一、安装bind

[root@nfs-node2 ~]# yum -y install bind bind-utils

二、配置只使用IPV4

[root@nfs-node2 ~]# echo 'OPTIONS="-4"' >> /etc/sysconfig/named

三、配置bind

1、配置主配置文件：vim /etc/named.conf

    //
    // Provided by Red Hat bind package to configure the ISC BIND named(8) DNS
    // server as a caching only nameserver (as a localhost DNS resolver only).
    //
    // See /usr/share/doc/bind*/sample/ for example named configuration files.
    //

    options {
            listen-on port 53 { 127.0.0.1; };
            #不使用ip-v6
            listen-on-v6      { none; };
            directory       "/var/named";
            dump-file       "/var/named/data/cache_dump.db";
            statistics-file "/var/named/data/named_stats.txt";
            memstatistics-file "/var/named/data/named_mem_stats.txt";
            #允许查询的网段
            allow-query     { localhost;10.0.0.0/24; };

            #允许传送指定网段（slave dns）
            allow-transfer { localhost; 10.0.0.0/24; };
            recursion yes;

            dnssec-enable yes;
            dnssec-validation yes;

            /* Path to ISC DLV key */
            bindkeys-file "/etc/named.iscdlv.key";

            managed-keys-directory "/var/named/dynamic";
    };

    logging {
            channel default_debug {
                    file "data/named.run";
                    severity dynamic;
            };
    };



    #定义内部解析
    view "internal" {
            match-clients {
                    localhost;
                    10.0.0.0/24;
            };
            zone "." IN {
                    type hint;
                    file "named.ca";
            };
            zone "host.com" IN {
                    type master;
                    file "host.com.lan";
                    allow-update { none; };
            };
            zone "0.0.10.in-addr.arpa" IN {
                    type master;
                    file "0.0.10.db";
                    allow-update { none; };
            };
            include "/etc/named.rfc1912.zones";
            include "/etc/named.root.key";

    };

    #定义公网解析
    view "external" {
            match-clients { any; };
            allow-query { any; };
            recursion no;
            zone "host.com" IN {
                    type master;
                    file "host.com.wan";
                    allow-update { none; };
            };
            zone "0.0.16.172.in-addr.arpa" IN {
                    type master;
                    file "0.0.16.172.db";
                    allow-update { none; };
            };
    };

2、配置zone文件:

[root@nfs-node2 ~]# vim /var/named/host.com.lan

$TTL 86400
@   IN  SOA     nfs-node2.host.com. root.host.com. (
          2017080201  ;Serial
          3600        ;Refresh
          1800        ;Retry
          604800      ;Expire
          86400       ;Minimum TTL
)

          IN  NS      nfs-node2.host.com.
          IN  A       10.0.0.30
          IN  MX 10   nfs-node2.host.com.
nfs-node2     IN  A       10.0.0.30

[root@nfs-node2 ~]# vim /var/named/host.com.wan

$TTL 86400
@   IN   SOA     nfs-node2.host.com. root.host.com. (
          2017080201   ;Serial
          3600         ;Refresh
          1800         ;Retry
          604800       ;Expire
          86400        ;Minimum TTL
)
          IN NS nfs-node2.host.com.
          IN A 172.16.0.30
          IN MX 10 nfs-node2.host.com.
nfs-node2 IN A 172.16.0.30

[root@nfs-node2 ~]# vim /var/named/0.0.10.db

$TTL 86400
@   IN  SOA     nfs-node2.host.com. root.host.com. (
            2017080201  ;Serial
            3600        ;Refresh
            1800        ;Retry
            604800      ;Expire
            86400       ;Minimum TTL
)

            IN  NS      nfs-node2.host.com.

            IN  PTR     srv.world.
            IN  A       255.255.255.0
30          IN  PTR     nfs-node2.host.com.

[root@nfs-node2 ~]# vim /var/named/0.0.16.172.db

$TTL 86400
@   IN  SOA    nfs-node2.host.com. root.host.com. (
          2017080201   ;Serial
          3600         ;Refresh
          1800         ;Retry
          604800       ;Expire
          86400        ;Minimum TTL
)
          IN NS nfs-node2.host.com.
          IN PTR srv.world.
          IN A 255.255.255.0
30        IN PTR nfs-node2.host.com.

四、检查、启动服务、开机自启动

检查配置文件 [root@nfs-node2 ~]# named-checkconf

检查zone文件

  [root@nfs-node2 ~]# named-checkzone host.com /var/named/host.com.lan 
  zone host.com/IN: loaded serial 2014080201
  OK

启动服务

  [root@nfs-node2 ~]# /etc/init.d/named start
  启动 named：                                               [确定]

开机自启动 [root@nfs-node2 ~]# chkconfig named on

五、配置防火墙允许访问dns服务

[root@nfs-node2 ~]# iptables -I INPUT -p udp -m state --state NEW -m udp --dport 53 -j ACCEPT 
[root@nfs-node2 ~]# iptables -I INPUT -p udp -m state --state NEW -m tcp --dport 53 -j ACCEPT

六、客户端测试结果

    [root@nfs-node2 ~]# host nfs-node2.host.com localhost
    Using domain server:
    Name: localhost
    Address: 127.0.0.1#53
    Aliases: 

    nfs-node2.host.com has address 10.0.0.30
    [root@nfs-node2 ~]# host 10.0.0.30 localhost
    Using domain server:
    Name: localhost
    Address: 127.0.0.1#53
    Aliases: 

    30.0.0.10.in-addr.arpa domain name pointer nfs-node2.host.com.
    [root@nfs-node2 ~]# host 172.16.0.30 localhost
    Using domain server:
    Name: localhost
    Address: 127.0.0.1#53
    Aliases: 

    30.0.16.172.in-addr.arpa. domain name pointer nfs-node2.host.com.

bind yum 安装