ИП Моисеенко А.А. - Установка сервера DNS

Установка сервера DNS - bind9

DNS сервер bind9 устанавливается командой
#apt-get install bind9

/etc/bind/named.conf:
//include "/etc/bind/named.conf.options";
include "/etc/bind/my_named.conf.options";
include "/etc/bind/named.conf.local";
include "/etc/bind/named.conf.default-zones";
include "/etc/bind/my_dns_zones.conf";

/etc/bind/my_named.conf.options:
options {
directory "/var/cache/bind";

// If there is a firewall between you and nameservers you want
// to talk to, you may need to fix the firewall to allow multiple
// ports to talk. See http://www.kb.cert.org/vuls/id/800113

// If your ISP provided one or more IP addresses for stable
// nameservers, you probably want to use them as forwarders.
// Uncomment the following block, and insert the addresses replacing
// the all-0's placeholder.

// forwarders {
// 0.0.0.0;
// };

//========================================================================
// If BIND logs error messages about the root key being expired,
// you will need to update your keys. See https://www.isc.org/bind-keys
//========================================================================
dnssec-validation auto;

auth-nxdomain no; # conform to RFC1035
// listen-on-v6 { any; };

additional-from-auth yes;
additional-from-cache yes;
allow-query {0.0/0;};
//allow-recursion { 0.0/0; };
//allow-recursion { 141.101.245.0/24; 127.0.0.1/32; 37.29.112.234/32; 85.172.30.60/32; };
allow-recursion { 141.101.245.0/24; 127.0.0.1/32; };
};

/etc/bind/my_dns_zones.conf:
// This is the primary configuration file for the BIND DNS server named.
//
// Please read /usr/share/doc/bind9/README.Debian.gz for information on the
// structure of BIND configuration files in Debian, *BEFORE* you customize
// this configuration file.
//
// If you are just adding zones, please do that in /etc/bind/named.conf.local

logging
{
channel default_syslog {
file "/var/log/named/masters.log";
// size 20M;

print-time yes;
#syslog daemon; // send to syslog's daemon
// facility
//severity info; // only send priority info
// and higher
};

category default { default_syslog; default_debug; };
category unmatched { null; };
};

zone "domain.ru" {
type master;
file "/var/named/domain.ru";
allow-transfer { 141.101.245.190; } ;
};

/var/named/domain.ru:
$TTL 3600
domain.ru. IN SOA ns1.domain.ru. support.maasoft.ru. (2013070421 10800 3600 604800 86400)
domain.ru. IN NS ns1
domain.ru. IN NS ns2
domain.ru. IN MX 10 mx1
domain.ru. IN A 141.101.245.192
ns1 IN A 141.101.245.192
ns2 IN A 141.101.245.190
mx1 IN A 141.101.245.192
domain.ru. IN TXT "v=spf1 ip4:141.101.245.192 a mx ~all"
ip1 IN A 141.101.245.192
ip2 IN A 141.101.245.190
www IN CNAME ip1
* IN CNAME ip1
;sub.domain.ru. IN NS domain.ru.
;sub.domain.ru. IN MX 5 mx1

#/etc/init.d/bind9 reload

Далее можно добавить вторичный DNS сервер:

После чего указать DNS серверы у регистратора.
IP первичного DNS сервера - IP Вашего VDS, IP вторичного - ns.maasoftware.com (141.101.245.190).

1 декабря 2013 года, воскресенье,

Помощь

Назад Наверх

/ Помощь - Настройки