Chinaunix

标题: dns转发失败，且客户端不能通过此Dns查询 [打印本页]

作者: ld1978 时间: 2012-11-12 13:52
标题: dns转发失败，且客户端不能通过此Dns查询
//
// named.conf
//
// Provided by Red Hat bind package to configure the ISC BIND named(

DNS
// server as a caching only nameserver (as a localhost DNS resolver only).
//
// See /usr/share/doc/bind*/sample/ for example named configuration files.
//

options {
      listen-on port 53 { any; };
      listen-on-v6 port 53 { ::1; };
      directory    "/var/named";
      dump-file    "/var/named/data/cache_dump.db";
      statistics-file "/var/named/data/named_stats.txt";
      memstatistics-file "/var/named/data/named_mem_stats.txt";
      allow-query    { any; };
      recursion yes;
      forwarders { 219.150.32.132; 219.146.0.130; };
      dnssec-enable yes;
      dnssec-validation yes;
      dnssec-lookaside auto;

      /* Path to ISC DLV key */
      bindkeys-file "/etc/named.iscdlv.key";

      managed-keys-directory "/var/named/dynamic";
};

logging {
      channel default_debug {
            file "data/named.run";
            severity dynamic;
      };
};

zone "." IN {
      type hint;
      file "named.ca";
};
zone "sinoempex.net" {
      type master;
      file "sinoempex.net.zone";
      allow-update { none; };
};
zone "16.172.in-addr.arpa" {
      type master;
      file "172.16.zone";
      allow-update { none; };
};

include "/etc/named.rfc1912.zones";
include "/etc/named.root.key";

主域文件配置
[root@mail ~]# cat /var/named/sinoempex.net.zone
$TTL 86400
@             IN             SOA    mail.sinoempex.net.    admin(
            12345678
            1H
            60M
            1D
            1D
            )
@             IN             NS    mail.sinoempex.net.
jsghb-ld.sinoempex.net. IN             A    172.16.1.7
mail.sinoempex.net.          IN    A    172.16.1.9
smtp.sinoempex.net.          IN    CNAME mail.sinoempex.net.
pop3.sinoempex.net.          IN    CNAME mail.sinoempex.net.
@             IN             MX    10    mail.sinoempex.net.

反向解析：
[root@mail ~]# cat /var/named/172.16.zone
$TTL 86400
@             IN             SOA          dns.sinoempex.net.    powtmaster@sinoempex.net. (
            123456
            1H
            60M
            1D
            1D
            )
@             IN             NS             dns.sinoempex.net.
9.1          IN             PTR          mail.sinoempex.net.
7.1          IN             PTR          jsghb-ld.

作者: ld1978 时间: 2012-11-12 14:27
晕，重启一下服务器就好了。另外，客户端不能使用此dns服务器，是由于服务器带的防火墙造成的。

作者: timon 时间: 2012-11-12 14:29
log呢？乍一看没啥

欢迎光临 Chinaunix (http://bbs.chinaunix.net/)