CentOS 6.2布置DNS[服务器安全]

　　CentOS6.2布置DNS:

　　[root@server ~]# yum -y install bind bind-chroot bind-devel bind-libs bind-utils

　　[root@server ~]# cp -p /etc/named.* /var/named/chroot/etc/

　　[root@server ~]# cd /var/named/chroot/etc/

　　[root@server etc]# vim named.conf

　　//

　　// named.conf

　　//

　　// Provided by Red Hat bind package to configure the ISC BIND named(8) DNS

　　// server as a caching only nameserver (as a localhost DNS resolver only).

　　//

　　// See /usr/share/doc/bind*/sample/ for example named configuration files.

　　//

　　options {

　　listen-on port 53 { any; };

　　listen-on-v6 port 53 { ::1; };

　　directory "/var/named";

　　dump-file "/var/named/data/cache_dump.db";

　　statistics-file "/var/named/data/named_stats.txt";

　　memstatistics-file "/var/named/data/named_mem_stats.txt";

　　allow-query { any; };

　　recursion yes;

　　dnssec-enable yes;

　　dnssec-validation yes;

　　dnssec-lookaside auto;

　　/* Path to ISC DLV key */

　　bindkeys-file "/etc/named.iscdlv.key";

　　};

　　logging {

　　channel default_debug {

　　file "data/named.run";

　　severity dynamic;

　　};

　　};

　　zone "." IN {

　　type hint;

　　file "named.ca";

　　};

　　include "/etc/named.rfc1912.zones";

　　[root@server etc]# vim named.rfc1912.zones #在此文件最后追加以下内容

　　zone "linuxbrother.com" IN {

　　type master;

　　file "lb.zheng"

　　};

　　[root@server etc]# cd /var/named/chroot/var/named/

　　[root@server named]# cp -rf /var/named/* ./

　　[root@server named]# cp -p named.empty lb.zheng

　　$TTL 3H

　　@ IN SOA linuxbrother.com. root.linuxbrother.com. (

　　2012061701 ; serial

　　1D ; refresh

　　1H ; retry

　　1W ; expire

　　3H ) ; minimum

　　NS dns.linuxbrother.com.

　　dns IN A 172.16.11.182

　　server IN A 172.16.11.182

　　[root@server named]# chown root.named * -R