« Linux Quota 備忘 | 首頁 | NCLP Practice Notes »

2006年09月22日

BIND9 - Master / Slave DNS 基本設定備忘

named.conf 重點內容

Master:

vi /etc/named.conf

acl "trusted" { 127.0.0.1; 192.168.1.0/24; };

options {

allow-recursion { trusted; }; //避免變成 Open DNS
allow-transfer { none; }; //預設禁止 Zone Transfer
notify no; //預設不通知轄區 DNS Server

};

zone "mydomain.com" in {

type master;
file "mydomain.com.zone";
allow-transfer { slave.ip.address; };
notify yes;

};

zone "1.168.192.in-addr.arpa" in {

type master;
file "192.168.1.zone";
allow-transfer { slave.ip.address; };
notify yes;

};

Slave:

vi /etc/named.conf

zone "mydomain.com" in {

type slave;
file "slave/mydomain.com.zone";
masters { master.ip.address; };

};

zone "1.168.192.in-addr.arpa" in {

type slave;
file "slave/192.168.1.zone";
masters { master.ip.address; };

};

Slave 主機向 Master 要求傳送 Zone File 的時機

  1. master 主機上的 named 啟動、Reload 時, 發送 dns notify 信號通知 NS 主機 (除本身外) 比對 zone file serial, 且 master serial 大於 slave serial 時.
  2. slave 主機上的 named 啟動時, 發現 master serial 大於 slave serial, 或無 zone file 存在時.
  3. slave 主機每隔 refresh 時間, 向 master 查詢 zone file serial, 發現 master serial 大於 slave serial 時.

Zone File 檔案結構

Forward Lookup / 正解

$TTL 1W
@			IN	SOA	master_dns_fqdn zone_admin (
					2006092001	;serial
					2D		;refresh
					4H		;retry
					6W		;expire
					1W )		;TTL

			IN	NS	master_dns_fqdn
			IN	NS	slave_dns_fqdn
			IN	MX 10	mail_server_fqdn

master_dns_hostname	IN	A	ip_address
slave_dns_hostname	IN	A	ip_address
mail_server_hostname	IN	A	ip_address
some_hostname		IN	CNAME	another_hostname_has_A_record

Reverse Lookup / 反解

$TTL 1W
@			IN	SOA	master_dns_fqdn zone_admin (
					2006092001	;serial
					2D		;refresh
					4H		;retry
					6W		;expire
					1W )		;TTL

			IN	NS	master_dns_fqdn

entry_in_*.in-addr.arpa	IN	PTR	some_host_fqdn

ex1. zone: 20.10.150.in-addr.arpa
in the zone file: 1 IN PTR ms1.mydomain.com
retult: ms1.mydomain.com=150.10.20.1
ex2. zone: 10.150.in-addr.arpa
in the zone file: 2.20 IN PTR ms1.mydomain.com
retult: ms1.mydomain.com=150.10.20.2

Ref: Microsoft Support - Description of DNS Reverse Lookups

Root Domain Zone File: ftp://ftp.internic.net/domain/named.root


Resources:

Posted by Jamyy at 2006年09月22日 09:16

Trackback Pings

TrackBack URL for this entry:
http://cha.homeip.net/cgi-bin/mt/mt-tb.cgi/229