Siyaqhubeka nochungechunge lwethu lwezihloko futhi kulokhu sizobhekana nalezi zici ezilandelayo:
- Ukufakwa
- Izincwajana kanye namafayela main
Ngaphambi kokuqhubeka, sincoma ukuthi ungayeki ukufunda:
Ukufakwa
Ku-console, njengomsebenzisi wezimpande , sifaka i-bind9 :
ukufaneleka ukufaka ukubopha9
Sidinga futhi ukufaka iphakheji ye-dnsutils , enamathuluzi adingekayo okwenza imibuzo ye-DNS kanye nokusebenza kokuxilonga:
ukufaneleka ukufaka ama-dnsutils
Uma ufuna ukubheka imibhalo eza endaweni yokugcina izinto:
ukufaneleka ukufaka i-bind9-doc
Idokhumenti izogcinwa kufolda ethi /usr/share/doc/bind9-doc/arm , kanti ifayela le-index noma le-Table of Contents yi- Bv9ARM.html . Ukuze uyivule, sebenzisa:
firefox / usr / share / doc / bind9-doc / ingalo / Bv9ARM.html
Uma sifaka i-bind9 ku-Debian, iphakheji ye -bind9utils nayo iyafakwa, inikeza amathuluzi amaningana awusizo kakhulu okugcina ukufakwa kwe-BIND okusebenzayo. Lokhu kufaka phakathi i-rndc, i-named-checkconf, kanye ne-named-checkzone . Ngaphezu kwalokho, iphakheji ye -dnsutils inikeza uhlelo lwezinhlelo zamakhasimende ze-BIND, kufaka phakathi i-dig kanye ne -nslookup . Sizosebenzisa wonke la mathuluzi nemiyalo ezihlokweni ezilandelayo.
Ukuze sibone zonke izinhlelo kuphakheji ngayinye, kumele sisebenze njengomsebenzisi wezimpande :
dpkg -L bind9utils dpkg -L dnsutils
Noma iya ku -Synaptic , sesha iphakheji, bese ubona ukuthi yimaphi amafayela afakiwe. Ikakhulukazi lawo afakiwe kumafolda e- /usr/bin noma e-/usr/sbin.
Uma sifuna ukwazi kabanzi mayelana nokuthi lisetshenziswa kanjani ithuluzi ngalinye noma uhlelo olufakiwe, kufanele sisebenzise:
indoda
Izincwajana kanye namafayela main
Uma ufaka i-Debian, ifayela le-/etc/resolv.conf liyadalwa . Leli fayela, noma " ifayela lokucushwa kwesevisi yokuxazulula inkinga ," liqukethe izinketho eziningana, okuzenzakalelayo kwazo okuyigama lesizinda kanye nekheli le-IP leseva ye-DNS elimenyezelwe ngesikhathi sokufakwa. Njengoba imibhalo yosizo yefayela ingesiSpanishi futhi icacile kakhulu, sincoma ukuthi uyifunde usebenzisa umyalo othi `man resolv.conf`.
Ngemva kokufaka i-bind9 ku-Squeeze, okungenani iziqondisi ezilandelayo ziyadalwa:
/ etc / bind / var / cache / bind / var / lib / bind
Kufolda ethi /etc/bind sithola, phakathi kokunye, amafayela okucushwa alandelayo:
igama le -confed named.conf.options named.conf.default-zones named.conf.local rndc.key
Ku- /var/cache/bind directory , sizodala amafayela e-Local Zones , esizoxoxa ngawo kamuva. Ngenxa yelukuluku, sebenzisa imiyalo elandelayo ku-console njengomsebenzisi wempande :
ls -l / etc / bind ls -l / var / cache / bind
Vele, umkhombandlela wokugcina ngeke uqukethe lutho, ngoba asikenzi i-Local Zone.
Ukwehlukanisa izilungiselelo ze-BIND zibe amafayela amaningi kwenziwa ukuze kube lula futhi kucace. Ifayela ngalinye linomsebenzi othile njengoba sizobona ngezansi:
named.conf : Ifayela lokucushwa eliyinhloko. Lifaka amafayela athi named.conf.options , named.conf.local , kanye named.conf.default-zones.
named.conf.options : Izinketho zesevisi ye-DNS evamile. Isiqondiso: isiqondisi "/var/cache/bind" sizotshela i-bind9 ukuthi iwafune kuphi amafayela ezindawo zasendaweni ezidaliwe. Siphinde simemezele lapha amaseva " Abathumeli ", afinyelela ku-3, angama-server e-DNS angaphandle esingawabuza kunethiwekhi yethu (ngokusebenzisa i-firewall, vele) azophendula imibuzo noma izicelo i-DNS yethu yasendaweni engakwazi ukuziphendula.
Isibonelo, uma silungiselela i-DNS ye-LAN 192.168.10.0/24 , futhi sifuna ukuthi omunye wabathumeli bethu abe yiSeva Yegama le-UCI, kumele simemezele abathumeli bemiyalelo {200.55.140.178; } ; Ikheli le-IP elihambisana neseva ns1.uci.cu.
Ngale ndlela, singabuza iseva yethu ye-DNS yendawo ngekheli le-IP le-host yahoo.es (okusobala ukuthi alikho ku-LAN yethu), njengoba i-DNS yethu izobuza iseva ye-DNS ye-UCI ukuthi iyayazi yini ikheli le-IP le-yahoo.es, bese isinika umphumela, kungakhathaliseki ukuthi uphumelele noma cha. Sizophinde simemezele ezinye izici ezibalulekile zokucushwa kufayela le -named.conf.option , njengoba sizobona kamuva.
named.conf.default-zones : Njengoba igama lisikisela, lezi yizindawo ezizenzakalelayo. Lapha, i-BIND ilungiselelwe ngegama lefayela eliqukethe ulwazi lwamaseva ezimpande adingekayo ukuqalisa i-DNS cache, ikakhulukazi ifayela le -db.root . I-BIND iyalwa futhi ukuthi ibe negunya eliphelele (igunya) lesisombululo segama le -localhost , kokubili ekubhekeni phambili nangemuva, futhi okufanayo kusebenza ezindaweni zokusakaza.
named.conf.local : Ifayela lapho simemezela khona ukucushwa kwendawo kweseva yethu ye-DNS sisebenzisa igama le- Local Zones ngayinye , futhi okuzoba yi-DNS Record Files ezodweba amagama amakhompyutha axhunywe kwi-LAN yethu ngekheli lawo le-IP kanye nokuphikisana nalokho.
rndc.key : Ifayela elikhiqizwe eliqukethe ukhiye wokulawula i-BIND. Sisebenzisa i-BIND server control utility rndc , singalayisha kabusha ukucushwa kwe-DNS ngaphandle kokudinga ukuyiqala kabusha ngomyalo wokulayisha kabusha we-rndc . Lokhu kuwusizo kakhulu lapho senza izinguquko kumafayela e-Local Zones.
Ku-Debian, amafayela e-Local Zone angatholakala naku- /var/lib/bind ; kanti kwezinye izabelo ezifana ne-Red Hat kanye ne-CentOS avame ukutholakala ku- /var/lib/named noma kwezinye iziqondisi kuye ngezinga lokuphepha elisetshenzisiwe.
Sikhethe isiqondisi se- /var/cache/bind ngoba yiso leso uDebian asiphakamisa ngokuzenzakalelayo kufayela le - named.conf.options . Singasebenzisa noma yisiphi esinye isiqondisi uma nje sitshela i-bind9 ukuthi siwafune kuphi amafayela e-zone, noma sinikeze indlela ephelele ye-zone ngayinye kufayela le -named.conf.local . Kunconywa kakhulu ukusebenzisa iziqondisi eziphakanyiswe ukusatshalaliswa kwakho.
Ukuxoxa ngokuphepha okwengeziwe okuhilelekile ekudaleni i-chroot ye-BIND kungaphezu kobubanzi balesi sihloko. Okufanayo kusebenza ekuphepheni kusetshenziswa umongo we-SELinux. Labo abadinga ukusebenzisa izici ezinjalo kufanele babheke amabhukwana noma izincwadi ezikhethekile. Khumbula ukuthi iphakheji yamadokhumenti e -bind9-doc ifakiwe kufolda ye- /usr/share/doc/bind9-doc.
Kahle Madoda, kuze kube manje Ingxenye yesibili. Asifuni ukuhlala kudaba olulodwa ngenxa yezincomo ezinhle zeNduna yethu. Ekugcineni! sizongena ku-nitty-gritty ye-BIND Setup and Testing… esahlukweni esilandelayo.