AS4 下DNS设置的错误，百思不得其解，求斑主和高手帮忙！！！

junfung

需要：内网需要做一台mail的server ,网域：chinamk.com,网内有windows 2003 PDC，
Linux AS4架设内部邮件服务器，Linux主机名：test.chinamk.com,但是我首先在AS4上做DNS的设置上就出现了问题，查过好多贴子都无法解决，现贴上错误提示和我的设置文件，还请各位给予指点。
环境：全新完整安装 Redhat AS4
Linux IP:192.168.0.5

运行 host 192.168.0.5 如下提示：
Host 5.0.168.192.in-addr.arpa not found :2(SERVFAIL)

运行 host test.chinamk.com 如下提示：
Host test.chinamk.com not found :2(SERVFAIL)

我的各项配置文件如下：
//    /etc/sysconfig/network-scripts/ifcfg-eth0 的配置文件

DEVICE=eth0
BOOTPROTO=static
BROADCAST=192.168.0.255
HWADDR=00:0C:29:FDE:64
IPADDR=192.168.0.5
NETMASK=255.255.255.0
NETWORK=192.168.0.0
ONBOOT=yes
TYPE=Ethernet


//    /etc/hosts 的配置文件

# Do not remove the following line, or various programs
# that require network functionality will fail.
127.0.0.1               test.chinamk.com test localhost.localdomain localhost


//    /etc/resolv.conf 的配置文件

search chinamk.com
nameserver 192.168.0.5


//    /etc/sysconfig/network 的配置文件

NETWORKING=yes
HOSTNAME=test.chinamk.com
GATEWAY=192.168.0.1


//    /etc/named.conf 的配置文件

//
// named.conf for Red Hat caching-nameserver
//

options {
        directory "/var/named";
        dump-file "/var/named/data/cache_dump.db";
        statistics-file "/var/named/data/named_stats.txt";
        forwarders {192.168.0.5;};
        /*
         * If there is a firewall between you and nameservers you want
         * to talk to, you might need to uncomment the query-source
         * directive below.  Previous versions of BIND always asked
         * questions using port 53, but BIND 8.1 uses an unprivileged
         * port by default.
         */
         // query-source address * port 53;
};

//
// a caching only nameserver config
//
controls {
        inet 127.0.0.1 allow { localhost;192.168.0.5; } keys { rndckey; };
};

zone "." IN {
        type hint;
        file "named.ca";
};

zone "localdomain" IN {
        type master;
        file "localdomain.zone";
        allow-update { none; };
};

zone "localhost" IN {
        type master;
        file "localhost.zone";
        allow-update { none; };
};

zone "0.0.127.in-addr.arpa" IN {
        type master;
        file "named.local";
        allow-update { none; };
};

zone "0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ip6.arpa" IN {
        type master;
        file "named.ip6.local";
        allow-update { none; };
};

zone "255.in-addr.arpa" IN {
        type master;
        file "named.broadcast";
        allow-update { none; };
};

zone "0.in-addr.arpa" IN {
        type master;
        file "named.zero";
        allow-update { none; };
};

zone "chinamk.com" IN {
        type master;
        file "chinamk";
};

zone "0.168.192.in-addr.arpa" IN {
        type master;
        file "192.168.0";
};
include "/etc/rndc.key";


//    /var/named/chinamk 正向搜索的配置

$TTL 2h
chinamk.com. IN SOA test.chinamk.com. root.test.chinamk.com.(
20050726 ;serial number
2h ;refresh timeout
40m ;retry refresh timeout
1w ;expire timeout
2h ;TTL time
)
chinamk.com. IN NS test.chinamk.com.
test IN A 192.168.0.5
chinamk.com. IN MX 10 test.chinamk.com.


//  /var/named/192.168.0 反向搜索的配置

$TTL 2h
@ IN SOA test.chinamk.com. root.test.chinamk.com.(
20050726 ;serial number
2h ;refresh timeout
40m ;retry refresh timeout
1w ;expire timeout
2h ;TTL time
)
0.168.192.in-addr.arpa. IN NS test.chinamk.com.
5 IN PTR test.chinamk.com.

请各们帮帮看看，错在哪里？如果不正确，不知哪位有在AS4上做过正确的DNS配置，可否将步骤和配置文件发给小弟看看。

lanyao

AS4里的named是chroot的，你可能需要把chinamk和192.168.0放到/var/named/chroot/var/named/下面，然后再在/var/named/下面建个软链接。

junfung

Post by lanyao
AS4里的named是chroot的，你可能需要把chinamk和192.168.0放到/var/named/chroot/var/named/下面，然后再在/var/named/下面建个软链接。

感谢 lanyao 的帮助，按照你的方法设定以后，反向解析正常，但正向解析还有问题。

host test.chinamk.com 提示：
Host test.chinamk.com not found: 3(NXDOMAIN)

请帮分析一下我上面的主机和域的设置问题在哪，谢谢！。

sihexuan

粗略看了下看到 forwarders {192.168.0.5;};这个不明白，怎么会把192.168.0.5不能解析的再转发给自己解析

sihexuan

看不出什么大问题，先named-checkzone检查下语法有没有问题

junfung

关于这一项，我也是看了好多贴子都没有明白它的意思，这个是实在找不到解决方法后在别人的DNS配置的贴子里抄来的。

lanyao

forwarders {xxx.xxx.x.x;};
xxx.xxx.x.x应该是你的上级的DNS,例如我是上海热线202.96.209.5

gambler-木木

// /etc/named.conf 的配置文件

//
// named.conf for Red Hat caching-nameserver
//

options {
directory "/var/named";
/*
* If there is a firewall between you and nameservers you want
* to talk to, you might need to uncomment the query-source
* directive below. Previous versions of BIND always asked
* questions using port 53, but BIND 8.1 uses an unprivileged
* port by default.
*/
// query-source address * port 53;
};

//
// a caching only nameserver config
//
controls {
inet 127.0.0.1 allow { localhost; } keys { rndckey; };
};

zone "." IN {
type hint;
file "named.ca";
};

zone "localhost" IN {
type master;
file "localhost.zone";
allow-update { none; };
};

zone "0.0.127.in-addr.arpa" IN {
type master;
file "named.local";
allow-update { none; };
};

zone "0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ip6.arpa" IN {
type master;
file "named.ip6.local";
allow-update { none; };
};

zone "255.in-addr.arpa" IN {
type master;
file "named.broadcast";
allow-update { none; };
};

zone "0.in-addr.arpa" IN {
type master;
file "named.zero";
allow-update { none; };
};

zone "chinamk.com" IN {
type master;
file "chinamk";
};

zone "0.168.192.in-addr.arpa" IN {
type master;
file "192.168.0";
};
include "/etc/rndc.key";



// /etc/resolv.conf 的配置文件

search localdomain
nameserver 192.168.0.5


//host.conf 和hosts系统自带的不用改

// /var/named/chinamk 正向搜索的配置

$TTL 86400
@ IN SOA  ns.chinamk.com. root.ns.chinamk.com.(
20050726 ;serial number
2h ;refresh timeout
40m ;retry refresh timeout
1w ;expire timeout
2h ;TTL time
)
       IN NS ns.chinamk.com.
ns    IN A 192.168.0.5
test IN A 192.168.0.5


// /var/named/192.168.0 反向搜索的配置

$TTL 86400
@ IN SOA ns.chinamk.com. root.ns.chinamk.com.(
20050726 ;serial number
2h ;refresh timeout
40m ;retry refresh timeout
1w ;expire timeout
2h ;TTL time
)
   IN NS  ns.chinamk.com.
5 IN PTR ns.chinamk.com.


AS4里的named是chroot的，你把chinamk和192.168.0放到/var/named/chroot/var/named/和/var/named下面，试试看

我的内网DNS服务器是这样配的

memory

检查日志，很容易把问题找出来。