分类： LINUX
2010-09-26 22:32:46
Bind 主从安装配置
主：172.16.1.1 (CentOS 5.2)
从：172.16.1.2 (CentOS 5.2)
172.16.1.1:
[root@master ~]# tar xvf bind-9.7.1-P2.tar.gz
[root@master ~]# cd bind-9.7.1-P2
[root@master~]#./configure--prefix=/usr/local/bind/--disable-openssl-version-check--enable-threads
[root@master ~]# make
[root@master ~]# make install
[root@master ~]#/usr/local/bind/sbin/rndc-confgen > /usr/local/bind/etc/rndc.conf
[root@master ~]#cd /usr/local/bind/etc
[root@master ~]# cat rndc.conf| tail -10 | head -9 | sed s/#\//g > named.conf
[root@master ~]#vim named.conf
options {
directory "/usr/local/bind/etc";
pid-file "/usr/local/bind/var/named.pid";
listen-on port 53 {any;};
allow-query {any;};
dump-file "/usr/local/bind/var/data/cache_dump.db";
statistics-file "/usr/local/bind/var/data/bind_stats.txt";
};
logging {
channel error_log {
file "/usr/local/bind/var/logs/error.log" versions 10 size 32m;
severity warning;
print-time yes;
print-severity yes;
print-category yes;
};
channel query_log {
file "/usr/local/bind/var/logs/query.log" versions 10 size 32m;
severity debug;
print-time yes;
print-severity yes;
print-category yes;
};
category default { error_log; };
category queries { query_log; };
};
zone "." IN {
type hint;
file "zone/named.root";
};
zone "localhost" IN {
allow-transfer { 172.16.1.2; };
type master;
file "zone/localhost.zone";
allow-update{none;};
};
zone "test.com" IN {
allow-transfer { 172.16.1.2; };
type master;
file "zone/test.com.zone";
allow-update{none;};
};
zone "1.16.172.in-addr.arpa" in {
allow-transfer { 172.16.1.2; };
type master;
file "zone/test.com.rev";
};
key "rndc-key" {
algorithm hmac-md5;
secret "bemLfizJ+kmqoH8mti2ZOw==";
};
controls {
inet 127.0.0.1 port 953
allow { 127.0.0.1; } keys { "rndc-key"; };
};
[root@master ~]#mkdir /usr/local/bind/var/logs
[root@master ~]#mkdir /usr/local/bind/var/data
[root@master ~]#mkdir /usr/local/bind/etc/zone
[root@master ~]#cd /usr/local/bind/etc
[root@master zone]# cat localhost.zone
$TTL 86400
@ IN SOA localhost. root.localhost. (
42 ; Serial (YYMMDDSN)
1800 ; Refresh
300 ; Retry
3600 ; Expiry
300 ) ; Minimum
@ IN NS localhost.
@ IN A 127.0.0.1
[root@master zone]# cat test.com.zone
$TTL 86400 ; 1 day
@ IN SOA test.com. root.test.com. (
44 ; serial
28800 ; refresh (8 hours)
7200 ; retry (2 hours)
604800 ; expire (1 week)
86400 ; minimum (1 day)
)
IN NS ns1.test.com.
IN NS ns2.test.com.
IN MX 3 mail.test.com.
ns1 IN A 172.16.1.1
ns2 IN A 172.16.1.2
mail IN A 172.16.1.3
www IN A 172.16.1.4
other IN CNAME .
[root@master zone]# cat test.com.rev
$TTL 86400 ; 1 day
@ IN SOA test.com. root.test.com. (
42 ; serial
28800 ; refresh (8 hours)
7200 ; retry (2 hours)
604800 ; expire (1 week)
86400 ; minimum (1 day)
)
IN NS ns1.test.com.
IN NS ns2.test.com.
2 IN PTR ns2.test.com.
1 IN PTR ns1.test.com.
3 IN PTR
4 IN PTR ftp.test.com.
172.16.1.2:
[root@master ~]# tar xvf bind-9.7.1-P2.tar.gz
[root@master ~]# cd bind-9.7.1-P2
[root@master~]#./configure--prefix=/usr/local/bind/--disable-openssl-version-check--enable-threads
[root@master ~]# make
[root@master ~]# make install
[root@master ~]#/usr/local/bind/sbin/rndc-confgen > /usr/local/bind/etc/rndc.conf
[root@master ~]#cd /usr/local/bind/etc
[root@master ~]# cat rndc.conf| tail -10 | head -9 | sed s/#\//g > named.conf
[root@master ~]#vim named.conf
options {
directory "/usr/local/bind/etc";
pid-file "/usr/local/bind/var/named.pid";
listen-on port 53 {any;};
allow-query {any;};
dump-file "/usr/local/bind/var/data/cache_dump.db";
statistics-file "/usr/local/bind/var/data/bind_stats.txt";
forwarders { 172.16.1.1;};
};
logging {
channel error_log {
file "/usr/local/bind/var/logs/error.log" versions 10 size 32m;
severity warning;
print-time yes;
print-severity yes;
print-category yes;
};
channel query_log {
file "/usr/local/bind/var/logs/query.log" versions 10 size 32m;
severity debug;
print-time yes;
print-severity yes;
print-category yes;
};
category default { error_log; };
category queries { query_log; };
};
zone "." IN {
type hint ;
file "zone/named.root";
};
zone "localhost" IN {
type slave;
file "zone/localhost.zone";
masters { 172.16.1.1; };
};
zone "test.com" IN {
type slave;
file "zone/test.com.zone";
masters { 172.16.1.1; };
};
zone "1.16.172.in-addr.arpa" in {
type slave;
file "zone/test.com.rev";
masters { 172.16.1.1; };
};
key "rndc-key" {
algorithm hmac-md5;
secret "gVbNhA3bQHZAyE164yNUKA==";
};
controls {
inet 127.0.0.1 port 953
allow { 127.0.0.1; } keys { "rndc-key"; };
};
[root@master ~]#mkdir /usr/local/bind/var/logs
[root@master ~]#mkdir /usr/local/bind/var/data
[root@master ~]#mkdir /usr/local/bind/etc/zone
手动建立named.root其余会的区域文件会从master同步过来。
在master修改了记录时一定要修改serial! 只有master Serial大于slave时 slave才会同步。
Named.root下载链接:
