如何设置dns只对指定的域名转发？

chaoy

我想dns只对baidu.com及子域名进行递归查询，请问如何设置，下面是我的设置文件！

操作系统：CentOS 5.5
BIND版本：
[root@localhost ~]# rpm -qa bind*
bind-9.3.6-4.P1.el5_4.2
bind-chroot-9.3.6-4.P1.el5_4.2
bind-libs-9.3.6-4.P1.el5_4.2
bind-devel-9.3.6-4.P1.el5_4.2
bind-sdb-9.3.6-4.P1.el5_4.2
bind-libbind-devel-9.3.6-4.P1.el5_4.2
bind-utils-9.3.6-4.P1.el5_4.2

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
named.conf配置如下：

options {
listen-on port 53 { any; };
listen-on-v6 port 53 { ::1; };
directory "/var/named";
dump-file "/var/named/data/cache_dump.db";
statistics-file "/var/named/data/named_stats.txt";
memstatistics-file "/var/named/data/named_mem_stats.txt";

allow-query { any; };
allow-query-cache { none; };
};
logging {
channel default_debug {
file "data/named.run";
severity dynamic;
};
};
view localhost_resolver {
match-clients { any; };
match-destinations { any; };
recursion yes;
include "/etc/named.rfc1912.zones";
};

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
named.rfc1912.zones配置内容如下：

zone "." IN {
type hint;
file "named.ca";
};

zone "localdomain" IN {
type master;
file "localdomain.zone";
allow-update { none; };
};

zone "localhost" IN {
type master;
file "localhost.zone";
allow-update { none; };
};

zone "0.0.127.in-addr.arpa" IN {
type master;
file "named.local";
allow-update { none; };
};


//百度域名
zone "baidu.com" IN {
type forward;
forwarders { 202.106.0.20; };
};

llzqq

http://www.chinaunix.net/jh/16/20840.html

chaoy

谢谢llzqq，那篇文章我之前看到了。
我想要达到的目的是不解析所有zone中指定之外的域名，但是bind9好像默认解析所有域名到cache，我关闭缓存查询后，forward zone也不起作用了，很苦恼！我把根域删掉后bind9照样能解析到外网域名，不知道如何关闭bind9的默认解析所有域名功能。

chaoy

看来只能将就实现这个功能了，本来不想设置一个空的转发地址，觉得这样效率不好，没办法了，将就了。有好的方法请告诉我啊！

在options添加

1. forwarders { 127.0.0.1; }; //一个不存在的地址也行
   
2. forward only;

复制代码

这样区中的转发功能才能生效。
具体配置如下：

1. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
   
2. named.conf配置如下：
   
3. 
   
4. options {
   
5. listen-on port 53 { any; };
   
6. listen-on-v6 port 53 { ::1; };
   
7. directory "/var/named";
   
8. dump-file "/var/named/data/cache_dump.db";
   
9. statistics-file "/var/named/data/named_stats.txt";
   
10. memstatistics-file "/var/named/data/named_mem_stats.txt";
    
11. 
    
12. allow-query { any; };
    
13. allow-query-cache { any; };
    
14. forwarders { 127.0.0.1; };
    
15. forward only;
    
16. };
    
17. logging {
    
18. channel default_debug {
    
19. file "data/named.run";
    
20. severity dynamic;
    
21. };
    
22. };
    
23. view localhost_resolver {
    
24. match-clients { any; };
    
25. match-destinations { any; };
    
26. recursion yes;
    
27. include "/etc/named.rfc1912.zones";
    
28. };
    
29. 
    
30. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    
31. named.rfc1912.zones配置内容如下：
    
32. 
    
33. zone "." IN {
    
34. type hint;
    
35. file "named.ca";
    
36. };
    
37. 
    
38. zone "localdomain" IN {
    
39. type master;
    
40. file "localdomain.zone";
    
41. allow-update { none; };
    
42. };
    
43. 
    
44. zone "localhost" IN {
    
45. type master;
    
46. file "localhost.zone";
    
47. allow-update { none; };
    
48. };
    
49. 
    
50. zone "0.0.127.in-addr.arpa" IN {
    
51. type master;
    
52. file "named.local";
    
53. allow-update { none; };
    
54. };
    
55. 
    
56. 
    
57. //百度域名
    
58. zone "baidu.com" IN {
    
59. type forward;
    
60. forwarders { 202.106.0.20; };
    
61. };
    
62. 
    

复制代码

llzqq

在named.conf中关闭递归查询

chaoy

回复 5# llzqq


    关闭好像转发区就不起作用了。

edisonzfy

recursion开启，将hint文件named.ca置空试试。

0vk0

参考下这个了,http://www.oschina.net/bbs/thread/6451

changying0521

zone "baidu.com" IN{
type forward;
forward  only ;
forwarders {ip; };
};