救命，弄了兩天了。Bind DNS 本機可以查詢，其他主機總是超時
--------本機沒有問題-------
# nslookup
> glpi.hntp.com
Server: 10.106.5.200
Address: 10.106.5.200#53
Name: glpi.hntp.com
Address: 10.106.4.216
>
----------但是其他的機器就會超時---------
C:\Users\yuan>nslookup
DNS request timed out.
timeout was 2 seconds.
Default Server: UnKnown
Address: 10.106.5.200
> 10.106.5.200
Server: UnKnown
Address: 10.106.5.200
DNS request timed out.
timeout was 2 seconds.
*** Request to UnKnown timed-out
>
《解決方案》
DNS伺服器咋個配置的的？
外部主機的DNS地址是否正確？
外部主機能否ping通DNS伺服器？
DNS伺服器的防火牆狀態？
《解決方案》
檢查named.conf
allow-query { localhost; 提供服務的IP地址段;};
《解決方案》
----------hntp.com.zone文件--------------
$TTL 86400
@ IN SOA ns.hntp.com. root.hntp.com. (
42 ; serial (d. adams)
3H ; refresh
15M ; retry
1W ; expiry
1D ) ; minimum
@ IN NS ns.hntp.com.
ns IN A 10.106.5.200
www IN A 10.106.4.216
glpi IN A 10.106.4.216
~
---------named.conf 文件------------
options {
listen-on port 53 {any;};
# listen-on-v6 port 53 { ::1; };
directory "/var/named";
dump-file "/var/named/data/cache_dump.db";
statistics-file "/var/named/data/named_stats.txt";
memstatistics-file "/var/named/data/named_mem_stats.txt";
allow-query {any;};
recursion yes;
dnssec-enable yes;
dnssec-validation yes;
dnssec-lookaside auto;
/* Path to ISC DLV key */
bindkeys-file "/etc/named.iscdlv.key";
managed-keys-directory "/var/named/dynamic";
};
logging {
channel default_debug {
file "data/named.run";
severity dynamic;
};
};
zone "." IN {
type hint;
file "named.ca";
};
include "/etc/named.rfc1912.zones";
--------------本地DNS 設置
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Generic Marvell
Physical Address. . . . . . . . . : 44-37-E6-56-BB-
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
IPv4 Address. . . . . . . . . . . : 10.106.5.20(Pre
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 0.0.0.0
10.106.5.254
DNS Servers . . . . . . . . . . . : 10.106.5.200
10.1.1.100
NetBIOS over Tcpip. . . . . . . . : Enabled
------------可以從10.106.5.20平 通
C:\Users\yuan>ping 10.106.5.200
Pinging 10.106.5.200 with 32 bytes of data:
Reply from 10.106.5.200: bytes=32 time<1ms TTL=64
Reply from 10.106.5.200: bytes=32 time<1ms TTL=64
telnet 10.106.5.200 53 是通的
iptables 已經開放53
《解決方案》
dns服務優先埠是 udp 53
《解決方案》
ＵＤＰ埠沒有開，謝謝各位了。
