在RH AS 3上完全編譯安裝BIND-9.2.3

←手機掃碼閱讀火星人 @ 2014-03-04 , reply:0

在RH AS 3上完全編譯安裝BIND-9.2.3

本人聲明：

歡迎大家轉貼這個文章，但要保留下面的版權信息：

作者：llzqq
聯繫：llzqq@126.com
來自：www.chinaunix.net

安裝BIND9：

# tar zxvf bind-9.2.3.tar.gz
# cd bind-9.2.3
# ./configure
--prefix=/usr/local/named
--disable-ipv6
# make
# make install

建立BIND用戶：

# groupadd bind
# useradd -g bind -d /usr/local/named -s /sbin/nologin bind

創建配置文件目錄：

# mkdir –p /usr/local/named/etc
# chown bind:bind /usr/local/named/etc
# chmod 700 /usr/local/named/etc

創建主要的配置文件：

# vi /usr/local/named/etc/named.conf
===========================named.conf=======================

acl "trust-lan" { 127.0.0.1/8; 192.168.0.0/16;};
options {
        directory "/usr/local/named/etc/";
pid-file "/var/run/named/named.pid";
version "0.0.0";
datasize 40M;
allow-transfer {
"trust-lan";};
recursion yes;
allow-notify {
"trust-lan";
};
allow-recursion {
"trust-lan";
};
auth-nxdomain no;
forwarders {
202.99.160.68;
202.99.168.8;};
};
logging {
      channel warning
      { file "/var/log/named/dns_warnings" versions 3 size 1240k;
      severity warning;
      print-category yes;
      print-severity yes;
      print-time yes;
      };
      channel general_dns
      { file "/var/log/named/dns_logs" versions 3 size 1240k;
      severity info;
      print-category yes;
      print-severity yes;
      print-time yes;
      };
      category default { warning; };
      category queries { general_dns; };
};
zone "." {
      type hint;
      file "named.root";
};

zone "0.0.127.IN-ADDR.ARPA" {
      type master;
      file "localhost";
};

zone "home.com" {
      type slave;
      file "home.com";
      masters {
            192.168.0.1;
      };
};

zone "0.168.192.in-addr.arpa" {
      type slave;
      file "0.168.192.in-addr";
      masters {
            192.168.0.1;
      };
};
=========================named.conf==========================

# vi /usr/local/named/etc/home.com

============================ home.com ==========================
$TTL 86400
$ORIGIN home.com.
@    IN    SOA    redhat.home.com. root.home.com (
      2001111601 ; serial
      28800 ; refresh
      14400 ; retry
      3600000 ; expire
      86400 ; default_ttl
      )
      IN    NS    redhat.home.com.

;; -- default address -

@    IN    A    192.168.0.1

;; -- redhat SerVer --

redhat IN    A             192.168.0.1
         IN    MX    0    redhat.home.com.
      IN    MX    10    linux.home.com
IN    HINFO          "redhat as 3.0".
         IN    TXT          "The internet gateway".

;; --- WIN2K SerVer ---

win2k IN    A             192.168.0.10
      IN    MX    0    win2k.home.com.
      IN    MX    10    redhat.home.com.
      IN    HINFO          "windows 2000 server".

;; ------ cnames ------

dns    IN    CNAME redhat
www    IN    CNAME redhat
mail IN    CNAME redhat
ftp    IN    CNAME redhat
============================ home.com ==========================

# vi /usr/local/named/etc/0.168.192.in-addr

======================== 0.168.192.in-addr =====================
$TTL 86400
@    IN    SOA    redhat.home.com. root.home.home.com. (
            2001111601    ; Serial
            28800          ; refresh
            14400          ; retry
            3600000       ; expire
            86400 )       ; minimum

@    IN    NS    redhat.home.com.
1    IN    PTR    dns.home.com.
1    IN    PTR    www.home.com.
1    IN    PTR    mail.home.com.
1    IN    PTR    ftp.home.com.
10    IN    PTR    win2k.home.com.
======================== 0.168.192.in-addr ======================

# vi /usr/local/named/etc/localhost
=========================== localhost ===========================
$TTL 3600
@    IN    SOA    redhat.home.com. root.home.home.com.  (
                              20040526  ; Serial
                              3600    ; Refresh
                              900       ; Retry
                              3600000 ; Expire
                              3600 ) ; Minimum
      IN    NS    redhat.home.com.
1    IN    PTR    localhost.home.com.
=========================== localhost ===========================

更新根區文件：

# cd /usr/local/named/etc/
# wget ftp://ftp.internic.org/domain/named.root

創建PID和日誌文件：

# mkdir /var/run/named/
# chmod 777 /var/run/named/
# chown bind:bind /var/run/named/

# mkdir /var/log/named/
# touch /var/log/named/dns_warnings
# touch /var/log/named/dns_logs
# chown bind:bind /var/log/named/*

生成rndc-key：

# cd /usr/local/named/etc/
# ../sbin/rndc-confgen >; rndc.conf

把rndc.conf中：
# Use with the following in named.conf, adjusting the allow list as needed:
後面以的部分加到/usr/local/named/etc/named.conf中並去掉註釋

運行測試：

# /usr/local/named/sbin/named -gc /usr/local/named/etc/named.conf &

狀態檢查：

# /usr/local/named/sbin/rndc status

建立啟動腳本：

# vi /etc/init.d/named
============================== named.sh============================
#!/bin/bash
#
# named       a network name service.
#
#
# chkconfig: 545 35 75
# description: a name server
#
if [ `id -u` -ne 0 ]
then
      echo "ERROR:For bind to port 53,must run as root."
      exit 1
fi
case "$1" in

start)
      if [ -x /usr/local/named/sbin/named ]; then
      /usr/local/named/sbin/named -u bind -c /usr/local/named/etc/named.conf && echo . && echo 'BIND9 server started.'
      fi
      ;;

stop)
      kill `cat /var/run/named/pid` && echo . && echo 'BIND9 server stopped.'
      ;;
      restart)
      echo .
      echo "Restart BIND9 server"
      $0 stop
      sleep 10
      $0 start
      ;;
      *)
      echo "$0 start | stop | restart"
      ;;

esac
===============================named.sh============================

# chmod 755 /etc/init.d/named
# chown root:root /etc/init.d/named
# chkconfig --add named
# chkconfig named on

[ 本帖最後由 llzqq 於 2005-12-3 07:43 編輯 ]

《解決方案》