bind 安装(2) view

bind 是能够运行了，想想以前看PDF时说支持分割这么个功能，呵呵，刚好我的DNS服务器可以装内网与外网隔开，使得内网用户对邮件主机DNS查询时得到10.*.*.*这样的记录，而外网用户则得到202.*.*.*这样的公网地址。

先上测试机做一下看看。更改named.conf如下：
//
controls {
        inet 127.0.0.1 allow { localhost; } keys { rndckey; };
};


view "two"{
        match-clients{192.168.200.0/24;};
zone "monitor.com" IN {
        type master;
        file "monitor200.zone";
        allow-update { none; };
};
};

view "other"{
match-clients{any;};
zone "." IN {
        type hint;
        file "named.ca";
};

zone "localdomain" IN {
        type master;
        file "localdomain.zone";
        allow-update { none; };
};


zone "monitor.com" IN {
        type master;
        file "monitor000.zone";
        allow-update { none; };
};

zone "localhost" IN {
        type master;
        file "localhost.zone";
        allow-update { none; };
};

zone "0.0.127.in-addr.arpa" IN {
        type master;
        file "named.local";
        allow-update { none; };
};

zone "0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ip6.arpa" IN {
        type master;
        file "named.ip6.local";
        allow-update { none; };
};

zone "255.in-addr.arpa" IN {
        type master;
        file "named.broadcast";
        allow-update { none; };
};

zone "0.in-addr.arpa" IN {
        type master;
        file "named.zero";
        allow-update { none; };
};
};

include "/etc/rndc.key";
[root@logser log]# 

在刚开始的时候用VIEW只将自己想用的ZONE文件包括，结果用named-checkconf 测试时，提示要将所有ZONE文件放在VIEW中，就按提示做了。
[root@logser log]# more /var/named/chroot/var/named/monitor*
::::::::::::::
/var/named/chroot/var/named/monitor000.zone
::::::::::::::
$TTL    86400
@               IN SOA  logser.monitor.com. root (
                                        42              ; serial (d. adams)
                                        3H              ; refresh
                                        15M             ; retry
                                        1W              ; expiry
                                        1D )            ; minimum
                IN NS   logser.monitor.com.
logser  IN A            192.168.0.234
abc     IN A            192.168.200.1

::::::::::::::
/var/named/chroot/var/named/monitor200.zone
::::::::::::::
$TTL    86400
@               IN SOA  logser.monitor.com. root (
                                        42              ; serial (d. adams)
                                        3H              ; refresh
                                        15M             ; retry
                                        1W              ; expiry
                                        1D )            ; minimum
                IN NS   logser.monitor.com.
logser  IN A            192.168.0.234
abc     IN A            192.168.0.1

[root@logser log]#
查一下ZONE文件，rndc reload 一下，再用客户端查看下：
[root@logser log]# nslookup
> server 192.168.0.234
Default server: 192.168.0.234
Address: 192.168.0.234#53
> abc.monitor.com
Server:         192.168.0.234
Address:        192.168.0.234#53

Name:   abc.monitor.com
Address: 192.168.200.1
>
再找一台192.168.200.9机器试一下，呵呵，结果还真不一样呀。看来这东西用起来还真行呀。