DNS 서버 구성 (bind)

1. named.conf 수정

[root@testlab ~]# vim /etc/named.conf
....
options {
// modify : 127.0.0.1 -> any
        listen-on port 53 { any; };
// modify : ::1->none
        listen-on-v6 port 53 { none; };
        directory       "/var/named";
        dump-file       "/var/named/data/cache_dump.db";
        statistics-file "/var/named/data/named_stats.txt";
        memstatistics-file "/var/named/data/named_mem_stats.txt";
        recursing-file  "/var/named/data/named.recursing";
        secroots-file   "/var/named/data/named.secroots";
        // modify : localhost -> any
        allow-query     { any; };
....
// add : For non-internal domains
        forwarders {
                168.126.63.1;
                8.8.8.8;
        };
....
include "/etc/named.rfc1912.zones";

2. /etc/named.rfc1912.zones 파일에 생성할 도메인(testlab.net) 이름의 zone 파일을 추가

[root@testlab ~]# vim /etc/named.rfc1912.zones
zone "localhost.localdomain" IN {
        type master;
        file "named.localhost";
        allow-update { none; };
};

zone "localhost" IN {
        type master;
        file "named.localhost";
        allow-update { none; };
};

zone "1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ip6.arpa" IN {
        type master;
        file "named.loopback";
        allow-update { none; };
};

zone "1.0.0.127.in-addr.arpa" IN {
        type master;
        file "named.loopback";
        allow-update { none; };
};

zone "0.in-addr.arpa" IN {
        type master;
        file "named.empty";
        allow-update { none; };
};

// add testlab zone file include
zone "testlab.net" IN {
        type master;                    // server type
        file "testlab.net.zone";      	// zone file
        allow-update {none;};   			// none: no slave to sync
};

zone "168.192.in-addr.arpa" IN {        // Reverse
        type master;
        file "/var/named/rev.168.192.in-addr.arpa";
};

3. /var/named/testlab.net.zone 파일 생성 - A 레코드 등록 관리

[root@testlab ~]# vim /var/named/testlab.net.zone
$TTL 10
@       IN SOA  @ rname.invalid. (
                                        0       ; serial
                                        1D      ; refresh
                                        1H      ; retry
                                        1W      ; expire
                                        3H )    ; minimum
        NS      @
        A       192.168.60.10
        AAAA    ::1
www             IN      A       192.168.60.5
TEST-WEB01      IN      A       192.168.60.11

4. /var/named/rev.168.192.in-addr.arpa 파일 수정 - PRT 레코드 등록 관리

[root@testlab ~]# vim /var/named/rev.168.192.in-addr.arpa
$TTL 10

@    IN    SOA    dns.test.local.    root.test.local. (
                                        2017031403      ; serial
                                        1D              ; refresh
                                        1H              ; retry
                                        1W              ; expire
                                        3H )            ; min(Negative cache TTL)

testlab.net.          IN    NS    dns.testlab.net.
dns.testlab.net.    IN    A    192.168.60.10

@      IN NS      dns.testlab.net.
3.0    IN PTR    dns.testlab.net.

참고 사이트

서버셋팅 2. BIND설치와 네임서버(DNS 서버)의 구축 :: 행복한 토끼 (tistory.com)

서버셋팅 2. BIND설치와 네임서버(DNS 서버)의 구축