辅助dns和远程更新

dns可以正反解析后

主dns文件写入：

vim /etc/named.rfc1912.zones

辅助dns和远程更新

正反解析写入also-notify {172.168.33.170} ；意思为下发到辅助dns ip地址

重启服务 systemctl restart named

辅助dns写入：

改住配置文件 vim /etc/named.conf 中

listen-on port 53 { any; }; allow-query { any; }两项为any

辅助dns和远程更新

再改子配置文件vim /etc/named.rfc1912.zones

辅助dns和远程更新

zone "westos.com" IN {
        type slave;
        masters { 192.168.33.168; };
        file "slaves/westos.com.zone";
        allow-update { none;};
};
zone "254.25.172.in-addr.arpa" IN {
         type slave;
         masters { 192.168.33.168; };
         file "slaves/westos.com.ptr";
         allow-update { none;};
};

其中 master 后为主dns ip地址 slave为接受的意思

file 后接的是文件名

在/var/named/目录下创建配置文件

cp named.localhost westos.com.zone -p

cp -p named.loopback westos.com.ptr

重启named服务

验证：在辅助dns和第三台机子上vim /etc/resolv.conf 添加

servername：主dns ip

servername ：辅助dns ip

然后 dig www.westos.com

dns远程更新：

在主dns配置文件中allow-update中写入要远程更新的主机的ip这里就是辅助dns ip地址

zone "westos.com" IN {
        type master;
        file "westos.com.zone";
        allow-update { 192.168.33.170;};
        also-notify { 192.168.33.170;};
};
zone "254.25.172.in-addr.arpa" IN {
         type master;
         file "westos.com.ptr";
          allow-update { 192.168.33.170;};
       also-notify { 192.168.33.170; };
};

chmod g+x /var/named 给配置文件写入权限

重启named服务

验证：nsupdate

输入要输入的主机ip 这里是 192.168.33.168

[[email protected] named]# nsupdate
> server 192.168.33.168
> update add ir.westos.com 86400 A 1.1.1.3
> send
>

上传成功，第三台主机验证下：dig ir.westos.com

;; QUESTION SECTION:
;ir.westos.com. IN A

;; ANSWER SECTION:
ir.westos.com. 86400 IN A 1.1.1.3

;; AUTHORITY SECTION:
westos.com. 86400 IN NS dns.westos.com.

;; ADDITIONAL SECTION:
dns.westos.com. 86400 IN A 172.25.254.60

辅助dns和远程更新

相关推荐