Linux-搭建DNS服务器

2501_920047032025-08-30 11:06

Linux-搭建DNS服务器

    • [1. 安装软件bind](#1. 安装软件bind)
    • 2.修改配置文件
    • [3. 在其他机器上测试DNS服务器](#3. 在其他机器上测试DNS服务器)
    • [4. 配置本地域名解析](#4. 配置本地域名解析)
    • [5. 优化后的zone](#5. 优化后的zone)

1. 安装软件bind

bind是历史非常悠久，而且性能非常好的dns域名系统的软件

root@dns-server \~\]# `yum install bind bind-utils -y`

启动named服务

root@dns-server \~\]# `service named restart` Redirecting to /bin/systemctl restart named.service

设置named服务开机启动

root@dns-server \~\]# `systemctl enable named` Created symlink from /etc/systemd/system/multi-user.target.wants/named.service to /usr/lib/systemd/system/named.service.

查看进程

bash 复制代码 
[root@dns-server ~]# ps aux|grep named
named      14903  0.1  0.9 294348 33448 ?        Ssl  11:40   0:00 /usr/sbin/named -u named -c /etc/named.conf
root       14913  0.0  0.0   6636  2304 pts/0    S+   11:40   0:00 grep --color=auto named

查看开放udp 53号端口

bash 复制代码 
[root@dns-server ~]# netstat -anplut|grep named
tcp        0      0 127.0.0.1:53            0.0.0.0:*               LISTEN      14125/named         
tcp        0      0 127.0.0.1:953           0.0.0.0:*               LISTEN      14125/named         
tcp6       0      0 ::1:53                  :::*                    LISTEN      14125/named         
tcp6       0      0 ::1:953                 :::*                    LISTEN      14125/named         
udp        0      0 127.0.0.1:53            0.0.0.0:*                           14125/named         
udp6       0      0 ::1:53                  :::*                                14125/named

客户机向dns服务器进行域名查询的时候，访问的是udp的53号端口

从域名服务器和主域名服务器之间复制数据的时候，访问tcp的53号端口

2.修改配置文件

许其他电脑能过来查询dns域名

bash 复制代码 
[root@dns-server ~]# vim /etc/named.conf
options {
        listen-on port 53 { any; };  # 修改
        listen-on-v6 port 53 { any; }; # 修改
        directory       "/var/named";
        dump-file       "/var/named/data/cache_dump.db";
        statistics-file "/var/named/data/named_stats.txt";
        memstatistics-file "/var/named/data/named_mem_stats.txt";
        recursing-file  "/var/named/data/named.recursing";
        secroots-file   "/var/named/data/named.secroots";
        allow-query     { any; };  # 修改

重新启动named服务

bash 复制代码 
[root@dns-server ~]# service named restart
Redirecting to /bin/systemctl restart named.service

[root@dns-server ~]# netstat -anplut|grep named
tcp        0      0 192.168.168.139:53      0.0.0.0:*               LISTEN      14903/named         
tcp        0      0 127.0.0.1:53            0.0.0.0:*               LISTEN      14903/named         
tcp        0      0 127.0.0.1:953           0.0.0.0:*               LISTEN      14903/named         
tcp6       0      0 fe80::20c:29ff:fe11::53 :::*                    LISTEN      14903/named         
tcp6       0      0 ::1:53                  :::*                    LISTEN      14903/named         
tcp6       0      0 ::1:953                 :::*                    LISTEN      14903/named         
udp        0      0 192.168.168.139:53      0.0.0.0:*                           14903/named         
udp        0      0 192.168.168.139:53      0.0.0.0:*                           14903/named         
udp        0      0 127.0.0.1:53            0.0.0.0:*                           14903/named         
udp        0      0 127.0.0.1:53            0.0.0.0:*                           14903/named         
udp6       0      0 ::1:53                  :::*                                14903/named         
udp6       0      0 ::1:53                  :::*                                14903/named         
udp6       0      0 fe80::20c:29ff:fe11::53 :::*                                14903/named         
udp6       0      0 fe80::20c:29ff:fe11::53 :::*                                14903/named

3. 在其他机器上测试DNS服务器

修改网卡配置文件里的dns

root@web-1 \~\]# cat /etc/NetworkManager/system- \[ipv4

addresses1=192.168.168.136/24

dns=192.168.168.139;114.114.114.114

gateway=192.168.168.2

method=manual

修改/etc/resolv.conf里的dns服务器地址

root@web-2 \~\]# vim /etc/resolv.conf # Generated by NetworkManager nameserver 192.168.168.139 nameserver 114.114.114.114

使用nslookup和ping、dig命令进行dns域名查询的测试

bash 复制代码 
[root@web-1 ~]# nslookup www.qq.com
Server:		192.168.168.139
Address:	192.168.168.139#53

Non-authoritative answer:
www.qq.com	canonical name = ins-r23tsuuf.ias.tencent-cloud.net.
Name:	ins-r23tsuuf.ias.tencent-cloud.net
Address: 121.14.77.221
Name:	ins-r23tsuuf.ias.tencent-cloud.net
Address: 121.14.77.201
Name:	ins-r23tsuuf.ias.tencent-cloud.net
Address: 240e:97c:2f:1::5c
Name:	ins-r23tsuuf.ias.tencent-cloud.net
Address: 240e:97c:2f:2::4c


[root@web-1 ~]# dig +trace www.qq.com

; <<>> DiG 9.16.23-RH <<>> +trace www.qq.com
;; global options: +cmd
.			517706	IN	NS	k.root-servers.net.
.			517706	IN	NS	l.root-servers.net.
.			517706	IN	NS	m.root-servers.net.
.			517706	IN	NS	j.root-servers.net.
.			517706	IN	NS	g.root-servers.net.
.			517706	IN	NS	e.root-servers.net.
.			517706	IN	NS	f.root-servers.net.
.			517706	IN	NS	a.root-servers.net.
.			517706	IN	NS	d.root-servers.net.
.			517706	IN	NS	h.root-servers.net.
.			517706	IN	NS	b.root-servers.net.
.			517706	IN	NS	i.root-servers.net.
.			517706	IN	NS	c.root-servers.net.
.			517706	IN	RRSIG	NS 8 0 518400 20250907170000 20250825160000 46441 . mY7x+l08DTrEZ0eYA2vEb2JO/0e8IT1FDe1yoA5fUcW5L+zltYWeJAGO b38sXm6G1qr7iV25QdR0L1eIWDKs793lsDytnzjNY364plixi/s6qY7J DPYqwRP/ADlbMBEn6c4CpttJ/FmVm9sTf0+3q7bXQLn3Y5qvq9RMFyzI 0cpqQ+39APVvaTR4AUvEGS5gs1mjyhepB0xk80yVZrTpHXYe7g4bo2Xm JLcX9xPzDuL5cqpirPcH46ZPi3Pf5708ImI9BRtSfOiODNK7DrxtTd+u CRJiFjtLKN6GVebAcJ6tLAvqXyF8X3hxmPavwE7PwBK4b6QdtP/kvWcf wWsrRw==
;; Received 1137 bytes from 192.168.168.139#53(192.168.168.139) in 1 ms

com.			172800	IN	NS	a.gtld-servers.net.
com.			172800	IN	NS	b.gtld-servers.net.
com.			172800	IN	NS	c.gtld-servers.net.
com.			172800	IN	NS	d.gtld-servers.net.
com.			172800	IN	NS	e.gtld-servers.net.
com.			172800	IN	NS	f.gtld-servers.net.
com.			172800	IN	NS	g.gtld-servers.net.
com.			172800	IN	NS	h.gtld-servers.net.
com.			172800	IN	NS	i.gtld-servers.net.
com.			172800	IN	NS	j.gtld-servers.net.
com.			172800	IN	NS	k.gtld-servers.net.
com.			172800	IN	NS	l.gtld-servers.net.
com.			172800	IN	NS	m.gtld-servers.net.
com.			86400	IN	DS	19718 13 2 8ACBB0CD28F41250A80A491389424D341522D946B0DA0C0291F2D3D7 71D7805A
com.			86400	IN	RRSIG	DS 8 1 86400 20250907170000 20250825160000 46441 . SU62OxdtF2cFhsGwICOfoGhxXzzt7FpxbiVMpLGHwoRacnEZoxFTpjRe 8cj0GbCyvMvnrwpue4hqNQaQcmZtSWXXk2XcGJH8Vi+8TUOH2tKzBZsf ls0Fk50SE5D8DPLUT8+zttxS7oXHHAZ4WNqypaDOpwVglg9kcO8Fa+Ob BHOQJxpipISPlAJnHhkVeF/M4O5+O2PNMtG1GPvgtY4v9CK5KeY7fgP9 1lNpOx5oqHKZOw5rGiwaA7qaRz1T91Vsed97it0+74Sf6f/hu5RcNz+y bsMtkqZJYtVKQLv8kylZYJrGNCtsnHPs2XUUakhBqk8FWjB6xfDzRkBv 7L7Qlw==
;; Received 1170 bytes from 192.58.128.30#53(j.root-servers.net) in 31 ms

qq.com.			172800	IN	NS	ns1.qq.com.
qq.com.			172800	IN	NS	ns2.qq.com.
qq.com.			172800	IN	NS	ns3.qq.com.
qq.com.			172800	IN	NS	ns4.qq.com.
CK0POJMG874LJREF7EFN8430QVIT8BSM.com. 900 IN NSEC3 1 1 0 - CK0Q3UDG8CEKKAE7RUKPGCT1DVSSH8LL NS SOA RRSIG DNSKEY NSEC3PARAM
CK0POJMG874LJREF7EFN8430QVIT8BSM.com. 900 IN RRSIG NSEC3 13 2 900 20250831015158 20250824004158 20545 com. KwEWamEC8pX2daXBOa2BY/AGCUCb+3Khm5Ao6bpOsD8Aj1En1mb2hO00 CtpTsH5JQu5HQD8QFWyb6ss6/vz3Mg==
J976KA284HT3M5K6UPOCJ48OPMNH64L7.com. 900 IN NSEC3 1 1 0 - J976V9IM8597ALLH81MQKOSCKFOC08F5 NS DS RRSIG
J976KA284HT3M5K6UPOCJ48OPMNH64L7.com. 900 IN RRSIG NSEC3 13 2 900 20250901010018 20250824235018 20545 com. J22cVFtGgGQrxVKJhn7ImrWmFzsAjHRwsrLp2PPT3Gbp3Oi/rb1V+O/3 Fx8YOv7RrfzbO2vOMC6UAhF4L22RmQ==
;; Received 812 bytes from 192.48.79.30#53(j.gtld-servers.net) in 185 ms

www.qq.com.		86400	IN	NS	ns-os1.qq.com.
www.qq.com.		86400	IN	NS	ns-cmn1.qq.com.
www.qq.com.		86400	IN	NS	ns-tel1.qq.com.
www.qq.com.		86400	IN	NS	ns-cnc1.qq.com.
;; Received 382 bytes from 203.205.220.251#53(ns1.qq.com) in 196 ms

;; Received 39 bytes from 43.159.167.133#53(ns-os1.qq.com) in 188 ms

4. 配置本地域名解析

搭建主域名服务器，提供特定域名的解析，如：huang.com

编辑/etc/named.rfc1912.zones文件

bash 复制代码 
[root@dns-server ~]# vim /etc/named.rfc1912.zones 
zone "huang.com" IN {
        type master;
        file "huang.com.zone";
        allow-update { none; };
};

创建解析记录文件

bash 复制代码 
[root@dns-server ~]# cd /var/named
[root@dns-server named]# ls
data  dynamic  named.ca  named.empty  named.localhost  named.loopback  slaves
[root@dns-server named]# cp -a named.localhost  huang.com.zone
[root@dns-server named]# ll
总用量 20
drwxrwx--- 2 named named   23  8月 26 11:35 data
drwxrwx--- 2 named named   60  8月 26 11:40 dynamic
-rw-r----- 1 root  named  152  7月 30 03:50 huang.com.zone
-rw-r----- 1 root  named 2112  7月 30 03:50 named.ca
-rw-r----- 1 root  named  152  7月 30 03:50 named.empty
-rw-r----- 1 root  named  152  7月 30 03:50 named.localhost
-rw-r----- 1 root  named  168  7月 30 03:50 named.loopback
drwxrwx--- 2 named named    6  7月 30 03:49 slaves

[root@dns-server named]# vim huang.com.zone 
$TTL 1D
@	IN SOA	@ rname.invalid. (
					1	; serial
					1D	; refresh
					1H	; retry
					1W	; expire
					3H )	; minimum
	NS	@
	A	192.168.168.139
	AAAA	::1
www  IN A	192.168.168.133
web1 IN A	192.168.168.136
web2 IN A	192.168.168.137
nfs  IN A	192.168.168.139
web IN A CNAME www

检查配置并启动服务

root@dns-server named\]# `named-checkconf /etc/named.rfc1912.zones ` \[root@dns-server named\]# `named-checkzone huang.com /var/named/huang.com.zone` zone huang.com/IN: loaded serial 1 OK \[root@dns-server named\]# service named restart Redirecting to /bin/systemctl restart named.service

用nslookup测试

bash 复制代码 
[root@web-1 ~]# nslookup www.huang.com
Server:		192.168.168.139
Address:	192.168.168.139#53

Name:	www.huang.com
Address: 192.168.168.133

[root@web-1 ~]# nslookup nfs.huang.com
Server:		192.168.168.139
Address:	192.168.168.139#53

Name:	nfs.huang.com
Address: 192.168.168.139

[root@web-1 ~]# nslookup web1.huang.com
Server:		192.168.168.139
Address:	192.168.168.139#53

Name:	web1.huang.com
Address: 192.168.168.136

[root@web-1 ~]# nslookup web.huang.com
Server:		192.168.168.139
Address:	192.168.168.139#53

web.huang.com	canonical name = www.huang.com.
Name:	www.huang.com
Address: 192.168.168.133

5. 优化后的zone

增加MX记录、@、*、NS记录

bash 复制代码 
[root@dns-server ~]# cat /var/named/huang.com.zone 
$TTL 1D
@	IN SOA	@ rname.invalid. (
					1	; serial
					1D	; refresh
					1H	; retry
					1W	; expire
					3H )	; minimum
;域名服务器记录
@ IN NS  ns1.huang.com.
@ IN NS  ns2.huang.com.
;A记录
www  IN A	192.168.168.133
www  IN A	192.168.168.134
web1 IN A	192.168.168.136
web2 IN A	192.168.168.137
nfs  IN A	192.168.168.139
;别名记录
web  IN CNAME   www
;域名服务器记录的A记录
ns1 IN A 192.168.168.139
ns2 IN A 192.168.100.140

nfs.liu.com  IN  A  192.168.168.139
liu  IN  CNAME nfs.liu.com
;邮件交换记录--》邮件服务器
@  IN  MX  10  mail1.huang.com.
@  IN  MX  20  mail2.huang.com.
;邮件服务器的A记录
mail1 IN  A 192.168.168.136
mail2 IN  A 192.168.168.137
;@表示本域
@  IN  A  192.168.168.133
;泛域名解析记录
* IN  A  192.168.168.133

刷新服务后测试是否生效

使用nslookup交互模式

bash 复制代码 
[root@web-1 ~]# nslookup
> abc.huang.com    
Server:		192.168.168.139
Address:	192.168.168.139#53

Name:	abc.huang.com
Address: 192.168.168.133
> web.huang.com
Server:		192.168.168.139
Address:	192.168.168.139#53

>web.huang.com	canonical name = www.huang.com.
Name:	www.huang.com
Address: 192.168.168.133
Name:	www.huang.com
Address: 192.168.168.134
> set type=ns
> huang.com
Server:		192.168.168.139
Address:	192.168.168.139#53

huang.com	nameserver = huang.com.
> set type=mx 
> huang.com
Server:		192.168.168.139
Address:	192.168.168.139#53

huang.com	mail exchanger = 20 mail2.huang.com.
huang.com	mail exchanger = 10 mail1.huang.com.
相关推荐
半梦半醒*36 分钟前
playbook剧本
linux·运维·服务器·ssh·ansible·运维开发
大喵桑丶1 小时前
Nginx配置学习及多应用场景配置示例
运维·学习·nginx
wanhengidc2 小时前
七夕 云手机：浪漫时光里的科技陪伴
运维·科技·安全·游戏·智能手机
Ronin3052 小时前
【Linux系统】线程控制
linux·线程·线程控制
qqxhb3 小时前
系统架构设计师备考第10天——网络技术-局域网&以太网
服务器·网络·系统架构·以太网·局域网
宇龙神3 小时前
Linux中的IP命令详解
linux
007php0074 小时前
Go 语言常用命令使用与总结
java·linux·服务器·前端·数据库·docker·容器
鹧鸪云光伏4 小时前
鹧鸪云软件如何重塑光伏电站管理与降本增效
大数据·运维·光伏·光伏设计
曼森4 小时前
终极指南：批量自动化处理.gz压缩文件内的中文编码乱码问题
运维·chrome·自动化
热门推荐
01UV安装并设置国内源02KGG转MP3工具|非KGM文件|解密音频03不再让Windows更新！&Edge游戏助手卸载及关闭自动更新04奈飞工厂官网，国内Netflix影视在线看|中文网页电脑版入口05Linux下V2Ray安装配置指南06Qwen3-Coder 快速上手教程 | Qwen Code + Claude Code07【2025.08.06最新版】Android Studio下载、安装及配置记录（自动下载sdk）08突破百度网盘的下载限速，两种方法教会你【超详细】09蜘蛛磁力 搜索引擎大全，如何使用蜘蛛磁力查找磁力链接10Claude Code VSCode集成开发指南：AI编程助手完整配置