CentOS6.2 Bind9.7.3的奇怪问题

notheway

      一台CentOS6.2，运行Bind9.7.3，服务启动都正常，resolv.conf里nameserver 127.0.0.1，从服务器ping出去，DNS解析正常，named.conf常规配置，”." 对应"name.ca"，配置了一个域"abc.com"。该DNS服务器配置的内网地址192.168.0.1，在一台硬件防火墙后面，确认input TCP 53和UDP 53已开放，output 端口全部开放。
      name.ca文件已更新，服务器的本机的防火墙已经iptables -F 清空，远程开NMAP扫描，可以看到相关端口已经打开，奇怪的是客户机访问abc.com一切正常，但不能访问其它网站。查日志看到很多ipv6的地址解析，是要以ipv4方式启动？

      请各位帮忙参详，谢谢！

chenyx

在  /etc/sysconfig/named  中加上 OPTIONS="-4" 启动选项
测试下

notheway

chenyx 发表于 2012-05-29 19:18
在  /etc/sysconfig/named  中加上 OPTIONS="-4" 启动选项
测试下

加 -4 参数运行了，还是和以前一样，客户机只能解析设定的那个abc.com域。named -4 -g 运行屏幕没有任何错误提示。
29-May-2012 16:20:25.789 starting BIND 9.7.2-P3 -4 -g -c /usr/local/named/etc/named.conf
29-May-2012 16:20:25.789 built with '--enable-largefile' '--enable-threads' '--prefix=/usr/local/named'
29-May-2012 16:20:25.789 adjusted limit on open files from 1024 to 1048576
29-May-2012 16:20:25.789 found 4 CPUs, using 4 worker threads
29-May-2012 16:20:25.790 using up to 4096 sockets
29-May-2012 16:20:25.794 loading configuration from '/usr/local/named/etc/named.conf'
29-May-2012 16:20:25.794 reading built-in trusted keys from file '/usr/local/named/etc/bind.keys'
29-May-2012 16:20:25.794 using default UDP/IPv4 port range: [1024, 65535]
29-May-2012 16:20:25.795 using default UDP/IPv6 port range: [1024, 65535]
29-May-2012 16:20:25.796 no IPv6 interfaces found
29-May-2012 16:20:25.796 listening on IPv4 interface lo, 127.0.0.1#53
29-May-2012 16:20:25.797 listening on IPv4 interface em1, 192.168.0.1#53
29-May-2012 16:20:25.798 generating session key for dynamic DNS
29-May-2012 16:20:25.801 set up managed keys zone for view _default, file 'managed-keys.bind'
29-May-2012 16:20:25.801 automatic empty zone: 0.IN-ADDR.ARPA
29-May-2012 16:20:25.801 automatic empty zone: 127.IN-ADDR.ARPA
29-May-2012 16:20:25.801 automatic empty zone: 254.169.IN-ADDR.ARPA
29-May-2012 16:20:25.801 automatic empty zone: 2.0.192.IN-ADDR.ARPA
29-May-2012 16:20:25.801 automatic empty zone: 100.51.198.IN-ADDR.ARPA
29-May-2012 16:20:25.801 automatic empty zone: 113.0.203.IN-ADDR.ARPA
29-May-2012 16:20:25.801 automatic empty zone: 255.255.255.255.IN-ADDR.ARPA
29-May-2012 16:20:25.801 automatic empty zone: 0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.IP6.ARPA
29-May-2012 16:20:25.801 automatic empty zone: 1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.IP6.ARPA
29-May-2012 16:20:25.801 automatic empty zone: D.F.IP6.ARPA
29-May-2012 16:20:25.801 automatic empty zone: 8.E.F.IP6.ARPA
29-May-2012 16:20:25.801 automatic empty zone: 9.E.F.IP6.ARPA
29-May-2012 16:20:25.801 automatic empty zone: A.E.F.IP6.ARPA
29-May-2012 16:20:25.801 automatic empty zone: B.E.F.IP6.ARPA
29-May-2012 16:20:25.801 automatic empty zone: 8.B.D.0.1.0.0.2.IP6.ARPA
29-May-2012 16:20:25.803 command channel listening on 127.0.0.1#953
29-May-2012 16:20:25.803 ignoring config file logging statement due to -g option

chenyx

dig跟踪下dns解析看看

1. dig +trace www.sina.com.cn
   

复制代码

notheway

; <<>> DiG 9.5.0a6 <<>> trace www.sina.com.cn
;; global options:  printcmd
;; connection timed out; no servers could be reached

跟防火墙有关系吗？另一台DNS配置公网IP的一切正常。

notheway

新情况：刚刚发现其实连那个域也是解析不了，之前以为能解析应该是缓存的原因。现在把named 服务停掉，客户机依旧能解析该域名。