DNS分离解析Shell脚本

版权声明：本文为博主原创文章，遵循 CC 4.0 BY-SA 版权协议，转载请附上原文出处链接和本声明。

本文链接： https://blog.csdn.net/Parhoia/article/details/102484913

DNS分离解析Shell脚本

[root@localhost ~]# vim sa.sh
#!/bin/bash
#配置双网卡
#定义网卡配置文件位置
C=/etc/sysconfig/network-scripts
#复制网卡配置文件模板
cd /etc/sysconfig/network-scripts
cp -p ifcfg-ens33 ifcfg-ens36
#修改第1块网卡配置文件
sed -i 's/dhcp/static/' $C/ifcfg-ens33
cat >>$C/ifcfg-ens33 <<-EOF
IPADDR=192.168.100.1
NETMASK=255.255.255.0
EOF

#修改第2块网卡配置文件
sed -i 's/dhcp/static/' $C/ifcfg-ens36
sed -i 's/ens33/ens36/' $C/ifcfg-ens36
sed -i '/UUID/d' $C/ifcfg-ens36
cat >>$C/ifcfg-ens36 <<-EOF
IPADDR=12.0.0.1
NETMASK=255.255.255.0
EOF

#重启网络服务
systemctl restart network

#安装dns服务
yum install bind -y

#修改主配置文件
sed -i '/listen-on/s/127.0.0.1/any/' /etc/named.conf
sed -i '/allow-query/s/localhost/any/' /etc/named.conf
sed -i '54,57d' /etc/named.conf
#修改区域配置文件
sed -i '12,$d' /etc/named.rfc1912.zones
cat >>/etc/named.rfc1912.zones <<-EOF
view "lan" {
        match-clients { 192.168.100.0/24; };
        zone "kgc.com." IN {
                type master;
                file "kgc.com.lan";
        };
        zone "." IN {
                type hint;
                file "named.ca";
        };
};
view "wan" {
match-clients { 12.0.0.0/24; };
        zone "kgc.com." IN {
                type master;
                file "kgc.com.wan";
        };
};
EOF

#复制区域数据配置文件模板
cp -p /var/named/named.localhost /var/named/kgc.com.lan
cp -p /var/named/named.localhost /var/named/kgc.com.wan

#修改lan区域数据配置文件
sed -i '2s/@/kgc.com/2' /var/named/kgc.com.lan
sed -i '2s/rname.invalid./admin.kgc.com/' /var/named/kgc.com.lan
sed -i '8,10d' /var/named/kgc.com.lan
cat >>/var/named/kgc.com.lan <<-EOF
		NS	kgc.com.
		A	192.168.100.1
www     IN      A       192.168.100.99
ftp     IN      A       192.168.100.88
EOF

#修改wan区域数据配置文件
sed -i '2s/@/kgc.com/2' /var/named/kgc.com.wan
sed -i '2s/rname.invalid./admin.kgc.com/' /var/named/kgc.com.wan
sed -i '8,10' /var/named/kgc.com.wan
cat >>/var/named/kgc.com.wan <<-EOF
		NS	kgc.com.
		A	12.0.0.1
www     IN      A       12.0.0.1
ftp     IN      A       12.0.0.1
EOF


#开启服务
systemctl start named

#关闭防火墙
systemctl stop firewalld.service
setenforce 0
[root@localhost ~]# chmod +x sa.sh
[root@localhost ~]# ./sa.sh