|
|
发表于 2005-5-19 17:24:56
|
显示全部楼层
Debian好办,我以前在Debian下做过最简单的dns了。
这种东西详细说没有意思,在Debian默认安装bind9的情况下,
简单的事情就是修改几处地方。域名pk.org,网段192.168.1.0/24
#tail -10 /etc/bind/named.conf.local
zone "pk.org" {
type master;
file "/var/cache/bind/db.pk.org";
};
zone "1.168.192.in-addr.arpa"{
type master;
file "/var/cache/bind/db.192.168.1";
};
#cat /var/cache/bind/db.pk.org
$TTl 38400
@ IN SOA pkdebian.pk.org. root.pkdebian.pk.org. (
1039102090 ; serial, todays date + todays serial #
10800 ; refresh, seconds
3600 ; retry, seconds
604600 ; expire, seconds
38400 ) ; minimum, seconds
IN NS pkdebian.pk.org.
IN MX 10 pkdebian.pk.org.
; 域名服
pk.org. IN NS pkdebian.pk.org.
; 计算机名称和地址
localhost.pk.org. IN A 127.0.0.1
pkdebian.pk.org. IN A 192.168.1.254
pk.pk.org. IN A 192.168.1.100
#cat /var/cache/bind/db.192.168.1
@ IN SOA pkdebian.pk.org root.pkdebian.pk.org. (
1039102453 ; Serial
10800 ; Refresh
3600 ; Retry
604800 ; Expire
38400 ) ; Minimum
@ IN NS pkdebian.pk.org.
; 主机
1.168.192.in-addr.arpa. IN NS pkdebian.pk.org.
254.1.168.192.in-addr.arpa. IN PTR pkdebian.pk.org.
100.1.168.192.in-addr.arpa. IN PTR pk.pk.org.
重启bind9
#/etc/init.d/bind9 restart
#########Debian下简单测试##########
#ping -c 4 pk
PING pk.pk.org (192.168.1.100): 56 data bytes
64 bytes from 192.168.1.100: icmp_seq=0 ttl=128 time=1.0 ms
64 bytes from 192.168.1.100: icmp_seq=1 ttl=128 time=1.0 ms
64 bytes from 192.168.1.100: icmp_seq=2 ttl=128 time=1.0 ms
64 bytes from 192.168.1.100: icmp_seq=3 ttl=128 time=1.0 ms
--- pk.pk.org ping statistics ---
4 packets transmitted, 4 packets received, 0% packet loss
round-trip min/avg/max = 1.0/1.0/1.0 ms
# nslookup pkdebian
Note: nslookup is deprecated and may be removed from future releases.
Consider using the `dig' or `host' programs instead. Run nslookup with
the `-sil[ent]' option to prevent this message from appearing.
Server: 127.0.0.1
Address: 127.0.0.1#53
Name: pkdebian.pk.org
Address: 192.168.1.254
# nslookup pk
Note: nslookup is deprecated and may be removed from future releases.
Consider using the `dig' or `host' programs instead. Run nslookup with
the `-sil[ent]' option to prevent this message from appearing.
Server: 127.0.0.1
Address: 127.0.0.1#53
Name: pk.pk.org
Address: 192.168.1.100
##############M$简单测试############
D:\>ping pkdebian
Pinging pkdebian.pk.org [192.168.1.254] with 32 bytes of data:
Reply from 192.168.1.254: bytes=32 time<1ms TTL=64
Reply from 192.168.1.254: bytes=32 time<1ms TTL=64
Reply from 192.168.1.254: bytes=32 time<1ms TTL=64
Reply from 192.168.1.254: bytes=32 time<1ms TTL=64
Ping statistics for 192.168.1.254:
Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 0ms, Maximum = 0ms, Average = 0ms
d:\>
D:\>nslookup pk.pk.org
Server: pkdebian.pk.org
Address: 192.168.1.254
Name: pk.pk.org
Address: 192.168.1.100
d:\>
当然,要测试正确DNS还要修改host、hosts.conf和resolv.conf等一些小文件。
要更复杂(比如多域、子域)更安全(比如chroot-jail)的DNS除了参考和阅读howto相关
的知识别无它法,还有就是自己测试,多google:-)
比如,偶搞了个chroot DNS,用Debian默认下根本不工作,而且也无法判断它是否
就在chroot下工作,只能从源码开始编译了开始了:-)目前工作还算良好。 |
|