DNS na DHCP na CentOS 7 - SMB Netwọk

General index nke usoro: Netwọk Kọmputa maka SMEs: Okwu Mmalite

Ndewo ndị enyi !. Anyị ga-ahụ n’isiokwu a otu anyị nwere ike isi tinye ọrụ dị mkpa maka netwọkụ nke ndị mebere ya DNS na DHCP na CentOS - Linux, kpọmkwem na ụdị ya 7.2.

• Articlesfọdụ isiokwu banyere DNS na-ezo aka n'eziokwu bụ na mmejuputa ọrụ a bụ ntakịrị ihe na-esighi ike ma sie ike. Anaghị m ekwenye na nkwupụta ahụ. Ọ ga-akara m mma ikwu na ọ bụ ntakịrị echiche na ọtụtụ faịlụ nhazi ya nwere syntax fussy. Ọ dabara nke ọma, anyị nwere ngwaọrụ iji lelee, site na nkwụsị, nhazi nke faịlụ nhazi ọ bụla anyị gbanwere. Ya mere, anyị ga-anwa ịme ka ịgụ ọkwa a bụrụ ihe na-atọ ụtọ ma na-atọ ụtọ dịka o kwere mee..

Maka ndị na-achọ echiche ndị bụ isi gbasara ọrụ abụọ ahụ, anyị na-akwado gị ka ị bido nyocha gị na Wikipedia, ma na nsụgharị Spanish na Bekee ya. Ọ bụ eziokwu na isiokwu dị n'asụsụ Bekee na-afọkarị ka zuru oke ma nwekọ ọnụ. N'agbanyeghị nke ahụ, Wikipedia bụ ezigbo mmalite mmalite.

Maka ndị gị chọrọ ịmụ maka DNS na BIND, anyị na-akwado ịgụ akwụkwọ ahụ «OReilly - DNS na ekekọta 4ed"dere site Paul Nwokocha y Liu Cricket, ma ọ bụ mbipụta ọzọ nke ga-adị adị.

Anyị ebipụtala otu isiokwu n’isiokwu akpọrọ «DNS na DHCP na openSUSE 13.2 Harlequin - SME Netwọk»Maka ndị hụrụ gburugburu ebe nkiri. Agbanyeghị, site ugbu a gaa n'ihu, ha ga-eche isiokwu dị iche iche banyere isiokwu a-ọ bụghị na ndị ọzọ- edere ya na ọtụtụ ojiji nke emulator nke ọnụ ma ọ bụ njikwa. Chaị, n'ụdị kpochapụwo ndị UNIX® / Linux Sistemụ Nchịkwa ji.

Ọ bụrụ n’ịchọrọ ịmatakwu gbasara aha ikpeazụ nke aha isiokwu a «SME Netwọk»You nwere ike ịga na peeji nke dị na nke a blog«Neti SME: nke mbụ mebere ịkpụ«. N'ime ya ị ga-ahụ njikọ maka ọtụtụ ederede ndị ọzọ bipụtara.

• Mgbe nwụnye nke CentOS 7 Sistemụ arụmọrụ arụchaala ngwugwu anyị na-akwado, el ndekọ /usr/share/doc/bind-9.9.4/ O nwere ọtụtụ akwụkwọ nke anyị na-akwado ka ị kpọtụrụ tupu ị banye nyocha ịntanetị na-ebughi ụzọ mara na, na mkpịsị aka gị na n'ụlọ gị, ị nwere ike ịchọta ihe ị na-achọ.

Ntọala ntọala

General data nke ngalaba na sava DNS

Aha ngalaba: sitelinux.fan
Aha ihe nkesa DNS: dns.fromlinux.fan
Adreesị IP: 192.168.10.5
Ihe mkpuchi subnet: 255.255.255.0

Ntinye

Anyị na-amalite site na ntinye ọhụụ ma ọ bụ nke dị ọcha nke sistemụ CentOS 7 dị ka egosiri n'isiokwu bu ụzọ «CentOS 7 Hypervisor I - SMB Netwọk«. Naanị anyị kwesịrị ime mgbanwe ndị a:

• Na Foto 22 «Nhọrọ SOFTWARE«, Anyị na-akwado ịhọrọ na kọlụm aka ekpe«Gburugburu Ebe Obibi»Nhọrọ kwekọrọ na a«Ihe nkesa akụrụngwa«, Mgbe na nri kọlụm«Ngwa mgbakwunye maka gburugburu ahọpụtara»Họrọ igbe dị na«Nkesa aha DNS«. Anyị ga-arụnye ihe nkesa DHCP mgbe e mesịrị.
• Ka anyị cheta nkwupụta nke mgbakwunye ndị ọzọ dị ka egosiri na Foto 23, mgbe mwube «NETWORK & TEAM AHA".
• Onyogho na-ezo aka nkebi na anyị ga-ike na draịvụ ike anyị na-nyere dị ka nduzi. Enwere ike ịhọrọ nkebi site na nghọta, omume na ezi uche gị.
• N'ikpeazụ, n'ime Ihe onyonyo 13 «NETWORK & TEAM NAME»,, anyị ga-agbanwe ụkpụrụ dịka usoro izugbe nke ngalaba a kwupụtara na sava DNS, na-echefughị ​​ịkọwa aha nnabata -Nke a «dns«- mgbe nhazi netwọk zuru ezu. Okwesiri ime ping - site na onye nnabata ọzọ - gaa na adreesị IP akọwapụtara mgbe netwọkụ nọ n'ọrụ:

Enwere mgbanwe ole na ole doro anya na anyị ga-emerịrị gbasara edemede gara aga.

Ndenye ego na mgbanwe

Mgbe anyị wụnye sistemụ arụmọrụ anyị ga-enyocha faịlụ ndị a ọbụlagodi, maka nke a, anyị ga-amalite oge site na SSH na kọmputa anyị sysadmin.fromlinux.fan:

uzu @ sysadmin: ~ $ ssh 192.168.10.5
buzz@192.168.10.5's password: Nbanye ikpeazụ: Sat Jan 28 09:48:05 2017 site na 192.168.10.1
[buzz @ dns ~] $

Ọrụ a dị n'elu nwere ike iwe ogologo oge karịa ka ọ na-adịkarị, ọ bụkwa n'ihi na anyị enwetabeghị DNS na LAN. Lelee ọzọ mgbe e mesịrị na DNS na-arụ ọrụ.

[buzz @ dns ~] $ pusi / wdg / ụsụụ ndị agha
127.0.0.1 localhost obodo localhost.chinyere localhost.

[buzz @ dns ~] $ pusi / wdg / aha nnabata
dns

[buzz @ dns ~] $ cat / etc / sysconfig / network-scripts / ifcfg-eth0
TYPE=Ethernet
BOOTPROTO=none
DEFROUTE=yes
IPV4_FAILURE_FATAL=no
IPV6INIT=no
IPV6_AUTOCONF=yes
IPV6_DEFROUTE=yes
IPV6_PEERDNS=yes
IPV6_PEERROUTES=yes
IPV6_FAILURE_FATAL=no
NAME=eth0
UUID=946f5ac9-238a-4a94-9acb-9e3458c680fe
DEVICE=eth0
ONBOOT=yes
IPADDR=192.168.10.5
PREFIX=24
GATEWAY=192.168.10.1
DNS1=127.0.0.1
DOMAIN=desdelinux.fan

[buzz @ dns ~] $ pusi /etc/resolv.conf 
# Site na nyocha NetworkManager site na Linux.fan nameserver 127.0.0.1

Isi nhazi na-aza nhọrọ anyị. Rịba ama na ọbụna na sava Uhie okpu 7 - CentOS 7, na-ahazi ndabara mgbe Ntanetị Network nke mere na ọ bụ onye na-ejikwa netwọk ahụ, ma ọ bụrụ na ha nwere waya ma ọ bụ ikuku (WiFi), njikọ VPN, njikọ PPPoE, na njikọ netwọk ọ bụla.

[buzz @ dns ~] $ sudo systemctl ọnọdụ networkmanager
[sudo] paswọọdụ maka uzu: ● networkmanager.service adedbụ: achọpụtaghị ya (Reason: No file or directory)

[buzz @ dns ~] $ sudo systemctl ọnọdụ NetworkManager
● NetworkManager.service - Njikwa Network Ibu Ibu: loaded (/usr/lib/systemd/system/NetworkManager.service; nyeere; preset preset: enyere aka) Na-arụsi ọrụ ike: na-arụsi ọrụ ike (na-agba ọsọ) kemgbe Sat 2017-01-28 12:23:59 EST; 12min gara aga PID isi: 705 (NetworkManager) CGroup: /system.slice/NetworkManager.service └─705 / usr / sbin / NetworkManager -no-daemon

Uhie Uhie - CentOS na-enyekwa gị ohere ijikọ ma kwụpụ ihu netwọkụ na iji iwu ndị mara mma ifup e ọ bụrụ ala. Ka anyị gbaa ọsọ na njikwa ihe nkesa:

[mgbọrọgwụ @ dns ~] # ifdown eth0
Ngwaọrụ 'eth0' kwụsịrị n'ụzọ gara nke ọma.

[mgbọrọgwụ @ dns ~] # ifup eth0
Njikọ ahụ rụpụtara nke ọma (D-Bus n'ọrụ ụzọ: / org / freedesktop / NetworkManager / ActiveConnection / 1)

• Anyị na-atụ aro agbanwela ntọala ndabara na CentOS 7 na-enye maka nkwanye ùgwù Ntanetị Network.

Anyị na-ekwuputa na nchekwa nke anyị ga-eji ma melite sistemụ arụmọrụ ma ọ bụrụ na ọ dị mkpa:

[buzz @ dns ~] $ su Paswọdu: [mgbọrọgwụ @ dns buzz] # cd /etc/yum.repos.d/
[mgbọrọgwụ @ dns yum.repos.d] # ls -l
ngụkọta 28 -rw-r - r--. 1 mgbọrọgwụ mgbọrọgwụ 1664 Dec 9 2015 CentOS-Base.repo -rw-r - r--. 1 mgbọrọgwụ mgbọrọgwụ 1309 Dec 9 2015 CentOS-CR.repo -rw-r - r--. 1 mgbọrọgwụ 649 Dec 9 2015 CentOS-Debuginfo.repo -rw-r - r--. 1 mgbọrọgwụ mgbọrọgwụ 290 Dec 9 2015 CentOS-fasttrack.repo -rw-r - r--. 1 mgbọrọgwụ mgbọrọgwụ 630 Dec 9 2015 CentOS-Media.repo -rw-r - r--. 1 mgbọrọgwụ 1331 Dec 9 2015 CentOS-Sources.repo -rw-r - r--. 1 mgbọrọgwụ 1952 Dec 9 2015 CentOS-Vault.repo

Ọ dị mma ịgụ ọdịnaya nke faịlụ nkwupụta mbụ sitere na nchekwa nke CentOS akwadoro. Mgbanwe ndị anyị na-eme ebe a bụ maka na anyị enweghị Internetntanetị, anyị na-arụ ọrụ na ebe nchekwa mpaghara ebudatara na WWW Village, site na ndị ọrụ ibe na-eme ka ndụ anyị dịtụ mfe. 😉

[mgbọrọgwụ @ dns yum.repos.d] # mkdir mbụ
[mgbọrọgwụ @ dns yum.repos.d] # mv CentOS- * mbụ /

[mgbọrọgwụ @ dns yum.repos.d] # nano centos-repos.repo
[centos-base]
name=CentOS-$releasever
baseurl=http://10.10.10.1/repos/centos/7/base/
gpgcheck=0
enabled=1

[centos-updates]
name=CentOS-$releasever
baseurl=http://10.10.10.1/repos/centos/7/updates/x86_64/
gpgcheck=0
enabled=1

[mgbọrọgwụ @ dns yum.repos.d] # yum dị ọcha niile
Akwado plugins: fastestmirror, langpacks Nhicha nchekwa: centos-base centos-updates Ihicha ihe niile

[mgbọrọgwụ @ dns yum.repos.d] # yum melite
Akwado plugins: fastestmirror, centos-base langpacks | 3.4 kB 00:00 centos-mmelite | 3.4 kB 00:00 (1/2): centos-isi / isi_db | 5.3 MB 00:00 (2/2): centos-mmelite / primary_db | 9.1 MB 00:00 Dchọpụta enyo kachasị ọsọ Enweghị ngwugwu akara maka mmelite

Ozi «Mba (enwere) nchịkọta akara maka mmelite» - «Enweghị ngwugwu akara maka mmelite»Gosiputa na, site na ikwuputa ihe ndeba ihe di ugbu a nke di na aka anyi n'oge ntinye, akporo ihe ndi ozo di ugbu a.

Banyere ọnọdụ SELinux na firewall

Anyị ga-elekwasị anya n'isiokwu a - n'ụzọ bụ isi - na mmejuputa ọrụ DNS na ọrụ DHCP, nke bụ Isi Ebumnuche ya.

Ọ bụrụ na onye ọ bụla na-agụ họrọ a Security Policy n'oge nwụnye usoro, dị ka e gosiri na Foto 06 nke ederede «CentOS 7 Hypervisor I - SMB Netwọk»Ejiri maka ntinye DNS - DHCP sava a, ị chọpụtakwara na ị maghị etu esi ahazi SELinux na Firewall CentOS, anyị na-atụ aro ka ị na-agba ndị a:

Gbanwee faịlụ ahụ / wdg / sysconfig / selinux ma gbanwee SELINUX = ịmanye site SELINUX = gbanyụọ

[mgbọrọgwụ @ dns ~] # nano / etc / sysconfig / selinux
# Faịlụ a na-achịkwa steeti SELinux na sistemụ ahụ. # SELINUX = nwere ike iwere otu n'ime ụkpụrụ atọ ndị a: # ịmanye ya - etinye iwu nchekwa SELinux. # kwere - SELinux na-ebipụta ịdọ aka na ntị kama ịmanye ya. # nwere nkwarụ - Enweghị iwu SELinux.
SELINUX = nkwarụ
# SELINUXTYPE = nwere ike were otu n'ime ụkpụrụ abụọ: # ezubere - A na-echekwa usoro ezubere iche, # opekempe - Mgbanwe nke amụma ezubere iche. Naanị usoro ndị ahọpụtara bụ pr $ # mls - Nchedo Ogo Ọkwa Nlekọta. SELINUXTYPE = ezubere iche

Wee mee iwu ndị a

[mgbọrọgwụ @ dns ~] # setenforce 0

[mgbọrọgwụ @ dns ~] # ọrụ firewalld nkwụsị
Ibugharị gaa / bin / systemctl kwụsị firewalld.service

[mgbọrọgwụ @ dns ~] # systemctl gbanyụọ firewalld
Wepu symlink /etc/systemd/system/dbus-org.fedoraproject.FirewallD1.service. Wepu symlink /etc/systemd/system/basic.target.wants/firewalld.service.

Ọ bụrụ na ị na-emejuputa ihe nkesa DNS na-eche ihu na Internetntanetị, I kwesịghị ime ihe dị n'elu, mana hazie ọnọdụ SELinux na Firewall n'ụzọ ziri ezi. Lee "Nhazi ihe nkesa na GNU / Linux, site n'aka onye edemede Joel Barrios Dueñas" ma ọ bụ akwụkwọ CentOS n'onwe ya - Uhie okpu

Anyị hazi na-ekekọta - aha ya

• El ndekọ /usr/share/doc/bind-9.9.4/ nwere ezigbo akwụkwọ anyị na-akwado ka ị kpọtụrụ tupu ị banye nyocha ịntanetị na-ebughi ụzọ mara na, na mkpịsị aka gị na n'ụlọ gị, ị nwere ike ịchọta ihe ị na-achọ

Na otutu nkesa DNS ọrụ arụnyere site na-ekekọta ngwugwu a na-akpọ aha ya bụ (Aha Daemon). Na CentOS 7 arụnyere na nkwarụ na ndabara, dịka mmepụta nke iwu na-esonụ, ebe ọ na-ekwu na ọkwa ya bụ «enwe nkwarụ«, Na steeti a predefined site na ya« na-ere »- preset ere. N'ihi na ndekọ, na-ekekọta bụ Free Software.

Na-enyere ọrụ a kpọrọ aha

[mgbọrọgwụ @ dns ~] # systemctl ọnọdụ aha ya
Named.service - Berkeley Ntanetị Aha ngalaba (DNS) A gbara ibu: loaded (/usr/lib/systemd/system/named.service; enwe nkwarụ; preset preset: nkwarụ) Nọ n'ọrụ: adịghị arụ ọrụ (nwụrụ anwụ)

[mgbọrọgwụ @ dns ~] # systemctl enable named
Emepụtara site na /etc/systemd/system/multi-user.target.wants/named.service to /usr/lib/systemd/system/named.service.

[mgbọrọgwụ @ dns ~] # systemctl bido aha ya

[mgbọrọgwụ @ dns ~] # systemctl ọnọdụ aha ya
Named.service - Berkeley Ntanetị Aha ngalaba (DNS) A gbara ibu: loaded (/usr/lib/systemd/system/named.service; nyeere; preset preset: nkwarụ)
   Ọrụ: arụsi ọrụ ike (na-agba ọsọ) kemgbe Sat 2017-01-28 13:22:38 EST; 5min gara aga Usoro: 1990 ExecStart = / usr / sbin / aha ya -u aha ya bụ $ Nhọrọ (koodu = apụ, ọnọdụ = 0 / mmeri) Usoro: 1988 ExecStartPre = / bin / bash -c ma ọ bụrụ na! "$ DISABLE_ZONE_CHECKING" == "ee"]; mgbe ahụ / usr / sbin / aha-checkconf -z /etc/named.conf; ọzọ ikwughachi "Nyochaa mpaghara faịlụ nwere nkwarụ"; fi (koodu = apụ, ọnọdụ = 0 / SUCCESS) PID isi: 1993 (aha ya) CGroup: /system.slice/named.service └─1993 / usr / sbin / named -u aha ya bụ Jenụwarị 28 13:22:45 dns aha ya [1993]: njehie (enweghị ike ịchọta netwọkụ) idozi './NS/IN': 2001: 500: 2f :: f # 53 Jenụwarị 28 13:22:47 dns aha ya bụ [1993]: njehie (adịghị enweta netwọkụ) idozi './ DNSKEY / IN ': 2001: 500: 3 :: 42 # 53 Jan 28 13:22:47 dns aha ya bụ [1993]: njehie (netwọọdụ anaghị enweta) idozi' ./NS/IN ': 2001: 500: 3 :: 42 # 53 Jan 28 13:22:47 dns aha ya bụ [1993]: njehie (enweghị nnweta netwọk) idozi './DNSKEY/IN': 2001: 500: 2d :: d # 53 Jan 28 13:22:47 dns akpọrọ [1993] ]: njehie (enweghị ike ịchọta netwọkụ) idozi './NS/IN': 2001: 500: 2d :: d # 53 Jenụwarị 28 13:22:47 dns aha ya bụ [1993]: njehie (adịghị enweta netwọkụ) idozi './DNSKEY/ NA ': 2001: dc3 :: 35 # 53 Jan 28 13:22:47 dns aha ya bụ [1993]: njehie (enweghị nnweta netwọk) idozi' ./NS/IN ': 2001: dc3 :: 35 # 53 Jan 28 13: 22:47 dns aha ya bụ [1993]: njehie (network anaghi achọta) idozi './DNSKEY/IN': 2001: 7fe :: 53 # 53 Jan 28 13:22:47 dns aha ya bụ [1993]: njehie (enweghị nnweta network) olving './NS/IN': 2001: 7fe :: 53 # 53 Jan 28 13:22:48 dns aha ya bụ [1993]: njikwa-igodo-mpaghara: Enweghi ike iweta DNSKEY set '.': timed out

[mgbọrọgwụ @ dns ~] # systemctl Malitegharịa ekwentị aha ya

[mgbọrọgwụ @ dns ~] # systemctl ọnọdụ aha ya
Named.service - Berkeley Ntanetị Aha ngalaba (DNS) A gbara ya: ibugo (/usr/lib/systemd/system/named.service; nyeere; ndị na-ere ahịa preset: nkwarụ)
   Ọrụ: arụsi ọrụ ike (na-agba ọsọ) kemgbe Sat 2017-01-28 13:29:41 EST; Usoro 1s gara aga: 1449 ExecStop = / bin / sh -c / usr / sbin / rndc stop> / dev / null 2> & 1 || / bin / kill -TERM $ MAINPID (code = exited, status = 0 / SUCCESS) Usoro: 1460 ExecStart = / usr / sbin / named -u aha ya bụ $ OPTIONS (koodu = apụ, ọnọdụ = 0 / SUCCESS) Usoro: 1457 ExecStartPre = / bin / bash -c ma ọ bụrụ na! "$ DISABLE_ZONE_CHECKING" == "ee"]; mgbe ahụ / usr / sbin / aha-checkconf -z /etc/named.conf; ọzọ ikwughachi "ckinglele faịlụ mpaghara nwere nkwarụ"; fi (koodu = apụ, ọnọdụ = 0 / SUCCESS) PID isi: 1463 (aha ya) CGroup: /system.slice/named.service └─1463 / usr / sbin / aha ya -u aha ya bụ Jan 28 13:29:41 dns aha ya. [1463]: faịlị-key-zone: file file adịkwaghị aka: wepụ faịlụ akwụkwọ akụkọ Jan 28 13:29:41 dns aha ya bụ [1463]: mpaghara-key-management: adọrọ ọdụ Jan 2 28 13:29:41 dns kpọrọ [1463]: mpaghara 0.in-addr.arpa/IN: loaded serial 0 Jan 28 13:29:41 dns aha ya bụ [1463]: zone localhost.localdomain / IN: 0 serial 28 Jan 13 29:41:1463 dns aha ya [1.0.0.127]: mpaghara 0.in-addr.arpa/IN: loaded serial 28 Jan 13 29:41:1463 dns aha ya bụ [1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0]: mpaghara 6 .0.ip28.arpa / IN: loaded serial 13 Jan 29 41:1463:0 dns aha ya bụ [28]: zone localhost / IN: 13 serial 29 Jan 41 1463 : 28: 13 dns akpọrọ [29]: mpaghara niile eburu Jan 41 1463:28:13 dns akpọrọ [29]: na-agba ọsọ Jan 41 1:XNUMX:XNUMX dns systemd [XNUMX]: Malitere Berkeley Internet Aha ngalaba (DNS).

Mgbe anyị mechara ọrụ ahụ aha ya bụ na anyị na-amalite ya na nke mbụ, mmepụta nke iwu systemctl ọnọdụ aha ya na-egosi njehie. Mgbe anyị malitegharia ọrụ n'okpuru, ndị aha ya bụ emepụta faịlụ nhazi niile nke, na ndabara, dị mkpa maka ịrụ ọrụ ziri ezi. Ya mere, mgbe anyị mere iwu ahụ ọzọ systemctl ọnọdụ aha ya egosighi njehie ọzọ.

• Ezigbo, ọnụ, ma na-achọ Ọgụgụ: ọ bụrụ n'ịchọrọ ịchọpụta -ma ọ dịkarịa ala- ụzọ na-eduga na njedebe nke oke oke bekee, biko, jiri nwayọ gụọ ntoputa nke iwu ọ bụla. 😉 O doro anya na isiokwu ahụ ga-adị ntakịrị, mana ekwetaghị na ọ na-enweta nkọwa na nghọta.

Anyị gbanwee faịlụ /etc/named.conf

Ọtụtụ ndị na-agụ akwụkwọ na-ekwu -Anaghị m ekwu ya- Mania nke ndị nlekọta nke nkesa Linux dị iche iche nwere, nke itinye faịlụ nhazi usoro na folda nwere aha dị iche iche dabere na distro. Ha kwuru eziokwu. Mana gịnị ka anyị, ndị ọrụ dị mfe na-eji nkesa ndị a, eme? Mmegharị! 😉

Site n'ụzọ, na FreeBSD, UNIX® clone «The Origin», faịlụ ahụ dị /usr/local/etc/namedb/named.conf; mgbe na Debian, na mgbakwunye na nkewa n'ime faịlụ anọ ahụ aha.conf, aha.conf.options, aha.conf.default-zones, na aha.conf.local, dị na folda ahụ / wdg / kee /. Ndị chọrọ ịma ebe openSUSE na-etinye ya, gụọ «DNS na DHCP na openSUSE 13.2 Harlequin - SME Netwọk«. Ndị na-agụ akwụkwọ kwuru eziokwu! 😉

Dị ka anyị na-eme mgbe niile: tupu gbanwee ihe ọ bụla, anyị na-echekwa faịlụ nhazi mbụ n'okpuru aha ọzọ.

[mgbọrọgwụ @ dns ~] # cp /etc/named.conf /etc/named.conf.original

Iji mee ka ndụ dịkwuo mfe, kama ịmepụta isi ihe TSIG maka mmelite DNS dị omimi site na DHCP, anyị na-e copyomi otu igodo ahụ mmmmmmmmmmmmm dị ka dhcp.ọk.

[mgbọrọgwụ @ dns ~] # cp /etc/rndc.key /etc/dhcp.key

[mgbọrọgwụ @ dns ~] # nano /etc/dhcp.key
igodo "dhcp-key" {algorithm hmac-md5; nzuzo "OI7Vs + TO83L7ghUm2xNVKg =="; };

Ya mere na aha ya bụ nwere ike ịgụ faịlị naanị depụtaghachiri, anyị gbanwee ndị nwe ya:

[mgbọrọgwụ @ dns ~] # chown mgbọrọgwụ: aha ya bụ /etc/dhcp.key [mgbọrọgwụ @ dns ~] # ls -l /etc/rndc.key /etc/dhcp.key -rw-r -----. 1 mgbọrọgwụ aha 77 Jan 28 16:36 PM /etc/dhcp.key -rw-r -----. 1 mgbọrọgwụ aha 77 Jan 28 13:22 /etc/rndc.key

Obere nkọwa dị ka nke gara aga bụ ihe nwere ike ime ka anyị bụrụ onye nzuzu na-achọ ịchọta, ugbu a ... kedu ebe nsogbu dị ...? na ụfọdụ adjective, nke anyị anaghị ede n'ihi nkwanye ùgwù maka ndị a na-akwanyere ùgwù.

Ugbu a ọ bụrụ na - n'ikpeazụ! - anyị gbanwee faịlụ ahụ / wdg / aha.conf. Mgbanwe ma ọ bụ mgbakwunye anyị mere, n'ihe gbasara nke izizi, dị nkwuwa okwu. Lelee ole na ole.

[mgbọrọgwụ @ dns ~] # nano /etc/named.conf
// // named.conf // // Nye site na okpu agbụ ngwugwu iji hazie ISC EKPERE aha ya (8) DNS // nkesa dị ka naanị caching naanị aha (dika localhost DNS na-edozi naanị). // // Lee / usr / share / doc / bind * / sample / dịka ọmụmaatụ ahazi faịlụ nhazi. //

// Ndepụta Njikwa Nweta na-ekwupụta nke netwọk ga-enwe ike ịkpọtụrụ
// ihe nkesa m bu aha
acl mered {
 127.0.0.0 / 8;
 192.168.10.0 / 24;
};

nhọrọ {
 // M na-ekwuputa na daemon aha ya na-egekwa ntị maka interface
 // eth0 nke nwere IP: 192.168.10.5
    gee ntị n'ọdụ ụgbọ mmiri 53 {127.0.0.1; 192.168.10.5; };
    ntị-na-v6 ọdụ ụgbọ mmiri 53 {:: 1; }; ndekọ "/ var / aha ya"; dump-faịlụ "/var/named/data/cache_dump.db"; ọnụ ọgụgụ-faịlụ "/var/named/data/named_stats.txt"; memstatistics-file "/var/named/data/named_mem_stats.txt";

 // Nkwupụta ndị nkwupụta
 // ndị na-ebufe {
 // 0.0.0.0;
 // 1.1.1.1;
 //};
    // gaa n'ihu;

    // Naanị m na-ekwe ka ajụjụ nye m ACL
    kwe-ajụjụ {mired; }; // Iji lelee iwu igwu desdelinux.fan axfr // site na SysAdmin workstation na localhost naanị // Anyị enweghị ohu sava DNS. Anyị achọghị ya ... ruo ugbu a.
 nyefe-nyefee {localhost; 192.168.10.1; };

    / * - Ọ bụrụ na ị na-ewu ihe nkesa na-arụ ọrụ ihe nkesa DNS, B NOTGH enable ịmegharị nlọghachi. - Ọ bụrụ na ị na-ewu a na-enweta ihe (caching) DNS nkesa na-, ị kwesịrị inwe ike recursion. - Ọ bụrụ na gị recursive DNS nkesa na-nwere ọha na adreesị IP, ị ga-eme ka ohere akara amachi gbara ajụjụ gị ziri ezi ọrụ. Toghara ime nke a ga - eme ka sava gị bụrụ akụkụ nke mwakpo mmụba DNS dị ukwuu. Imejuputa BCP38 n'ime ntaneti gi ga - ebelata oke agha a * /
    // Anyị chọrọ ka ihe nkesa ikike nke anyị LAN - SME
    nlọghachi azụ ọ dịghị;

    dnssec-enyere ee; dnssec-nkwado nkwado ee; / * Tozọ gaa ISC DLV igodo * / bindkeys-file "/etc/named.iscdlv.key"; njikwa-igodo-ndekọ "/ var / aha ya / ike"; faịlụ pid "/run/named/named.pid"; nnọkọ-keyfile "/run/named/session.key"; }; osisi {channel default_debug {file "data / named.run"; ogo ike; }; }; Mpaghara "." IN {ụdị ndumodu; faịlụ "named.ca"; }; gunyere "/etc/named.rfc1912.zones"; gunyere "/etc/named.root.key";

// Anyị gụnyere igodo TSIG maka mmelite DNS dị ike // site na DHCP
gụnyere "/etc/dhcp.key";

// Nkwupụta nke aha, ụdị, ọnọdụ, na melite ikike
// nke mpaghara DNS Records // Mpaghara abụọ ahụ bụ MASTERS
Mpaghara "desdelinux.fan" {
 ụdị nna ukwu;
 faịlụ "dynamic / db.fromlinux.fan";
 kwe-melite {key dhcp-key; };
};

mpaghara "10.168.192.in-addr.arpa" {
 ụdị nna ukwu;
 faịlụ "dynamic / db.10.168.192.in-addr.arpa";
 kwe-melite {key dhcp-key; };
};

Anyị na-enyocha syntax ahụ

[mgbọrọgwụ @ dns ~] # aha-checkconf 
[mgbọrọgwụ @ dns ~] #

Ebe ọ bụ na iwu ahụ dị n'elu anaghị alọghachi ihe ọ bụla, syntax ahụ dị mma. Otú ọ dị, ọ bụrụ na anyị emee otu iwu ahụ, mana yana nhọrọ -z, mmepụta ga-abụ:

[mgbọrọgwụ @ dns ~] # aha-checkconf -z
Mpaghara localhost.localdomain / IN: N'ịbụ serial 0 mpaghara localhost / IN: loaded serial 0 mpaghara 1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0 .ip6.arpa / IN: 0 serial serial 1.0.0.127.in-addr.arpa/IN: 0 serial 0 zoro ezo 0.in-addr.arpa/IN: mpaghara 10.168.192 zoro ezo site na Linux.fan/IN: na-ebu ibu site na nna faịlụ ike / db.fromlinux.fan okpu: faịlụ ahụghị mpaghara fromlinux.fan/IN: adighi ebu ibu n'ihi njehie. _default / desdelinux.fan / IN: faịlụ ahụghị mpaghara 10.168.192.in-addr.arpa/IN: na-ebunye site na faili nnabata ike / db.10.168.192.in-addr.arpa dara: faịlụ ahụghị mpaghara 10.168.192 .in-addr.arpa / IN: adighi ebu ibu n'ihi njehie. _default / XNUMX.in-addr.arpa / IN: faịlụ ahụghị

O doro anya na ha bụ njehie nke na-eme n'ihi na anyịbebeghị mpaghara DNS Ndebanye aha maka ngalaba anyị.

• Maka ama ndi ozo banyere iwu a aha-checkconf, gbaa ọsọ nwoke aha ya-checkconf, tupu ịchọọ ozi ọ bụla ọzọ na Internetntanetị. M na-emesi gị obi ike na ọ ga-azọpụta ezigbo oge.

Anyị mepụtara Direct Mpaghara faịlụ site na linux.fan

... ọ bụghị na-enweghị ntakịrị echiche mbụ. 😉

Dị ka ndebiri iji mepụta faịlụ data mpaghara, anyị nwere ike iweghara ya /var/named/named.empty, ma ọ bụ /usr/share/doc/bind-9.9.4/sample/var/named/named.empty. Ha abụọ yiri.

[mgbọrọgwụ @ dns ~] # pusi /var/named/named.empty 
$ TTL 3H @ NA SOA @ rname.invalid. (0; serial 1D; izu ike 1H; nwugharia 1W; gwụ 3H); opekempe ma ọ bụ oge mkpuchi oge iji bie NS @ A 127.0.0.1 AAAA :: 1

Oge ndụ - Oge iji bie ndụ TTL SOA ndekọ

Ka anyị na nne na nna kọwaa TTL - Oge ibi ndụ site na aha SOA - Mmalite nke Ikike nke Ngalaba Master. Ọ na-adọrọ mmasị ịmara ihe ha pụtara maka mgbe anyị chọrọ ịgbanwe ụkpụrụ ha ọ bụla.

$ TTL: Oge nke ndu - Oge iji bie ndụ maka ndekọ niile dị na faịlụ ndị na-eso nkwupụta (mana na-ebu ụzọ nkwupụta $ TTL ọ bụla ọzọ) na enweghị nkwupụta TTL doro anya.

Oghere Usoro: Oghere Usoro ọgụgụ nke Mpaghara data. Oge ọ bụla anyị ji aka anyị gbanwee ndekọ DNS na mpaghara, anyị ga-abawanye ọnụ ọgụgụ ahụ site na 1, ọkachasị ma ọ bụrụ na anyị nwere ohu ma ọ bụ sava nke abụọ. Oge ọ bụla nke nkesa DNS ma ọ bụ ohu ohu kpọtụrụ sava nna ya ukwu, ọ na-ajụ maka nọmba serial nke data nna ya ukwu. Ọ bụrụ na ọnụọgụ nọmba nke ohu ahụ pere mpe, mgbe ahụ data maka mpaghara ahụ na sava ohu ahụ abụghị nke ochie, ohu ahụ na-emefe mpaghara mpaghara iji melite onwe ya.

tuondu: Ọ na-agwa ihe nkesa ohu ahụ oge nke ọ kwesịrị ịlele ma ọ bụrụ na data ya ruru oge maka nna ukwu.

Nwagharịa: Ọ bụrụ na ihe nkesa nna ukwu ahụ adịghị - n'ihi na ọ dara ọrịa, ka anyị kwuo - maka ohu ahụ mgbe oge gachara tuondu, Nwagharịa Ọ gwara ohu ahụ ogologo oge ọ ga-echere tupu ya anwaa ịkpọtụrụ nna ya ukwu.

expires: Ọ bụrụ na ohu ahụ enweghị ike ịkpọtụrụ nna ya ukwu maka oge expires, mgbe ahụ ọ bụrụ na agbasoro mmekọrịta ohu-nna ukwu mpaghara, na ihe nkesa ohu ahụ enweghị ihe ọ bụla ma ọ bụghị imechi mpaghara a na-ekwu. Mmebi nke otu mpaghara site na ihe nkesa DNS ohu na-egosi na ọ ga-akwụsị ịzaghachi ajụjụ DNS metụtara mpaghara ahụ, n'ihi na data dị adị emeela agadi ka ọ ghara ịba uru.

• Ihe a dị n'elu na-akụziri anyị n'ụzọ na-ezighi ezi ma na-ebu nnukwu nghọta - nke kachasị ntakịrị nke mmetụta - na ọ bụrụ na anyị achọghị ndị sava DNS maka ọrụ nke SME anyị, anyị anaghị etinye ya n'ọrụ, belụsọ ma ha dị oke mkpa. Ka anyị na-agbalị mgbe niile ịga site na mfe na mgbagwoju anya.

kacha nta: Na nsụgharị tupu BIN 8.2, ndekọ ikpeazụ SOA Ọ na-egosiputa ndụ ndabara - Ndabere oge iji dịrị ndụ, Ndụ Cache na - adịghị mma - Oge na-adịghị mma caching iji dịrị ndụ maka Mpaghara. Oge a na-ezo aka na nzaghachi na-adịghị mma niile nke ihe nkesa ikike nyere mpaghara ahụ.

Mpaghara faịlụ /var/named/dynamic/db.fromlinux.fan

[mgbọrọgwụ @ dns ~] # nano /var/named/dynamic/db.fromlinux.fan
$ TTL 3H @ NA SOA dns.fromlinux.fan. mgbọrọgwụ.dns.fromlinux.fan. (1; serial 1D; nweta ume 1H; gbalịa 1W; gwụ 3H); opekempe ma ọ bụ; Oge na-adịghị mma caching iji bie ndụ; @ IN NS dns.fromlinux.fan. @ Na MX 10 mail.fromlinux.fan. @ IN TXT "FromLinux, Blog gị raara onwe ya nye sọftụwia efu"; sysadmin IN A 192.168.10.1 ad-d IN IN 192.168.10.3 fileerver IN A 192.168.10.4 dns IN 192.168.10.5 proxyweb IN A 192.168.10.6 blog IN 192.168.10.7 ftpserver IN A 192.168.10.8 mail IN 192.168.10.9

Anyị na-enyocha /var/named/dynamic/db.fromlinux.fan

[mgbọrọgwụ @ dns ~] # aha-checkzone si linux.fan / var / aha ya bụ / dynamic / db. fromlinux.fan
mpaghara si Linux.fan/IN: loaded serial 1 OK

Anyị mepụtara faịlụ Mpaghara Mpaghara 10.168.192.in-addr.arpa

• Ihe ndekọ SOA nke Mpaghara a bụ nke nke Direct Direct na-enweghị ịtụle ndekọ MX..

[mgbọrọgwụ @ dns ~] # nano /var/named/dynamic/db.10.168.192.in-addr.arpa
$ TTL 3H @ NA SOA dns.fromlinux.fan. mgbọrọgwụ.dns.fromlinux.fan. (1; serial 1D; nweta ume 1H; gbalịa 1W; gwụ 3H); opekempe ma ọ bụ; Oge na-adịghị mma caching iji bie ndụ; @ IN NS dns.fromlinux.fan. ; 1 IN PTR sysadmin.fromlinux.fan. 3 IN PTR ad-dc.fromlinux.fan. 4 IN PTR faịlụerver.fromlinux.fan. 5 NA PTR dns.fromlinux.fan. 6 IN PTR proxyweb.desdelinux.fan. 7 IN PTR blog.desdelinux.fan. 8 NA PTR ftpserver.fromlinux.fan. 9 NA PTR mail.fromlinux.fan.

[mgbọrọgwụ @ dns ~] # aha-checkzone 10.168.192.in-addr.arpa /var/named/dynamic/db.10.168.192.in-addr.arpa 
mpaghara 10.168.192.in-addr.arpa/IN: adreesị serial 1 OK

Tupu ịmalitegharịa aha anyị na-elele nhazi ya

• Ruo mgbe anyị ji n'aka na ahazi faịlụ aha akpọrọ.conf, yana faịlụ mpaghara ya ahazi nke ọma, anyị na-atụ aro ka anyị ghara ịmalitegharị aha daemon. Ọ bụrụ na anyị emee nke a ma mechaa gbanwee mpaghara faịlụ, anyị ga-abawanye nọmba Usoro Oghere Usoro nke mpaghara gbanwetụrụ site na 1.

• Ka anyị lee "." na njedebe nke ngalaba na kpọrọ aha.

[mgbọrọgwụ @ dns ~] # aha-checkconf 
[mgbọrọgwụ @ dns ~] # aha-checkconf -z
Mpaghara localhost.localdomain / IN: N'ịbụ serial 0 mpaghara localhost / IN: loaded serial 0 mpaghara 1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0 .ip6.arpa / IN: 0 serial serial 1.0.0.127.in-addr.arpa/IN: 0 serial 0 mpaghara 0.in-addr.arpa/IN: 1 mpaghara serial si na Linux.fan/IN: 10.168.192 serial mpaghara 1.in-addr.arpa/IN: XNUMX serial juru

Nhazi niile aha ya ugbu a

Iji nweta nghọta, ọ bụ ezie na isiokwu ahụ toro ogologo, anyị na-enye nsụgharị zuru ezu nke iwu ahụ aha-checkconf -zp:

[mgbọrọgwụ @ dns ~] # aha-checkconf -zp
Mpaghara localhost.localdomain / IN: mpaghara serial 0 mpaghara localhost / IN: 0 mpaghara 1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0 .ip6.arpa / IN: 0 serial serial 1.0.0.127.in-addr.arpa/IN: 0 serial 0 mpaghara 0.in-addr.arpa/IN: 1 mpaghara serial sitere na Linux.fan/IN: 10.168.192 serial mpaghara 1.in-addr.arpa/IN: ndokwasa serial 53 nhọrọ {bindkeys-file "/etc/named.iscdlv.key"; nnọkọ-keyfile "/run/named/session.key"; ndekọ "/ var / aha ya"; dump-faịlụ "/var/named/data/cache_dump.db"; ntị-ọdụ ụgbọ mmiri 127.0.0.1 {32/192.168.10.5; 32/6; }; ntị-na-v53 ọdụ ụgbọ mmiri 1 {:: 128/192.168.10.1; }; njikwa-igodo-ndekọ "/ var / aha ya / ike"; memstatistics-file "/var/named/data/named_mem_stats.txt"; faịlụ pid "/run/named/named.pid"; ọnụ ọgụgụ-faịlụ "/var/named/data/named_stats.txt"; dnssec-enyere ee; dnssec-nkwado nkwado ee; nlọghachi azụ ọ dịghị; kwe-ajụjụ {"mired"; }; nyefee-nyefe {32/127.0.0.0; }; }; acl "mired" {8/192.168.10.0; 24/5; }; ịbanye {ọwa "default_debug" {faịlụ "data / named.run"; ogo ike; }; }; igodo "dhcp-key" {algorithm "hmac-md7"; nzuzo "OI83Vs + TO7L2ghUm1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0xNVKg =="; }; Mpaghara "." IN {ụdị ndumodu; faịlụ "named.ca"; }; Mpaghara "localhost.localdomain" IN {ụdị nna ukwu; faịlụ "named.localhost"; kwe-melite {"onye dịghị"; }; }; Mpaghara "localhost" NA {ụdị nna ukwu; faịlụ "named.localhost"; kwe-melite {"onye dịghị"; }; }; Mpaghara "6.ip1.0.0.127.arpa" IN {ụdị nna ukwu; faịlụ "named.loopback"; kwe-melite {"onye dịghị"; }; }; Mpaghara "0.in-addr.arpa" IN {ụdị nna ukwu; faịlụ "named.loopback"; kwe-melite {"onye dịghị"; }; }; Mpaghara "10.168.192.in-addr.arpa" IN {ụdị nna ukwu; faịlụ "named.empty"; kwe-melite {"onye dịghị"; }; }; Mpaghara "desdelinux.fan" {type master; faịlụ "dynamic / db.fromlinux.fan"; nye ohere-melite {key "dhcp-key"; }; }; mpaghara "10.168.192.in-addr.arpa" {ụdị nna ukwu; faịlụ "dynamic / db.257.in-addr.arpa"; nye ohere-melite {key "dhcp-key"; }; }; njikwa-igodo {"." isi mbụ-3 August 8 "AwEAAagAIKlVZrpC6Ia7gEzahOR + 9W29euxhJhVVLOyQbSEW0O8gcCjF FVQUTf6v58fLjwBd0YI0EzrAcQqBGCzh / RStIoO8g0NfnfL2MTJRkxoX bfDaUeVPQuYEhg37NZWAJQ9VnMVDxP / VHL496M / QZxkjf5 / Efucp2gaD X6RS6CXpoY68LsvPVjR0ZSwzz1apAzvN9dlzEheX7ICJBBtuA6G3LQpz W5hOA2hzCTMjJPJ8LbqF6dsV6DoBQzgul0sGIcGOYl7OyQdXfZ57relS Qageu + ipAdTTJ25AsRTAoub8ONGcLmqrAmRLKBP1dfwhYB4N7knNnulq QXA + Uk1ihz0 ="; };

• Gbaso usoro mgbanwe nke aha.conf Dị ka mkpa anyị na nlele, ma mepụta mpaghara mpaghara ọ bụla ma lelee ya, anyị nwere obi abụọ na anyị ga-eche nsogbu nsogbu nhazi ihu. N’ikpeazu anyi ghotara na obu egwuru-egwu nwoke, ya na otutu echiche. Mmmmmmmmmmmm

Ntụle ahụ weghachitere nsonaazụ na-enye afọ ojuju, yabụ anyị nwere ike ịmalitegharị EB - - aha ya bụ.

Anyị megharia aha ya ma lelee ọkwa ya

[mgbọrọgwụ @ dns ~] # systemctl Malitegharịa ekwentị named.service
[mgbọrọgwụ @ dns ~] # systemctl status named.service

Ọ bụrụ na anyị nweta ụdị njehie ọ bụla na mmepụta nke iwu ikpeazụ, anyị ga-amalitegharị aha. ọrụ ma lelee ya ọnọdụ. Ọ bụrụ na njehie adịkwaghị, ọrụ ahụ malitere nke ọma. Ma ọ bụghị ya, anyị ga-ebu nyocha nke niile gbanwere ma mepụta faịlụ, wee megharịa usoro ahụ.

Nzipụta ziri ezi nke ọnọdụ kwesịrị ịbụ:

[mgbọrọgwụ @ dns ~] # systemctl status named.service
Named.service - Berkeley Ntanetị Aha ngalaba (DNS) Ibu Ibu: loaded (/usr/lib/systemd/system/named.service; nyeere; ndị na-ere ahịa preset: nkwarụ) Ọrụ: nọ n'ọrụ (na-agba ọsọ) kemgbe Sun 2017-01-29 10:05:32 EST; 2min 57s gara aga Usoro: 1777 ExecStop = / bin / sh -c / usr / sbin / rndc stop> / dev / null 2> & 1 || / bin / kill -TERM $ MAINPID (koodu = exited, status = 0 / SUCCESS) Usoro: 1788 ExecStart = / usr / sbin / named -u aha ya bụ $ OPTIONS (koodu = apụ, ọnọdụ = 0 / SUCCESS) Usoro: 1786 ExecStartPre = / bin / bash -c ma ọ bụrụ na! "$ DISABLE_ZONE_CHECKING" == "ee"]; mgbe ahụ / usr / sbin / aha-checkconf -z /etc/named.conf; ọzọ ikwughachi "ckinglele faịlụ mpaghara nwere nkwarụ"; fi (koodu = apụ, ọnọdụ = 0 / SUCCESS) PID isi: 1791 (aha ya) CGroup: /system.slice/named.service └─1791 / usr / sbin / aha ya -u akpọrọ Jan 29 10:05:32 dns aha [1791]: Mpaghara 1.0.0.127.in-addr.arpa/IN: loaded serial 0 Jan 29 10:05:32 dns akpọrọ [1791]: zone 10.168.192.in-addr.arpa/IN: serial serial 1 Jan 29 10:05:32 dns aha ya bụ [1791]: mpaghara 1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ip6.arpa/IN : loaded serial 0 Jan 29 10:05:32 dns akpọrọ [1791]: zone desdelinux.fan/IN: loaded serial 1 Jan 29 10:05:32 dns akpọrọ [1791]: zone localhost.localdomain / IN: 0 serial 29 Jan 10 05:32:1791 dns aha ya bụ [0]: zone localhost / IN: loaded serial 29 Jan 10 05:32:1791 dns akpọrọ [XNUMX]: edere mpaghara niile
Jan 29 10:05:32 dns aha ya bụ [1791]: na-agba ọsọ
Jan 29 10:05:32 dns systemd [1]: Malitere Berkeley Internet Aha ngalaba (DNS). Jan 29 10:05:32 dns aha ya bụ [1791]: mpaghara 10.168.192.in-addr.arpa/IN: nzipu na-ekwuputa (serial 1)

Nyocha

Enwere ike ịgba ego na otu sava ahụ ma ọ bụ na igwe ejikọrọ na LAN. Anyị na-ahọrọ ime ha site na otu sysadmin.fromlinux.fan nke anyị nyere ikikere awara iji nyefee Mpaghara Mpaghara. Faịlụ /etc/resolv.conf nke otu ahụ bụ ihe ndị a:

uzu @ sysadmin: ~ $ cat /etc/resolv.conf 
# Site na nyocha NetworkManager site na Linux.fan nameserver 192.168.10.5

buzz @ sysadmin: ~ $ dig si na Linux.fan axfr
; << >> DiG 9.9.5-9 + deb8u1-Debian << >> desdelinux.fan axfr ;; nhọrọ zuru ụwa ọnụ: + cmd si linux.fan. 10800 NA SOA dns.fromlinux.fan. mgbọrọgwụ.dns.fromlinux.fan. 1 86400 3600 604800 10800 si linux.fan. 10800 IN NS dns.fromlinux.fan. site na Linux.fan. 10800 IN MX 10 mail.fromlinux.fan. site na Linux.fan. 10800 IN TXT "FromLinux, your Blog dedicated to Free Software" ad-dc.desdelinux.fan. 10800 IN 192.168.10.3 10800 blog.desdelinux.fan. 192.168.10.7 IN 10800 dns.fromlinux.fan. 192.168.10.5 IN 10800 fileserver.fromlinux.fan. 192.168.10.4 IN 10800 ftpserver.fromlinux.fan. 192.168.10.8 IN 10800 mail.fromlinux.fan. 192.168.10.9 IN 10800 proxyweb.fromlinux.fan. 192.168.10.6 IN 10800 sysadmin.fromlinux.fan. 192.168.10.1 N’ihe 10800 site na Linux.fan. 1 NA SOA dns.fromlinux.fan. mgbọrọgwụ.dns.fromlinux.fan. 86400 3600 604800 10800 0 ;; Ajụjụ oge: 192.168.10.5 msec ;; NKWU: 53 # 192.168.10.5 (29) ;; MGBE: Sun Jan 11 44:18:2017 EST 13 ;; XFR nha: 1 ndekọ (ozi 385, bytes XNUMX)

buzz @ sysadmin: ~ $ dig 10.168.192.in-addr.arpa axfr
; << >> DiG 9.9.5-9 + deb8u1-Debian << >> 10.168.192.in-addr.arpa axfr ;; nhọrọ ụwa: + cmd 10.168.192.in-addr.arpa. 10800 NA SOA dns.fromlinux.fan.10.168.192.in-addr.arpa. root.dns.fromlinux.fan.10.168.192.in-addr.arpa. 1 86400 3600 604800 10800 10.168.192.in-addr.arpa. 10800 IN NS dns.fromlinux.fan. 1.10.168.192.in-addr.arpa. 10800 IN PTR sysadmin.fromlinux.fan. 3.10.168.192.in-addr.arpa. 10800 IN PTR ad-dc.fromlinux.fan. 4.10.168.192.in-addr.arpa. 10800 IN PTR faịlụerver.fromlinux.fan. 5.10.168.192.in-addr.arpa. 10800 IN PTR dns.fromlinux.fan. 6.10.168.192.in-addr.arpa. 10800 IN PTR proxyweb.fromlinux.fan. 7.10.168.192.in-addr.arpa. 10800 IN PTR blog.desdelinux.fan. 8.10.168.192.in-addr.arpa. 10800 IN PTR ftpserver.fromlinux.fan. 9.10.168.192.in-addr.arpa. 10800 IN PTR mail.fromlinux.fan. 10.168.192.in-addr.arpa. 10800 NA SOA dns.fromlinux.fan.10.168.192.in-addr.arpa. root.dns.fromlinux.fan.10.168.192.in-addr.arpa. 1 86400 3600 604800 10800 ;; Ajụjụ oge: 0 msec ;; NKWU: 192.168.10.5 # 53 (192.168.10.5) ;; MGBE: Sun Jan 29 11:44:57 EST 2017 ;; XFR nha: ndekọ 11 (ozi 1, bytes 352)

buzz @ sysadmin: ~ $ igwu IN SOA si linux.fan
buzz @ sysadmin: ~ $ digo IN MX site na Linux.fan buzz @ sysadmin: ~ $ dig IN IN TXT si Linux.fan
uzu @ sysadmin: ~ $ host dns
dns.fromlinux.fan nwere adreesị 192.168.10.5
uzu @ sysadmin: ~ $ host sysadmin
sysadmin.desdelinux.fan nwere adreesị 192.168.10.1 ... Na ego ọ bụla ọzọ anyị chọrọ

• Ruo ugbu a, anyị nwere ihe ndabere maka ihe nkesa DNS na netwọk SME anyị. Anyị na-atụ anya na ị masịrị usoro niile, nke dị mfe, nri? 😉

Anyị na-etinye ma hazie DHCP

[mgbọrọgwụ @ dns ~] # yum wụnye dhcp
Akwado plugins: fastestmirror, centos-base langpacks | 3.4 kB 00:00:00 centos-mmelite | 3.4 kB 00: 00: 00: 86 Loading mirror ọsọ ọsọ site na cache hostfile Idozi dependencies -> Na-agba ọsọ azụmahịa ---> ngwugwu dhcp.x64_12 4.2.5: 42-7.el86.centos ga-arụnyere -> Idozi dependencies Kwụsịrị Nkwado Kwadoro = `` = ==================================== Ihe ngwugwu ngwugwu Ntuziaka Ntuziaka ========= ============================================ == = `` = ====================== =wụnye: dhcp x64_12 4.2.5: 42-7.el511.centos centos-base 1 k Transaction summary ==== = `` = = `` = ============================= 511 Ihe ngwugwu: 1.4k nke etinyere nha: 4.2.5 M Nke a dị mma [y / d / N]: y Nbudata nchịkọta: dhcp-42-7.el86.centos.x64_511.rpm | 00 kB 00:00:12 Oge ịgba ọsọ na-agba ọsọ checkgba ọsọ ịgba ọsọ Nnwale azụmahịa na-aga nke ọma Rungba azụmahịa ingwụnye: 4.2.5: dhcp-42-7.el86.centos.x64_1 1/12 ckinglele: 4.2.5: dhcp-42-7. el86.centos.x64_1 1/86 Awụnyere: dhcp.x64_12 4.2.5: 42-7.elXNUMX.centos Emela!

[mgbọrọgwụ @ dns ~] # nano /etc/dhcp/dhcpd.conf
# # DHCP Server nhazi faịlụ. # lee /usr/share/doc/dhcp*/dhcpd.conf.example # lee dhcpd.conf (5) peeji mmadu # ddns-update-style obere oge; ddns-mmelite na; ddns-domainname "desdelinux.fan."; ddns-rev-ngalaba aha "in-addr.arpa."; leghara ndị ahịa-mmelite; ikike; Nhọrọ ip-ebugharị; nhọrọ ngalaba aha "desdelinux.fan"; # nhọrọ ntp-sava 0.pool.ntp.org, 1.pool.ntp.org, 2.pool.ntp.org, 3.pool.ntp.org; gụnyere "/etc/dhcp.key"; Mpaghara site na Linux.fan. {isi 127.0.0.1; igodo dhcp-key; } Mpaghara 10.168.192.in-addr.arpa. {isi 127.0.0.1; igodo dhcp-key; } shared-network redlocal {subnet 192.168.10.0 netmask 255.255.255.0 {nhọrọ routers 192.168.10.1; nhọrọ subnet-nkpuchi 255.255.255.0; nhọrọ mgbasa ozi-adreesị 192.168.10.255; nhọrọ ngalaba-aha-sava 192.168.10.5; nhọrọ netbios-aha-sava 192.168.10.5; dị nso 192.168.10.30 192.168.10.250; }} # Ọgwụgwụ dhcpd.conf

[mgbọrọgwụ @ dns ~] # dhcpd -t
Internet Systems Consortium DHCP Server 4.2.5 Nwebisiinka 2004-2013 Internet Systems Consortium. Ikike niile echekwabara. Maka ozi, biko gaa na https://www.isc.org/software/dhcp/ Notchọghị LDAP ebe ọ bụ na akọwaghị sava ldap, ldap-port na ldap-base-dn na akọwapụtaghị faịlụ nhazi

[mgbọrọgwụ @ dns ~] # systemctl enyere dhcpd
Emepụtara site na /etc/systemd/system/multi-user.target.wants/dhcpd.service to /usr/lib/systemd/system/dhcpd.service.

[mgbọrọgwụ @ dns ~] # systemctl bido dhcpd

[mgbọrọgwụ @ dns ~] # systemctl ọnọdụ dhcpd
● dhcpd.service - DHCPv4 Server Daemon Load: ibu (/usr/lib/systemd/system/dhcpd.service; nyeere; ndị na-ere ihe echere ISI YA; 2017s gara aga Docs: nwoke: dhcpd (01) nwoke: dhcpd.conf (29) Isi PID: 12 (dhcpd) Ọnọdụ: "pgbasa ngwugwu ..." CGroup: /system.slice/dhcpd.service └─04 / usr / sbin / dhcpd -f -cf /etc/dhcp/dhcpd.conf -user dhcpd -group dhcpd - enweghị pid Jan 59 23:8:5 dns dhcpd [2381]: Internet Systems Consortium DHCP Server 2381 Jan 29 12 : 04: 59 dns dhcpd [2381]: Nwebisiinka 4.2.5-29 Internet Systems Consortium. Jenụwarị 12 04:59:2381 dns dhcpd [2004]: Ikike niile echekwabara. Jan 2013 29:12:04 dns dhcpd [59]: Maka ama, biko gaa na https://www.isc.org/software/dhcp/ Jenụwarị 2381 29:12:04 dns dhcpd [59]: Notchọghị LDAP kemgbe ldap -tinyeghị nchekwa, ldap-port na ldap-base-dn na faịlụ nhazi Jan 2381 29:12:04 dns dhcpd [59]: Dere 2381 mgbazinye ka ịgbazinye faịlụ. Jan 29 12:04:59 dns dhcpd [2381]: Ntị na LPF / eth0 / 29: 12: 04: 59: 2381: 0 / redlocal Jan 52 54:00:12 dns dhcpd [17]: Na-ezipụ na LPF / eth04 / 29: 12: 04: 59: 2381: 0 / redlocal Jan 52 54:00:12 dns dhcpd [17]: Izipu na Socket / fallback / fallback-net Jan 04 29:12:04 dns systemd [59]: Started DHCPv2381 Server Daemon.

Gịnị ka foduru ime?

Dị Mfe. Bido Windows 7 ma ọ bụ ndị ahịa ndị ọzọ nwere sọftụwia efu ma bido nyocha na ịlele. Anyị mere ya na ndị ahịa abụọ: asa.fromlinux.fan y suse-desktop.fromlinux.fan. Ndi nlele anya bu ndi a:

uzu @ sysadmin: ~ $ host asaa
asaa.fromlinux.fan nwere adreesị 192.168.10.30

uzu @ sysadmin: ~ $ host asaa.fromlinux.fan
asaa.fromlinux.fan nwere adreesị 192.168.10.30

buzz @ sysadmin: ~ $ dig IN IN TXT seven.fromlinux.fan
....; NKWU AJUJ; :; asaa.fromlinux.fan. N'IZI ;; AKWERKWỌ AKWERKWỌ: asaa.desdelinux.fan. 3600 NA TXT "31b7228ddd3a3b73be2fda9e09e601f3e9"....

Anyị weghachite otu "asaa" ka ọ bụrụ "LAGER" wee regharịa. Mgbe ịmalitegharịrị ọhụrụ LAGER, anyị na-elele:

uzu @ sysadmin: ~ $ host asaa
Nabata asaa achọtaghị: 5 (AJ )J))

uzu @ sysadmin: ~ $ host asaa.fromlinux.fan
Nabata asaa.desdelinux.fan ahụghị: 3 (NXDOMAIN)

Buzz@sysadmin: ~ $ kwadoro lager
lager.desdelinux.fan nwere adreesị 192.168.10.30

Buzz@sysadmin: ~ $ kwadoro lager.fromlinux.fan
lager.desdelinux.fan nwere adreesị 192.168.10.30

buzz @ sysadmin: ~ $ dig IN TXT lager.fromlinux.fan
....; NKWU AJUJ; :; lager.fromlinux.fan. N'IZI ;; AKWSWKWỌ AKW :KWỌ: lager.fromlinux.fan. 3600 NA TXT "31b7228ddd3a3b73be2fda9e09e601f3e9"....

Banyere suse-desktọọpụ ahịa:

uzu @ sysadmin: ~ $ host suse-dektop
Ahụhụ suse-dektop ahụghị: 5 (AJ )J))

buzz @ sysadmin: ~ $ kwadoro suse-desktọọpụ
suse-desktop.desdelinux.fan nwere adreesị 192.168.10.33

buzz @ sysadmin: ~ $ kwadoro suse-desktop.fromlinux.fan
suse-desktop.desdelinux.fan nwere adreesị 192.168.10.33

uzu @ sysadmin: ~ $ host 192.168.10.33
33.10.168.192.in-addr.arpa ngalaba aha pointer suse-desktop.desdelinux.fan.

uzu @ sysadmin: ~ $ host 192.168.10.30
30.10.168.192.in-addr.arpa ngalaba aha pointer LAGER.desdelinux.fan.

buzz @ sysadmin: ~ $ dig -x 192.168.10.33
....; AJJ S AJ;J; :; 33.10.168.192.in-addr.arpa. NA PTR ;; AKWKWỌ AKWERKWỌ: 33.10.168.192.in-addr.arpa. 3600 IN PTR suse-desktop.fromlinux.fan. ;; Ngalaba ikikere: 10.168.192.in-addr.arpa. 10800 IN NS dns.fromlinux.fan. ;; NKWUKWU NKWUKWU: dns.fromlinux.fan. 10800 N’A 192.168.10.5 ....

buzz @ sysadmin: ~ $ dig IN TXT suse-desktop.fromlinux.fan ....
; suse-desktop.desdelinux.fan. N'IZI ;; AKWERKWỌ AKWERKWỌ: suse-desktop.desdelinux.fan. 3600 NA TXT "31b78d287769160c93e6dca472e9b46d73"

;; Ngalaba Ọchịchị: desdelinux.fan. 10800 IN NS dns.fromlinux.fan. ;; NKWUKWU NKWUKWU: dns.fromlinux.fan. 10800 IN A 192.168.10.5
....

Ka anyị na-agbakwa iwu ndị a

[mgbọrọgwụ @ dns ~] # igwu si Linux.fan axfr
; << >> DiG 9.9.4-RedHat-9.9.4-29.el7_2.4 << >> desdelinux.fan axfr ;; nhọrọ zuru ụwa ọnụ: + cmd si linux.fan. 10800 NA SOA dns.fromlinux.fan. mgbọrọgwụ.dns.fromlinux.fan. 6 86400 3600 604800 10800 si linux.fan. 10800 IN NS dns.fromlinux.fan. site na Linux.fan. 10800 IN MX 10 mail.fromlinux.fan. site na Linux.fan. 10800 IN TXT "FromLinux, Blog gị raara onwe ya nye sọftụwia efu" ad-dc.desdelinux.fan. 10800 IN 192.168.10.3 10800 blog.desdelinux.fan. 192.168.10.7 IN 10800 dns.fromlinux.fan. 192.168.10.5 IN 10800 fileserver.fromlinux.fan. 192.168.10.4 IN 10800 ftpserver.fromlinux.fan. 192.168.10.8 IN 3600 LAGER.fromlinux.fan. XNUMX NA TXT "31b7228ddd3a3b73be2fda9e09e601f3e9"LAGER.fromlinux.fan.   3600 NA 192.168.10.30 mail.fromlinux.fan. 10800 IN 192.168.10.9 proxyweb.fromlinux.fan. 10800 IN 192.168.10.6 suse-desktop.fromlinux.fan. 3600 NA TXT "31b78d287769160c93e6dca472e9b46d73"suse-desktop.desdelinux.fan. 3600 N'afọ 192.168.10.33 sysadmin.fromlinux.fan. 10800 N’ihe 192.168.10.1 site na Linux.fan. 10800 NA SOA dns.fromlinux.fan. mgbọrọgwụ.dns.fromlinux.fan. 6 86400 3600 604800 10800

Na mmepụta n'elu, anyị mere ka ọ pụta ìhè na nkwuwa okwu na TTL - na obere - maka kọmputa nwere adreesị IP nke ndị ọrụ DHCP nyere nke nwere nkwupụta doro anya nke TTL 3600 nke DHCP nyere. Ofu IPs na-eduzi $ TTL nke 3H -3 awa = 10800 sekọnd- kwupụtara na ndekọ SOA nke faịlụ mpaghara ọ bụla.

Ha nwere ike ịlele mpaghara mpaghara azụ n'otu ụzọ ahụ.

[mgbọrọgwụ @ dns ~] # igwu 10.168.192.in-addr.arpa axfr

Iwu ndị ọzọ na-adọrọ mmasị bụ:

[mgbọrọgwụ @ dns ~] # aha-Journalprint /var/named/dynamic/db.desdelinux.fan.jnl
[mgbọrọgwụ @ dns ~] # aha-Journalprint /var/named/dynamic/db.10.168.192.in-addr.arpa.jnl
[mgbọrọgwụ @ dns ~] # journalctl -f

Manual mgbanwe nke Mpaghara faịlụ

Mgbe DHCP batara n'ime egwu nke imelite faịlụ mpaghara nke ike aha ya bụỌ bụrụ na ọ dị anyị mkpa iji aka anyị gbanwee mpaghara mpaghara, anyị ga-emerịrị usoro ndị a, mana ọ bụghị tupu ịmara ntakịrị banyere etu ọrụ ahụ si arụ ọrụ rndc maka njikwa ihe nkesa aha.

[mgbọrọgwụ @ dns ~] # nwoke rndc
....
       ifriizi [mpaghara [klas [ele]]]
           Kwụsịtụ mmelite na mpaghara dị ike. Ọ bụrụ na enweghị mpaghara akọwapụtara, mgbe ahụ kwụsịtụrụ mpaghara niile. Nke a na-enye ohere imezi eme ka a na mpaghara ejikari emelitere site ike update. Ọ na-emekwa ka mgbanwe dị na faịlụ akwụkwọ ndekọ ka agakọ ya na faịlụ nnabata. A ga-ajụ nnwale nkwalite niile na-agbanwe agbanwe mgbe mpaghara na-ajụ oyi.

       gbazee [mpaghara [klas [ele]]]
           Kwado mmelite na mpaghara gbara agba oyi. Ọ bụrụ na enweghị mpaghara akọwapụtara, mgbe ahụ, enyere mpaghara niile oyi kpọnwụrụ. Nke a na - eme ka ihe nkesa kwugharịa mpaghara ahụ site na diski, ma weghachite mmelite dị ike mgbe ibu ahụ mechara. Mgbe emechara mpaghara, gbanwere mmelite agaghịzi. Ọ bụrụ na mpaghara ahụ agbanweela na nhọrọ ixfr-to-iche na-arụ ọrụ, mgbe ahụ a ga-emelite faịlụ akwụkwọ akụkọ iji gosipụta mgbanwe na mpaghara ahụ. Ma ọ bụghị ya, ọ bụrụ na mpaghara ahụ agbanweela, a ga-ewepụ faịlụ ọ bụla dị na akwụkwọ akụkọ. ....

Kedu, ị chere na m ga - edegharị akwụkwọ ntuziaka ahụ niile? ... otu na ha ga - eji ụgbọ ala. Ihe ndi ozo ka m hapuru gi. 😉

N'ụzọ bụ isi:

• rndc friza [mpaghara [klas [ele]]], kwụsịtụrụ ike melite nke mpaghara. Ọ bụrụ na akọwapụtaghị otu, ihe niile ga-oyi oyi. Iwu ahụ na-enye ohere idezi akwụkwọ ntuziaka nke mpaghara oyi kpọnwụrụ ma ọ bụ mpaghara niile. A ga-agọnahụ nkwalite ọ bụla dị egwu mgbe oyi kpọnwụrụ.
• rndc gbazee [mpaghara [klas [ele]]], na-eme ka mmelite di omimi na mpaghara oyi kpọnwụrụ. Ihe nkesa DNS na-ebugharị faịlụ mpaghara ahụ site na diski, a na-agbanyekwa mmelite ndị na-agbanwe agbanwe mgbe nkwanyeghachi zuru ezu.

Cdọ aka ná ntị ka anyị were mgbe anyị jiri aka anyị dezie mpaghara faịlụ? Otu dị ka a ga - asị na anyị na - eke ya, na - echefughi ịbawanye nọmba Oghere Usoro site na 1 ma ọ bụ Oghere Usoro tupu ịchekwaa faịlụ ahụ na mgbanwe ikpeazụ.

Ihe nlele:

[mgbọrọgwụ @ dns ~] # rndc ifriizi na linux.fan

[mgbọrọgwụ @ dns ~] # nano /var/named/dynamic/db.fromlinux.fan
M gbanwee mpaghara faịlụ ọ bụla, dị mkpa ma ọ bụ. Ana m echekwa mgbanwe ndị ahụ

[mgbọrọgwụ @ dns ~] # rndc gbazee si Linux.fan
A maliteghachiri mpaghara ma gbazee. Lelee ndekọ ahụ iji hụ nsonaazụ ya.

[mgbọrọgwụ @ dns ~] # journalctl -f
Jan 29 14:06:46 dns aha ya bụ [2257]: mpaghara thawing 'desdelinux.fan/IN': ihe ịga nke ọma
Jan 29 14:06:46 dns aha ya bụ [2257]: mpaghara si linux.fan/IN: mpaghara serial (6) agbanweghi agbanwe. Mpaghara nwere ike ghara ịfefe ndị ohu.
Jan 29 14:06:46 dns aha ya bụ [2257]: zone desdelinux.fan/IN: loaded serial 6

Njehie na mmepụta gara aga, nke egosiri na-acha uhie uhie na njikwa ahụ, bụ n'ihi na m "echefuru" iji mee ka nọmba serial ahụ dịkwuo 1. Ọ bụrụ na m gbasoro usoro ahụ n'ụzọ ziri ezi, mmepụta ga -

[mgbọrọgwụ @ dns ~] # journalctl -f
- Ihe ndekọ na-amalite na Sun 2017-01-29 08:31:32 Est. - Jan 29 14:06:46 dns akpọrọ [2257]: zone desdelinux.fan/IN: loaded serial 6 Jan 29 14:10:01 dns systemd [1]: Oge Mbido 43 nke mgbọrọgwụ onye ọrụ. Jan 29 14: 10: 01 dns systemd [1]: Smalite Oge 43 nke mgbọrọgwụ onye ọrụ. Jan 29 14: 10: 01 dns CROND [2693]: (mgbọrọgwụ) CMD (/ usr / lib64 / sa / sa1 1 1) Jan 29 14:10:45 dns aha ya bụ [2257]: natara akara ọwa akara 'ifriizi si Linux. fan 'Jan 29 14:10:45 dns akpọrọ [2257]: mpaghara oyi' desdelinux.fan/IN ': ihe ịga nke ọma Jan 29 14:10:58 dns akpọrọ [2257]: natara akara nchịkwa nchịkwa' thaw desdelinux.fan 'Jan 29 14:10:58 dns akpọrọ [2257]: thawing zone 'desdelinux.fan/IN': ịga nke ọma Jan 29 14:10:58 dns akpọrọ [2257]: zone desdelinux.fan/IN: file file adịkwaghị akara ụbọchị: wepụ faịlụ akwụkwọ akụkọ Jan 29 14: 10: 58 dns aha ya bụ [2257]: zone desdelinux.fan/IN: loaded serial 7

• Ndị enyi Reader, m na-ekwughachi na ị ga-eji nlezianya gụọ nsonaazụ nke iwu ahụ. Maka ihe ndị mmepe ya rụsiri ọrụ ike na mmemme nke ọ bụla, n'agbanyeghị etu ọ dị mfe.

Gbanwee

Ruo ugbu a anyị ekwuola na mmejuputa DNS - DHCP ụzọ, ọrụ dị mkpa ma dị oke mkpa maka ezigbo arụmọrụ nke SME Network anyị, na-ezo aka n'inye adreesị dị ike site na DHCP na mkpebi nke kọmputa na ngalaba aha site na DNS.

Anyị nwere olile anya na ị masịrị usoro a niile ka anyị siri mee. Agbanyeghị na ọ nwere ike iyi ihe siri ike karịa iji njikwa ahụ, ọ dị mfe na agụmakwụkwọ ka ukwuu iji mejuputa ọrụ na UNIX® / Linux site na enyemaka ya.

Ha na-agbaghara m maka ntụgharịhie ọ bụla nke echiche echepụtara, nke e kere eke, edere, edegharị, dezigharị, ma bipụtara n'asụsụ Shakespeare, ọ bụghị Cervantes. 😉

Mbupu ọzọ

Echere m na otu ntakịrị ihe - na mgbakwunye mgbakwunye na ndekọ DNS - mana na Debian. Anyị enweghị ike ichefu nkesa ahụ, nri?