2010年6月18日 星期五

Config BIND DNS

1. Cai dat BIND DNS
- yum install bind caching-nameserver
2. Open port 53 in iptables
- vi /etc/sysconfig/iptables
- A INPUT -p udp -m state -m udp --dport 53 --state NEW -j ACCEPT
3. Config /var/named.conf file
acl net {
172.22.15.0/24;
};
options {
listen-on port 53 {127.0.0.1; 172.22.15.17; };
directory "/var/named";
dump-file "/var/named/data/cache_dump.db";
statistics-file "/var/named/data/named_stats.txt";
memstatistics-file "/var/named/data/named_mem_stats.txt";
allow-query {
localhost;
172.22.15.17;172.22.15.0/24;
};
allow-transfer {
127.0.0.1;
172.22.15.0/24;
};
recurision yes;
};
logging {
channel default_debug {
file "data/named.run";
severity dunamic;
};
};
zone "." IN {
type hint;
file "named.ca";
};
include "/etc/named.rfc1912.zones";
controls {
inet 172.22.15.17 port 53 allow { 127.0.0.1; 172.22.15.17; } keys { rndc-key; };
};

沒有留言:

張貼留言