安裝BIND：在Ubuntu/Debian上使用sudo apt install bind9 bind9utils bind9-doc，在CentOS/RHEL上使用sudo dnf install bind bind-utils；2. 配置全局選項：編輯named.conf.options文件設(shè)置allow-query、recursion、forwarders等參數(shù)以允許本地網(wǎng)絡(luò)查詢並啟用遞歸解析；3. 設(shè)置正向區(qū)域：在named.conf.local中添加正向區(qū)域定義並創(chuàng)建對應(yīng)區(qū)域文件db.example.local，包含SOA、NS及A記錄將域名解析為IP；4. 設(shè)置反向區(qū)域：在named.conf.local中添加反向區(qū)域定義並創(chuàng)建db.192.168.1文件，配置PTR記錄實現(xiàn)IP到域名的反向解析；5. 測試並啟動服務(wù)：使用named-checkconf和named-checkzone驗證配置正確性，無誤後重啟bind9或named服務(wù)並設(shè)置開機自啟；6. 測試解析功能：通過dig、nslookup或host命令測試正向和反向解析是否正常，確?？蛻舳酥赶蛟揇NS服務(wù)器IP；此外需注意安全維護，如限制區(qū)域傳輸、更新序列號、監(jiān)控日誌及使用rndc進行遠程管理，從而完成一個基本的權(quán)威與遞歸DNS服務(wù)器搭建。

Setting up a DNS server on Linux using BIND (Berkeley Internet Name Domain) is a common task for managing domain name resolution in a local network or for hosting public domains. BIND is the most widely used DNS server on Unix-like systems. Here's how to configure it step by step on a typical Linux distribution like Ubuntu or CentOS.

1. Install BIND

First, install the BIND package:

On Ubuntu/Debian:

 sudo apt update
sudo apt install bind9 bind9utils bind9-doc

On CentOS/RHEL/Rocky Linux:

 sudo dnf install bind bind-utils

After installation, the main configuration files are usually located in /etc/bind/ (Debian/Ubuntu) or /etc/named.conf (RHEL/CentOS).

2. Basic Configuration ( named.conf.options )

Edit the global options file to define how your DNS server behaves.

On Ubuntu:

 sudo nano /etc/bind/named.conf.options

On CentOS:

 sudo nano /etc/named.conf

Add or modify the options block:

 options {
    directory "/var/cache/bind";

    // Allow queries from local network (adjust as needed)
    allow-query { localhost; 192.168.1.0/24; };

    // Enable recursion for internal clients
    recursion yes;
    allow-recursion { 192.168.1.0/24; };

    // Forward DNS queries to external resolvers (optional)
    forwarders {
        8.8.8.8;
        8.8.4.4;
    };

    dnssec-validation auto;

    // Listen on all interfaces
    listen-on-v6 { any; };
    listen-on { any; };
};

Replace 192.168.1.0/24 with your actual network subnet.

3. Set Up a Forward Zone (Domain to IP)

Suppose you want to resolve example.local to internal IPs.

Step 1: Define the zone in named.conf.local

 sudo nano /etc/bind/named.conf.local

Add:

 zone "example.local" {
    type master;
    file "/etc/bind/zones/db.example.local";
};

Make sure the zones directory exists:

 sudo mkdir -p /etc/bind/zones

Step 2: Create the forward zone file

 sudo nano /etc/bind/zones/db.example.local

Content:

 $TTL 86400
@ IN SOA ns1.example.local. admin.example.local. (
                        2024040501 ; Serial (use YYYYMMDDNN)
                        3600 ; Refresh
                        1800 ; Retry
                        604800 ; Expire
                        86400 ) ; Minimum TTL

; Name Servers
@ IN NS ns1.example.local.

; A Records
@ IN A 192.168.1.10
ns1 IN A 192.168.1.10
www IN A 192.168.1.20
mail IN A 192.168.1.30

4. Set Up a Reverse Zone (IP to Domain)

To resolve IPs back to hostnames (PTR records).

Step 1: Add reverse zone in named.conf.local

 zone "1.168.192.in-addr.arpa" {
    type master;
    file "/etc/bind/zones/db.192.168.1";
};

Step 2: Create the reverse zone file

 sudo nano /etc/bind/zones/db.192.168.1

 $TTL 86400
@ IN SOA ns1.example.local. admin.example.local. (
                        2024040501
                        3600
                        1800
                        604800
                        86400 )

; Name Server
@ IN NS ns1.example.local.

; PTR Records
10 IN PTR ns1.example.local.
20 IN PTR www.example.local.
30 IN PTR mail.example.local.

5. Test Configuration and Start BIND

Check for syntax errors:

 sudo named-checkconf
sudo named-checkzone example.local /etc/bind/zones/db.example.local
sudo named-checkzone 1.168.192.in-addr.arpa /etc/bind/zones/db.192.168.1

If no errors, restart the service:

Ubuntu:

 sudo systemctl restart bind9

CentOS:

 sudo systemctl restart named

Enable on boot:

 sudo systemctl enable bind9 # or named

6. Test DNS Resolution

Use dig , nslookup , or host :

 dig @localhost www.example.local

dig @localhost -x 192.168.1.20 # Reverse lookup

Make sure your client machines use the DNS server by setting their DNS to the server's IP.

Security and Maintenance Tips

• Use access control lists (ACLs) to restrict zone transfers.
• Regularly update serial numbers when editing zone files.
• Monitor logs: /var/log/syslog or /var/log/messages .
• Consider using rndc for remote management:

   sudo rndc reload
  sudo rndc status

  ---

  Basically, that's how you set up a basic authoritative and recursive DNS server with BIND. It's not overly complex, but attention to detail in zone files and permissions is key.

  以上是使用綁定在Linux上配置DNS服務(wù)器的詳細內(nèi)容。更多資訊請關(guān)注PHP中文網(wǎng)其他相關(guān)文章！