安裝BIND：在Ubuntu/Debian上使用sudo apt install bind9 bind9utils bind9-doc，在CentOS/RHEL上使用sudo dnf install bind bind-utils；2. 配置全局選項(xiàng)：編輯named.conf.options文件設(shè)置allow-query、recursion、forwarders等參數(shù)以允許本地網(wǎng)絡(luò)查詢并啟用遞歸解析；3. 設(shè)置正向區(qū)域：在named.conf.local中添加正向區(qū)域定義并創(chuàng)建對應(yīng)區(qū)域文件db.example.local，包含SOA、NS及A記錄將域名解析為IP；4. 設(shè)置反向區(qū)域：在named.conf.local中添加反向區(qū)域定義并創(chuàng)建db.192.168.1文件，配置PTR記錄實(shí)現(xiàn)IP到域名的反向解析；5. 測試并啟動服務(wù)：使用named-checkconf和named-checkzone驗(yàn)證配置正確性，無誤后重啟bind9或named服務(wù)并設(shè)置開機(jī)自啟；6. 測試解析功能：通過dig、nslookup或host命令測試正向和反向解析是否正常，確?？蛻舳酥赶蛟揇NS服務(wù)器IP；此外需注意安全維護(hù)，如限制區(qū)域傳輸、更新序列號、監(jiān)控日志及使用rndc進(jìn)行遠(yuǎn)程管理，從而完成一個(gè)基本的權(quán)威與遞歸DNS服務(wù)器搭建。

Setting up a DNS server on Linux using BIND (Berkeley Internet Name Domain) is a common task for managing domain name resolution in a local network or for hosting public domains. BIND is the most widely used DNS server on Unix-like systems. Here's how to configure it step by step on a typical Linux distribution like Ubuntu or CentOS.

1. Install BIND

First, install the BIND package:

On Ubuntu/Debian:

sudo apt update
sudo apt install bind9 bind9utils bind9-doc

On CentOS/RHEL/Rocky Linux:

sudo dnf install bind bind-utils

After installation, the main configuration files are usually located in /etc/bind/ (Debian/Ubuntu) or /etc/named.conf (RHEL/CentOS).

2. Basic Configuration (named.conf.options)

Edit the global options file to define how your DNS server behaves.

On Ubuntu:

sudo nano /etc/bind/named.conf.options

On CentOS:

sudo nano /etc/named.conf

Add or modify the options block:

options {
    directory "/var/cache/bind";

    // Allow queries from local network (adjust as needed)
    allow-query { localhost; 192.168.1.0/24; };

    // Enable recursion for internal clients
    recursion yes;
    allow-recursion { 192.168.1.0/24; };

    // Forward DNS queries to external resolvers (optional)
    forwarders {
        8.8.8.8;
        8.8.4.4;
    };

    dnssec-validation auto;

    // Listen on all interfaces
    listen-on-v6 { any; };
    listen-on { any; };
};

Replace 192.168.1.0/24 with your actual network subnet.

3. Set Up a Forward Zone (Domain to IP)

Suppose you want to resolve example.local to internal IPs.

Step 1: Define the zone in named.conf.local

sudo nano /etc/bind/named.conf.local

Add:

zone "example.local" {
    type master;
    file "/etc/bind/zones/db.example.local";
};

Make sure the zones directory exists:

sudo mkdir -p /etc/bind/zones

Step 2: Create the forward zone file

sudo nano /etc/bind/zones/db.example.local

Content:

$TTL    86400
@       IN      SOA     ns1.example.local. admin.example.local. (
                        2024040501  ; Serial (use YYYYMMDDNN)
                        3600        ; Refresh
                        1800        ; Retry
                        604800      ; Expire
                        86400 )     ; Minimum TTL

; Name Servers
@       IN      NS      ns1.example.local.

; A Records
@       IN      A       192.168.1.10
ns1     IN      A       192.168.1.10
www     IN      A       192.168.1.20
mail    IN      A       192.168.1.30

4. Set Up a Reverse Zone (IP to Domain)

To resolve IPs back to hostnames (PTR records).

Step 1: Add reverse zone in named.conf.local

zone "1.168.192.in-addr.arpa" {
    type master;
    file "/etc/bind/zones/db.192.168.1";
};

Step 2: Create the reverse zone file

sudo nano /etc/bind/zones/db.192.168.1

$TTL    86400
@       IN      SOA     ns1.example.local. admin.example.local. (
                        2024040501
                        3600
                        1800
                        604800
                        86400 )

; Name Server
@       IN      NS      ns1.example.local.

; PTR Records
10      IN      PTR     ns1.example.local.
20      IN      PTR     www.example.local.
30      IN      PTR     mail.example.local.

5. Test Configuration and Start BIND

Check for syntax errors:

sudo named-checkconf
sudo named-checkzone example.local /etc/bind/zones/db.example.local
sudo named-checkzone 1.168.192.in-addr.arpa /etc/bind/zones/db.192.168.1

If no errors, restart the service:

Ubuntu:

sudo systemctl restart bind9

CentOS:

sudo systemctl restart named

Enable on boot:

sudo systemctl enable bind9    # or named

6. Test DNS Resolution

Use dig, nslookup, or host:

dig @localhost www.example.local

dig @localhost -x 192.168.1.20    # Reverse lookup

Make sure your client machines use the DNS server by setting their DNS to the server’s IP.

Security and Maintenance Tips

• Use access control lists (ACLs) to restrict zone transfers.
• Regularly update serial numbers when editing zone files.
• Monitor logs: /var/log/syslog or /var/log/messages.
• Consider using rndc for remote management:

  sudo rndc reload
  sudo rndc status

  ---

  Basically, that’s how you set up a basic authoritative and recursive DNS server with BIND. It’s not overly complex, but attention to detail in zone files and permissions is key.

  以上是使用綁定在Linux上配置DNS服務(wù)器的詳細(xì)內(nèi)容。更多信息請關(guān)注PHP中文網(wǎng)其他相關(guān)文章！