
30-Nov-2006 10:11:45.572 could not listen on UDP socket: address in use
30-Nov-2006 10:11:45.573 creating IPv4 interface lo0 failed; interface ignored
30-Nov-2006 10:11:45.573 not listening on any interfaces
30-Nov-2006 10:11:45.627 /etc/namedb/named.conf:135: couldn't add command channel 127.0.0.1#953: address in use
30-Nov-2006 10:11:45.630 ignoring config file logging statement due to -g option
30-Nov-2006 10:11:45.656 zone 0.0.127.IN-ADDR.ARPA/IN: loaded serial 20061130
30-Nov-2006 10:11:45.668 zone 0.168.192.in-addr.arpa/IN: loaded serial 20061130
30-Nov-2006 10:11:45.681 zone 1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.IP6.ARPA/IN: loaded serial 20061130
30-Nov-2006 10:11:45.687 zone ensata.com/IN: loaded serial 20061130
30-Nov-2006 10:11:45.700 running

其中named.cong第135行内容为：(复制的rndc.key部分)

controls {
            inet 127.0.0.1 port 953
            allow { 127.0.0.1; } keys { "rndc-key"; };
};

12) rndc stats
显示：

rndc: error: /etc/namedb/rndc.key:7: unknown option 'options'
rndc: could not load rndc configuration

rndc.key 第7行内容为自动生成的：

options {
      default-key "rndc-key";
      default-server 127.0.0.1;
      default-port 953;
};

以上就是我配置以及报错的信息~~~
help me~~~~

作者: congli 时间: 2006-11-30 13:07
先用named-checkconf,named-checkzone等工具检查一下.

作者: ryanmm 时间: 2006-11-30 14:11
1）named-checkconf -t /etc/namedb/ named.conf
显示：

named.conf:12: change directory to '/etc/namedb' failed: file not found

named.conf:12: parsing failed

named.conf  部分内容：（第12行红色）

options {

      directory    "/etc/namedb";

      pid-file       "/var/run/named/pid";
      dump-file    "/var/dump/named_dump.db";
      statistics-file "/var/stats/named.stats";

这段options是默认的，我并没有修改过

2）named-checkzone -t /etc/namedb/hosts ensta.com ensata.com.hosts
显示：

zone ensta.com/IN: loaded serial 20061130
OK

[ 本帖最后由 ryanmm 于 2006-11-30 15:16 编辑 ]

作者: 剑心通明 时间: 2006-11-30 14:41

原帖由 ryanmm 于 2006-11-30 14:11 发表
1）named-checkconf -t /etc/namedb/ named.conf
显示：

named.conf:12: change directory to '/etc/namedb' failed: file not found

named.conf:12: parsing failed

named.co ...

file not found

你确定那些文件都有吗？

作者: ryanmm 时间: 2006-11-30 14:48
cd /etc/namedb

ls
显示：

PROTO.localhost-v6.rev  make-localhost       rev
PROTO.localhost.rev    master                rndc.conf.sample
dynamic                named.conf             rndc.key
hosts                named.root             slave

都在这里吧？

作者: ryanmm 时间: 2006-11-30 18:34
我修改了named.conf

listen-on { 192.168.0.5; };

初步测试DNS解析正常了
我再继续看看

感谢立苦苦的指点~~~

[ 本帖最后由 ryanmm 于 2006-11-30 18:36 编辑 ]

欢迎光临 Chinaunix (http://bbs.chinaunix.net/)