正向解析，是在缓存DNS服务器的基础之上，创建一个负责域解析的解析库，该域需要上级域的授权（定义NS记录、A记录） 。
1.修改主配置文件
~]# vim /etc/named.rfc1912.zones zone "huying.com" IN { type master; file "huying.zone"; }; ~]# named-checkconf |
2.创建区域解析库
[root@el7 named]# vim /var/named/huying.zone $TTL 1D ;缓存时间为1D(day) @ IN SOA ns1.huying.com. admin.huying.com. ( ;@本区域名可以@代替 201811 ;序列号 1H ;主从同步时间间隔为1小时 30M ;当主从故障时，重试同步时间为30分钟 2H ;辅助DNS Server的失效时间 1D ;否定答案的缓存时间为1天 ) IN NS ns1.huying.com. ;定义该区域负责解析的DNS服务器 IN NS ns2.huying.com. ;多条记录的name相同，则可以省略 IN MX 10 mx1.huying.com. ;定义邮件记录 IN MX 20 mx2.huying.com. $ORIGIN huying.com. ;表示域名省略时以这个地方定义的域名补上，orgin可以定义多个 ns1 IN A 192.168.1.1 ;定义NS记录FQDN的A记录 ns2 IN A 192.168.1.2 mx1 IN A 192.168.1.1 ;定义MX记录的FQDN的A记录 mx2 IN A 192.168.1.2 www IN A 192.168.1.1 ;定义A记录
[root@el7 named]# named-checkzone "huying.com" huying.zone zone huying.com/IN: loaded serial 201811 OK |
3.修改权限重新加载服务
[root@el7 named]# chown :named huying.zone [root@el7 named]# rndc reload server reload successful
|
4.测试效果
查询huying.com域内的NS记录 [root@el7 named]# dig -t ns huying.com ; <<>> DiG 9.9.4-RedHat-9.9.4-51.el7_4.2 <<>> -t ns huying.com ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 17093 ;; flags: qr aa rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 2 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 4096 ;; QUESTION SECTION: ;huying.com. IN NS ;; ANSWER SECTION: huying.com. 86400 IN NS ns2.huying.com. huying.com. 86400 IN NS ns1.huying.con. ;; ADDITIONAL SECTION: ns2.huying.com. 86400 IN A 192.168.1.2 ;; Query time: 1 msec ;; SERVER: 127.0.0.1#53(127.0.0.1) ;; WHEN: Wed May 09 16:34:08 CST 2018 ;; MSG SIZE rcvd: 101 查询huying.com域内的MX记录 [root@el7 named]# dig -t mx huying.com ; <<>> DiG 9.9.4-RedHat-9.9.4-51.el7_4.2 <<>> -t mx huying.com ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 50975 ;; flags: qr aa rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 2, ADDITIONAL: 4 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 4096 ;; QUESTION SECTION: ;huying.com. IN MX ;; ANSWER SECTION: huying.com. 86400 IN MX 10 mx1.huying.com. huying.com. 86400 IN MX 20 mx2.huying.com. ;; AUTHORITY SECTION: huying.com. 86400 IN NS ns2.huying.com. huying.com. 86400 IN NS ns1.huying.con. ;; ADDITIONAL SECTION: mx1.huying.com. 86400 IN A 192.168.1.1 mx2.huying.com. 86400 IN A 192.168.1.2 ns2.huying.com. 86400 IN A 192.168.1.2 ;; Query time: 0 msec ;; SERVER: 127.0.0.1#53(127.0.0.1) ;; WHEN: Wed May 09 16:36:07 CST 2018 ;; MSG SIZE rcvd: 173 |