安装Bind Chroot DNS 服务器
yum install bind-chroot bind -y
拷贝bind相关文件,准备bind chroot 环境
cp -R /usr/share/doc/bind-*/sample/var/named/* /var/named/chroot/var/named/
在bind chroot 的目录中创建相关文件
touch /var/named/chroot/var/named/data/cache_dump.db
touch /var/named/chroot/var/named/data/named_stats.txt
touch /var/named/chroot/var/named/data/named_mem_stats.txt
touch /var/named/chroot/var/named/data/named.run
mkdir /var/named/chroot/var/named/dynamic
touch /var/named/chroot/var/named/dynamic/managed-keys.bind
将 Bind 锁定文件设置为可写
chmod -R /var/named/chroot/var/named/data
chmod -R /var/named/chroot/var/named/dynamic
将/etc/named.conf 拷贝到 bind chroot目录
# cp -p /etc/named.conf /var/named/chroot/etc/named.conf
# vi /var/named/chroot/etc/named.conf
options {
listen-on port { xxxxxxxxxx; };
listen-on-v6 port { ::; };
directory "/var/named";
dump-file "/var/named/data/cache_dump.db";
statistics-file "/var/named/data/named_stats.txt";
memstatistics-file "/var/named/data/named_mem_stats.txt";
allow-query { any; };
//forwarders { 114.114.114.114; };
..
..
zone "example.local" {
type master;
file "example.local.zone";
};
zone "0.168.192.in-addr.arpa" IN {
type master;
file "192.168.0.zone";
};
..
..为 example.local 域名创建转发域与反向域文件
# vi /var/named/chroot/var/named/example.local.zone ;
; Addresses and other host information.
;
$TTL
@ IN SOA example.local. hostmaster.example.local. (
; Serial
; Refresh
; Retry
; Expire
) ; Minimum ; Define the nameservers and the mail servers IN NS ns1.example.local.
IN NS ns2.example.local.
IN A 192.168.0.70
IN MX mx.example.local. centos7 IN A 192.168.0.70
mx IN A 192.168.0.50
ns1 IN A 192.168.0.70
ns2 IN A 192.168.0.80
创建转发域
# vi /var/named/chroot/var/named/192.168..zone ;
; Addresses and other host information.
;
$TTL
@ IN SOA example.local. hostmaster.example.local. (
; Serial
; Refresh
; Retry
; Expire
) ; Minimum 0.168..in-addr.arpa. IN NS centos7.example.local. 70.0.168.192.in-addr.arpa. IN PTR mx.example.local.
70.0.168.192.in-addr.arpa. IN PTR ns1.example.local.
80.0.168.192.in-addr.arpa. IN PTR ns2.example.local.
创建方向域
开机自启动 bind-chroot 服务
/usr/libexec/setup-named-chroot.sh /var/named/chroot on
systemctl stop named
systemctl disable named
systemctl start named-chroot
systemctl enable named-chroot
ln -s '/usr/lib/systemd/system/named-chroot.service' '/etc/systemd/system/multi-user.target.wants/named-chroot.service'