- 论坛徽章:
- 0
|
本帖最后由 cryboy2001 于 2014-09-23 10:50 编辑
版本:CentOS6.4 Bind9.8
这是我的具体配置,为什么不能解析外网域名呢?求高手解答阿。。。十分感谢!!
一、named.conf文件
options {
listen-on port 53 { any; };
directory "/var/named";
dump-file "/var/named/data/cache_dump.db";
statistics-file "/var/named/data/named_stats.txt";
forward first;
forwarders{
//这一个转发器我填的是公司域名服务器地址,我设置和不设置一个样,都没有能解析外部域名,怎么回事?
};
memstatistics-file "/var/named/data/named_mem_stats.txt";
allow-query { any; };
recursion yes;
dnssec-enable yes;
dnssec-validation yes;
dnssec-lookaside auto;
/* Path to ISC DLV key */
bindkeys-file "/etc/named.iscdlv.key";
managed-keys-directory "/var/named/dynamic";
};
logging {
channel default_debug {
file "data/named.run";
severity dynamic;
};
};
zone "." IN {
type hint;
file "named.ca";
};
include "/etc/named.rfc1912.zones";
include "/etc/named.root.key";
二、named.rfc1912.zones文件
zone "localhost.localdomain" IN {
type master;
file "named.localhost";
allow-update {none;};
};
zone "0.0.127.in-addr.arpa" IN {
type master;
file "named.loopback";
allow-update {none;};
};
zone "13.7.10.in-addr.arpa" IN {
type master;
file "13.7.10.zone";
//allow-update { none; };
};
zone "test2.com" IN {
type master;
file "test2.com.zone";
};
zone "14.7.10.in-addr.arpa" IN {
type master;
file "14.7.10.zone";
};
三、named.ca 就不用说了吧,都一样,没更改其中的内容
四、test2.com.zone 文件
$TTL 1D
@ IN SOA ns.test2.com. root (
1 ; serial
1D ; refresh
1H ; retry
1W ; expire
3H ) ; minimum
@ IN NS ns.test2.com.
ns IN A 10.7.14.15
www IN A 10.7.14.15
五、14.7.10.zone 文件
$TTL 1D
@ IN SOA ns.test2.com. root (
12 ; serial
1D ; refresh
1H ; retry
1W ; expire
3H ) ; minimum
@ IN NS ns.test2.com.
15 IN PTR ns.test2.com.
15 IN PTR www.test2.com.
基本就是这样配置的,能够解析我自己的www.test2.com ,但是不能解析例如:www.baidu.com这样的外网域名,怎么回事呢? |
|