{"id":4355,"date":"2015-06-05T09:55:47","date_gmt":"2015-06-05T01:55:47","guid":{"rendered":"https:\/\/www.hmouse.tk\/?p=4355"},"modified":"2015-06-07T11:04:09","modified_gmt":"2015-06-07T03:04:09","slug":"dns%e7%9a%84%e5%ae%89%e8%a3%85%e9%85%8d%e7%bd%ae","status":"publish","type":"post","link":"https:\/\/www.hmouse.cn\/?p=4355","title":{"rendered":"dns\u7684\u5b89\u88c5\u914d\u7f6e"},"content":{"rendered":"<p>\u63a8\u8350\u53c2\u8003\u9e1f\u54e5\u7684\u79c1\u623f\u83dc\uff1a<a title=\"http:\/\/linux.vbird.org\/linux_server\/0350dns.php\" href=\"http:\/\/linux.vbird.org\/linux_server\/0350dns.php\">http:\/\/linux.vbird.org\/linux_server\/0350dns.php<\/a><\/p>\n<p>19.1 \u4ec0\u9ebc\u662f DNS<\/p>\n<p>DNS \u8d8a\u4f86\u8d8a\u91cd\u8981\uff0c\u5c24\u5176\u672a\u4f86 IPv6 \u9019\u500b\u9700\u8981 128bits \u4f4d\u5740\u7684\u73a9\u610f\u5152\u3002\u56e0\u70ba\u6211\u5011\u9023 IPv4 \u7684 32bits \u90fd\u80cc\u4e0d\u8d77\u4f86\u4e86\uff0c 128bits \u8981\u600e\u9ebc\u80cc\uff1f \u9019\u6642\u4e3b\u6a5f\u540d\u7a31\u81ea\u52d5\u89e3\u6790\u70ba IP \u5c31\u5f88\u91cd\u8981\u5566\uff01\u90a3\u5c31\u662f DNS\u3002\u4f46\u662f DNS \u7684\u67b6\u8a2d\u6709\u9ede\u9ebb\u7169\uff0c\u91cd\u9ede\u662f\u539f\u7406\u7684\u90e8\u5206\u6bd4\u8f03\u4e0d\u597d\u7406\u89e3\u3002 \u56e0\u6b64\u5728\u9019\u500b\u5c0f\u7bc0\u7576\u4e2d\uff0c\u8b93\u6211\u5011\u5148\u4f86\u8ac7\u8ac7\u8207\u7db2\u8def\u4e3b\u6a5f\u540d\u7a31\u6709\u95dc\u7684\u4e00\u4e9b\u77e5\u8b58\uff0c\u9019\u6a23\u67b6\u8a2d DNS \u624d\u4e0d\u6703\u51fa\u554f\u984c\u3002<\/p>\n<hr \/>\n<p><a name=\"Whatisdns\"><\/a><img loading=\"lazy\" decoding=\"async\" src=\"http:\/\/linux.vbird.org\/images\/penguin-s.gif\" alt=\"\u5c0f\u6a19\u984c\u7684\u5716\u793a\" width=\"16\" height=\"23\" align=\"middle\" \/>19.1.1 \u7528\u7db2\u8def\u4e3b\u6a5f\u540d\u7a31\u53d6\u5f97 IP \u7684\u6b77\u53f2\u6df5\u6e90<\/p>\n<p>\u76ee\u524d\u7684\u7db2\u969b\u7db2\u8def\u4e16\u754c\u4f7f\u7528\u7684\u662f\u6240\u8b02\u7684 TCP\/IP \u5354\u5b9a\uff0c\u5176\u4e2d IP \u70ba\u7b2c\u56db\u7248\u7684 IPv4 \u3002\u4e0d\u904e\uff0c\u9019\u500b IPv4 \u662f\u7531 32 \u4f4d\u5143\u6240\u7d44\u6210\uff0c\u70ba\u4e86\u4eba\u8166\u5df2\u7d93\u8f49\u6210\u56db\u7d44\u5341\u9032\u4f4d\u7684\u6578\u5b57\u4e86\uff0c\u4f8b\u5982 12.34.56.78 \u9019\u6a23\u7684\u683c\u5f0f\u3002\u7576\u6211\u5011\u5229\u7528 Internet \u50b3\u9001\u8cc7\u6599\u7684\u6642\u5019\uff0c\u5c31\u9700\u8981\u9019\u500b IP \uff0c\u5426\u5247\u8cc7\u6599\u5c01\u5305\u600e\u9ebc\u77e5\u9053\u8981\u88ab\u9001\u5230\u54ea\u88e1\u53bb\uff1f<\/p>\n<p><a name=\"hosts\"><\/a><\/p>\n<ul>\n<li>\n<hr \/>\n<p>\u55ae\u4e00\u6a94\u6848\u8655\u7406\u4e0a\u7db2\u7684\u5e74\u4ee3\uff1a \/etc\/hosts<\/li>\n<\/ul>\n<p>\u7136\u800c\u4eba\u8166\u5c0d\u65bc IP \u9019\u7a2e\u6578\u5b57\u7684\u73a9\u610f\u5152\uff0c\u8a18\u61b6\u529b\u5be6\u5728\u662f\u4e0d\u600e\u9ebc\u6a23\u3002\u4f46\u662f\u8981\u4e0a Internet \u53c8\u4e00\u5b9a\u9700\u8981 IP\uff0c\u600e\u9ebc\u8fa6\uff1f\u70ba\u4e86\u61c9\u4ed8\u9019\u500b\u554f\u984c\uff0c \u65e9\u671f\u7684\u670b\u53cb\u60f3\u5230\u4e00\u500b\u65b9\u6cd5\uff0c\u90a3\u5c31\u662f\u5229\u7528\u67d0\u4e9b\u7279\u5b9a\u7684\u6a94\u6848\u5c07\u4e3b\u6a5f\u540d\u7a31\u8207 IP \u4f5c\u4e00\u500b\u5c0d\u61c9\uff0c \u5982\u6b64\u4e00\u4f86\uff0c\u6211\u5011\u5c31\u53ef\u4ee5\u900f\u904e\u4e3b\u6a5f\u540d\u7a31\u4f86\u53d6\u5f97\u8a72\u4e3b\u6a5f\u7684 IP \u4e86\uff01\u771f\u662f\u500b\u597d\u4e3b\u610f\uff0c\u56e0\u70ba\u4eba\u985e\u5c0d\u65bc\u540d\u5b57\u7684\u8a18\u61b6\u529b\u53ef\u5c31\u597d\u591a\u4e86\uff01 \u90a3\u5c31\u662f \/etc\/hosts \u9019\u500b\u6a94\u6848\u7684\u7528\u9014\u4e86\u3002<\/p>\n<p>\u53ef\u60dc\u7684\u662f\uff0c\u9019\u500b\u65b9\u6cd5\u9084\u662f\u6709\u7f3a\u61be\u7684\uff0c\u90a3\u5c31\u662f\u4e3b\u6a5f\u540d\u7a31\u8207 IP \u7684\u5c0d\u61c9\u7121\u6cd5\u81ea\u52d5\u65bc\u6240\u6709\u7684\u96fb\u8166\u5167\u66f4\u65b0\uff0c \u4e14\u8981\u5c07\u4e3b\u6a5f\u540d\u7a31\u52a0\u5165\u8a72\u6a94\u6848\u50c5\u80fd\u5411 INTERNIC \u8a3b\u518a\uff0c\u82e5 IP \u6578\u91cf\u592a\u591a\u6642\uff0c\u8a72\u6a94\u6848\u6703\u5927\u5230\u4e0d\u50cf\u8a71\uff0c\u4e5f\u5c31\u66f4\u4e0d\u5229\u65bc\u5176\u4ed6\u4e3b\u6a5f\u540c\u6b65\u5316\u4e86\u3002 \u5982\u4e0b\u5716\u6240\u793a\uff0c\u7528\u6236\u7aef\u96fb\u8166\u6bcf\u6b21\u90fd\u5f97\u8981\u91cd\u65b0\u4e0b\u8f09\u4e00\u6b21\u6a94\u6848\u624d\u80fd\u9806\u5229\u806f\u7db2\uff01<\/p>\n<p><img decoding=\"async\" title=\"\u65e9\u671f\u900f\u904e\u55ae\u4e00\u6a94\u6848\u9032\u884c\u7db2\u8def\u9023\u7dda\u7684\u793a\u610f\u5716\" src=\"http:\/\/linux.vbird.org\/linux_server\/0350dns\/\/hosts.gif\" alt=\"\u65e9\u671f\u900f\u904e\u55ae\u4e00\u6a94\u6848\u9032\u884c\u7db2\u8def\u9023\u7dda\u7684\u793a\u610f\u5716\" border=\"0\" \/><br \/>\n\u5716 19.1-1\u3001\u65e9\u671f\u900f\u904e\u55ae\u4e00\u6a94\u6848\u9032\u884c\u7db2\u8def\u9023\u7dda\u7684\u793a\u610f\u5716<\/p>\n<p>\u5728<a href=\"http:\/\/linux.vbird.org\/linux_server\/0130internet_connect.php#connect_fix_IP\">\u7b2c\u56db\u7ae0 4.2.1<\/a> \u88e1\u9762\u6211\u5011\u7d04\u7565\u8ac7\u904e \/etc\/hosts \u9019\u500b\u6a94\u6848\u7684\u7528\u6cd5\uff0c\u57fa\u672c\u4e0a\u8a72\u6a94\u6848\u5167\u5bb9\u5c31\u662f\u300eIP \u4e3b\u6a5f\u540d\u7a31 \u4e3b\u6a5f\u5225\u540d\u4e00 \u4e3b\u6a5f\u5225\u540d\u4e8c&#8230;\u300f\u3002\u5728\u88e1\u9762\u6700\u91cd\u8981\u7684\u5c31\u662f localhost \u5c0d\u61c9\u5230 127.0.0.1 \u9019\u500b\u549a\u549a\uff01\u4f60\u5343\u842c\u4e0d\u80fd\u522a\u9664\u8a72\u7b46\u8a18\u9304\u7684\u3002\u9019\u88e1\u4e5f\u518d\u6b21\u5f37\u8abf\uff0c\u5728\u4f60\u7684\u79c1\u6709\u7db2\u57df\u5167\u90e8\uff0c\u6700\u597d\u5c07\u6240\u6709\u7684\u79c1\u6709 IP \u8207\u4e3b\u6a5f\u540d\u7a31\u5c0d\u61c9\u90fd\u5beb\u5165\u9019\u500b\u6a94\u6848\u4e2d\u5566\uff01<\/p>\n<p><a name=\"dns\"><\/a><\/p>\n<ul>\n<li>\n<hr \/>\n<p>\u5206\u6563\u5f0f\u3001\u968e\u5c64\u5f0f\u4e3b\u6a5f\u540d\u7a31\u7ba1\u7406\u67b6\u69cb\uff1a DNS \u7cfb\u7d71<\/li>\n<\/ul>\n<p>\u65e9\u671f\u7db2\u8def\u5c1a\u672a\u6d41\u884c\u4e14\u96fb\u8166\u6578\u91cf\u4e0d\u591a\u6642\uff0c\/etc\/hosts \u5012\u662f\u9084\u5920\u7528\u7684\uff0c\u4f46\u81ea\u5f9e 90 \u5e74\u4ee3\u7db2\u8def\u71b1\u9580\u5316\u5f8c\uff0c\u55ae\u4e00\u6a94\u6848 \/etc\/hosts \u7684\u806f\u7db2\u554f\u984c\u5c31\u767c\u751f\u4e0a\u9762\u8b1b\u7684\u72c0\u6cc1\u5566\uff01\u70ba\u4e86\u89e3\u6c7a\u9019\u500b\u65e5\u76ca\u56b4\u91cd\u7684\u554f\u984c\uff0c\u67cf\u514b\u840a\u5927\u5b78\u767c\u5c55\u51fa\u53e6\u5916\u4e00\u5957\u968e\u5c64\u5f0f\u7ba1\u7406\u4e3b\u6a5f\u540d\u7a31\u5c0d\u61c9 IP \u7684\u7cfb\u7d71\uff0c \u6211\u5011\u7a31\u5b83\u70ba Berkeley Internet Name Domain, BIND \uff0c\u9019\u500b\u7cfb\u7d71\u53ef\u5c31\u512a\u79c0\u7684\u591a\u4e86\uff5e \u900f\u904e\u968e\u5c64\u5f0f\u7ba1\u7406\uff0c\u53ef\u4ee5\u8f15\u9b06\u7684\u9032\u884c\u7dad\u8b77\u7684\u5de5\u4f5c\uff5e\u592a\u68d2\u4e86\uff01\u9019\u4e5f\u662f\u76ee\u524d\u5168\u4e16\u754c\u4f7f\u7528\u6700\u5ee3\u6cdb\u7684\u9818\u57df\u540d\u7a31\u7cfb\u7d71 (Domain Name System, DNS) \u54e9\uff5e\u900f\u904e DNS \uff0c\u6211\u5011\u4e0d\u9700\u8981\u77e5\u9053\u4e3b\u6a5f\u7684 IP \uff0c\u53ea\u8981\u77e5\u9053\u8a72\u4e3b\u6a5f\u7684\u540d\u7a31\uff0c\u5c31\u80fd\u5920\u8f15\u6613\u7684\u9023\u4e0a\u8a72\u4e3b\u6a5f\u4e86\uff01<\/p>\n<p>DNS \u5229\u7528\u985e\u4f3c\u6a39\u72c0\u76ee\u9304\u7684\u67b6\u69cb\uff0c\u5c07\u4e3b\u6a5f\u540d\u7a31\u7684\u7ba1\u7406\u5206\u914d\u5728\u4e0d\u540c\u5c64\u7d1a\u7684 DNS \u4f3a\u670d\u5668\u7576\u4e2d\uff0c\u7d93\u7531\u5206\u5c64\u7ba1\u7406\uff0c \u6240\u4ee5\u6bcf\u4e00\u90e8 DNS \u4f3a\u670d\u5668\u8a18\u61b6\u7684\u8cc7\u8a0a\u5c31\u4e0d\u6703\u5f88\u591a\uff0c\u800c\u4e14\u82e5\u6709 IP \u7570\u52d5\u6642\u4e5f\u76f8\u7576\u5bb9\u6613\u4fee\u6539\uff01\u56e0\u70ba\u4f60\u5982\u679c\u5df2\u7d93\u7533\u8acb\u5230\u4e3b\u6a5f\u540d\u7a31\u89e3\u6790\u7684\u6388\u6b0a\uff0c \u90a3\u9ebc\u5728\u4f60\u81ea\u5df1\u7684 DNS \u4f3a\u670d\u5668\u4e2d\uff0c\u5c31\u80fd\u5920\u4fee\u6539\u5168\u4e16\u754c\u90fd\u53ef\u4ee5\u67e5\u8a62\u5230\u7684\u4e3b\u6a5f\u540d\u7a31\u4e86\uff01\u800c\u4e0d\u7528\u900f\u904e\u4e0a\u5c64 ISP \u7684\u7dad\u8b77\u5462\uff01 \u81ea\u5df1\u52d5\u624b\u7576\u7136\u662f\u6700\u5feb\u7684\u5566\uff01<\/p>\n<p>\u7531\u65bc\u76ee\u524d\u7684 IPv4 \u5df2\u7d93\u63a5\u8fd1\u767c\u9001\u5b8c\u7562\u7684\u968e\u6bb5\uff0c\u56e0\u6b64\u672a\u4f86\u90a3\u500b 128bits \u7684 IPv6 \u6703\u9010\u6f38\u71b1\u9580\u8d77\u4f86\u3002\u90a3\u9ebc\u4f60\u9700\u8981\u80cc 128bits \u7684 IP \u4f86\u4e0a\u7db2\u55ce\uff1f\u60f3\u5fc5\u662f\u4e0d\u53ef\u80fd\u7684\uff01\u56e0\u6b64\u9019\u500b\u53ef\u4ee5\u900f\u904e\u4e3b\u6a5f\u540d\u7a31\u5c31\u89e3\u6790\u5230 IP \u7684 DNS \u670d\u52d9\uff0c\u53ef\u4ee5\u60f3\u50cf\u7684\u5230\uff0c\u5b83\u6703\u8d8a\u4f86\u8d8a\u91cd\u8981\u3002\u6b64\u5916\uff0c\u76ee\u524d\u5168\u4e16\u754c\u7684 WWW \u4e3b\u6a5f\u540d\u7a31\u4e5f\u90fd\u662f\u900f\u904e DNS \u7cfb\u7d71\u5728\u8655\u7406 IP \u7684\u5c0d\u61c9\uff0c\u6240\u4ee5\uff0c\u7576 DNS \u639b\u9ede\u6642\uff0c\u6211\u5011\u5c07\u7121\u6cd5\u900f\u904e\u4e3b\u6a5f\u540d\u7a31\u4f86\u9023\u7dda\uff0c\u90a3\u5c31\u5e7e\u4e4e\u76f8\u7576\u65bc\u6c92\u6709 Internet \u4e86\uff01<\/p>\n<p>\u56e0\u70ba DNS \u662f\u9019\u9ebc\u7684\u91cd\u8981\uff0c\u6240\u4ee5\u5373\u4f7f\u6211\u5011\u6c92\u6709\u67b6\u8a2d\u5b83\u7684\u5fc5\u8981\u6642\uff0c\u9084\u662f\u5f97\u8981\u719f\u6089\u4e00\u4e0b\u5b83\u7684\u539f\u7406\u624d\u597d\u3002\u56e0\u6b64\uff0c\u8ddf DNS \u6709\u95dc\u7684 FQDN\u3001Hostname \u8207 IP \u7684\u67e5\u8a62\u6d41\u7a0b\uff0c\u6b63\u89e3\u8207\u53cd\u89e3\u3001\u5408\u6cd5\u6388\u6b0a\u7684 DNS \u4f3a\u670d\u5668\u4e4b\u610f\u7fa9\uff0c\u4ee5\u53ca Zone \u7b49\u7b49\u7684\u77e5\u8b58\u4f5c\u4e00\u500b\u8a8d\u8b58\u624d\u884c\uff01<\/p>\n<p><b>Tips:<\/b><br \/>\n\u5728\u5e95\u4e0b\u7684\u8aaa\u660e\u7576\u4e2d\uff0c\u6211\u5011\u6709\u6642\u6703\u63d0\u5230 DNS \u6709\u6642\u6703\u63d0\u5230 BIND \uff0c\u9019\u6709\u4ec0\u9ebc\u4e0d\u540c\uff1f \u7531\u4e0a\u9762\u7684\u8aaa\u660e\u88e1\u9762\uff0c\u4f60\u53ef\u4ee5\u77ad\u89e3\u5230\uff0c DNS \u662f\u4e00\u7a2e\u7db2\u969b\u7db2\u8def\u7684\u901a\u8a0a\u5354\u5b9a\u540d\u7a31\uff0c \u81f3\u65bc Bind \u5247\u662f\u63d0\u4f9b\u9019\u500b DNS \u670d\u52d9\u7684\u8edf\u9ad4\uff5e\u9019\u6a23\u4f60\u77ad\u89e3\u4e86\u55ce\uff1f\uff01<br \/>\n<img decoding=\"async\" title=\"\u9ce5\u54e5\u7684\u5716\u793a\" src=\"http:\/\/linux.vbird.org\/images\/vbird_face.gif\" alt=\"\u9ce5\u54e5\u7684\u5716\u793a\" \/><\/p>\n<p><a name=\"fqdn\"><\/a><\/p>\n<ul>\n<li>\n<hr \/>\n<p>\u5b8c\u6574\u4e3b\u6a5f\u540d\u7a31\uff1a Fully Qualified Domain Name (FQDN)<\/li>\n<\/ul>\n<p>\u7b2c\u4e00\u500b\u8207 DNS \u6709\u95dc\u7684\u4e3b\u6a5f\u540d\u7a31\u6982\u5ff5\uff0c\u5c31\u662f\u300e\u4e3b\u6a5f\u540d\u7a31\u8207\u9818\u57df\u540d\u7a31 (hostname and domain name)\u300f\u7684\u89c0\u5ff5\uff0c\u4ee5\u53ca\u7531\u9019\u5169\u8005\u7d44\u6210\u7684\u5b8c\u6574\u4e3b\u6a5f\u540d\u7a31 Fully Qualified Domain Name, FQDN \u7684\u610f\u7fa9\u4e86\u3002\u5728\u8a0e\u8ad6\u9019\u500b\u4e3b\u984c\u4e4b\u524d\uff0c\u6211\u5011\u4f86\u804a\u4e00\u804a\u6bd4\u8f03\u751f\u6d3b\u5316\u7684\u8a71\u984c\uff1a<\/p>\n<ul>\n<li>\u4ee5\u5340\u57df\u4f86\u5340\u5206\u540c\u540d\u540c\u59d3\u8005\u7684\u5dee\u7570\uff1a \u7db2\u8def\u4e16\u754c\u5176\u5be6\u6709\u5f88\u591a\u4eba\u81ea\u7a31\u70ba\u300e\u9ce5\u54e5\u300f\u7684\uff0c\u5305\u62ec\u655d\u4eba\u5728\u4e0b\u5c0f\u751f\u6211\u5566\uff01\u90a3\u9ebc\u4f60\u600e\u9ebc\u77e5\u9053\u6b64\u9ce5\u54e5\u975e\u5f7c\u9ce5\u54e5\u5462\uff1f \u9019\u500b\u6642\u5019\u4f60\u53ef\u4ee5\u5229\u7528\u6bcf\u500b\u9ce5\u54e5\u7684\u6240\u5728\u5730\u4f86\u4f5c\u70ba\u5340\u5206\u554a\uff0c\u6bd4\u5982\u8aaa\u53f0\u5357\u7684\u9ce5\u54e5\u8207\u53f0\u5317\u7684\u9ce5\u54e5\u7b49\u3002 \u90a3\u842c\u4e00\u53f0\u5357\u9084\u6709\u5169\u500b\u4eba\u81ea\u7a31\u9ce5\u54e5\u600e\u9ebc\u8fa6\uff1f\u6c92\u95dc\u4fc2\uff0c\u4f60\u9084\u53ef\u4ee5\u4f9d\u7167\u9109\u93ae\u4f86\u5340\u5206\u5462\uff01\u6bd4\u5982\u8aaa\u53f0\u5357\u5317\u5340\u7684\u9ce5\u54e5\u53ca\u53f0\u5357\u4e2d\u5340\u7684\u9ce5\u54e5\u3002 \u5982\u679c\u5c07\u9019\u500b\u549a\u549a\u5217\u51fa\u4f86\uff0c\u5c31\u6709\u9ede\u50cf\u9019\u6a23\uff1a\u9ce5\u54e5\u3001\u5317\u5340\u3001\u53f0\u5357<br \/>\n\u9ce5\u54e5\u3001\u4e2d\u5340\u3001\u53f0\u5357<br \/>\n\u9ce5\u54e5\u3001\u53f0\u5317<br \/>\n&#8230;&#8230;\u662f\u5426\u5c31\u53ef\u4ee5\u5206\u8fa8\u6bcf\u500b\u9ce5\u54e5\u7684\u4e0d\u540c\u9ede\u4e86\u5462\uff1f\u5475\u5475\uff01\u6c92\u932f\uff01\u5c31\u662f\u9019\u6a23\uff01\u90a3\u500b\u5730\u5340\u5c31\u662f\u300e\u9818\u57df (domain) \u300f\uff0c\u800c\u9ce5\u54e5\u5c31\u662f\u4e3b\u6a5f\u540d\u5566\uff01<\/p>\n<p>&nbsp;<\/li>\n<li>\u4ee5\u5340\u57df\u865f\u78bc\u4f86\u5340\u5206\u76f8\u540c\u7684\u96fb\u8a71\u865f\u78bc\uff1a \u53e6\u5916\u4e00\u500b\u4f8b\u5b50\u53ef\u4ee5\u4f7f\u7528\u96fb\u8a71\u865f\u78bc\u4f86\u770b\uff0c\u5047\u5982\u9ad8\u96c4\u6709\u500b 1234567 \u800c\u53f0\u5357\u4e5f\u6709\u500b 1234567\uff0c\u90a3\u9ebc(1)\u4f60\u5728\u9ad8\u96c4\u76f4\u63a5\u64a5\u63a5 1234567 \u6642\uff0c\u4ed6\u6703\u76f4\u63a5\u639b\u5165\u9ad8\u96c4\u7684 1234567 \u96fb\u8a71\u4e2d\uff0c(2)\u4f46\u5982\u679c\u4f60\u8981\u64a5\u5230\u53f0\u5357\u53bb\uff0c\u5c31\u5f97\u52a0\u5165 (06) \u9019\u500b\u5340\u78bc\u624d\u884c\uff01\u6211\u5011\u5c31\u662f\u4f7f\u7528\u5340\u78bc\u4f86\u505a\u70ba\u8fa8\u8b58\u4e4b\u7528\u7684\uff01\u6b64\u6642\u90a3\u500b 06 \u5340\u78bc\u5c31\u662f domain name\uff0c\u800c\u96fb\u8a71\u865f\u78bc\u5c31\u662f\u4e3b\u6a5f\u540d\u7a31\u5566\uff01<\/li>\n<\/ul>\n<p>\u6709\u6c92\u6709\u4e00\u9ede\u9ede\u77ad\u89e3\u9ce5\u54e5\u60f3\u8868\u9054\u7684\u5566\uff1f\u6211\u5011\u4e0a\u9762\u8b1b\u5230\uff0cDNS \u662f\u4ee5\u6a39\u72c0\u76ee\u9304\u5206\u968e\u5c64\u7684\u65b9\u5f0f\u4f86\u8655\u7406\u4e3b\u6a5f\u540d\u7a31\uff0c\u90a3\u6211\u5011\u77e5\u9053\u6a39\u72c0\u76ee\u9304\u4e2d\uff0c \u90a3\u500b\u76ee\u9304\u53ef\u4ee5\u8a18\u9304\u6a94\u540d\u3002\u90a3\u9ebc DNS \u8a18\u9304\u7684\u54ea\u500b\u549a\u549a\u8ddf\u300e\u76ee\u9304\u300f\u6709\u95dc\uff1f\u5c31\u662f\u90a3\u500b\u9818\u57df\u540d\u7a31\u3002\u9818\u57df\u540d\u7a31\u5e95\u4e0b\u9084\u53ef\u4ee5\u8a18\u9304\u5404\u500b\u4e3b\u6a5f\u540d\u7a31\uff0c \u7d44\u5408\u8d77\u4f86\u624d\u662f\u5b8c\u6574\u7684\u4e3b\u6a5f\u540d\u7a31 (FQDN)\u3002<\/p>\n<p>\u8209\u4f8b\u4f86\u8aaa\uff0c\u6211\u5011\u5e38\u5e38\u6703\u767c\u73fe\u4e3b\u6a5f\u540d\u7a31\u90fd\u662f www \u7684\u7db2\u7ad9\uff0c\u4f8b\u5982 www.google.com.tw, www.seednet.net, www.hinet.net \u7b49\u7b49\uff0c\u90a3\u9ebc\u6211\u5011\u600e\u9ebc\u77e5\u9053\u9019\u4e9b www \u540d\u7a31\u7684\u4e3b\u6a5f\u5728\u4e0d\u540c\u7684\u5730\u65b9\u5462\uff1f\u5c31\u9700\u8981\u7d66\u4ed6\u9818\u57df\u540d\u7a31\u56c9\uff01\u4e5f\u5c31\u662f .google.com.tw, .seednet.net, .hinet.net \u7b49\u7b49\u7684\u4e0d\u540c\uff0c\u6240\u4ee5\u5373\u4f7f\u4f60\u7684\u4e3b\u6a5f\u540d\u7a31\u76f8\u540c\uff0c\u4f46\u662f\u53ea\u8981\u4e0d\u662f\u5728\u540c\u4e00\u500b\u9818\u57df\u5167\uff0c\u90a3\u9ebc\u5c31\u53ef\u4ee5\u88ab\u5206\u8fa8\u51fa\u4e0d\u540c\u7684\u4f4d\u7f6e\u56c9\uff01<\/p>\n<p>\u6211\u5011\u77e5\u9053\u76ee\u9304\u6a39\u7684\u6700\u9802\u5c64\u662f\u6839\u76ee\u9304 (\/)\uff0c\u90a3\u9ebc DNS \u65e2\u7136\u4e5f\u662f\u968e\u5c64\u5f0f\u7684\uff0c\u6700\u9802\u5c64\u662f\u5565\u5462\uff1f\u6bcf\u4e00\u5c64\u7684 domain name \u8207 hostname \u53c8\u8a72\u600e\u9ebc\u5206\uff1f\u6211\u5011\u8209\u9ce5\u54e5\u6240\u5728\u7684\u5d11\u5c71\u79d1\u5927\u7684 WWW \u4f3a\u670d\u5668\u70ba\u4f8b\u597d\u4e86 (www.ksu.edu.tw) \uff1a<\/p>\n<p><img decoding=\"async\" title=\"\u5206\u968e\u5c64\u7684 DNS \u67b6\u69cb\uff0c\u4ee5\u5d11\u5c71\u79d1\u5927\u70ba\u4f8b\" src=\"http:\/\/linux.vbird.org\/linux_server\/0350dns\/\/www_ksu.gif\" alt=\"\u5206\u968e\u5c64\u7684 DNS \u67b6\u69cb\uff0c\u4ee5\u5d11\u5c71\u79d1\u5927\u70ba\u4f8b\" border=\"0\" \/><br \/>\n\u5716 19.1-2\u3001\u5206\u968e\u5c64\u7684 DNS \u67b6\u69cb\uff0c\u4ee5\u5d11\u5c71\u79d1\u5927\u70ba\u4f8b (hostname &amp; domain name)<\/p>\n<p>\u5728\u4e0a\u9762\u7684\u4f8b\u5b50\u7576\u4e2d\uff0c\u7531\u4e0a\u5411\u4e0b\u6578\u7684\u7b2c\u4e8c\u5c64\u88e1\u9762\uff0c\u90a3\u500b .tw \u662f domain name \uff0c\u800c com, edu, gov \u5247\u662f\u4e3b\u6a5f\u7684\u540d\u7a31\uff0c\u800c\u5728\u9019\u500b\u4e3b\u6a5f\u7684\u540d\u7a31\u4e4b\u7ba1\u7406\u4e0b\uff0c\u9084\u6709\u5176\u4ed6\u66f4\u5c0f\u7db2\u57df\u7684\u4e3b\u6a5f\uff0c\u6240\u4ee5\u5728\u7b2c\u4e09\u5c64\u7684\u6642\u5019\uff0c\u57fa\u672c\u4e0a\uff0c\u90a3\u500b edu.tw \u5c31\u8b8a\u6210\u4e86 domain name \u4e86\uff01\u800c\u5d11\u5c71\u79d1\u5927\u8207\u6210\u5927\u7684 ksu, ncku \u5247\u6210\u70ba\u4e86 hostname \u56c9\uff01<\/p>\n<p>\u4ee5\u6b64\u985e\u63a8\uff0c\u6700\u5f8c\u5f97\u5230\u6211\u5011\u7684\u4e3b\u6a5f\u90a3\u500b www \u662f\u4e3b\u6a5f\u540d\u7a31\uff0c\u800c domain name \u662f\u7531 ksu.edu.tw \u90a3\u500b\u540d\u5b57\u6240\u6c7a\u5b9a\u7684\uff01\u81ea\u7136\uff0c\u6211\u5011\u7684\u4e3b\u6a5f\u5c31\u662f\u8b93\u7ba1\u7406 ksu.edu.tw \u9019\u500b domain name \u7684 DNS \u4f3a\u670d\u5668\u6240\u7ba1\u7406\u7684\u56c9\uff01\u9019\u6a23\u662f\u5426\u77ad\u89e3\u4e86 domain name \u8207 hostname \u7684\u4e0d\u540c\u4e86\u5462\uff1f<\/p>\n<p><b>Tips:<\/b><br \/>\n\u4e26\u4e0d\u662f\u4ee5\u5c0f\u6578\u9ede (.) \u5340\u5206 domain name \u8207 hostname \u5594\uff01\u67d0\u4e9b\u6642\u523b domain name \u6240\u7ba1\u7406\u7684 hostname \u6703\u542b\u6709\u5c0f\u6578\u9ede\u3002 \u8209\u4f8b\u4f86\u8aaa\uff0c\u9ce5\u54e5\u6240\u5728\u7684\u8cc7\u8a0a\u50b3\u64ad\u7cfb\u4e26\u6c92\u6709\u984d\u5916\u7684 DNS \u4f3a\u670d\u5668\u67b6\u8a2d\uff0c\u56e0\u6b64\u6211\u5011\u7684\u4e3b\u6a5f\u540d\u7a31\u70ba www.dic \uff0c\u800c domain name \u9084\u662f ksu.edu.tw \uff0c\u56e0\u6b64\u5168\u540d\u70ba <a href=\"http:\/\/www.dic.ksu.edu.tw\/\">www.dic.ksu.edu.tw<\/a> \u54e9\uff01<br \/>\n<img decoding=\"async\" title=\"\u9ce5\u54e5\u7684\u5716\u793a\" src=\"http:\/\/linux.vbird.org\/images\/vbird_face.gif\" alt=\"\u9ce5\u54e5\u7684\u5716\u793a\" \/><\/p>\n<hr \/>\n<p><a name=\"DNS_search\"><\/a><img loading=\"lazy\" decoding=\"async\" src=\"http:\/\/linux.vbird.org\/images\/penguin-s.gif\" alt=\"\u5c0f\u6a19\u984c\u7684\u5716\u793a\" width=\"16\" height=\"23\" align=\"middle\" \/>19.1.2 DNS \u7684\u4e3b\u6a5f\u540d\u7a31\u5c0d\u61c9 IP \u7684\u67e5\u8a62\u6d41\u7a0b<\/p>\n<p>\u7d04\u7565\u77ad\u89e3\u4e86 FQDN \u7684 domain name \u8207 hostname \u4e4b\u5f8c\uff0c\u63a5\u4e0b\u4f86\u6211\u5011\u8981\u8ac7\u4e00\u8ac7\u9019\u500b DNS \u7684\uff1a (1)\u968e\u5c64\u67b6\u69cb\u662f\u600e\u6a23\uff1f (2)\u67e5\u8a62\u539f\u7406\u662f\u600e\u6a23\uff1f\u7e3d\u662f\u8981\u5148\u77e5\u9053\u67b6\u69cb\u624d\u80fd\u77e5\u9053\u5982\u4f55\u67e5\u8a62\u4e3b\u6a5f\u540d\u7a31\u7684\u5436\uff01\u6240\u4ee5\u5e95\u4e0b\u6211\u5011\u5148\u4f86\u4ecb\u7d39\u4e00\u4e0b\u6574\u9ad4\u7684 DNS \u968e\u5c64\u67b6\u69cb\u3002<\/p>\n<p><a name=\"step\"><\/a><\/p>\n<ul>\n<li>\n<hr \/>\n<p>DNS \u7684\u968e\u5c64\u67b6\u69cb\u8207 TLD<\/li>\n<\/ul>\n<p>\u6211\u5011\u4f9d\u820a\u4f7f\u7528\u53f0\u7063\u5b78\u8853\u7db2\u8def\u7684 DNS \u4f3a\u670d\u5668\u6240\u7ba1\u7406\u7684\u5404 domain \u70ba\u4f8b\uff0c\u5c07\u6700\u4e0a\u5c64\u5230\u5d11\u5c71\u79d1\u5927 (ksu) \u6642\uff0c\u4e4b\u9593\u7684\u5404\u5c64\u7e6a\u88fd\u5982\u4e0b\u5716\uff1a<\/p>\n<p><img decoding=\"async\" title=\"\u5f9e\u6700\u4e0a\u5c64\u5230\u5d11\u5c71\u79d1\u5927\u4e4b\u9593\u7684 DNS \u968e\u5c64\u793a\u610f\u5716\" src=\"http:\/\/linux.vbird.org\/linux_server\/0350dns\/\/dns_dot.gif\" alt=\"\u5f9e\u6700\u4e0a\u5c64\u5230\u5d11\u5c71\u79d1\u5927\u4e4b\u9593\u7684 DNS \u968e\u5c64\u793a\u610f\u5716\" width=\"550\" border=\"0\" \/><br \/>\n\u5716 19.1-3\u3001\u5f9e\u6700\u4e0a\u5c64\u5230\u5d11\u5c71\u79d1\u5927\u4e4b\u9593\u7684 DNS \u968e\u5c64\u793a\u610f\u5716<\/p>\n<p>\u5728\u6574\u500b DNS \u7cfb\u7d71\u7684\u6700\u4e0a\u65b9\u4e00\u5b9a\u662f . (\u5c0f\u6578\u9ede) \u9019\u500b DNS \u4f3a\u670d\u5668 (\u7a31\u70ba root)\uff0c\u6700\u65e9\u4ee5\u524d\u5b83\u5e95\u4e0b\u7ba1\u7406\u7684\u5c31\u53ea\u6709 (1)com, edu, gov, mil, org, .net \u9019\u7a2e\u7279\u6b8a\u9818\u57df\u4ee5\u53ca (2)\u4ee5\u570b\u5bb6\u70ba\u5206\u985e\u7684\u7b2c\u4e8c\u5c64\u7684\u4e3b\u6a5f\u540d\u7a31\u4e86\uff01\u9019\u5169\u8005\u7a31\u70ba Top Level Domains (TLDs) \u5594\uff01<\/p>\n<ul>\n<li>\u4e00\u822c\u6700\u4e0a\u5c64\u9818\u57df\u540d\u7a31 (Generic TLDs, gTLD)\uff1a\u4f8b\u5982 .com, .org, .gov \u7b49\u7b49<\/li>\n<li>\u570b\u78bc\u6700\u4e0a\u5c64\u9818\u57df\u540d\u7a31 (Country code TLDs, ccTLD)\uff1a\u4f8b\u5982 .tw, .uk, .jp, .cn \u7b49<\/li>\n<\/ul>\n<p>\u5148\u4f86\u8ac7\u8ac7\u4e00\u822c\u6700\u4e0a\u5c64\u9818\u57df (gTLD) \u597d\u4e86\uff0c\u6700\u65e9 root \u50c5\u7ba1\u7406\u516d\u5927\u9818\u57df\u540d\u7a31\uff0c\u5206\u5225\u5982\u4e0b\uff1a<\/p>\n<p>\u540d\u7a31<br \/>\n\u4ee3\u8868\u610f\u7fa9<\/p>\n<p>com<br \/>\n\u516c\u53f8\u3001\u884c\u865f\u3001\u4f01\u696d<\/p>\n<p>org<br \/>\n\u7d44\u7e54\u3001\u6a5f\u69cb<\/p>\n<p>edu<br \/>\n\u6559\u80b2\u55ae\u4f4d<\/p>\n<p>gov<br \/>\n\u653f\u5e9c\u55ae\u4f4d<\/p>\n<p>net<br \/>\n\u7db2\u8def\u3001\u901a\u8a0a<\/p>\n<p>mil<br \/>\n\u8ecd\u4e8b\u55ae\u4f4d<\/p>\n<p>\u4f46\u662f\u7db2\u969b\u7db2\u8def\u6210\u9577\u7684\u901f\u5ea6\u592a\u5feb\u4e86\uff0c\u56e0\u6b64\u5f8c\u4f86\u9664\u4e86\u4e0a\u8ff0\u7684\u516d\u5927\u985e\u5225\u4e4b\u5916\uff0c\u9084\u6709\u8af8\u5982 .asia, .info, .jobs (<a href=\"http:\/\/linux.vbird.org\/linux_server\/0350dns.php#ps1\">\u8a3b1<\/a>) \u7b49\u9818\u57df\u540d\u7a31\u7684\u958b\u653e\u3002\u6b64\u5916\uff0c\u70ba\u4e86\u8b93\u67d0\u4e9b\u570b\u5bb6\u4e5f\u80fd\u5920\u6709\u81ea\u5df1\u7684\u6700\u4e0a\u5c64\u9818\u57df\u540d\u7a31\uff0c\u56e0\u6b64\uff0c \u5c31\u6709\u6240\u8b02\u7684 ccTLD \u4e86\u3002\u9019\u6a23\u505a\u6709\u4ec0\u9ebc\u597d\u8655\u5462\uff1f\u56e0\u70ba\u81ea\u5df1\u7684\u570b\u5bb6\u5167\u6709\u6700\u4e0a\u5c64 ccTLD \uff0c\u6240\u4ee5\u5982\u679c\u6709 domain name \u7684\u9700\u6c42\uff0c\u5247\u53ea\u8981\u5411\u81ea\u5df1\u7684\u570b\u5bb6\u7533\u8acb\u5373\u53ef\uff0c\u4e0d\u9700\u8981\u518d\u5230\u6700\u4e0a\u5c64\u53bb\u7533\u8acb\u56c9\uff01<\/p>\n<ul>\n<li>\n<hr \/>\n<p>\u6388\u6b0a\u8207\u5206\u5c64\u8ca0\u8cac<\/li>\n<\/ul>\n<p>\u65e2\u7136 TLD \u9019\u9ebc\u597d\uff0c\u90a3\u9ebc\u662f\u5426\u6211\u5011\u53ef\u4ee5\u81ea\u5df1\u8a2d\u5b9a TLD \u5462\uff1f\u7576\u7136\u4e0d\u884c\uff01\u56e0\u70ba\u6211\u5011\u5f97\u5411\u4e0a\u5c64 ISP \u7533\u8acb\u9818\u57df\u540d\u7a31\u7684\u6388\u6b0a\u624d\u884c\u3002\u4f8b\u5982\u53f0\u7063\u5730\u5340\u6700\u4e0a\u5c64\u7684\u9818\u57df\u540d\u7a31\u662f\u4ee5 .tw \u70ba\u958b\u982d\uff0c\u7ba1\u7406\u9019\u500b\u9818\u57df\u540d\u7a31\u7684\u6a5f\u5668 IP \u662f\u5728\u53f0\u7063\uff0c\u4f46\u662f .tw \u9019\u90e8\u4f3a\u670d\u5668\u5fc5\u9808\u5411 root (.) \u8a3b\u518a\u9818\u57df\u540d\u7a31\u67e5\u8a62\u6388\u6b0a\u624d\u884c (\u5982\u4e0a\u5716 19.1-3 \u6240\u793a)\u3002<\/p>\n<p>\u90a3\u9ebc\u6bcf\u500b\u570b\u5bb6\u4e4b\u4e0b\u8a18\u9304\u7684\u4e3b\u8981\u4e0b\u5c64\u6709\u54ea\u4e9b\u9818\u57df\u5462\uff1f\u57fa\u672c\u4e0a\u5c31\u662f\u539f\u5148 root \u7ba1\u7406\u7684\u90a3\u516d\u5927\u985e\u3002 \u4e0d\u904e\uff0c\u7531\u65bc\u5404\u5c64 DNS \u90fd\u80fd\u7ba1\u7406\u81ea\u5df1\u8f44\u4e0b\u7684\u4e3b\u6a5f\u540d\u7a31\u6216\u5b50\u9818\u57df\uff0c\u56e0\u6b64\uff0c\u6211\u5011\u7684 .tw \u53ef\u4ee5\u81ea\u884c\u898f\u5283\u81ea\u5df1\u7684\u5b50\u9818\u57df\u540d\u7a31\u5594\uff01 \u4f8b\u5982\u76ee\u524d\u53f0\u7063 ISP \u5e38\u63d0\u4f9b\u7684 .idv.tw \u7684\u500b\u4eba\u7db2\u7ad9\u5c31\u662f\u4e00\u4f8b\u554a\uff01<\/p>\n<p>\u518d\u5f37\u8abf\u4e00\u6b21\uff0cDNS \u7cfb\u7d71\u662f\u4ee5\u6240\u8b02\u7684\u968e\u5c64\u5f0f\u7684\u7ba1\u7406\uff0c\u6240\u4ee5\uff0c\u8acb\u6ce8\u610f\u5594\uff01\u90a3\u500b .tw \u53ea\u8a18\u9304\u5e95\u4e0b\u90a3\u4e00\u5c64\u7684\u9019\u6578\u500b\u4e3b\u8981\u7684 domain \u7684\u4e3b\u6a5f\u800c\u5df2\uff01\u81f3\u65bc\u4f8b\u5982 edu.tw \u5e95\u4e0b\u9084\u6709\u500b ksu.edu.tw \u9019\u90e8\u6a5f\u5668\uff0c\u90a3\u5c31\u76f4\u63a5\u6388\u6b0a\u4ea4\u7d66 edu.tw \u90a3\u90e8\u6a5f\u5668\u53bb\u7ba1\u7406\u4e86\uff01\u4e5f\u5c31\u662f\u8aaa\u300e \u6bcf\u500b\u4e0a\u4e00\u5c64\u7684 DNS \u4f3a\u670d\u5668\u6240\u8a18\u9304\u7684\u8cc7\u8a0a\uff0c\u5176\u5be6\u53ea\u6709\u5176\u4e0b\u4e00\u5c64\u7684\u4e3b\u6a5f\u540d\u7a31\u800c\u5df2\uff01 \u300f\u81f3\u65bc\u518d\u4e0b\u4e00\u5c64\uff0c\u5247\u76f4\u63a5\u300e\u6388\u6b0a\u300f\u7d66\u4e0b\u5c64\u7684\u67d0\u90e8\u4e3b\u6a5f\u4f86\u7ba1\u7406\u56c9\uff01\u5475\u5475\uff01\u6240\u4ee5\u4f60\u5c31\u61c9\u8a72\u6703\u77e5\u9053 DNS \u5230\u5e95\u662f\u5982\u4f55\u7ba1\u7406\u7684\u5427\uff01<\/p>\n<p>\u6703\u9019\u6a23\u8a2d\u5b9a\u7684\u539f\u56e0\u4e0d\u662f\u6c92\u6709\u9053\u7406\u7684\uff01\u9019\u6a23\u8a2d\u8a08\u7684\u597d\u8655\u5c31\u662f\uff1a\u6bcf\u90e8\u6a5f\u5668\u7ba1\u7406\u7684\u53ea\u6709\u4e0b\u4e00\u5c64\u7684 hostname \u5c0d\u61c9 IP \u800c\u5df2\uff0c\u6240\u4ee5\u6e1b\u5c11\u4e86\u7ba1\u7406\u4e0a\u7684\u56f0\u64fe\uff01\u800c\u4e0b\u5c64 Client \u7aef\u5982\u679c\u6709\u554f\u984c\uff0c\u53ea\u8981\u8a62\u554f\u4e0a\u4e00\u5c64\u7684 DNS server \u5373\u53ef\uff01\u4e0d\u9700\u8981\u8de8\u8d8a\u4e0a\u5c64\uff0c\u9664\u932f\u4e0a\u9762\u4e5f\u6703\u6bd4\u8f03\u7c21\u55ae\u5462\uff01<\/p>\n<p><a name=\"flow\"><\/a><\/p>\n<ul>\n<li>\n<hr \/>\n<p>\u900f\u904e DNS \u67e5\u8a62\u4e3b\u6a5f\u540d\u7a31 IP \u7684\u6d41\u7a0b<\/li>\n<\/ul>\n<p>\u525b\u525b\u8aaa\u904e DNS \u662f\u4ee5\u985e\u4f3c\u300e\u6a39\u72c0\u76ee\u9304\u300f\u7684\u578b\u614b\u4f86\u9032\u884c\u4e3b\u6a5f\u540d\u7a31\u7684\u7ba1\u7406\u7684\uff01\u6240\u4ee5\u6bcf\u4e00\u90e8 DNS \u4f3a\u670d\u5668\u90fd\u300e\u50c5\u7ba1\u7406\u81ea\u5df1\u7684\u4e0b\u4e00\u5c64\u4e3b\u6a5f\u540d\u7a31\u7684\u8f49\u8b6f\u300f\u800c\u5df2\uff0c \u81f3\u65bc\u4e0b\u5c64\u7684\u4e0b\u5c64\uff0c\u5247\u300e\u6388\u6b0a\u300f\u7d66\u4e0b\u5c64\u7684 DNS \u4e3b\u6a5f\u4f86\u7ba1\u7406\u5566\uff01\u9019\u6a23\u8aaa\u597d\u50cf\u5f88\u7e5e\u53e3\uff0c\u597d\u5427\uff01\u6211\u5011\u5c31\u4ee5\u4e0b\u5716\u4f86\u8aaa\u4e00\u8aaa\u539f\u7406\u56c9\uff1a<\/p>\n<p><a name=\"fig19.1-4\"><\/a><\/p>\n<p><img decoding=\"async\" title=\"\u900f\u904e DNS \u7cfb\u7d71\u67e5\u8a62\u4e3b\u6a5f\u540d\u7a31\u89e3\u8b6f\u7684\u6d41\u7a0b\" src=\"http:\/\/linux.vbird.org\/linux_server\/0350dns\/\/dns_search.gif\" alt=\"\u900f\u904e DNS \u7cfb\u7d71\u67e5\u8a62\u4e3b\u6a5f\u540d\u7a31\u89e3\u8b6f\u7684\u6d41\u7a0b\" border=\"0\" \/><br \/>\n\u5716 19.1-4\u3001\u900f\u904e DNS \u7cfb\u7d71\u67e5\u8a62\u4e3b\u6a5f\u540d\u7a31\u89e3\u8b6f\u7684\u6d41\u7a0b<\/p>\n<p>\u9996\u5148\uff0c\u7576\u4f60\u5728\u700f\u89bd\u5668\u7684\u7db2\u5740\u5217\u8f38\u5165 <a href=\"http:\/\/www.ksu.edu.tw\/\">http:\/\/www.ksu.edu.tw<\/a> \u6642\uff0c\u4f60\u7684\u96fb\u8166\u5c31\u6703\u4f9d\u64da\u76f8\u95dc\u8a2d\u5b9a (\u5728 Linux \u5e95\u4e0b\u5c31\u662f\u5229\u7528 \/etc\/resolv.conf \u9019\u500b\u6a94\u6848) \u6240\u63d0\u4f9b\u7684 DNS \u7684 IP \u53bb\u9032\u884c\u9023\u7dda\u67e5\u8a62\u4e86\u3002\u7531\u65bc\u76ee\u524d\u6700\u5e38\u898b\u7684 DNS \u4f3a\u670d\u5668\u5c31\u5c6c Hinet \u7684 168.95.1.1 \u9019\u500b DNS\uff0c\u6240\u4ee5\u6211\u5011\u5c31\u62ff\u4ed6\u4f86\u505a\u4f8b\u5b50\u5427\uff01\u55ef\uff01\u9019\u500b\u6642\u5019\uff0chinet \u7684\u9019\u90e8\u4f3a\u670d\u5668\u6703\u9019\u6a23\u5de5\u4f5c\uff1a<\/p>\n<ol>\n<li>\u6536\u5230\u7528\u6236\u7684\u67e5\u8a62\u8981\u6c42\uff0c\u5148\u67e5\u770b\u672c\u8eab\u6709\u6c92\u6709\u7d00\u9304\uff0c\u82e5\u7121\u5247\u5411 . \u67e5\u8a62\uff1a<br \/>\n\u7531\u65bc DNS \u662f\u968e\u5c64\u5f0f\u7684\u67b6\u69cb\uff0c\u6bcf\u90e8\u4e3b\u6a5f\u90fd\u6703\u7ba1\u7406\u81ea\u5df1\u8f44\u4e0b\u7684\u4e3b\u6a5f\u540d\u7a31\u89e3\u8b6f\u800c\u5df2\u3002\u56e0\u70ba hinet \u4e26\u6c92\u6709\u7ba1\u7406\u53f0\u7063\u5b78\u8853\u7db2\u8def\u7684\u6b0a\u529b\uff0c \u56e0\u6b64\u5c31\u7121\u6cd5\u76f4\u63a5\u56de\u5831\u7d66\u7528\u6236\u7aef\u3002\u6b64\u6642 168.95.1.1 \u5c31\u6703\u5411\u6700\u9802\u5c64\uff0c\u4e5f\u5c31\u662f . (root) \u7684\u4f3a\u670d\u5668\u67e5\u8a62\u76f8\u95dc IP \u8cc7\u8a0a\u3002<\/li>\n<li>\u5411\u6700\u9802\u5c64\u7684 . (root) \u67e5\u8a62\uff1a<br \/>\n168.95.1.1 \u6703\u4e3b\u52d5\u7684\u5411 . \u8a62\u554f www.ksu.edu.tw \u5728\u54ea\u88e1\u5462\uff1f\u4f46\u662f\u7531\u65bc . \u53ea\u8a18\u9304\u4e86 .tw \u7684\u8cc7\u8a0a (\u56e0\u70ba\u53f0\u7063\u53ea\u6709 .tw \u5411 . \u8a3b\u518a\u800c\u5df2)\uff0c\u6b64\u6642 . \u6703\u544a\u77e5\u300e\u6211\u662f\u4e0d\u77e5\u9053\u9019\u90e8\u4e3b\u6a5f\u7684 IP \u5566\uff0c\u4e0d\u904e\uff0c\u4f60\u61c9\u8a72\u5411 .tw \u53bb\u8a62\u554f\u624d\u5c0d\uff0c\u6211\u9019\u88e1\u4e0d\u7ba1\uff01 \u6211\u8ddf\u4f60\u8aaa .tw \u5728\u54ea\u88e1\u5427\uff01\u300f<\/li>\n<li>\u5411\u7b2c\u4e8c\u5c64\u7684 .tw \u4f3a\u670d\u5668\u67e5\u8a62\uff1a<br \/>\n168.95.1.1 \u63a5\u8457\u53c8\u5230 .tw \u53bb\u67e5\u8a62\uff0c\u800c\u8a72\u90e8\u6a5f\u5668\u7ba1\u7406\u7684\u53c8\u50c5\u6709 .edu.tw, .com.tw, gov.tw&#8230; \u90a3\u5e7e\u90e8\u4e3b\u6a5f\uff0c\u7d93\u904e\u6bd4\u5c0d\u5f8c\u767c\u73fe\u6211\u5011\u8981\u7684\u662f .edu.tw \u7684\u7db2\u57df\uff0c\u6240\u4ee5\u9019\u500b\u6642\u5019 .tw \u53c8\u544a\u8a34 168.95.1.1 \u8aaa\uff1a\u300e\u4f60\u8981\u53bb\u7ba1\u7406 .edu.tw \u9019\u500b\u7db2\u57df\u7684\u4e3b\u6a5f\u90a3\u88e1\u67e5\u8a62\uff0c\u6211\u6709\u4ed6\u7684 IP \uff01\u300f<\/li>\n<li>\u5411\u7b2c\u4e09\u5c64\u7684 .edu.tw \u4f3a\u670d\u5668\u67e5\u8a62\uff1a<br \/>\n\u540c\u7406\u53ef\u8b49\uff0c .edu.tw \u53ea\u6703\u544a\u8a34 168.95.1.1 \uff0c\u61c9\u8a72\u8981\u53bb .ksu.edu.tw \u9032\u884c\u67e5\u8a62\uff0c\u9019\u88e1\u53ea\u80fd\u544a\u77e5 .ksu.edu.tw \u7684 IP \u800c\u5df2\u3002<\/li>\n<li>\u5411\u7b2c\u56db\u5c64\u7684 .ksu.edu.tw \u4f3a\u670d\u5668\u67e5\u8a62\uff1a<br \/>\n\u7b49\u5230 168.95.1.1 \u627e\u5230 .ksu.edu.tw \u4e4b\u5f8c\uff0c Bingo \uff01.ksu.edu.tw \u8aaa\uff1a\u300e\u6c92\u932f\uff01\u9019\u90e8\u4e3b\u6a5f\u540d\u7a31\u662f\u6211\u7ba1\u7406\u7684\uff5e \u6211\u8ddf\u4f60\u8aaa\u4ed6\u7684 IP \u662f&#8230;\u6240\u4ee5\u6b64\u6642 168.95.1.1 \u5c31\u80fd\u5920\u67e5\u5230 www.ksu.edu.tw \u7684 IP \u56c9\uff01<\/li>\n<li>\u8a18\u9304\u66ab\u5b58\u8a18\u61b6\u9ad4\u4e26\u56de\u5831\u7528\u6236\uff1a<br \/>\n\u67e5\u5230\u4e86\u6b63\u78ba\u7684 IP \u5f8c\uff0c168.95.1.1 \u7684 DNS \u6a5f\u5668\u7e3d\u4e0d\u6703\u5728\u4e0b\u6b21\u6709\u4eba\u67e5\u8a62 www.ksu.edu.tw \u7684\u6642\u5019\u518d\u8dd1\u4e00\u6b21\u9019\u6a23\u7684\u6d41\u7a0b\u5427\uff01 \u7c89\u9060\u7c89\u7d2f\u7684\u5436\uff01\u800c\u4e14\u4e5f\u5f88\u8017\u7cfb\u7d71\u7684\u8cc7\u6e90\u8207\u7db2\u8def\u7684\u983b\u5bec\uff0c\u6240\u4ee5\u5462\uff0c168.95.1.1 \u9019\u500b DNS \u6703\u5f88\u8070\u660e\u7684\u5148\u8a18\u9304\u4e00\u4efd\u67e5\u8a62\u7684\u7d50\u679c\u5728\u81ea\u5df1\u7684\u66ab\u5b58\u8a18\u61b6\u9ad4\u7576\u4e2d\uff0c\u4ee5\u65b9\u4fbf\u56de\u61c9\u4e0b\u4e00\u6b21\u7684\u76f8\u540c\u8981\u6c42\u554a\uff01 \u6700\u5f8c\u5247\u5c07\u7d50\u679c\u56de\u5831\u7d66 client \u7aef\uff01\u7576\u7136\u5566\uff0c\u90a3\u500b\u8a18\u61b6\u5728 cache \u7576\u4e2d\u7684\u8cc7\u6599\uff0c\u5176\u5be6\u662f\u6709\u6642\u9593\u6027\u7684\uff0c\u7576\u904e\u4e86 DNS \u8a2d\u5b9a\u8a18\u61b6\u7684\u6642\u9593 (\u901a\u5e38\u53ef\u80fd\u662f 24 \u5c0f\u6642)\uff0c\u90a3\u9ebc\u8a72\u8a18\u9304\u5c31\u6703\u88ab\u91cb\u653e\u5594\uff01<\/li>\n<\/ol>\n<p>\u6574\u500b\u5206\u5c64\u67e5\u8a62\u7684\u6d41\u7a0b\u5c31\u662f\u9019\u6a23\uff0c\u7e3d\u662f\u5f97\u8981\u5148\u7d93\u904e . \u4f86\u5411\u4e0b\u4e00\u5c64\u9032\u884c\u67e5\u8a62\uff0c\u6700\u7d42\u7e3d\u662f\u80fd\u5f97\u5230\u7b54\u6848\u7684\u3002\u9019\u6a23\u5206\u5c64\u7684\u597d\u8655\u662f\uff1a<\/p>\n<ul>\n<li>\u4e3b\u6a5f\u540d\u7a31\u4fee\u6539\u7684\u50c5\u9700\u81ea\u5df1\u7684 DNS \u66f4\u52d5\u5373\u53ef\uff0c\u4e0d\u9700\u901a\u77e5\u5176\u4ed6\u4eba\uff1a<br \/>\n\u7576\u4e00\u500b\u300e\u5408\u6cd5\u300f\u7684 DNS \u4f3a\u670d\u5668\u88e1\u9762\u7684\u8a2d\u5b9a\u4fee\u6539\u4e86\u4e4b\u5f8c\uff0c\u4f86\u81ea\u4e16\u754c\u5404\u5730\u4efb\u4f55\u4e00\u500b DNS \u7684\u8981\u6c42\uff0c\u90fd\u6703\u6b63\u78ba\u7121\u8aa4\u7684\u986f\u793a\u6b63\u78ba\u7684\u4e3b\u6a5f\u540d\u7a31\u5c0d\u61c9 IP \u7684\u8cc7\u8a0a\uff0c\u56e0\u70ba\u4ed6\u5011\u6703\u4e00\u5c64\u4e00\u5c64\u7684\u5c0b\u627e\u4e0b\u4f86\u3002\u6240\u4ee5\uff0c\u8981\u627e\u4f60\u7684\u4e3b\u6a5f\u540d\u7a31\u5c0d\u61c9\u7684 IP \u5c31\u4e00\u5b9a\u5f97\u8981\u900f\u904e\u4f60\u7684\u4e0a\u5c64 DNS \u4f3a\u670d\u5668\u7684\u7d00\u9304\u624d\u884c\uff01\u56e0\u6b64\uff0c\u53ea\u8981\u4f60\u7684\u4e3b\u6a5f\u540d\u5b57\u662f\u7d93\u904e\u4e0a\u5c64\u300e\u5408\u6cd5\u7684 DNS\u300f\u4f3a\u670d\u5668\u8a2d\u5b9a\u7684\uff0c\u90a3\u9ebc\u5c31\u53ef\u4ee5\u5728 Internet \u4e0a\u9762\u88ab\u67e5\u8a62\u5230\u5566\uff01\u5475\u5475\uff01\u5f88\u7c21\u55ae\u7dad\u8b77\u5427\uff0c\u6a5f\u52d5\u6027\u4e5f\u5f88\u9ad8\u3002<\/li>\n<li>DNS \u4f3a\u670d\u5668\u5c0d\u4e3b\u6a5f\u540d\u7a31\u89e3\u6790\u7d50\u679c\u7684\u5feb\u53d6\u6642\u9593\uff1a<br \/>\n\u7531\u65bc\u6bcf\u6b21\u67e5\u8a62\u5230\u7684\u7d50\u679c\u90fd\u6703\u5132\u5b58\u5728 DNS \u4f3a\u670d\u5668\u7684\u5feb\u53d6\u8a18\u61b6\u9ad4\u4e2d\uff0c\u4ee5\u65b9\u4fbf\u82e5\u4e0b\u6b21\u6709\u76f8\u540c\u9700\u6c42\u7684\u89e3\u6790\u6642\uff0c\u80fd\u5920\u5feb\u901f\u7684\u56de\u61c9\u3002 \u4e0d\u904e\uff0c\u67e5\u8a62\u7d50\u679c\u5df2\u7d93\u88ab\u5feb\u53d6\u4e86\uff0c\u4f46\u662f\u539f\u59cb DNS \u7684\u4e3b\u6a5f\u540d\u7a31\u8207 IP \u5c0d\u61c9\u537b\u4fee\u6539\u4e86\uff0c\u6b64\u6642\u82e5\u6709\u4eba\u518d\u6b21\u67e5\u8a62\uff0c \u7cfb\u7d71\u53ef\u80fd\u6703\u56de\u5831\u820a\u7684 IP \u5594\uff01\u6240\u4ee5\uff0c\u5728\u5feb\u53d6\u5167\u7684\u7b54\u6848\u662f\u6709\u6642\u9593\u6027\u7684\uff01\u901a\u5e38\u662f\u6578\u5341\u5206\u9418\u5230\u4e09\u5929\u4e4b\u5167\u3002 \u9019\u4e5f\u662f\u70ba\u4ec0\u9ebc\u6211\u5011\u5e38\u8aaa\u7576\u4f60\u4fee\u6539\u4e86\u4e00\u500b domain name \u4e4b\u5f8c\uff0c\u53ef\u80fd\u8981 2 ~ 3 \u5929\u5f8c\u624d\u80fd\u5168\u9762\u7684\u555f\u7528\u7684\u7de3\u6545\u5566\uff01<\/li>\n<li>\u53ef\u6301\u7e8c\u5411\u4e0b\u6388\u6b0a (\u5b50\u9818\u57df\u540d\u7a31\u6388\u6b0a)\uff1a<br \/>\n\u6bcf\u4e00\u90e8\u53ef\u4ee5\u8a18\u9304\u4e3b\u6a5f\u540d\u7a31\u8207 IP \u5c0d\u61c9\u7684 DNS \u4f3a\u670d\u5668\u90fd\u53ef\u4ee5\u96a8\u610f\u66f4\u52d5\u4ed6\u81ea\u5df1\u7684\u8cc7\u6599\u5eab\u5c0d\u61c9\uff0c \u56e0\u6b64\u4e3b\u6a5f\u540d\u7a31\u8207\u7db2\u57df\u540d\u7a31\u5728\u5404\u500b\u4e3b\u6a5f\u5e95\u4e0b\u90fd\u4e0d\u76f8\u540c\u3002\u8209\u4f8b\u4f86\u8aaa\uff0c idv.tw \u662f\u50c5\u6709\u53f0\u7063\u624d\u6709\u9019\u500b idv \u7684\u7db2\u57df\uff5e \u56e0\u70ba\u9019\u500b idv \u662f\u7531 .tw \u6240\u7ba1\u7406\u7684\uff0c\u6240\u4ee5\u53ea\u8981\u53f0\u7063 .tw \u7dad\u8b77\u5c0f\u7d44\u540c\u610f\uff0c\u5c31\u80fd\u5920\u5efa\u7acb\u8a72\u7db2\u57df\u5594\uff01<\/li>\n<\/ul>\n<p>\u597d\u5566\uff01\u65e2\u7136 DNS \u9019\u9ebc\u68d2\uff0c\u7136\u5f8c\u6211\u5011\u53c8\u9700\u8981\u67b6\u7ad9\uff0c\u6240\u4ee5\u9700\u8981\u4e00\u500b\u4e3b\u6a5f\u7684\u540d\u7a31\uff0c\u90a3\u9ebc\u6211\u5011\u9700\u8981\u67b6\u8a2d DNS \u4e86\u55ce\uff1f\u7576\u7136\u4e0d\u662f\uff0c\u70ba\u4ec0\u9ebc\u5462\uff1f\u525b\u525b\u9ce5\u54e5\u63d0\u5230\u4e86\u5f88\u591a\u6b21\u7684\u300e\u5408\u6cd5\u300f\u7684\u5b57\u773c\uff0c\u56e0\u70ba\u4ed6\u5c31\u727d\u6d89\u5230\u300e\u6388\u6b0a\u300f\u7684\u554f\u984c\u4e86\uff01 \u6211\u5011\u5728<a href=\"http:\/\/linux.vbird.org\/linux_server\/0270dynamic_dns.php\">\u7b2c\u5341\u7ae0<\/a>\u7576\u4e2d\u4e5f\u63d0\u5230\uff0c\u53ea\u8981\u4e3b\u6a5f\u540d\u7a31\u5408\u6cd5\u5373\u53ef\uff0c\u4e0d\u898b\u5f97\u9700\u8981\u67b6\u8a2d DNS \u7684\u5566\uff01<\/p>\n<p>\u4f8b\u984c\uff1a<\/p>\n<p>\u900f\u904e dig \u5be6\u4f5c\u51fa\u672c\u5c0f\u7bc0\u8ac7\u5230\u7684 . &#8211;&gt; .tw &#8211;&gt; .edu.tw &#8211;&gt; .ksu.edu.tw &#8211;&gt; www.ksu.edu.tw \u7684\u67e5\u8a62\u6d41\u7a0b\uff0c\u4e26\u5206\u6790\u6bcf\u500b\u67e5\u8a62\u968e\u6bb5\u7684 DNS \u4f3a\u670d\u5668\u6709\u5e7e\u90e8\uff1f<\/p>\n<p>\u7b54\uff1a<\/p>\n<p>\u4e8b\u5be6\u4e0a\uff0c\u6211\u5011\u53ef\u4ee5\u900f\u904e<a href=\"http:\/\/linux.vbird.org\/linux_server\/0130internet_connect.php\">\u7b2c\u56db\u7ae0<\/a>\u7d04\u7565\u8ac7\u904e\u7684 dig \u9019\u500b\u6307\u4ee4\u4f86\u5be6\u4f5c\u51fa\u5594\uff01\u4f7f\u7528\u8ffd\u8e64\u529f\u80fd (+trace) \u5c31\u80fd\u5920\u9054\u5230\u9019\u500b\u76ee\u7684\u4e86\u3002\u4f7f\u7528\u65b9\u5f0f\u5982\u4e0b\uff1a<\/p>\n<pre>[root@www ~]# dig +trace www.ksu.edu.tw\r\n; &lt;&lt;&gt;&gt; DiG 9.3.6-P1-RedHat-9.3.6-16.P1.el5 &lt;&lt;&gt;&gt;+trace www.ksu.edu.tw\r\n;; global options:  printcmd\r\n.                       486278  IN      NS      a.root-servers.net.\r\n.                       486278  IN      NS      b.root-servers.net.\r\n....(\u5e95\u4e0b\u7701\u7565)....\r\n# \u4e0a\u9762\u7684\u90e8\u5206\u5728\u8ffd\u8e64 . \u7684\u4f3a\u670d\u5668\uff0c\u53ef\u5f9e a ~ m.root-servers.net.\r\n;; Received 500 bytes from 168.95.1.1#53(168.95.1.1) in 22 ms\r\n\r\ntw.                     172800  IN      NS      ns.twnic.net.\r\ntw.                     172800  IN      NS      a.dns.tw.\r\ntw.                     172800  IN      NS      b.dns.tw.\r\n....(\u5e95\u4e0b\u7701\u7565)....\r\n# \u4e0a\u9762\u7684\u90e8\u5206\u5728\u8ffd\u8e64 .tw. \u7684\u4f3a\u670d\u5668\uff0c\u53ef\u5f9e a ~ h.dns.tw. \u5305\u62ec ns.twnic.net.\r\n;; Received 474 bytes from 192.33.4.12#53(c.root-servers.net) in 168 ms\r\n\r\nedu.tw.                 86400   IN      NS      a.twnic.net.tw.\r\nedu.tw.                 86400   IN      NS      b.twnic.net.tw.\r\n# \u8ffd\u8e64 .edu.tw. \u7684\u5247\u6709 7 \u90e8\u4f3a\u670d\u5668\r\n;; Received 395 bytes from 192.83.166.11#53(ns.twnic.net) in 22 ms\r\n\r\nksu.edu.tw.             86400   IN      NS      dns2.ksu.edu.tw.\r\nksu.edu.tw.             86400   IN      NS      dns3.twaren.net.\r\nksu.edu.tw.             86400   IN      NS      dns1.ksu.edu.tw.\r\n;; Received 131 bytes from 192.83.166.9#53(a.twnic.net.tw) in 22 ms\r\n\r\n<u>www.ksu.edu.tw.         3600    IN      A       120.114.100.101<\/u>\r\nksu.edu.tw.             3600    IN      NS      dns2.ksu.edu.tw.\r\nksu.edu.tw.             3600    IN      NS      dns1.ksu.edu.tw.\r\nksu.edu.tw.             3600    IN      NS      dns3.twaren.net.\r\n;; Received 147 bytes from 120.114.150.1#53(dns2.ksu.edu.tw) in 14 ms\r\n<\/pre>\n<p>\u6700\u7d42\u7684\u7d50\u679c\u6709\u627e\u5230 A (Address) \u662f 120.114.100.101\uff0c\u4e0d\u904e\u9019\u500b\u4f8b\u984c\u7684\u91cd\u9ede\u662f\uff0c\u8981\u8b93\u5927\u5bb6\u77a7\u77a7\u6574\u500b DNS \u7684\u641c\u5c0b\u904e\u7a0b\uff01 \u5728 dig \u52a0\u4e0a +trace \u7684\u9078\u9805\u5f8c\uff0c\u5c31\u80fd\u5920\u9054\u5230\u9019\u500b\u76ee\u7684\u3002\u81f3\u65bc\u5176\u4ed6\u7684\u90fd\u662f\u4f3a\u670d\u5668 (NS) \u7684\u8a2d\u5b9a\u503c\u8207\u8ffd\u8e64\u904e\u7a0b\u5594\uff01 \u6709\u6c92\u6709\u5f88\u6e05\u695a\u554a\uff1f^_^\u3002\u81f3\u65bc A \u8207 NS \u7b49\u76f8\u95dc\u7684\u8cc7\u6599\uff0c\u6211\u5011\u5728\u5f8c\u7e8c\u7684 DNS \u8cc7\u6599\u5eab\u4ecb\u7d39\u4e2d\uff0c\u518d\u5206\u5225\u4ecb\u7d39\u56c9\u3002<\/p>\n<p><a name=\"port\"><\/a><\/p>\n<ul>\n<li>\n<hr \/>\n<p>DNS \u4f7f\u7528\u7684 port number<\/li>\n<\/ul>\n<p>\u597d\u4e86\uff0c\u65e2\u7136 DNS \u7cfb\u7d71\u4f7f\u7528\u7684\u662f\u7db2\u8def\u7684\u67e5\u8a62\uff0c\u90a3\u9ebc\u81ea\u7136\u9700\u8981\u6709\u76e3\u807d\u7684 port \u56c9\uff01\u6c92\u932f\uff01\u5f88\u5408\u7406\uff01\u90a3\u9ebc DNS \u4f7f\u7528\u7684\u662f\u90a3\u4e00\u500b port \u5462\uff1f\u90a3\u5c31\u662f 53 \u9019\u500b port \u5566\uff01\u4f60\u53ef\u4ee5\u5230\u4f60\u7684 Linux \u5e95\u4e0b\u7684 \/etc\/services \u9019\u500b\u6a94\u6848\u770b\u770b\uff01\u641c\u5c0b\u4e00\u4e0b domain \u9019\u500b\u95dc\u9375\u5b57\uff0c\u5c31\u53ef\u4ee5\u67e5\u5230 53 \u9019\u500b port \u5566\uff01<\/p>\n<p>\u4f46\u662f\u9019\u88e1\u9700\u8981\u8ddf\u5927\u5bb6\u5831\u544a\u7684\u662f\uff0c\u901a\u5e38 DNS \u67e5\u8a62\u7684\u6642\u5019\uff0c\u662f\u4ee5 udp \u9019\u500b\u8f03\u5feb\u901f\u7684\u8cc7\u6599\u50b3\u8f38\u5354\u5b9a\u4f86\u67e5\u8a62\u7684\uff0c \u4f46\u662f\u842c\u4e00\u6c92\u6709\u8fa6\u6cd5\u67e5\u8a62\u5230\u5b8c\u6574\u7684\u8cc7\u8a0a\u6642\uff0c\u5c31\u6703\u518d\u6b21\u7684\u4ee5 tcp \u9019\u500b\u5354\u5b9a\u4f86\u91cd\u65b0\u67e5\u8a62\u7684\uff01\u6240\u4ee5\u555f\u52d5 DNS \u7684 daemon (\u5c31\u662f named \u5566) \u6642\uff0c\u6703\u540c\u6642\u555f\u52d5 tcp \u53ca udp \u7684 port 53 \u5594\uff01\u6240\u4ee5\uff0c\u8a18\u5f97\u9632\u706b\u7246\u4e5f\u8981\u540c\u6642\u653e\u884c tcp, udp port 53 \u5462\uff01<\/p>\n<hr \/>\n<p><a name=\"DNS_register\"><\/a><img loading=\"lazy\" decoding=\"async\" src=\"http:\/\/linux.vbird.org\/images\/penguin-s.gif\" alt=\"\u5c0f\u6a19\u984c\u7684\u5716\u793a\" width=\"16\" height=\"23\" align=\"middle\" \/>19.1.3 \u5408\u6cd5 DNS \u7684\u95dc\u9375\uff1a\u7533\u8acb\u9818\u57df\u67e5\u8a62\u6388\u6b0a<\/p>\n<p>\u4ec0\u9ebc\uff1fDNS \u4f3a\u670d\u5668\u7684\u67b6\u8a2d\u9084\u6709\u300e\u5408\u6cd5\u300f\u8207\u300e\u4e0d\u5408\u6cd5\u300f\u4e4b\u5206\u5594\uff1f\u4e0d\u662f\u50cf\u5176\u4ed6\u7684\u4f3a\u670d\u5668\u4e00\u6a23\uff0c\u67b6\u8a2d\u597d\u4e4b\u5f8c\u4eba\u5bb6\u5c31\u67e5\u7684\u5230\u55ce\uff1f \u975e\u4e5f\u975e\u4e5f\uff01\u70ba\u4ec0\u9ebc\u5462\uff1f\u5e95\u4e0b\u6211\u5011\u5c31\u4f86\u8ac7\u4e00\u8ac7\u3002<\/p>\n<ul>\n<li>\n<hr \/>\n<p>\u5411\u4e0a\u5c64\u9818\u57df\u8a3b\u518a\u53d6\u5f97\u5408\u6cd5\u7684\u9818\u57df\u67e5\u8a62\u6388\u6b0a<\/li>\n<\/ul>\n<p>\u6211\u5011\u5728<a href=\"http:\/\/linux.vbird.org\/linux_server\/0270dynamic_dns.php\">\u7b2c\u5341\u7ae0<\/a>\u4e5f\u8b1b\u904e\uff0c\u7533\u8acb\u4e00\u500b\u5408\u6cd5\u7684\u4e3b\u6a5f\u540d\u7a31\u5c31\u662f\u9700\u8981\u8a3b\u518a\uff0c \u8a3b\u518a\u5c31\u662f\u9700\u8981\u82b1\u9322\u5566\uff01\u90a3\u9ebc\u8a3b\u518a\u53d6\u5f97\u7684\u8cc7\u6599\u6709\u5169\u7a2e\uff0c\u4e00\u7a2e\u662f\u7b2c\u5341\u7ae0\u8ac7\u5230\u7684 FQDN (\u4e3b\u6a5f\u540d\u7a31)\uff0c\u4e00\u7a2e\u5c31\u662f\u7533\u8acb\u9818\u57df\u67e5\u8a62\u6b0a\u3002\u6240\u8b02\u7684 FQDN \u5c31\u662f\u6211\u5011\u53ea\u9700\u8981\u4e3b\u6a5f\u540d\uff0c\u8a73\u7d30\u7684\u8a2d\u5b9a\u8cc7\u6599\u5c31\u7531 ISP \u5e6b\u6211\u5011\u641e\u5b9a\u3002\u4f8b\u5982<a href=\"http:\/\/linux.vbird.org\/linux_server\/0350dns.php#fig19.1-4\">\u5716 19.1-4<\/a> \u6240\u793a\uff0c \u90a3\u90e8 www.ksu.edu.tw \u7684\u8a73\u7d30\u4e3b\u6a5f\u540d\u7a31\u5c0d\u61c9 IP \u7684\u8cc7\u6599\u5c31\u662f\u8acb\u7ba1\u7406 .ksu.edu.tw \u90a3\u500b\u9818\u57df\u7684\u4f3a\u670d\u5668\u641e\u5b9a\u7684\u3002<\/p>\n<p>\u90a3\u4ec0\u9ebc\u662f\u9818\u57df\u67e5\u8a62\u6388\u6b0a\u5462\uff1f\u540c\u6a23\u7528<a href=\"http:\/\/linux.vbird.org\/linux_server\/0350dns.php#fig19.1-4\">\u5716 19.1-4<\/a> \u4f86\u89e3\u91cb\uff0c\u6211\u5011\u7684 .ksu.edu.tw \u5fc5\u9808\u8981\u5411 .edu.tw \u90a3\u90e8\u4e3b\u6a5f\u8a3b\u518a\u7533\u8acb\u9818\u57df\u6388\u6b0a\uff0c\u56e0\u6b64\uff0c\u672a\u4f86\u6709\u4efb\u4f55 .ksu.edu.tw \u7684\u8981\u6c42\u6642\uff0c .edu.tw \u90fd\u6703\u8aaa\uff1a\u300e\u6211\u4e0d\u77e5\u9053\uff01 \u8a73\u60c5\u8acb\u53bb\u627e .ksu.edu.tw \u5427\uff01\u300f\u6b64\u6642\uff0c\u6211\u5011\u5c31\u5f97\u8981\u67b6\u8a2d DNS \u4f3a\u670d\u5668\u4f86\u8a2d\u5b9a .ksu.edu.tw \u76f8\u95dc\u7684\u4e3b\u6a5f\u540d\u7a31\u5c0d\u61c9\u624d\u884c\u5594\uff01 \u662f\u5426\u5f88\u50cf\u4eba\u985e\u793e\u6703\u7684\u300e\u6388\u6b0a\u300f\u7684\u6982\u5ff5\uff1f<\/p>\n<p>\u4e5f\u5c31\u662f\u8aaa\uff0c\u7576\u4f60\u8001\u95c6\u5145\u5206\u7684\u300e\u6388\u6b0a\u300f\u7d66\u4f60\u67d0\u9805\u5de5\u4f5c\u7684\u6642\u5019\uff0c\u5f9e\u6b64\uff0c\u8981\u9032\u884c\u8a72\u9805\u5de5\u4f5c\u7684\u4efb\u4f55\u4eba\uff0c \u5f9e\u8001\u95c6\u90a3\u908a\u77e5\u9053\u4f60\u624d\u662f\u771f\u6b63\u300e\u6709\u6b0a\u300f\u7684\u4eba\u4e4b\u5f8c\uff0c\u90fd\u5fc5\u9808\u8981\u5411\u4f60\u8acb\u793a\u4e00\u6a23\uff01^_^\uff01\u6240\u4ee5\u56c9\uff0c\u5982\u679c\u4f60\u8981\u67b6\u8a2d DNS \uff0c\u800c\u4e14\u662f\u53ef\u4ee5\u9023\u4e0a Internet \u4e0a\u9762\u7684 DNS \u6642\uff0c\u4f60\u5c31\u5fc5\u9808\u8981\u900f\u904e\u300e\u4e0a\u5c64 DNS \u4f3a\u670d\u5668\u7684\u6388\u6b0a\u300f\u624d\u884c\uff01\u9019\u662f\u5f88\u91cd\u8981\u7684\u89c0\u5ff5\u5594\uff01<\/p>\n<p>\u8b93\u6211\u5011\u6b78\u7d0d\u4e00\u4e0b\uff0c\u8981\u8b93\u4f60\u7684\u4e3b\u6a5f\u540d\u7a31\u5c0d\u61c9 IP \u4e14\u8b93\u5176\u4ed6\u96fb\u8166\u90fd\u53ef\u4ee5\u67e5\u8a62\u7684\u5230\uff0c\u4f60\u6709\u5169\u7a2e\u65b9\u5f0f\uff1a<\/p>\n<ol>\n<li>\u4e0a\u5c64 DNS \u6388\u6b0a\u9818\u57df\u67e5\u8a62\u6b0a\uff0c\u8b93\u4f60\u81ea\u5df1\u8a2d\u5b9a DNS \u4f3a\u670d\u5668\uff0c\u6216\u8005\u662f\uff1b<\/li>\n<li>\u76f4\u63a5\u8acb\u4e0a\u5c64 DNS \u4f3a\u670d\u5668\u4f86\u5e6b\u4f60\u8a2d\u5b9a\u4e3b\u6a5f\u540d\u7a31\u5c0d\u61c9\uff01<\/li>\n<\/ol>\n<ul>\n<li>\n<hr \/>\n<p>\u64c1\u6709\u9818\u57df\u67e5\u8a62\u6b0a\u5f8c\uff0c\u6240\u6709\u7684\u4e3b\u6a5f\u540d\u8cc7\u8a0a\u90fd\u4ee5\u81ea\u5df1\u70ba\u6e96\uff0c\u8207\u4e0a\u5c64\u7121\u95dc<\/li>\n<\/ul>\n<p>\u5f88\u591a\u670b\u53cb\u53ef\u80fd\u90fd\u6709\u904e\u7533\u8acb DNS \u9818\u57df\u67e5\u8a62\u6388\u6b0a\u7684\u7d93\u9a57\uff0c\u5728\u7533\u8acb\u6642\uff0cISP \u5c31\u6703\u8981\u4f60\u586b\u5beb (1)\u4f60\u7684 DNS \u4f3a\u670d\u5668\u540d\u7a31\u4ee5\u53ca (2)\u8a72\u4f3a\u670d\u5668\u7684 IP\u3002\u65e2\u7136\u5df2\u7d93\u5728 ISP \u5c31\u586b\u5beb\u4e86\u4e3b\u6a5f\u540d\u7a31\u8207 IP \u7684\u5c0d\u61c9\uff0c\u6240\u4ee5\uff0c\u5373\u4f7f\u6211\u7684 DNS \u4f3a\u670d\u5668\u639b\u9ede\u4e86\uff0c\u5728 ISP \u4e0a\u9762\u7684\u4e3b\u6a5f\u540d\u7a31\u61c9\u8a72\u9084\u662f\u67e5\u5230\u7684 IP \u5427\uff1f\u7b54\u6848\u662f\uff1a\u300e\u932f\uff01\u300f\u67e5\u4e0d\u5230\u7684\uff01\u70ba\u4ec0\u9ebc\u5462\uff1f<\/p>\n<p>DNS \u7cfb\u7d71\u8a18\u9304\u7684\u8cc7\u8a0a\u975e\u5e38\u7684\u591a\uff0c\u4e0d\u904e\u91cd\u9ede\u5176\u5be6\u6709\u5169\u500b\uff0c\u4e00\u500b\u662f\u8a18\u9304\u4f3a\u670d\u5668\u6240\u5728\u7684 NS (NameServer) \u6a19\u8a8c\uff0c\u53e6\u4e00\u500b\u5247\u662f\u8a18\u9304\u4e3b\u6a5f\u540d\u7a31\u5c0d\u61c9\u7684 A (Address) \u6a19\u8a8c\u3002\u6211\u5011\u5728\u7db2\u8def\u4e0a\u9762\u67e5\u8a62\u5230\u7684\u6700\u7d42\u7d50\u679c\uff0c\u90fd\u662f\u67e5\u8a62 IP (IP Address) \u7684\uff0c\u56e0\u6b64\u6700\u7d42\u7684\u6a19\u8a8c\u8981\u627e\u7684\u662f A \u9019\u500b\u8a18\u9304\u624d\u5c0d\uff01\u6211\u5011\u4ee5\u9ce5\u54e5\u8a3b\u518a\u7684 .vbird.org \u4f86\u8aaa\u660e\u597d\u4e86\uff0c\u9ce5\u54e5\u53bb\u8a3b\u518a\u6642\uff0c \u8a18\u9304\u5728 ISP \u7684 DNS \u4f3a\u670d\u5668\u540d\u7a31\u70ba dns.vbird.org\uff0c\u8a72\u7b46\u8a18\u9304\u5176\u5be6\u5c31\u662f NS \uff0c\u4e26\u975e A \uff0c\u5982\u4e0b\u5716\u6240\u793a\uff1a<\/p>\n<p><img decoding=\"async\" title=\"\u8a18\u9304\u7684\u6388\u6b0a\u4e3b\u6a5f\u540d\u7a31\u8207\u5be6\u969b A \u8a18\u9304\u7684\u5dee\u7570\" src=\"http:\/\/linux.vbird.org\/linux_server\/0350dns\/\/database2.gif\" alt=\"\u8a18\u9304\u7684\u6388\u6b0a\u4e3b\u6a5f\u540d\u7a31\u8207\u5be6\u969b A \u8a18\u9304\u7684\u5dee\u7570\" border=\"0\" \/><br \/>\n\u5716 19.1-5\u3001\u8a18\u9304\u7684\u6388\u6b0a\u4e3b\u6a5f\u540d\u7a31\u8207\u5be6\u969b A \u8a18\u9304\u7684\u5dee\u7570<\/p>\n<p>\u4e0a\u5716\u4e2d\uff0c\u96d6\u7136\u5728 godaddy \u4f3a\u670d\u5668\u5167\u6709\u8a18\u9304\u4e00\u7b46\u300e\u8981\u67e5\u8a62 .vbird.org \u6642\uff0c\u8acb\u5230 dns.vbird.org (NS) \u53bb\u67e5\uff0c\u9019\u500b\u7ba1\u7406\u8005\u7684 IP \u662f 140.116&#8230;\u300f\uff0c\u4f46\u662f\u9019\u7b46\u8a18\u9304\u53ea\u662f\u544a\u8a34\u6211\u5011\u8981\u53bb\u4e0b\u4e00\u500b\u4f3a\u670d\u5668\u627e\uff0c\u4e26\u4e0d\u662f\u6700\u7d42\u7684 A (IP Address) \u7684\u7b54\u6848\uff0c\u6240\u4ee5\u9084\u5f97\u8981\u7e7c\u7e8c\u5f80\u4e0b\u627e (\u96a8\u6642\u8a18\u5f97<a href=\"http:\/\/linux.vbird.org\/linux_server\/0350dns.php#fig19.1-4\">\u5716 19.1-4<\/a> \u7684\u67e5\u8a62\u6d41\u7a0b)\u3002\u6b64\u6642\uff0c\u6709\u5e7e\u7a2e\u7d50\u679c\u6703\u5c0e\u81f4 dns.vbird.org \u7684 IP \u627e\u4e0d\u5230\uff0c\u6216\u8005\u662f\u6700\u7d42\u7684 IP \u8207 godaddy \u8a18\u9304\u7684\u4e0d\u540c\u7684\u7d50\u679c\u5594\uff01\u90a3\u5c31\u662f\uff1a<\/p>\n<ul>\n<li>dns.vbird.org \u4f3a\u670d\u5668\u639b\u9ede\u6642\uff1a \u5982\u679c dns.vbird.org \u9019\u90e8\u4e3b\u6a5f\u639b\u9ede\uff0c\u90a3\u9ebc\u5728\u4e0a\u5716\u986f\u793a\u300e\u67e5\u8a62\u300f\u7bad\u982d\u7684\u6b65\u9a5f\u6703\u88ab\u4e2d\u65b7\uff0c\u56e0\u6b64\u5c31\u6703\u51fa\u73fe\u300e\u9023\u7dda\u4e0d\u5230 dns.vbird.org \u7684 IP\u300f\u7684\u7d50\u679c\u3002\u56e0\u70ba\u7121\u8ad6\u5982\u4f55\uff0cDNS \u7cfb\u7d71\u90fd\u6703\u53bb\u627e\u5230\u6700\u5f8c\u4e00\u500b\u542b\u6709 A \u4f4d\u5740\u7684\u8a18\u9304\u554a\uff01<\/li>\n<li>dns.vbird.org \u4f3a\u670d\u5668\u5167\u7684\u8cc7\u6599\u5eab\u5fd8\u8a18\u88dc\u4e0a\u8cc7\u6599\u6642\uff1a \u5982\u679c\u9ce5\u54e5\u5728\u81ea\u5df1\u7684\u4f3a\u670d\u5668\u8cc7\u6599\u5eab\u4e2d\uff0c\u5fd8\u8a18\u52a0\u4e0a dns.vbird.org \u7684\u8a18\u9304\u6642\uff0c\u6700\u7d42\u7684\u7d50\u679c\u9084\u662f\u6703\u986f\u793a\u300e\u627e\u4e0d\u5230\u8a72\u4f3a\u670d\u5668\u7684 IP\u300f\uff1b<\/li>\n<li>dns.vbird.org \u4f3a\u670d\u5668\u5167\u7684\u8cc7\u6599\u5eab\u8cc7\u6599\u7de8\u5beb\u4e0d\u4e00\u81f4\u6642\uff1a \u5982\u679c\u662f\u5728\u9ce5\u54e5\u81ea\u5df1\u4f3a\u670d\u5668\u7684\u8cc7\u6599\u5eab\u5167\u7684 dns.vbird.org \u6240\u8a18\u9304\u7684 IP \u8207 godaddy \u7684\u4e0d\u540c\uff0c\u6700\u7d42\u7684\u7d50\u679c\u6703\u4ee5\u9ce5\u54e5\u8a18\u9304\u7684\u70ba\u6e96\u3002<\/li>\n<\/ul>\n<p>\u7e3d\u4e4b\uff0c\u4f60\u5728 ISP \u4e0a\u9762\u586b\u5beb\u7684\u4e3b\u6a5f\u540d\u7a31\u53ea\u662f\u4e00\u500b\u53c3\u8003\u7528\u7684\uff0c\u6700\u7d42\u9084\u662f\u8981\u5728\u4f60\u81ea\u5df1 DNS \u4f3a\u670d\u5668\u7576\u4e2d\u8a2d\u5b9a\u597d\u624d\u884c\uff01 \u96d6\u7136\u53ef\u4ee5\u81ea\u5df1\u60e1\u641e\u4e00\u4e0b\uff0c\u4e0d\u904e\uff0c\u901a\u5e38\u5927\u5bb6\u9084\u662f\u6703\u8b93 ISP \u4e0a\u9762\u7684 DNS \u4f3a\u670d\u5668\u4e3b\u6a5f\u540d\u8207\u81ea\u5df1\u7684\u8cc7\u6599\u5eab\u4e3b\u6a5f\u540d\u4e00\u81f4\uff0c \u4ea6\u5373\u4e0a\u5716\u4e2d\uff0c\u4e2d\u9593\u8207\u6700\u4e0b\u9762\u65b9\u6846\u5167\u7684 dns.vbird.org \u7684 NS \u53ca A \u90fd\u5c0d\u61c9\u5230\u540c\u4e00\u500b IP \u5c31\u662f\u4e86\u3002<\/p>\n<hr \/>\n<p><a name=\"DNS_settingorupper\"><\/a><img loading=\"lazy\" decoding=\"async\" src=\"http:\/\/linux.vbird.org\/images\/penguin-s.gif\" alt=\"\u5c0f\u6a19\u984c\u7684\u5716\u793a\" width=\"16\" height=\"23\" align=\"middle\" \/>19.1.4 \u4e3b\u6a5f\u540d\u4ea4\u7531 ISP \u4ee3\u7ba1\u9084\u662f\u81ea\u5df1\u8a2d\u5b9a DNS \u4f3a\u670d\u5668<\/p>\n<p>\u524d\u9762 19.1.3 \u5c0f\u7bc0\u4ee5\u53ca\u7b2c\u5341\u7ae0\u90fd\u8ac7\u904e\uff0c\u7533\u8acb\u4e3b\u6a5f\u540d\u7a31\u6216\u7db2\u57df\u540d\u7a31\u4e3b\u8981\u6709\u5169\u7a2e\u65b9\u5f0f\uff0c\u5c31\u662f\u525b\u525b\u4e0a\u982d\u63d0\u5230\u7684 DNS \u6388\u6b0a\uff0c\u6216\u8005\u662f\u76f4\u63a5\u4ea4\u7d66 ISP \u4f86\u7ba1\u7406\u3002\u4ea4\u7d66 ISP \u7ba1\u7406\u7684\uff0c\u5c31\u53ef\u4ee5\u7a31\u4f5c\u662f\u7db2\u57df\u540d\u7a31\u4ee3\u7ba1\u5566\uff01\u7576\u7136\u5566\uff0c\u5982\u679c\u4f60\u662f\u5b78\u6821\u55ae\u4f4d\u7684\u8a71\uff0c \u6216\u8005\u662f\u4f01\u696d\u5167\u90e8\u7684\u5c0f\u55ae\u4f4d\uff0c\u90a3\u9ebc\u5c31\u5f97\u8acb\u4f60\u5411\u4e0a\u5c64 DNS \u4e3b\u6a5f\u7684\u8ca0\u8cac\u4eba\u8981\u6c42\u56c9\uff01\u7121\u8ad6\u5982\u4f55\uff0c\u4f60\u53ea\u80fd\u6709\u5169\u500b\u9078\u64c7\u5c31\u662f\u4e86\uff0c\u8981\u4e0d\u5c31\u662f\u8acb\u4ed6\u5e6b\u5fd9\u4f60\u8a2d\u5b9a\u597d hostname \u5c0d\u61c9 IP \uff0c\u8981\u561b\u5c31\u662f\u8acb\u4ed6\u76f4\u63a5\u5c07\u67d0\u500b domain name \u6bb5\u6388\u6b0a\u7d66\u4f60\u505a\u70ba DNS \u7684\u4e3b\u8981\u7ba1\u7406\u7db2\u57df\u3002<\/p>\n<p>\u90a3\u9ebc\u6211\u600e\u9ebc\u77e5\u9053\u90a3\u500b\u65b9\u5f0f\u5c0d\u6211\u6bd4\u8f03\u597d\u5462\uff1f\u8acb\u6ce8\u610f\uff0c\u7531\u65bc DNS \u67b6\u8a2d\u4e4b\u5f8c\uff0c\u6703\u591a\u51fa\u4e00\u500b\u76e3\u807d\u7684 port \uff0c\u6240\u4ee5\u7406\u8ad6\u4e0a\uff0c\u662f\u6bd4\u8f03\u4e0d\u5b89\u5168\u7684\uff01\u800c\u4e14\uff0c\u7531\u65bc\u7db2\u969b\u7db2\u8def\u73fe\u5728\u90fd\u662f\u900f\u904e\u4e3b\u6a5f\u540d\u7a31\u5728\u9023\u7dda\uff0c\u5728\u77ad\u89e3\u4e0a\u9762\u8ac7\u5230\u7684\u4e3b\u6a5f\u540d\u7a31\u67e5\u8a62\u6d41\u7a0b\u5f8c\uff0c \u4f60\u6703\u767c\u73fe\uff0cDNS \u8a2d\u5b9a\u932f\u8aa4\u662f\u5f88\u8981\u547d\u7684\uff01\u56e0\u70ba\u4f60\u7684\u4e3b\u6a5f\u540d\u7a31\u518d\u4e5f\u627e\u4e0d\u5230\u4e86\u3002\u6240\u4ee5\uff0c\u9019\u88e1\u7684\u5efa\u8b70\u662f\uff1a<\/p>\n<ul>\n<li>\u9700\u8981\u67b6\u8a2d DNS \u7684\u6642\u6a5f\uff1a<\/li>\n<\/ul>\n<ul>\n<li>\u4f60\u6240\u8ca0\u8cac\u9700\u8981\u9023\u4e0a Internet \u7684\u4e3b\u6a5f\u6578\u91cf\u9f90\u5927\uff1a\u4f8b\u5982\u4f60\u4e00\u500b\u4eba\u8ca0\u8cac\u6574\u500b\u516c\u53f8\u5341\u5e7e\u90e8\u7684\u7db2\u8def Server\uff0c\u800c\u9019\u4e9b Server \u90fd\u662f\u639b\u8f09\u4f60\u7684\u516c\u53f8\u7db2\u57df\u4e4b\u4e0b\u7684\u3002\u9019\u500b\u6642\u5019\u60f3\u8981\u4e0d\u67b6\u8a2d DNS \u4e5f\u7c89\u96e3\u5566\uff01<\/li>\n<li>\u4f60\u53ef\u80fd\u9700\u8981\u6642\u5e38\u4fee\u6539\u4f60 Server \u7684\u540d\u5b57\uff0c\u6216\u8005\u662f\u4f60\u7684 Server \u6709\u96a8\u6642\u589e\u52a0\u7684\u53ef\u80fd\u6027\u8207\u8b8a\u52d5\u6027\uff1b<\/li>\n<\/ul>\n<ul>\n<li>\u4e0d\u9700\u8981\u67b6\u8a2d DNS \u7684\u6642\u6a5f\uff1a<\/li>\n<\/ul>\n<ul>\n<li>\u7db2\u8def\u4e3b\u6a5f\u6578\u91cf\u5f88\u5c11\uff1a\u4f8b\u5982\u5bb6\u88e1\u6216\u516c\u53f8\u53ea\u6709\u9700\u8981\u4e00\u90e8 mail server \u6642\uff1b<\/li>\n<li>\u4f60\u53ef\u4ee5\u76f4\u63a5\u8acb\u4e0a\u5c64 DNS \u4e3b\u6a5f\u7ba1\u7406\u54e1\u5e6b\u4f60\u8a2d\u5b9a\u597d Hostname \u7684\u5c0d\u61c9\u6642\uff1b<\/li>\n<li>\u4f60\u5c0d\u65bc DNS \u7684\u8a8d\u77e5\u4e0d\u8db3\u6642\uff0c\u5982\u679c\u67b6\u8a2d\u53cd\u800c\u5bb9\u6613\u9020\u6210\u7db2\u8def\u4e0d\u901a\u7684\u60c5\u6cc1\uff1b<\/li>\n<li>\u67b6\u8a2d DNS \u7684\u8cbb\u7528\u5f88\u9ad8\u6642\uff01<\/li>\n<\/ul>\n<hr \/>\n<p><a name=\"DNS_Zones\"><\/a><img loading=\"lazy\" decoding=\"async\" src=\"http:\/\/linux.vbird.org\/images\/penguin-s.gif\" alt=\"\u5c0f\u6a19\u984c\u7684\u5716\u793a\" width=\"16\" height=\"23\" align=\"middle\" \/>19.1.5 DNS \u8cc7\u6599\u5eab\u7684\u8a18\u9304\uff1a\u6b63\u89e3, \u53cd\u89e3, Zone \u7684\u610f\u7fa9<\/p>\n<p>\u5f9e\u524d\u9762\u7684<a href=\"http:\/\/linux.vbird.org\/linux_server\/0350dns.php#fig19.1-4\">\u5716 19.1-4<\/a> \u7684\u67e5\u8a62\u6d41\u7a0b\u4e2d\uff0c\u6211\u5011\u77e5\u9053\u6700\u91cd\u8981\u7684\u5c31\u662f .ksu.edu.tw \u90a3\u90e8 DNS \u4f3a\u670d\u5668\u5167\u7684\u8a18\u9304\u8cc7\u8a0a\u4e86\u3002\u9019\u4e9b\u8a18\u9304\u7684\u549a\u549a\u6211\u5011\u53ef\u4ee5\u7a31\u547c\u70ba\u8cc7\u6599\u5eab\uff0c\u800c\u5728\u8cc7\u6599\u5eab\u88e1\u9762\u91dd\u5c0d\u6bcf\u500b\u8981\u89e3\u6790\u7684\u9818\u57df (domain)\uff0c\u5c31\u7a31\u70ba\u4e00\u500b\u5340\u57df (zone)\u3002\u90a3\u9ebc\u5230\u5e95\u6709\u54ea\u4e9b\u8981\u89e3\u6790\u7684\u9818\u57df\u5462\uff1f\u57fa\u672c\u4e0a\uff0c\u6709\u5f9e\u4e3b\u6a5f\u540d\u7a31\u67e5\u5230 IP \u7684\u6d41\u7a0b\uff0c\u4e5f\u53ef\u4ee5\u5f9e IP \u53cd\u67e5\u5230\u4e3b\u6a5f\u540d\u7a31\u7684\u65b9\u5f0f\u3002 \u56e0\u70ba\u6700\u65e9\u524d DNS \u7684\u4efb\u52d9\u5c31\u662f\u8981\u5c07\u4e3b\u6a5f\u540d\u7a31\u89e3\u6790\u70ba IP\uff0c\u56e0\u6b64\uff1a<\/p>\n<ul>\n<li>\u5f9e\u4e3b\u6a5f\u540d\u7a31\u67e5\u8a62\u5230 IP \u7684\u6d41\u7a0b\u7a31\u70ba\uff1a\u6b63\u89e3<\/li>\n<li>\u5f9e IP \u53cd\u89e3\u6790\u5230\u4e3b\u6a5f\u540d\u7a31\u7684\u6d41\u7a0b\u7a31\u70ba\uff1a\u53cd\u89e3<\/li>\n<li>\u4e0d\u7ba1\u662f\u6b63\u89e3\u9084\u662f\u53cd\u89e3\uff0c\u6bcf\u500b\u9818\u57df\u7684\u8a18\u9304\u5c31\u662f\u4e00\u500b\u5340\u57df (zone)<\/li>\n<\/ul>\n<p>\u8209\u4f8b\u4f86\u8aaa\uff0c\u5d11\u5c71\u79d1\u5927 DNS \u4f3a\u670d\u5668\u7ba1\u7406\u7684\u5c31\u662f *.ksu.edu.tw \u9019\u500b\u9818\u57df\u7684\u67e5\u8a62\u6b0a\uff0c\u4efb\u4f55\u60f3\u8981\u77e5\u9053 *.ksu.edu.tw \u4e3b\u6a5f\u540d\u7684 IP \u90fd\u5f97\u5411\u5d11\u5c71\u79d1\u5927\u7684 DNS \u4f3a\u670d\u5668\u67e5\u8a62\uff0c\u6b64\u6642 .ksu.edu.tw \u5c31\u662f\u4e00\u500b\u300e\u6b63\u89e3\u7684\u9818\u57df\u300f\u3002\u800c\u5d11\u5c71\u79d1\u5927\u6709\u7533\u8acb\u5230\u5e7e\u500b class C \u7684\u5b50\u7db2\u57df\uff0c \u4f8b\u5982 120.114.140.0\/24\uff0c\u5982\u679c\u9019 254 \u500b\u53ef\u7528 IP \u90fd\u8981\u8a2d\u5b9a\u4e3b\u6a5f\u540d\u7a31\uff0c\u90a3\u9ebc\u9019\u500b 120.114.140.0\/24 \u5c31\u662f\u4e00\u500b\u300e\u53cd\u89e3\u7684\u9818\u57df\u300f\uff01 \u53e6\u5916\uff0c\u6bcf\u4e00\u90e8 DNS \u4f3a\u670d\u5668\u90fd\u53ef\u4ee5\u7ba1\u7406\u591a\u500b\u9818\u57df\uff0c\u4e0d\u7ba1\u662f\u6b63\u89e3\u9084\u662f\u53cd\u89e3\u3002<\/p>\n<ul>\n<li>\n<hr \/>\n<p>\u6b63\u89e3\u7684\u8a2d\u5b9a\u6b0a\u4ee5\u53ca DNS \u6b63\u89e3 zone \u8a18\u9304\u7684\u6a19\u8a8c<\/li>\n<\/ul>\n<p>\u90a3\u8ab0\u53ef\u4ee5\u7533\u8acb\u6b63\u89e3\u7684 DNS \u4f3a\u670d\u5668\u67b6\u8a2d\u6b0a\u5462\uff1f\u7b54\u6848\u662f\uff1a\u90fd\u53ef\u4ee5\uff01\u53ea\u8981\u8a72\u9818\u57df\u6c92\u6709\u4eba\u4f7f\u7528\uff0c \u90a3\u4f60\u5148\u6436\u5230\u4e86\uff0c\u5c31\u80fd\u5920\u4f7f\u7528\u4e86\u3002\u4e0d\u904e\uff0c\u56e0\u70ba\u570b\u969b INTERNIC \u5df2\u7d93\u5b9a\u7fa9\u51fa gTLD \u4ee5\u53ca ccTLD \u4e86\uff0c\u6240\u4ee5\u4f60\u4e0d\u80fd\u81ea\u8a02\u4f8b\u5982 centos.vbird \u9019\u7a2e\u7db2\u57df\u7684\uff01\u9084\u662f\u5f97\u8981\u7b26\u5408\u4e0a\u5c64 DNS \u6240\u7d66\u4e88\u7684\u9818\u57df\u7bc4\u570d\u624d\u884c\u3002\u8209\u4f8b\u4f86\u8aaa\uff0c\u53f0\u7063\u500b\u4eba\u7db2\u7ad9\u5c31\u5e38\u4f7f\u7528 *.idv.tw \u9019\u6a23\u7684\u9818\u57df\u540d\u7a31\u3002<\/p>\n<p>\u90a3\u6b63\u89e3\u6a94\u7684 zone \u88e1\u9762\u4e3b\u8981\u8a18\u9304\u4e86\u4ec0\u9ebc\u6771\u897f\u5462\uff1f\u56e0\u70ba\u6b63\u89e3\u7684\u91cd\u9ede\u5728\u7531\u4e3b\u6a5f\u540d\u7a31\u67e5\u8a62\u5230 IP\uff0c\u800c\u4e14\u6bcf\u90e8 DNS \u4f3a\u670d\u5668\u9084\u662f\u5f97\u8981\u5b9a\u7fa9\u6e05\u695a\uff0c\u540c\u6642\uff0c\u4f60\u53ef\u80fd\u9084\u9700\u8981\u67b6\u8a2d master\/slave \u67b6\u69cb\u7684 DNS \u74b0\u5883\uff0c\u56e0\u6b64\uff0c\u6b63\u89e3 zone \u901a\u5e38\u5177\u6709\u5e95\u4e0b\u5e7e\u7a2e\u6a19\u8a8c\uff1a<\/p>\n<ul>\n<li>SOA\uff1a\u5c31\u662f\u958b\u59cb\u9a57\u8b49 (Start of Authority) \u7684\u7e2e\u5beb\uff0c\u76f8\u95dc\u8cc7\u6599\u672c\u7ae0\u5f8c\u7e8c\u5c0f\u7bc0\u8aaa\u660e\uff1b<\/li>\n<li>NS\uff1a\u5c31\u662f\u540d\u7a31\u4f3a\u670d\u5668 (NameServer) \u7684\u7e2e\u5beb\uff0c\u5f8c\u9762\u8a18\u9304\u7684\u8cc7\u6599\u662f DNS \u4f3a\u670d\u5668\u7684\u610f\u601d\uff1b<\/li>\n<li>A\uff1a\u5c31\u662f\u4f4d\u5740 (Address) \u7684\u7e2e\u5beb\uff0c\u5f8c\u9762\u8a18\u9304\u7684\u662f IP \u7684\u5c0d\u61c9 (\u6700\u91cd\u8981)\uff1b<\/li>\n<\/ul>\n<ul>\n<li>\n<hr \/>\n<p>\u53cd\u89e3\u7684\u8a2d\u5b9a\u6b0a\u4ee5\u53ca DNS \u53cd\u89e3 zone \u8a18\u9304\u7684\u6a19\u8a8c<\/li>\n<\/ul>\n<p>\u6b63\u89e3\u7684\u9818\u57df\u540d\u7a31\u53ea\u8981\u7b26\u5408 INTERNIC \u53ca\u4f60\u7684 ISP \u898f\u7bc4\u5373\u53ef\uff0c\u53d6\u5f97\u6388\u6b0a\u8f03\u70ba\u7c21\u55ae (\u81ea\u5df1\u53d6\u540d\u5b57)\u3002\u90a3\u53cd\u89e3\u5462\uff1f\u53cd\u89e3\u4e3b\u8981\u662f\u7531 IP \u627e\u5230\u4e3b\u6a5f\u540d\u7a31\uff0c\u56e0\u6b64\u91cd\u9ede\u662f IP \u7684\u6240\u6709\u4eba\u662f\u8ab0\u5566\uff01\u56e0\u70ba IP \u90fd\u662f INTERNIC \u767c\u653e\u7d66\u5404\u5bb6 ISP \u7684\uff0c\u800c\u4e14\u6211\u5011\u4e5f\u77e5\u9053\uff0cIP \u53ef\u4e0d\u80fd\u4e82\u8a2d\u5b9a (\u8def\u7531\u554f\u984c)\uff01\u6240\u4ee5\u56c9\uff0c\u80fd\u5920\u8a2d\u5b9a\u53cd\u89e3\u7684\u5c31\u53ea\u6709 IP \u7684\u64c1\u6709\u4eba\uff0c\u4ea6\u5373\u4f60\u7684 ISP \u624d\u6709\u6b0a\u529b\u8a2d\u5b9a\u53cd\u89e3\u7684\u3002\u90a3\u4f60\u5411 ISP \u53d6\u5f97\u7684 IP \u80fd\u4e0d\u80fd\u81ea\u5df1\u8a2d\u5b9a\u53cd\u89e3\u5462\uff1f\u7b54\u6848\u662f\u4e0d\u884c\uff01\u9664\u975e\u4f60\u53d6\u5f97\u7684\u662f\u6574\u500b class C \u4ee5\u4e0a\u7b49\u7d1a\u7684 IP \u7db2\u6bb5\uff0c\u90a3\u4f60\u7684 ISP \u624d\u6709\u53ef\u80fd\u7d66\u4f60 IP \u53cd\u89e3\u6388\u6b0a\u3002\u5426\u5247\uff0c\u82e5\u6709\u53cd\u89e3\u7684\u9700\u6c42\uff0c\u5c31\u5f97\u8981\u5411\u4f60\u7684\u76f4\u5c6c\u4e0a\u5c64 ISP \u7533\u8acb\u624d\u884c\uff01<\/p>\n<p>\u90a3\u9ebc\u53cd\u89e3\u7684 zone \u4e3b\u8981\u8a18\u9304\u7684\u8cc7\u8a0a\u6709\u54ea\u4e9b\u5462\uff1f\u9664\u4e86\u4f3a\u670d\u5668\u5fc5\u5099\u7684 NS \u4ee5\u53ca SOA \u4e4b\u5916\uff0c\u6700\u91cd\u8981\u7684\u5c31\u662f\uff1a<\/p>\n<ul>\n<li>PTR\uff1a\u5c31\u662f\u6307\u5411 (PoinTeR) \u7684\u7e2e\u5beb\uff0c\u5f8c\u9762\u8a18\u9304\u7684\u8cc7\u6599\u5c31\u662f\u53cd\u89e3\u5230\u4e3b\u6a5f\u540d\u7a31\u56c9\uff01<\/li>\n<\/ul>\n<ul>\n<li>\n<hr \/>\n<p>\u6bcf\u90e8 DNS \u90fd\u9700\u8981\u7684\u6b63\u89e3 zone\uff1a hint<\/li>\n<\/ul>\n<p>\u73fe\u5728\u4f60\u77e5\u9053\u4e00\u500b\u6b63\u89e3\u6216\u4e00\u500b\u53cd\u89e3\u5c31\u53ef\u4ee5\u7a31\u70ba\u4e00\u500b zone \u4e86\uff01\u90a3\u9ebc\u6709\u6c92\u6709\u90a3\u500b zone \u662f\u7279\u5225\u91cd\u8981\u7684\u5462\uff1f\u6709\u7684\uff0c\u90a3\u5c31\u662f . \u554a\uff01 \u5f9e<a href=\"http:\/\/linux.vbird.org\/linux_server\/0350dns.php#fig19.1-4\">\u5716 19.1-4<\/a> \u88e1\u9762\u6211\u5011\u5c31\u77e5\u9053\uff0c\u7576 DNS \u4f3a\u670d\u5668\u5728\u81ea\u5df1\u7684\u8cc7\u6599\u5eab\u627e\u4e0d\u5230\u6240\u9700\u7684\u8cc7\u8a0a\u6642\uff0c \u4e00\u5b9a\u6703\u53bb\u627e . \uff0c\u90a3 . \u5728\u54ea\u88e1\u554a\uff1f\u6240\u4ee5\u5c31\u5f97\u8981\u6709\u8a18\u9304 . \u5728\u54ea\u88e1\u7684\u8a18\u9304 zone \u624d\u884c\u554a\uff01\u9019\u500b\u8a18\u9304 . \u7684 zone \u7684\u985e\u578b\uff0c\u5c31\u88ab\u6211\u5011\u7a31\u70ba hint \u985e\u578b\uff01\u9019\u5e7e\u4e4e\u662f\u6bcf\u500b DNS \u4f3a\u670d\u5668\u90fd\u5f97\u8981\u77e5\u9053\u7684 zone \u5594\uff01<\/p>\n<p>\u6240\u4ee5\u8aaa\uff0c\u4e00\u90e8\u7c21\u55ae\u7684\u6b63\u89e3 DNS \u4f3a\u670d\u5668\uff0c\u57fa\u672c\u4e0a\u5c31\u8981\u6709\u5169\u500b zone \u624d\u884c\uff0c\u4e00\u500b\u662f hint \uff0c\u4e00\u500b\u662f\u95dc\u65bc\u81ea\u5df1\u9818\u57df\u7684\u6b63\u89e3 zone\u3002\u8209\u9ce5\u54e5\u8a3b\u518a\u7684 vbird.org \u70ba\u4f8b\uff0c\u5728\u9ce5\u54e5\u7684 DNS \u4f3a\u670d\u5668\u5167\uff0c\u81f3\u5c11\u5c31\u8981\u6709\u9019\u5169\u500b zone\uff1a<\/p>\n<ul>\n<li>hint (root)\uff1a\u8a18\u9304 . \u7684 zone\uff1b<\/li>\n<li>vbird.org\uff1a\u8a18\u9304 .vbird.org \u9019\u500b\u6b63\u89e3\u7684 zone\u3002<\/li>\n<\/ul>\n<p>\u4f60\u6703\u767c\u73fe\u6211\u6c92\u6709 vbird.org \u9019\u500b domain \u6240\u5c6c IP \u7684\u53cd\u89e3 zone \uff0c\u70ba\u4ec0\u9ebc\u5462\uff1f\u8acb\u53c3\u8003\u4e0a\u9762\u7684\u8a73\u7d30\u8aaa\u660e\u5427\uff01 \u7c21\u55ae\u7684\u8aaa\uff0c\u5c31\u662f\u56e0\u70ba\u53cd\u89e3\u9700\u8981\u8981\u6c42 IP \u5354\u5b9a\u7684\u4e0a\u5c64\u4f86\u8a2d\u5b9a\u624d\u884c\uff01<\/p>\n<ul>\n<li>\n<hr \/>\n<p>\u6b63\u53cd\u89e3\u662f\u5426\u4e00\u5b9a\u8981\u6210\u5c0d\uff1f<\/li>\n<\/ul>\n<p>\u597d\u4e86\uff0c\u6b63\u53cd\u89e3\u9700\u4e0d\u9700\u8981\u6210\u5957\u7522\u751f\uff0c\u5728\u9019\u88e1\u4e0d\u7528\u591a\u8aaa\u660e\u4e86\u5427\uff1f^_^\uff01\u8acb\u6ce8\u610f\u5594\uff0c\u5728\u5f88\u591a\u7684\u60c5\u6cc1\u4e0b\uff0c \u5c24\u5176\u662f\u76ee\u524d\u597d\u591a\u83ab\u540d\u5176\u5999\u7684\u9818\u57df\u540d\u7a31\u7522\u751f\u51fa\u4f86\uff0c\u6240\u4ee5\uff0c\u5e38\u5e38\u6703\u53ea\u6709\u6b63\u89e3\u7684\u8a2d\u5b9a\u9700\u6c42\u800c\u5df2\u3002\u4e0d\u904e\u4e5f\u4e0d\u9700\u8981\u592a\u904e\u64d4\u5fc3\u5566\uff0c \u56e0\u70ba\u901a\u5e38\u5728\u53cd\u67e5\u7684\u60c5\u6cc1\u4e2d\uff0c\u5982\u679c\u4f60\u662f\u4f7f\u7528\u76ee\u524d\u53f0\u7063\u5730\u5340\u6700\u6d41\u884c\u7684 ADSL \u4e0a\u7db2\u7684\u8a71\uff0c\u90a3\u9ebc ISP \u65e9\u5c31\u5df2\u7d93\u5e6b\u4f60\u8a2d\u5b9a\u597d\u53cd\u89e3\u4e86\uff01\u4f8b\u5982\uff1a211.74.253.91 \u9019\u500b seednet \u7684\u6d6e\u52d5\u5f0f IP \u53cd\u67e5\u7684\u7d50\u679c\u6703\u5f97\u5230 211-74-253-91.adsl.dynamic.seed.net.tw. \u9019\u6a23\u7684\u4e3b\u6a5f\u540d\u7a31\uff01\u6240\u4ee5\u5728\u4e00\u822c\u6211\u5011\u81ea\u884c\u7533\u8acb\u9818\u57df\u540d\u7a31\u7684\u6642\u5019\uff0c\u4f60\u53ea\u8981\u64d4\u5fc3\u6b63\u89e3\u7684\u8a2d\u5b9a\u5373\u53ef\uff01 \u4e0d\u7136\u7684\u8a71\uff0c\u53cd\u6b63\u53cd\u89e3\u7684\u6388\u6b0a\u6839\u672c\u4e5f\u4e0d\u6703\u958b\u653e\u7d66\u4f60\uff0c\u4f60\u81ea\u5df1\u8a2d\u5b9a\u5f97\u5f88\u9ad8\u8208\u4e5f\u6c92\u6709\u7528\u5440\uff01 ^_^<\/p>\n<p>\u4e8b\u5be6\u4e0a\uff0c\u9700\u8981\u6b63\u53cd\u89e3\u6210\u5c0d\u9700\u6c42\u7684\u5927\u6982\u50c5\u6709 mail server \u624d\u9700\u8981\u5427\uff01\u7531\u65bc\u76ee\u524d\u7db2\u8def\u983b\u5bec\u8001\u662f\u88ab\u5783\u573e\u3001\u5ee3\u544a\u90f5\u4ef6\u4f54\u5149\uff0c \u6240\u4ee5 Internet \u7684\u793e\u6703\u5c0d\u65bc\u5408\u6cd5\u7684 mail server \u898f\u5b9a\u4e5f\u5c31\u8d8a\u4f86\u8d8a\u56b4\u683c\u3002\u5982\u679c\u4f60\u60f3\u8981\u67b6\u8a2d mail server \u6642\uff0c \u6700\u597d\u5177\u6709\u56fa\u5b9a IP \uff0c\u9019\u6a23\u624d\u80fd\u5411\u4f60\u7684 ISP \u8981\u6c42\u8a2d\u5b9a\u53cd\u89e3\u5594\uff01\u4ee5 hinet \u70ba\u4f8b\u7684\u53cd\u89e3\u7533\u8acb\uff1a<\/p>\n<ul>\n<li><a href=\"http:\/\/hidomain.hinet.net\/top1.html\">http:\/\/hidomain.hinet.net\/top1.html<\/a><\/li>\n<\/ul>\n<hr \/>\n<p><a name=\"master_slave\"><\/a><img loading=\"lazy\" decoding=\"async\" src=\"http:\/\/linux.vbird.org\/images\/penguin-s.gif\" alt=\"\u5c0f\u6a19\u984c\u7684\u5716\u793a\" width=\"16\" height=\"23\" align=\"middle\" \/>19.1.6 DNS \u8cc7\u6599\u5eab\u7684\u985e\u578b\uff1ahint, master\/slave \u67b6\u69cb<\/p>\n<p>\u4f60\u77e5\u9053\u7684\uff0cDNS \u8d8a\u4f86\u8d8a\u91cd\u8981\uff0c\u6240\u4ee5\uff0c\u5982\u679c\u4f60\u6709\u8a3b\u518a\u904e\u9818\u57df\u540d\u7a31\u7684\u8a71\uff0c\u5c31\u53ef\u4ee5\u767c\u73fe\uff0c\u73fe\u5728 ISP \u90fd\u8981\u4f60\u586b\u5beb\u5169\u90e8 DNS \u4f3a\u670d\u5668\u7684 IP \u54e9\uff01\u56e0\u70ba\u8981\u4f5c\u70ba\u5099\u63f4\u4e4b\u7528\u561b\uff01\u7e3d\u4e0d\u80fd\u4e00\u90e8 DNS \u639b\u9ede\u5f8c\uff0c\u5bb3\u4f60\u7684\u6240\u6709\u4e3b\u6a5f\u540d\u7a31\u90fd\u4e0d\u80fd\u88ab\u627e\u5230\uff5e\u90a3\u771f\u9ebb\u7169\uff5e<\/p>\n<p>\u4f46\u662f\uff0c\u5982\u679c\u6709\u5169\u90e8\u4ee5\u4e0a\u7684 DNS \u4f3a\u670d\u5668\uff0c\u90a3\u9ebc\u7db2\u8def\u4e0a\u6703\u641c\u5c0b\u5230\u54ea\u4e00\u90e8\u5462\uff1f\u7b54\u6848\u662f\uff0c\u4e0d\u77e5\u9053\uff01\u56e0\u70ba\u662f\u96a8\u6a5f\u7684\uff5e \u6240\u4ee5\uff0c\u5982\u679c\u4f60\u7684\u9818\u57df\u6709\u5169\u90e8 DNS \u4f3a\u670d\u5668\u7684\u8a71\uff0c\u90a3\u9019\u5169\u90e8 DNS \u4f3a\u670d\u5668\u7684\u5167\u5bb9\u5c31\u5f97\u5b8c\u5168\u4e00\u6a21\u4e00\u6a23\uff0c\u5426\u5247\uff0c\u7531\u65bc\u662f\u96a8\u6a5f\u627e\u5230 DNS \u4f86\u8a62\u554f\uff0c\u56e0\u6b64\u82e5\u8cc7\u6599\u4e0d\u540c\u6b65\uff0c\u5f88\u53ef\u80fd\u9020\u6210\u5176\u4ed6\u7528\u6236\u7121\u6cd5\u53d6\u5f97\u6b63\u78ba\u8cc7\u6599\u7684\u554f\u984c\u3002<\/p>\n<p>\u70ba\u4e86\u89e3\u6c7a\u9019\u500b\u554f\u984c\uff0c\u56e0\u6b64\u5728 . (root) \u9019\u500b hint \u985e\u578b\u7684\u8cc7\u6599\u5eab\u6a94\u6848\u5916\uff0c\u9084\u6709\u5169\u7a2e\u57fa\u672c\u985e\u578b\uff0c\u5206\u5225\u662f Master (\u4e3b\u4eba\u3001\u4e3b\u8981) \u8cc7\u6599\u5eab\u8207 Slave (\u5974\u96b8\u3001\u6b21\u8981) \u8cc7\u6599\u5eab\u985e\u578b\u3002\u9019\u500b Master\/Slave \u5c31\u662f\u8981\u7528\u4f86\u89e3\u6c7a\u4e0d\u540c DNS \u4f3a\u670d\u5668\u4e0a\u9762\u7684\u8cc7\u6599\u540c\u6b65\u554f\u984c\u7684\u3002 \u6240\u4ee5\u5e95\u4e0b\u8b93\u6211\u5011\u4f86\u804a\u804a Master\/Slave \u5427\uff01<\/p>\n<ul>\n<li>\n<hr \/>\n<p>Master\uff1a<\/li>\n<\/ul>\n<p>\u9019\u7a2e\u985e\u578b\u7684 DNS \u8cc7\u6599\u5eab\u4e2d\uff0c\u88e1\u9762\u6240\u6709\u7684\u4e3b\u6a5f\u540d\u7a31\u76f8\u95dc\u8cc7\u8a0a\u7b49\uff0c\u901a\u901a\u8981\u7ba1\u7406\u54e1\u81ea\u5df1\u624b\u52d5\u53bb\u4fee\u6539\u8207\u8a2d\u5b9a\uff0c \u8a2d\u5b9a\u5b8c\u7562\u9084\u5f97\u8981\u91cd\u65b0\u555f\u52d5 DNS \u670d\u52d9\u53bb\u8b80\u53d6\u6b63\u78ba\u7684\u8cc7\u6599\u5eab\u5167\u5bb9\uff0c\u624d\u7b97\u5b8c\u6210\u8cc7\u6599\u5eab\u66f4\u65b0\u3002\u4e00\u822c\u4f86\u8aaa\uff0c\u6211\u5011\u8aaa\u7684 DNS \u67b6\u8a2d\uff0c\u5c31\u662f\u6307\u8a2d\u5b9a\u9019\u7a2e\u8cc7\u6599\u5eab\u7684\u985e\u578b\u3002\u540c\u6642\uff0c\u9019\u7a2e\u985e\u578b\u7684\u8cc7\u6599\u5eab\uff0c\u9084\u80fd\u5920\u63d0\u4f9b\u8cc7\u6599\u5eab\u5167\u5bb9\u7d66 slave \u7684 DNS \u4f3a\u670d\u5668\u5594\uff01<\/p>\n<ul>\n<li>\n<hr \/>\n<p>Slave\uff1a<\/li>\n<\/ul>\n<p>\u5982\u524d\u6240\u8ff0\uff0c\u901a\u5e38\u4f60\u4e0d\u6703\u53ea\u6709\u4e00\u90e8 DNS \u4f3a\u670d\u5668\uff0c\u4f8b\u5982\u6211\u5011\u524d\u9762\u7684\u4f8b\u984c\u67e5\u8a62\u5230\u7684 .ksu.edu.tw \u5c31\u6709 3 \u90e8 DNS \u4f3a\u670d\u5668\u4f86\u7ba1\u7406\u81ea\u5df1\u7684\u9818\u57df\u3002\u90a3\u5982\u679c\u6bcf\u90e8 DNS \u6211\u5011\u90fd\u662f\u4f7f\u7528 Master \u8cc7\u6599\u5eab\u985e\u578b\uff0c\u7576\u6709\u7528\u6236\u5411\u6211\u8981\u6c42\u8981\u4fee\u6539\u6216\u8005\u65b0\u589e\u3001\u522a\u9664\u8cc7\u6599\u6642\uff0c \u4e00\u7b46\u8cc7\u6599\u6211\u5c31\u5f97\u8981\u505a\u4e09\u6b21\uff0c\u9084\u53ef\u80fd\u6703\u4e0d\u5c0f\u5fc3\u624b\u6ed1\u5c0e\u81f4\u67d0\u5e7e\u90e8\u51fa\u73fe\u932f\u8aa4\uff0c\u6b64\u6642\u53ef\u5c31\u50b7\u8166\u7b4b\u4e86\uff5e\u56e0\u6b64\uff0c\u9019\u6642\u4f7f\u7528 Slave \u985e\u578b\u7684\u8cc7\u6599\u5eab\u53d6\u5f97\u65b9\u5f0f\u5c31\u5f88\u6709\u7528\uff01<\/p>\n<p>Slave \u5fc5\u9808\u8981\u8207 Master \u76f8\u4e92\u642d\u914d\uff0c\u82e5\u4ee5 .ksu.edu.tw \u7684\u4f8b\u5b50\u4f86\u8aaa\uff0c\u5982\u679c\u6211\u5fc5\u9808\u8981\u6709\u4e09\u90e8\u4e3b\u6a5f\u63d0\u4f9b DNS \u670d\u52d9\uff0c\u4e14\u4e09\u90e8\u5167\u5bb9\u76f8\u540c\uff0c \u90a3\u9ebc\u6211\u53ea\u8981\u6307\u5b9a\u4e00\u90e8\u4f3a\u670d\u5668\u70ba Master \uff0c\u5176\u4ed6\u5169\u90e8\u70ba\u8a72 Master \u7684 Slave \u4f3a\u670d\u5668\uff0c\u90a3\u9ebc\u7576\u8981\u4fee\u6539\u4e00\u7b46\u540d\u7a31\u5c0d\u61c9\u6642\uff0c\u6211\u53ea\u8981\u624b\u52d5\u66f4\u6539 Master \u90a3\u90e8\u6a5f\u5668\u7684\u8a2d\u5b9a\u6a94\uff0c\u7136\u5f8c\uff0c\u91cd\u65b0\u555f\u52d5 BIND \u9019\u500b\u670d\u52d9\u5f8c\uff0c\u5475\u5475\uff01\u5176\u4ed6\u5169\u90e8 Slave \u5c31\u6703\u81ea\u52d5\u7684\u88ab\u901a\u77e5\u66f4\u65b0\u4e86\uff01\u9019\u6a23\u4e00\u4f86\uff0c\u5728\u7dad\u8b77\u4e0a\u9762\u53ef\u5c31\u8f15\u9b06\u5beb\u610f\u7684\u591a\u4e86\uff5e<\/p>\n<p><b>Tips:<\/b><br \/>\n\u5982\u679c\u4f60\u8a2d\u5b9a Master\/Slave \u67b6\u69cb\u6642\uff0c\u4f60\u7684 Master \u4e3b\u6a5f\u5fc5\u9808\u8981\u9650\u5236 \u53ea\u6709\u67d0\u4e9b\u7279\u5b9a IP \u7684\u4e3b\u6a5f\u80fd\u5920\u53d6\u5f97\u4f60 Master \u4e3b\u6a5f\u7684\u6b63\u53cd\u89e3\u8cc7\u6599\u5eab\u6b0a\u9650\u624d\u597d\uff01 \u6240\u4ee5\uff0c\u4e0a\u9762\u624d\u6703\u63d0\u5230 Master\/Slave \u5fc5\u9808\u8981\u4e92\u76f8\u642d\u914d\u624d\u884c\uff01<br \/>\n<img decoding=\"async\" title=\"\u9ce5\u54e5\u7684\u5716\u793a\" src=\"http:\/\/linux.vbird.org\/images\/vbird_face.gif\" alt=\"\u9ce5\u54e5\u7684\u5716\u793a\" \/><\/p>\n<ul>\n<li>\n<hr \/>\n<p>Master \/ Slave \u7684\u67e5\u8a62\u512a\u5148\u6b0a\uff1f<\/li>\n<\/ul>\n<p>\u53e6\u5916\uff0c\u65e2\u7136\u6211\u7684\u6240\u6709 DNS \u4f3a\u670d\u5668\u662f\u9700\u8981\u540c\u6642\u63d0\u4f9b internet \u4e0a\u9762\u7684\u9818\u57df\u540d\u7a31\u89e3\u6790\u7684\u670d\u52d9\uff0c \u6240\u4ee5\u4e0d\u8ad6\u662f Master \u9084\u662f Slave \u4f3a\u670d\u5668\uff0c\u4ed6\u90fd\u5fc5\u9808\u8981\u53ef\u4ee5\u540c\u6642\u63d0\u4f9b DNS \u7684\u670d\u52d9\u624d\u597d\uff01 \u56e0\u70ba\u5728 DNS \u7cfb\u7d71\u7576\u4e2d\uff0c\u9818\u57df\u540d\u7a31\u7684\u67e5\u8a62\u662f\u300e\u5148\u6436\u5148\u8d0f\u300f\u7684\u72c0\u614b\uff0c\u6211\u5011\u4e0d\u6703\u66c9\u5f97\u54ea\u4e00\u90e8\u4e3b\u6a5f\u7684\u8cc7\u6599\u6703\u5148\u88ab\u67e5\u8a62\u5230\u7684\uff01 \u70ba\u4e86\u63d0\u4f9b\u826f\u597d\u7684 DNS \u670d\u52d9\uff0c\u6bcf\u90e8 DNS \u4e3b\u6a5f\u90fd\u8981\u80fd\u6b63\u5e38\u5de5\u4f5c\u624d\u597d\u554a\uff01\u800c\u4e14\uff0c\u6bcf\u4e00\u90e8 DNS \u4f3a\u670d\u5668\u7684\u8cc7\u6599\u5eab\u5167\u5bb9\u9700\u8981\u5b8c\u5168\u4e00\u81f4\uff0c\u5426\u5247\u5c31\u6703\u9020\u6210\u7528\u6236\u7aef\u627e\u5230\u7684 IP \u662f\u932f\u8aa4\u7684\uff01<\/p>\n<ul>\n<li>\n<hr \/>\n<p>Master \/ Slave \u8cc7\u6599\u7684\u540c\u6b65\u5316\u904e\u7a0b<\/li>\n<\/ul>\n<p>\u90a3\u9ebc Master\/Slave \u7684\u8cc7\u6599\u66f4\u65b0\u5230\u5e95\u662f\u5982\u4f55\u52d5\u4f5c\u7684\u5462\uff1f\u8acb\u6ce8\u610f\uff0cSlave \u662f\u9700\u8981\u66f4\u65b0\u4f86\u81ea Master \u7684\u8cc7\u6599\u554a\uff01\u6240\u4ee5\u7576\u7136 Slave \u5728\u8a2d\u5b9a\u4e4b\u521d\u5c31\u9700\u8981\u5b58\u5728 Master \u624d\u884c\u5594\uff01\u57fa\u672c\u4e0a\uff0c\u4e0d\u8ad6 Master \u9084\u662f Slave \u7684\u8cc7\u6599\u5eab\uff0c\u90fd\u6703\u6709\u4e00\u500b\u4ee3\u8868\u8a72\u8cc7\u6599\u5eab\u65b0\u820a\u7684\u300e\u5e8f\u865f\u300f\uff0c\u9019\u500b\u5e8f\u865f\u6578\u503c\u7684\u5927\u5c0f\uff0c\u662f\u6703\u5f71\u97ff\u662f\u5426\u8981\u66f4\u65b0\u7684\u52d5\u4f5c\u5537\uff01 \u81f3\u65bc\u66f4\u65b0\u7684\u65b9\u5f0f\u4e3b\u8981\u6709\u5169\u7a2e\uff1a<\/p>\n<ul>\n<li>Master \u4e3b\u52d5\u544a\u77e5\uff1a\u4f8b\u5982\u5728 Master \u5728\u4fee\u6539\u4e86\u8cc7\u6599\u5eab\u5167\u5bb9\uff0c\u4e26\u4e14\u52a0\u5927\u8cc7\u6599\u5eab\u5e8f\u865f\u5f8c\uff0c \u91cd\u65b0\u555f\u52d5 DNS \u670d\u52d9\uff0c\u90a3 master \u6703\u4e3b\u52d5\u544a\u77e5 slave \u4f86\u66f4\u65b0\u8cc7\u6599\u5eab\uff0c\u6b64\u6642\u5c31\u80fd\u5920\u9054\u6210\u8cc7\u6599\u540c\u6b65\uff1b<\/li>\n<li>\u7531 Slave \u4e3b\u52d5\u63d0\u51fa\u8981\u6c42\uff1a\u57fa\u672c\u4e0a\uff0c Slave \u6703\u5b9a\u6642\u7684\u5411 Master \u5bdf\u770b\u8cc7\u6599\u5eab\u7684\u5e8f\u865f\uff0c \u7576\u767c\u73fe Master \u8cc7\u6599\u5eab\u7684\u5e8f\u865f\u6bd4 Slave \u81ea\u5df1\u7684\u5e8f\u865f\u9084\u8981\u5927 (\u4ee3\u8868\u6bd4\u8f03\u65b0)\uff0c\u90a3\u9ebc Slave \u5c31\u6703\u958b\u59cb\u66f4\u65b0\u3002\u5982\u679c\u5e8f\u865f\u4e0d\u8b8a\uff0c \u90a3\u9ebc\u5c31\u5224\u65b7\u8cc7\u6599\u5eab\u6c92\u6709\u66f4\u52d5\uff0c\u56e0\u6b64\u4e0d\u6703\u9032\u884c\u540c\u6b65\u66f4\u65b0\u3002<\/li>\n<\/ul>\n<p>\u7531\u4e0a\u9762\u7684\u8aaa\u660e\u4f86\u770b\uff0c\u5176\u5be6\u8a2d\u8a08\u8cc7\u6599\u5eab\u7684\u5e8f\u865f\u6700\u91cd\u8981\u7684\u76ee\u7684\u5c31\u662f\u8b93 master\/slave \u8cc7\u6599\u7684\u540c\u6b65\u5316\u3002\u90a3\u6211\u5011\u4e5f\u77e5\u9053 slave \u6703\u5411 master \u63d0\u51fa\u8cc7\u6599\u5eab\u66f4\u65b0\u7684\u9700\u6c42\uff0c\u554f\u984c\u662f\uff0c\u591a\u4e45\u63d0\u51fa\u4e00\u6b21\u66f4\u65b0\uff0c\u5982\u679c\u8a72\u6b21\u66f4\u65b0\u6642\u7531\u65bc\u7db2\u8def\u554f\u984c\uff0c\u6240\u4ee5\u6c92\u6709\u67e5\u8a62\u5230 master \u7684\u5e8f\u865f (\u4ea6\u5373\u66f4\u65b0\u5931\u6557)\uff0c\u90a3\u9694\u591a\u4e45\u6703\u91cd\u65b0\u66f4\u65b0\u4e00\u6b21\uff1f\u9019\u500b\u8207 SOA \u7684\u6a19\u8a8c\u6709\u95dc\uff0c\u5f8c\u7e8c\u8ac7\u5230\u6b63\u3001\u53cd\u89e3\u8cc7\u6599\u5eab\u5f8c\uff0c \u518d\u4f86\u8a73\u7d30\u8aaa\u660e\u5427\uff01<\/p>\n<p>\u5982\u679c\u4f60\u60f3\u8981\u67b6\u8a2d Master\/Slave \u7684 DNS \u67b6\u69cb\u6642\uff0c\u5169\u90e8\u4e3b\u6a5f (Master\/Slave) \u90fd\u9700\u8981\u4f60\u80fd\u5920\u638c\u63a7\u624d\u884c\uff01\u7db2\u8def\u4e0a\u5f88\u591a\u7684\u6587\u4ef6\u5728\u9019\u500b\u5730\u65b9\u90fd\u6709\u9ede\u300e\u9583\u5931\u300f\uff0c\u8acb\u7279\u5225\u7684\u7559\u610f\u554a\uff01\u56e0\u70ba\u9ce5\u54e5\u7684 DNS \u4f3a\u670d\u5668\u5e38\u5e38\u6703\u807d\u5230\u67d0\u4e9b\u5176\u4ed6 DNS \u7684\u8cc7\u6599\u5eab\u540c\u6b65\u5316\u9700\u6c42\uff0c\u771f\u89ba\u5f97\u7169\u5436\uff01<\/p>\n<hr \/>\n<p><a name=\"DNS_resolver\"><\/a><img loading=\"lazy\" decoding=\"async\" src=\"http:\/\/linux.vbird.org\/images\/penguin-m.gif\" alt=\"\u5927\u6a19\u984c\u7684\u5716\u793a\" width=\"25\" height=\"34\" align=\"middle\" \/>19.2 Client \u7aef\u7684\u8a2d\u5b9a<\/p>\n<p>\u7531\u65bc DNS \u662f\u6bcf\u90e8\u60f3\u8981\u9023\u4e0a\u7db2\u969b\u7db2\u8def\u7684\u4e3b\u6a5f\u90fd\u5f97\u8981\u8a2d\u5b9a\u7684\uff0c\u56e0\u6b64\u6211\u5011\u5c31\u5f9e\u7c21\u55ae\u7684\u7528\u6236\u7aef\u8a2d\u5b9a\u8ac7\u8d77\u3002\u56e0\u70ba\u672a\u4f86\u67b6\u8a2d\u597d DNS server \u5f8c\uff0c\u6211\u5011\u90fd\u6703\u76f4\u63a5\u9032\u884c\u6e2c\u8a66\uff0c\u6240\u4ee5\uff0c\u9019\u500b\u90e8\u5206\u5f97\u5148\u8655\u7406\u8655\u7406\u6bd4\u8f03\u59a5\u7576\u554a\uff01<\/p>\n<hr \/>\n<p><a name=\"DNS_resolver_file\"><\/a><img loading=\"lazy\" decoding=\"async\" src=\"http:\/\/linux.vbird.org\/images\/penguin-s.gif\" alt=\"\u5c0f\u6a19\u984c\u7684\u5716\u793a\" width=\"16\" height=\"23\" align=\"middle\" \/>19.2.1 \u76f8\u95dc\u8a2d\u5b9a\u6a94<\/p>\n<p>\u5f9e <a href=\"http:\/\/linux.vbird.org\/linux_server\/0350dns.php#Whatisdns\">19.1.1<\/a> \u7684\u8aaa\u660e\u7576\u4e2d\u6211\u5011\u66c9\u5f97\u4e3b\u6a5f\u540d\u7a31\u5c0d\u61c9\u5230 IP \u6709\u5169\u7a2e\u65b9\u6cd5\uff0c\u65e9\u671f\u7684\u65b9\u6cd5\u662f\u76f4\u63a5\u5beb\u5728\u6a94\u6848\u88e1\u9762\u4f86\u5c0d\u61c9\uff0c \u5f8c\u4f86\u6bd4\u8f03\u65b0\u7684\u65b9\u6cd5\u5247\u662f\u900f\u904e DNS \u67b6\u69cb\uff01\u90a3\u9ebc\u9019\u5169\u7a2e\u65b9\u6cd5\u5206\u5225\u4f7f\u7528\u4ec0\u9ebc\u8a2d\u5b9a\u6a94\uff1f\u53ef\u4e0d\u53ef\u4ee5\u540c\u6642\u5b58\u5728\uff1f \u82e5\u540c\u6642\u5b58\u5728\u6642\uff0c\u90a3\u500b\u65b9\u6cd5\u512a\u5148\uff1f\u55ef\uff01\u6211\u5011\u5148\u4f86\u8ac7\u4e00\u8ac7\u5e7e\u500b\u8a2d\u5b9a\u6a94\u5427\uff01<\/p>\n<ul>\n<li>\/etc\/hosts \uff1a\u9019\u500b\u662f\u6700\u65e9\u7684 hostname \u5c0d\u61c9 IP \u7684\u6a94\u6848\uff1b<\/li>\n<li>\/etc\/resolv.conf \uff1a\u9019\u500b\u91cd\u8981\uff01\u5c31\u662f ISP \u7684 DNS \u4f3a\u670d\u5668 IP \u8a18\u9304\u8655\uff1b<\/li>\n<li>\/etc\/nsswitch.conf\uff1a\u9019\u500b\u6a94\u6848\u5247\u662f\u5728\u300e\u6c7a\u5b9a\u300f\u5148\u8981\u4f7f\u7528 \/etc\/hosts \u9084\u662f \/etc\/resolv.conf \u7684\u8a2d\u5b9a\uff01<\/li>\n<\/ul>\n<p>\u4e00\u822c\u800c\u8a00\uff0c Linux \u7684\u9810\u8a2d\u4e3b\u6a5f\u540d\u7a31\u8207 IP \u7684\u5c0d\u61c9\u641c\u5c0b\u90fd\u4ee5 \/etc\/hosts \u70ba\u512a\u5148\uff0c\u70ba\u4ec0\u9ebc\u5462\uff1f\u4f60\u53ef\u4ee5\u67e5\u770b\u4e00\u4e0b \/etc\/nsswitch.conf \uff0c\u4e26\u627e\u5230 hosts \u7684\u9805\u76ee\uff1a<\/p>\n<pre>[root@www ~]# vim \/etc\/nsswitch.conf\r\nhosts:      files dns\r\n<\/pre>\n<p>\u4e0a\u9762\u90a3\u500b files \u5c31\u662f\u4f7f\u7528 \/etc\/hosts\uff0c\u800c\u6700\u5f8c\u7684 dns \u5247\u662f\u4f7f\u7528 \/etc\/resolv.conf \u7684 DNS \u4f3a\u670d\u5668\u4f86\u9032\u884c\u641c\u5c0b\u5566\uff01\u56e0\u6b64\uff0c\u4f60\u53ef\u4ee5\u5148\u4ee5 \/etc\/hosts \u4f86\u8a2d\u5b9a IP \u5c0d\u61c9\uff01\u7576\u7136\u5566\uff0c\u4f60\u4e5f\u53ef\u4ee5\u5c07\u4ed6\u8abf\u63db\u904e\u4f86\uff0c\u4e0d\u904e\uff0c\u7e3d\u662f \/etc\/hosts \u6bd4\u8f03\u7c21\u55ae\uff0c\u6240\u4ee5\u5c07\u4ed6\u64fa\u5728\u524d\u9762\u6bd4\u8f03\u597d\u5566\uff01<\/p>\n<p>\u597d\u5566\uff0c\u65e2\u7136\u6211\u5011\u662f\u8981\u9032\u884c DNS \u6e2c\u8a66\u7684\uff0c\u90a3\u9ebc\u5c31\u5f97\u8981\u77ad\u89e3\u4e00\u4e0b \/etc\/resolv.conf \u7684\u5167\u5bb9\uff0c\u5047\u8a2d\u4f60\u5728\u53f0\u7063\uff0c\u4f7f\u7528\u7684\u662f hinet \u7684 168.95.1.1 \u9019\u90e8 DNS \u4f3a\u670d\u5668\uff0c\u6240\u4ee5\u4f60\u61c9\u8a72\u9019\u6a23\u5beb\uff1a<\/p>\n<pre>[root@www ~]# vim \/etc\/resolv.conf\r\nnameserver 168.95.1.1\r\nnameserver 139.175.10.20\r\n<\/pre>\n<p>DNS \u4f3a\u670d\u5668\u7684 IP \u53ef\u4ee5\u8a2d\u5b9a\u591a\u500b\uff0c\u70ba\u4ec0\u9ebc\u8981\u8a2d\u5b9a\u591a\u500b\u5462\uff1f\u56e0\u70ba\u7576\u7b2c\u4e00\u90e8 (\u7167\u8a2d\u5b9a\u7684\u9806\u5e8f) DNS \u639b\u9ede\u6642\uff0c\u6211\u5011\u7528\u6236\u7aef\u53ef\u4ee5\u4f7f\u7528\u7b2c\u4e8c\u90e8 (\u4e0a\u8ff0\u662f 139.175.10.20) \u4f86\u9032\u884c\u67e5\u8a62\uff0c\u9019\u591a\u5c11\u6709\u9ede\u50cf DNS \u5099\u63f4\u529f\u80fd\u3002 \u901a\u5e38\u5efa\u8b70\u81f3\u5c11\u586b\u5beb\u5169\u90e8 DNS \u4f3a\u670d\u5668\u7684 IP\uff0c\u4e0d\u904e\u5728\u7db2\u8def\u6b63\u5e38\u4f7f\u7528\u7684\u60c5\u6cc1\u4e0b\uff0c\u6c38\u9060\u53ea\u6709\u7b2c\u4e00\u90e8 DNS \u4f3a\u670d\u5668\u6703\u88ab\u4f7f\u7528\u4f86\u67e5\u8a62\uff0c\u5176\u4ed6\u7684\u8a2d\u5b9a\u503c\u53ea\u662f\u5728\u7b2c\u4e00\u90e8\u51fa\u554f\u984c\u6642\u624d\u6703\u88ab\u4f7f\u7528\u3002<\/p>\n<p><b>Tips:<\/b><br \/>\n\u76e1\u91cf\u4e0d\u8981\u8a2d\u5b9a\u8d85\u904e 3 \u90e8\u4ee5\u4e0a\u7684 DNS IP \u5728 \/etc\/resolv.conf \u4e2d\uff0c\u56e0\u70ba\u5982\u679c\u662f\u4f60\u7684\u5340\u7db2\u51fa\u554f\u984c\uff0c\u5c0e\u81f4\u7121\u6cd5\u9023\u7dda\u5230 DNS \u4f3a\u670d\u5668\uff0c\u90a3\u9ebc\u4f60\u7684\u4e3b\u6a5f\u9084\u662f\u6703\u5411\u6bcf\u90e8 DNS \u4f3a\u670d\u5668\u767c\u51fa\u9023\u7dda\u8981\u6c42\uff0c\u6bcf\u6b21\u9023\u7dda\u90fd\u6709 timeout \u6642\u9593\u7684\u7b49\u5f85\uff0c\u6703\u5c0e\u81f4\u6d6a\u8cbb\u975e\u5e38\u591a\u7684\u6642\u9593\u5594\uff01<br \/>\n<img decoding=\"async\" title=\"\u9ce5\u54e5\u7684\u5716\u793a\" src=\"http:\/\/linux.vbird.org\/images\/vbird_face.gif\" alt=\"\u9ce5\u54e5\u7684\u5716\u793a\" \/><\/p>\n<p>\u4f8b\u984c\uff1a<\/p>\n<p>\u6211\u7684\u4e3b\u6a5f\u4f7f\u7528 DHCP \u53d6\u5f97 IP \uff0c\u5f88\u5947\u602a\u7684\uff0c\u7576\u6211\u4fee\u6539\u904e \/etc\/resolv.conf \u4e4b\u5f8c\uff0c\u9694\u4e0d\u591a\u4e45\u9019\u500b\u6a94\u6848\u53c8\u6703\u6062\u5fa9\u6210\u539f\u672c\u7684\u6a23\u5b50\uff0c\u9019\u662f\u4ec0\u9ebc\u539f\u56e0\uff1f \u8a72\u5982\u4f55\u8655\u7406\uff1f<\/p>\n<p>\u7b54\uff1a<\/p>\n<p>\u56e0\u70ba\u4f7f\u7528 DHCP \u6642\uff0c\u7cfb\u7d71\u6703\u4e3b\u52d5\u7684\u4f7f\u7528 DHCP \u4f3a\u670d\u5668\u50b3\u4f86\u7684\u8cc7\u6599\u9032\u884c\u7cfb\u7d71\u8a2d\u5b9a\u6a94\u7684\u4fee\u8a02\u3002\u56e0\u6b64\uff0c\u4f60\u5fc5\u9808\u544a\u77e5\u7cfb\u7d71\uff0c\u4e0d\u8981\u4f7f\u7528 DHCP \u50b3\u4f86\u7684\u4f3a\u670d\u5668\u8a2d\u5b9a\u503c\u3002 \u6b64\u6642\uff0c\u4f60\u5f97\u8981\u5728 \/etc\/sysconfig\/network-scripts\/ifcfg-eth0 \u7b49\u76f8\u95dc\u6a94\u6848\u5167\uff0c\u589e\u52a0\u4e00\u884c\uff1a\u300ePEERDNS=no\u300f\uff0c\u7136\u5f8c\u91cd\u65b0\u555f\u52d5\u7db2\u8def\u5373\u53ef\u3002<br \/>\n\u6b64\u5916\uff0c\u5982\u679c\u4f60\u6709\u555f\u52d5 CentOS 6.x \u7684 NetworkManager \u670d\u52d9\uff0c\u6709\u6642\u5019\u4e5f\u53ef\u80fd\u6703\u7522\u751f\u4e00\u4e9b\u5947\u7279\u7684\u73fe\u8c61\u54e9\uff01\u6240\u4ee5\u9ce5\u54e5\u662f\u5efa\u8b70\u95dc\u6389\u5b83\u7684\uff01^_^<\/p>\n<hr \/>\n<p><a name=\"DNS_resolver_cmd\"><\/a><img loading=\"lazy\" decoding=\"async\" src=\"http:\/\/linux.vbird.org\/images\/penguin-s.gif\" alt=\"\u5c0f\u6a19\u984c\u7684\u5716\u793a\" width=\"16\" height=\"23\" align=\"middle\" \/>19.2.2 DNS \u7684\u6b63\u3001\u53cd\u89e3\u67e5\u8a62\u6307\u4ee4\uff1a host, nslookup, dig<\/p>\n<p>\u6e2c\u8a66 DNS \u7684\u7a0b\u5f0f\u6709\u5f88\u591a\uff0c\u6211\u5011\u5148\u4f86\u4f7f\u7528\u6700\u7c21\u55ae\u7684 host \u5427\uff01\u7136\u5f8c\u9084\u6709 nslookup \u53ca dig \u54e9\uff01<\/p>\n<ul>\n<li><a name=\"host\"><\/a><br \/>\n<hr \/>\n<p>host<\/li>\n<\/ul>\n<pre>[root@www ~]# host [-a] FQDN [server]\r\n[root@www ~]# host -l domain [server]\r\n\u9078\u9805\u8207\u53c3\u6578\uff1a\r\n-a \uff1a\u4ee3\u8868\u5217\u51fa\u8a72\u4e3b\u6a5f\u6240\u6709\u7684\u76f8\u95dc\u8cc7\u8a0a\uff0c\u5305\u62ec IP\u3001TTL \u8207\u9664\u932f\u8a0a\u606f\u7b49\u7b49\r\n-l \uff1a\u82e5\u5f8c\u9762\u63a5\u7684\u90a3\u500b domain \u8a2d\u5b9a\u5141\u8a31 allow-transfer \u6642\uff0c\u5247\u5217\u51fa\u8a72 domain \r\n     \u6240\u7ba1\u7406\u7684\u6240\u6709\u4e3b\u6a5f\u540d\u7a31\u5c0d\u61c9\u8cc7\u6599\uff01\r\nserver\uff1a\u9019\u500b\u53c3\u6578\u53ef\u6709\u53ef\u7121\uff0c\u7576\u60f3\u8981\u5229\u7528\u975e \/etc\/resolv.conf \u5167\u7684 DNS \u4e3b\u6a5f\r\n        \u4f86\u67e5\u8a62\u4e3b\u6a5f\u540d\u7a31\u8207 IP \u7684\u5c0d\u61c9\u6642\uff0c\u5c31\u53ef\u4ee5\u5229\u7528\u9019\u500b\u53c3\u6578\u4e86\uff01\r\n\r\n# 1. \u4f7f\u7528\u9810\u8a2d\u503c\u4f86\u67e5\u51fa linux.vbird.org \u7684 IP \r\n[root@www ~]# host linux.vbird.org\r\nlinux.vbird.org has address 140.116.44.180             &lt;==\u9019\u662f IP\r\nlinux.vbird.org mail is handled by 10 linux.vbird.org. &lt;==\u9019\u662f MX (\u5f8c\u7e8c\u7ae0\u7bc0\u8aaa\u660e)\r\n\r\n# 2. \u67e5\u51fa linux.vbird.org \u7684\u6240\u6709\u91cd\u8981\u53c3\u6578\r\n[root@www ~]# host -a linux.vbird.org\r\nTrying \"linux.vbird.org\"\r\n;; -&gt;&gt;HEADER&lt;&lt;- opcode: QUERY, status: NOERROR, id: 56213\r\n;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 0\r\n\r\n;; QUESTION SECTION:\r\n<u>;linux.vbird.org.               IN      ANY<\/u>\r\n\r\n;; ANSWER SECTION:\r\n<u>linux.vbird.org.        145     IN      A       140.116.44.180<\/u>\r\n\r\n;; AUTHORITY SECTION:\r\nvbird.org.              145     IN      NS      dns.vbird.org.\r\nvbird.org.              145     IN      NS      dns2.vbird.org.\r\n\r\n<u>Received 86 bytes from 168.95.1.1#53 in 15 ms<\/u>  &lt;==\u679c\u7136\u662f\u5f9e 168.95.1.1 \u53d6\u5f97\u7684\u8cc7\u6599\r\n# \u770b\u6a23\u5b50\uff0c\u4e0d\u5c31\u662f dig \u7684\u8f38\u51fa\u7d50\u679c\uff1f\u6240\u4ee5\uff0c\u6211\u5011\u624d\u6703\u8aaa\uff0c\u4f7f\u7528 dig \u624d\u662f\u738b\u9053\uff01\r\n\r\n# 3. \u5f37\u5236\u4ee5 139.175.10.20 \u9019\u90e8 DNS \u4e3b\u6a5f\u4f86\u67e5\u8a62\r\n[root@www ~]# host linux.vbird.org 139.175.10.20\r\nUsing domain server:\r\nName: 139.175.10.20\r\nAddress: 139.175.10.20#53\r\nAliases:\r\n\r\nlinux.vbird.org has address 140.116.44.180\r\nlinux.vbird.org mail is handled by 10 linux.vbird.org.\r\n<\/pre>\n<p>\u770b\u5230\u6700\u5f8c\u4e00\u500b\u7bc4\u4f8b\uff0c\u6709\u6ce8\u610f\u5230\u4e0a\u9762\u8f38\u51fa\u7684\u7279\u6b8a\u5b57\u9ad4\u90e8\u5206\u55ce\uff1f\u5f88\u591a\u670b\u53cb\u5728\u6e2c\u8a66\u81ea\u5df1\u7684 DNS \u6642\uff0c\u5e38\u5e38\u6703\u300e\u6307\u5b9a\u5230\u932f\u8aa4\u7684 DNS \u67e5\u8a62\u4e3b\u6a5f\u300f\u4e86\uff5e\u56e0\u70ba\u4ed6\u5011\u7684 \/etc\/reslov.conf \u5fd8\u8a18\u6539\uff0c\u6240\u4ee5\u8001\u662f\u627e\u4e0d\u5230\u81ea\u5df1\u8a2d\u5b9a\u7684\u8cc7\u6599\u5eab IP \u8cc7\u6599\u3002\u6240\u4ee5\u4f60\u8981\u4ed4\u7d30\u770b\u554a\uff01<\/p>\n<pre># 4. \u627e\u51fa vbird.org \u9818\u57df\u7684\u6240\u6709\u4e3b\u6a5f\u5c0d\u61c9\r\n[root@www ~]# host -l vbird.org\r\n; Transfer failed.\r\nHost vbird.org not found: 9(NOTAUTH)\r\n; Transfer failed. &lt;==\u7adf\u7136\u5931\u6557\u4e86\uff01\u8acb\u770b\u5e95\u4e0b\u7684\u8aaa\u660e\uff01\r\n<\/pre>\n<p>\u600e\u9ebc\u6703\u7121\u6cd5\u56de\u61c9\u5462\uff1f\u9019\u6a23\u7684\u56de\u61c9\u662f\u56e0\u70ba\u7ba1\u7406 vbird.org \u9818\u57df\u7684 DNS \u4e26\u4e0d\u8a31\u6211\u5011\u7684\u9818\u57df\u67e5\u8a62\uff0c\u7562\u7adf\u6211\u5011\u4e0d\u662f vbird.org \u7684\u7cfb\u7d71\u7ba1\u7406\u54e1\uff0c\u7576\u7136\u6c92\u6709\u6b0a\u9650\u53ef\u4ee5\u8b80\u53d6\u6574\u500b vbird.org \u7684\u9818\u57df\u8a2d\u5b9a\u56c9\uff01\u9019\u500b\u300e host -l \u300f\u662f\u7528\u5728\u81ea\u5df1\u7684 DNS \u4f3a\u670d\u5668\u4e0a\uff0c\u672c\u7ae0\u7a0d\u5f8c\u8ac7\u5230\u4f3a\u670d\u5668\u8a2d\u5b9a\u5f8c\uff0c\u4f7f\u7528\u9019\u500b\u9078\u9805\u5c31\u80fd\u5920\u8b80\u53d6\u76f8\u95dc\u7684\u8cc7\u6599\u4e86\u3002<\/p>\n<ul>\n<li><a name=\"nslookup\"><\/a><br \/>\n<hr \/>\n<p>nslookup<\/li>\n<\/ul>\n<pre>[root@www ~]# nslookup [FQDN] [server]\r\n[root@www ~]# nslookup\r\n\u9078\u9805\u8207\u53c3\u6578\uff1a\r\n1. \u53ef\u4ee5\u76f4\u63a5\u5728 nslookup \u52a0\u4e0a\u5f85\u67e5\u8a62\u7684\u4e3b\u6a5f\u540d\u7a31\u6216\u8005\u662f IP \uff0c[server] \u53ef\u6709\u53ef\u7121\uff1b\r\n2. \u5982\u679c\u5728 nslookup \u5f8c\u9762\u6c92\u6709\u52a0\u4e0a\u4efb\u4f55\u4e3b\u6a5f\u540d\u7a31\u6216 IP \uff0c\u90a3\u5c07\u9032\u5165 nslookup \u7684\u67e5\u8a62\u529f\u80fd\r\n   \u5728 nslookup \u7684\u67e5\u8a62\u529f\u80fd\u7576\u4e2d\uff0c\u53ef\u4ee5\u8f38\u5165\u5176\u4ed6\u53c3\u6578\u4f86\u9032\u884c\u7279\u6b8a\u67e5\u8a62\uff0c\u4f8b\u5982\uff1a\r\n   set type=any \uff1a\u5217\u51fa\u6240\u6709\u7684\u8cc7\u8a0a\u300e\u6b63\u89e3\u65b9\u9762\u8a2d\u5b9a\u6a94\u300f\r\n   set type=mx  \uff1a\u5217\u51fa\u8207 mx \u76f8\u95dc\u7684\u8cc7\u8a0a\uff01\r\n\r\n# 1. \u76f4\u63a5\u641c\u5c0b mail.ksu.edu.tw \u7684 IP \u8cc7\u8a0a \r\n[root@www ~]# nslookup mail.ksu.edu.tw\r\nServer:         168.95.1.1\r\nAddress:        168.95.1.1#53  &lt;==\u9084\u662f\u8acb\u7279\u5225\u6ce8\u610f DNS \u7684 IP \u662f\u5426\u6b63\u78ba\uff01\r\n\r\nNon-authoritative answer:\r\nName:   mail.ksu.edu.tw\r\nAddress: 120.114.100.20        &lt;==\u56de\u5831 IP \u7d66\u4f60\u56c9\uff01\r\n<\/pre>\n<p>nslookup \u53ef\u55ae\u7d14\u7684\u5c07 hostname \u8207 IP \u5c0d\u61c9\u5217\u51fa\u800c\u5df2\uff0c\u4e0d\u904e\uff0c\u9084\u662f\u6703\u5c07\u67e5\u8a62\u7684 DNS \u4e3b\u6a5f\u7684 IP \u5217\u51fa\u4f86\u7684\uff01 \u5982\u679c\u60f3\u8981\u77e5\u9053\u66f4\u591a\u8a73\u7d30\u7684\u53c3\u6578\uff0c\u90a3\u53ef\u4ee5\u76f4\u63a5\u9032\u5165 nslookup \u9019\u500b\u8edf\u9ad4\u7684\u64cd\u4f5c\u756b\u9762\u4e2d\uff0c\u5982\u4e0b\u7bc4\u4f8b\uff1a<\/p>\n<pre>[root@www ~]# nslookup  &lt;==\u9032\u5165 nslookup \u67e5\u8a62\u756b\u9762\r\n&gt; 120.114.100.20         &lt;==\u57f7\u884c\u53cd\u89e3\u7684\u67e5\u8a62\r\n&gt; www.ksu.edu.tw         &lt;==\u57f7\u884c\u6b63\u89e3\u7684\u67e5\u8a62\r\n# \u4e0a\u9762\u9019\u5169\u500b\u50c5\u5217\u51fa\u6b63\u53cd\u89e3\u7684\u8cc7\u8a0a\uff0c\u6c92\u6709\u5565\u4e86\u4e0d\u8d77\u7684\u5730\u65b9\u5566\uff01\r\n&gt; set type=any           &lt;==\u8b8a\u66f4\u67e5\u8a62\uff0c\u4e0d\u662f\u50c5\u6709 A\uff0c\u5168\u90e8\u8cc7\u8a0a\u90fd\u5217\u51fa\u4f86\r\n&gt; www.ksu.edu.tw\r\nServer:         168.95.1.1\r\nAddress:        168.95.1.1#53\r\n\r\nNon-authoritative answer:\r\nName:   www.ksu.edu.tw\r\nAddress: 120.114.100.101  &lt;==\u9019\u662f\u7b54\u6848\r\n\r\nAuthoritative answers can be found from: &lt;==\u9019\u662f\u76f8\u95dc\u6388\u6b0a DNS \u8aaa\u660e\r\nksu.edu.tw      nameserver = dns2.ksu.edu.tw.\r\nksu.edu.tw      nameserver = dns1.ksu.edu.tw.\r\ndns1.ksu.edu.tw internet address = 120.114.50.1\r\ndns2.ksu.edu.tw internet address = 120.114.150.1\r\n&gt; exit &lt;==\u96e2\u958b\u5427\uff01\u76ae\u5361\u4e18\r\n<\/pre>\n<p>\u5728\u4e0a\u9762\u7684\u6848\u4f8b\u7576\u4e2d\uff0c\u8acb\u6ce8\u610f\uff0c\u5982\u679c\u4f60\u5728 nslookup \u7684\u67e5\u8a62\u756b\u9762\u7576\u4e2d\uff0c\u8f38\u5165 set type=any \u6216\u5176\u4ed6\u53c3\u6578\uff0c \u90a3\u9ebc\u5c31\u7121\u6cd5\u518d\u9032\u884c\u53cd\u89e3\u7684\u67e5\u8a62\u4e86\uff01\u9019\u662f\u56e0\u70ba any \u6216\u8005\u662f mx \u7b49\u7b49\u7684\u6a19\u8a8c\u90fd\u662f\u8a18\u9304\u5728\u6b63\u89e3 zone \u7576\u4e2d\u7684\u7de3\u6545\uff01<\/p>\n<ul>\n<li><a name=\"dig\"><\/a><br \/>\n<hr \/>\n<p>dig (\u672a\u4f86\u7684\u4e3b\u6d41\uff0c\u8acb\u611b\u7528\u4ed6\uff01)<\/li>\n<\/ul>\n<pre>[root@www ~]# dig [options] FQDN [@server]\r\n\u9078\u9805\u8207\u53c3\u6578\uff1a\r\n@server \uff1a\u5982\u679c\u4e0d\u4ee5 \/etc\/resolv.conf \u7684\u8a2d\u5b9a\u4f86\u4f5c\u70ba DNS \u67e5\u8a62\uff0c\u53ef\u5728\u6b64\u586b\u5165\u5176\u4ed6\u7684 IP\r\noptions\uff1a\u76f8\u95dc\u7684\u53c3\u6578\u5f88\u591a\uff0c\u4e3b\u8981\u6709 +trace, -t type \u4ee5\u53ca -x \u4e09\u8005\u6700\u5e38\u7528\r\n  +trace \uff1a\u5c31\u662f\u5f9e . \u958b\u59cb\u8ffd\u8e64\uff0c\u5728 19.1.2 \u88e1\u9762\u8ac7\u904e\u4e86\uff01\u56de\u982d\u77a7\u77a7\u53bb\uff01\r\n  -t type\uff1a\u67e5\u8a62\u7684\u8cc7\u6599\u4e3b\u8981\u6709 mx, ns, soa \u7b49\u985e\u578b\uff0c\u76f8\u95dc\u985e\u578b 19.4 \u4f86\u4ecb\u7d39\r\n  -x     \uff1a\u67e5\u8a62\u53cd\u89e3\u8cc7\u8a0a\uff0c\u975e\u5e38\u91cd\u8981\u7684\u9805\u76ee\uff01\r\n\r\n# 1. \u4f7f\u7528\u9810\u8a2d\u503c\u67e5\u8a62 linux.vbird.org \u5427\uff01\r\n[root@www ~]# dig linux.vbird.org\r\n; &lt;&lt;&gt;&gt; DiG 9.7.0-P2-RedHat-9.7.0-5.P2.el6_0.1 &lt;&lt;&gt;&gt; linux.vbird.org\r\n;; global options: +cmd\r\n;; Got answer:\r\n;; -&gt;&gt;HEADER&lt;&lt;- opcode: QUERY, status: NOERROR, id: 37415\r\n;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 0\r\n\r\n;; <u>QUESTION SECTION:<\/u>     &lt;==\u63d0\u51fa\u7684\u554f\u984c\u7684\u90e8\u5206\r\n;linux.vbird.org.               IN      A\r\n\r\n;; <u>ANSWER SECTION:<\/u>       &lt;==\u4e3b\u8981\u7684\u56de\u7b54\u968e\u6bb5\r\nlinux.vbird.org.        600     IN      A       140.116.44.180\r\n\r\n;; <u>AUTHORITY SECTION:<\/u>    &lt;==\u5176\u4ed6\u8207\u6b64\u6b21\u56de\u7b54\u6709\u95dc\u7684\u90e8\u5206\r\nvbird.org.              600     IN      NS      dns.vbird.org.\r\nvbird.org.              600     IN      NS      dns2.vbird.org.\r\n\r\n;; Query time: 9 msec\r\n;; <u>SERVER: 168.95.1.1#53(168.95.1.1)<\/u>\r\n;; WHEN: Thu Aug  4 14:12:26 2011\r\n;; MSG SIZE  rcvd: 86\r\n<\/pre>\n<p>\u5728\u9019\u500b\u7bc4\u4f8b\u7576\u4e2d\uff0c\u6211\u5011\u53ef\u4ee5\u770b\u5230\u6574\u500b\u986f\u793a\u51fa\u7684\u8a0a\u606f\u5305\u62ec\u6709\u5e7e\u500b\u90e8\u5206\uff1a<\/p>\n<ul>\n<li>QUESTION(\u554f\u984c)\uff1a\u986f\u793a\u6240\u8981\u67e5\u8a62\u7684\u5167\u5bb9\uff0c\u56e0\u70ba\u6211\u5011\u662f\u67e5\u8a62 linux.vbird.org \u7684 IP\uff0c\u6240\u4ee5\u9019\u88e1\u986f\u793a A (Address)\uff1b<\/li>\n<li>ANSWER(\u56de\u7b54)\uff1a\u4f9d\u64da\u525b\u525b\u7684 QUESTION \u53bb\u67e5\u8a62\u6240\u5f97\u5230\u7684\u7d50\u679c\uff0c\u7b54\u6848\u5c31\u662f\u56de\u7b54 IP \u554a\uff01<\/li>\n<li>AUTHORITY(\u9a57\u8b49)\uff1a\u7531\u9019\u88e1\u6211\u5011\u53ef\u4ee5\u77e5\u9053 linux.vbird.org \u662f\u7531\u54ea\u90e8 DNS \u4f3a\u670d\u5668\u6240\u63d0\u4f9b\u7684\u7b54\u6848\uff01 \u7d50\u679c\u662f dns.vbird.org \u53ca dns2.vbird.org \u9019\u5169\u90e8\u4e3b\u6a5f\u7ba1\u7406\u7684\u3002\u53e6\u5916\uff0c\u90a3\u500b 600 \u662f\u5565\u549a\u549a\uff1f<a href=\"http:\/\/linux.vbird.org\/linux_server\/0350dns.php#fig19.1-4\">\u5716 19.1-4<\/a> \u63d0\u5230\u904e\u7684\u6d41\u7a0b\uff0c\u5c31\u662f\u5141\u8a31\u67e5\u8a62\u8005\u80fd\u5920\u4fdd\u7559\u9019\u7b46\u8a18\u9304\u591a\u4e45\u7684\u610f\u601d (\u5feb\u53d6)\uff0c\u5728 linux.vbird.org \u7684\u8a2d\u5b9a\u4e2d\uff0c\u9810\u8a2d\u53ef\u4ee5\u4fdd\u7559 600 \u79d2\u3002<\/li>\n<\/ul>\n<pre># 2. \u67e5\u8a62 linux.vbird.org \u7684 SOA \u76f8\u95dc\u8cc7\u8a0a\u5427\uff01\r\n[root@www ~]# dig -t soa linux.vbird.org\r\n; &lt;&lt;&gt;&gt; DiG 9.7.0-P2-RedHat-9.7.0-5.P2.el6_0.1 &lt;&lt;&gt;&gt; -t soa linux.vbird.org\r\n;; global options: +cmd\r\n;; Got answer:\r\n;; -&gt;&gt;HEADER&lt;&lt;- opcode: QUERY, status: NOERROR, id: 57511\r\n;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0\r\n\r\n;; QUESTION SECTION:\r\n;<u>linux.vbird.org.               IN      SOA<\/u>\r\n\r\n;; AUTHORITY SECTION:\r\nvbird.org.              600     IN      SOA     <u>dns.vbird.org. root.dns.vbird.org.\r\n 2007091402 28800 7200 720000 86400<\/u>\r\n\r\n;; Query time: 17 msec\r\n;; SERVER: 168.95.1.1#53(168.95.1.1)\r\n;; WHEN: Thu Aug  4 14:15:57 2011\r\n;; MSG SIZE  rcvd: 78\r\n<\/pre>\n<p>\u7531\u65bc dig \u7684\u8f38\u51fa\u8cc7\u8a0a\u5be6\u5728\u662f\u592a\u8c50\u5bcc\u4e86\uff0c\u53c8\u5206\u6210\u591a\u500b\u90e8\u5206\u53bb\u9032\u884c\u56de\u5831\uff0c\u56e0\u6b64\u5f88\u9069\u5408\u4f5c\u70ba DNS \u8ffd\u8e64\u56de\u5831\u7684\u4e00\u500b\u6307\u4ee4\u5462\uff01 \u4f60\u53ef\u4ee5\u900f\u904e\u9019\u500b\u6307\u4ee4\u4f86\u77ad\u89e3\u4e00\u4e0b\u4f60\u6240\u8a2d\u5b9a\u7684 DNS \u8cc7\u6599\u5eab\u662f\u5426\u6b63\u78ba\uff0c\u4e26\u9032\u884c\u9664\u932f\u5594\uff01 ^_^\uff01\u6b64\u5916\uff0c\u4f60\u4e5f\u53ef\u4ee5\u900f\u904e\u300e -t type \u300f \u7684\u529f\u80fd\u53bb\u67e5\u8a62\u5176\u4ed6\u4f3a\u670d\u5668\u7684\u8a2d\u5b9a\u503c\uff0c\u53ef\u4ee5\u65b9\u4fbf\u4f60\u9032\u884c\u8a2d\u5b9a DNS \u4f3a\u670d\u5668\u6642\u7684\u53c3\u8003\u5594\uff01\u6b63\u89e3\u67e5\u8a62\u5b8c\u7562\uff0c\u63a5\u4e0b\u4f86\u73a9\u4e00\u73a9\u53cd\u89e3\u5427\uff01<\/p>\n<pre># 3. \u67e5\u8a62 120.114.100.20 \u7684\u53cd\u89e3\u8cc7\u8a0a\u7d50\u679c\r\n[root@www ~]# dig -x 120.114.100.20\r\n; &lt;&lt;&gt;&gt; DiG 9.7.0-P2-RedHat-9.7.0-5.P2.el6_0.1 &lt;&lt;&gt;&gt; -x 120.114.100.20\r\n;; global options: +cmd\r\n;; Got answer:\r\n;; -&gt;&gt;HEADER&lt;&lt;- opcode: QUERY, status: NOERROR, id: 60337\r\n;; flags: qr rd ra; QUERY: 1, ANSWER: 3, AUTHORITY: 3, ADDITIONAL: 3\r\n\r\n;; QUESTION SECTION:\r\n;20.100.114.120.in-addr.arpa.   IN      PTR\r\n\r\n;; ANSWER SECTION:\r\n20.100.114.120.in-addr.arpa. 3600 IN    PTR     mail-out-r2.ksu.edu.tw.\r\n20.100.114.120.in-addr.arpa. 3600 IN    PTR     mail-smtp-proxy.ksu.edu.tw.\r\n20.100.114.120.in-addr.arpa. 3600 IN    PTR     mail.ksu.edu.tw.\r\n\r\n;; AUTHORITY SECTION:\r\n100.114.120.in-addr.arpa. 3600  IN      NS      dns1.ksu.edu.tw.\r\n100.114.120.in-addr.arpa. 3600  IN      NS      dns3.twaren.net.\r\n100.114.120.in-addr.arpa. 3600  IN      NS      dns2.ksu.edu.tw.\r\n\r\n;; ADDITIONAL SECTION:\r\ndns1.ksu.edu.tw.        3036    IN      A       120.114.50.1\r\ndns2.ksu.edu.tw.        2658    IN      A       120.114.150.1\r\ndns3.twaren.net.        449     IN      A       211.79.61.47\r\n\r\n;; Query time: 29 msec\r\n;; SERVER: 168.95.1.1#53(168.95.1.1)\r\n;; WHEN: Thu Aug  4 14:17:58 2011\r\n;; MSG SIZE  rcvd: 245\r\n<\/pre>\n<p>\u53cd\u89e3\u76f8\u7576\u6709\u8da3\uff01\u5f9e\u4e0a\u9762\u7684\u8f38\u51fa\u7d50\u679c\u4f86\u770b\uff0c\u53cd\u89e3\u7684\u67e5\u8a62\u76ee\u6a19\u7adf\u7136\u5f9e 120.114.100.20 \u8b8a\u6210\u4e86 20.100.114.120.in-addr.arpa. \u9019\u500b\u6a21\u6a23\uff5e\u9019\u662f\u5565\u9b3c\u6771\u897f\uff1f\u4e0d\u8981\u6015\uff0c\u9019\u7b49\u6211\u5011\u8b1b\u5230\u53cd\u89e3\u6642\u518d\u8ddf\u5927\u5bb6\u9032\u4e00\u6b65\u89e3\u91cb\u3002 \u4f60\u73fe\u5728\u8981\u77e5\u9053\u7684\u662f\uff0c\u53cd\u89e3\u7684\u67e5\u8a62\u9818\u57df\u540d\uff0c\u8ddf\u6b63\u89e3\u4e0d\u592a\u4e00\u6a23\u5373\u53ef\uff0c\u5c24\u5176\u662f\u90a3\u500b\u602a\u7570\u7684 in-addr.arpa. \u7d50\u5c3e\u7684\u8cc7\u6599\uff0c\u53ef\u4ee5\u5148\u8a18\u4e0b\u4f86\u3002<\/p>\n<hr \/>\n<p><a name=\"DNS_resolver_whois\"><\/a><img loading=\"lazy\" decoding=\"async\" src=\"http:\/\/linux.vbird.org\/images\/penguin-s.gif\" alt=\"\u5c0f\u6a19\u984c\u7684\u5716\u793a\" width=\"16\" height=\"23\" align=\"middle\" \/>19.2.3 \u67e5\u8a62\u9818\u57df\u7ba1\u7406\u8005\u76f8\u95dc\u8cc7\u8a0a\uff1a whois<\/p>\n<p>\u4e0a\u500b\u5c0f\u7bc0\u8ac7\u5230\u7684\u662f\u4e3b\u6a5f\u540d\u7a31\u7684\u6b63\u53cd\u89e3\u67e5\u8a62\u6307\u4ee4\uff0c\u90a3\u5982\u679c\u4f60\u60f3\u8981\u77e5\u9053\u6574\u500b\u9818\u57df\u7684\u8a2d\u5b9a\uff0c\u4f7f\u7528\u7684\u662f\u300e host -l \u9818\u57df\u540d \u300f\u53bb\u67e5\uff0c \u90a3\u5982\u679c\u4f60\u60f3\u8981\u77e5\u9053\u7684\u662f\u300e\u9019\u500b\u9818\u57df\u662f\u8ab0\u7ba1\u7684\u300f\u7684\u8cc7\u8a0a\u5462\uff1f\u90a3\u5c31\u5f97\u8981\u4f7f\u7528 whois \u9019\u500b\u6307\u4ee4\u624d\u884c\u5594\uff01\u5728 CentOS 6.x \u7576\u4e2d\uff0c whois \u662f\u7531 jwhois \u9019\u500b\u8edf\u9ad4\u63d0\u4f9b\u7684\uff0c\u56e0\u6b64\uff0c\u5982\u679c\u627e\u4e0d\u5230 whois \u6642\uff0c\u8acb\u7528 yum \u53bb\u5b89\u88dd\u9019\u500b\u8edf\u9ad4\u5427\uff01<\/p>\n<ul>\n<li>\n<hr \/>\n<p>whois<\/li>\n<\/ul>\n<pre>[root@www ~]# whois [domainname]  &lt;==\u6ce8\u610f\u554a\uff01\u662f domain \u800c\u4e0d\u662f hostname\r\n[root@www ~]# whois centos.org\r\n[Querying whois.publicinterestregistry.net]\r\n[whois.publicinterestregistry.net]\r\n# \u9019\u4e2d\u9593\u662f\u4e00\u5806 whois \u4f3a\u670d\u5668\u63d0\u4f9b\u7684\u8a0a\u606f\u544a\u77e5\uff01\u5e95\u4e0b\u662f\u5be6\u969b\u8a3b\u518a\u7684\u8cc7\u6599\r\nDomain ID:D103409469-LROR\r\nDomain Name:CENTOS.ORG\r\nCreated On:04-Dec-2003 12:28:30 UTC\r\nLast Updated On:05-Dec-2010 01:23:25 UTC\r\nExpiration Date:04-Dec-2011 12:28:30 UTC  &lt;==\u8a18\u8f09\u4e86\u5efa\u7acb\u8207\u8207\u5931\u6548\u7684\u65e5\u671f\r\nSponsoring Registrar:Key-Systems GmbH (R51-LROR)\r\nStatus:CLIENT TRANSFER PROHIBITED\r\nRegistrant ID:P-8686062\r\nRegistrant Name:CentOS Domain Administrator\r\nRegistrant Organization:The CentOS Project\r\nRegistrant Street1:Mechelsesteenweg 170\r\n# \u5e95\u4e0b\u5247\u662f\u4e00\u5806\u806f\u7d61\u65b9\u5f0f\uff0c\u9ce5\u54e5\u5c07\u5b83\u53d6\u6d88\u4e86\uff0c\u514d\u5f97\u591a\u4f54\u7bc7\u5e45\uff5e\r\n<\/pre>\n<p>whois \u9019\u500b\u6307\u4ee4\u53ef\u4ee5\u67e5\u8a62\u5230\u7576\u521d\u8a3b\u518a\u9019\u500b domain \u7684\u4f7f\u7528\u8005\u7684\u76f8\u95dc\u8cc7\u8a0a\u3002\u4e0d\u904e\uff0c\u7531\u65bc\u8fd1\u5e74\u4f86\u5f88\u591a\u7db2\u8def\u8cc7\u8a0a\u5b89\u5168\u7684\u554f\u984c\uff0c\u9019\u500b whois \u6240\u63d0\u4f9b\u7684\u8cc7\u8a0a\u771f\u7684\u662f\u592a\u8a73\u7d30\u4e86\uff0c\u70ba\u4e86\u4fdd\u8b77\u4f7f\u7528\u8005\u7684\u96b1\u79c1\u6b0a\uff0c\u6240\u4ee5\uff0c\u76ee\u524d\u9019\u500b whois \u6240\u67e5\u8a62\u5230\u7684\u8cc7\u8a0a\u5df2\u7d93\u4e0d\u898b\u5f97\u662f\u5b8c\u5168\u6b63\u78ba\u7684\u4e86\uff5e\u800c\u4e14\uff0c\u5728\u986f\u793a\u51fa whois \u7684\u8cc7\u8a0a\u4e4b\u524d\uff0c\u9084\u6703\u6709\u4e00\u6bb5\u5ba3\u544a\u4e8b\u9805\u7684\u544a\u77e5\u5462\uff5e ^_^y<\/p>\n<p>\u5982\u679c\u4f7f\u7528 whois \u4f86\u6aa2\u67e5\u9ce5\u54e5\u6240\u8a3b\u518a\u7684\u5408\u6cd5 domain \u6703\u662f\u5982\u4f55\u5462\uff1f\u770b\u770b\uff1a<\/p>\n<pre>[root@www ~]# whois vbird.idv.tw\r\n[Querying whois.twnic.net]\r\n[whois.twnic.net]           &lt;==\u9019\u500b whois \u4f3a\u670d\u5668\u67e5\u5230\u7684\u8cc7\u6599\r\nDomain Name: vbird.idv.tw   &lt;==\u9019\u500b domain \u7684\u8cc7\u8a0a\r\n\r\n   Contact:                 &lt;==\u806f\u7d61\u8005\u7684\u806f\u7d61\u65b9\u5f0f\r\n      Der-Min Tsai\r\n      vbird@pc510.ev.ncku.edu.tw\r\n\r\n   <u>Record expires on 2018-09-17 (YYYY-MM-DD)<\/u>\r\n   Record created on 2002-09-13 (YYYY-MM-DD)\r\n\r\nRegistration Service Provider: HINET\r\n<\/pre>\n<p>\u5475\u5475\uff01\u9019\u500b domain \u6703\u5728 2018\/09\/17 \u5931\u6548\u7684\u610f\u601d\u5566\uff01\u5831\u544a\u5b8c\u7562\uff01\u7121\u8ad6\u5982\u4f55\uff0c\u6211\u5011\u90fd\u53ef\u4ee5\u900f\u904e nslookup, host, dig \u7b49\u7b49\u7684\u6307\u4ee4\u4f86\u67e5\u8a62\u4e3b\u6a5f\u540d\u7a31\u8207 IP \u7684\u5c0d\u61c9\uff0c\u9019\u4e9b\u6307\u4ee4\u7684\u7528\u6cd5\u53ef\u4ee5\u8acb\u4f60\u4ee5 man command \u4f86\u67e5\u8a62\u66f4\u591a\u7684\u7528\u6cd5\u5594\uff01<\/p>\n<hr \/>\n<p><a name=\"server_settings\"><\/a><img loading=\"lazy\" decoding=\"async\" src=\"http:\/\/linux.vbird.org\/images\/penguin-m.gif\" alt=\"\u5927\u6a19\u984c\u7684\u5716\u793a\" width=\"25\" height=\"34\" align=\"middle\" \/>19.3 DNS \u4f3a\u670d\u5668\u7684\u8edf\u9ad4\u3001\u7a2e\u985e\u8207 cache only DNS \u4f3a\u670d\u5668\u8a2d\u5b9a<\/p>\n<p>\u8ac7\u5b8c\u4e86\u4e00\u4e9b\u57fa\u790e\u6982\u5ff5\u5f8c\uff0c\u63a5\u4e0b\u4f86\u8b93\u6211\u5011\u4f86\u804a\u4e00\u804a\uff0c\u90a3\u5982\u4f55\u8a2d\u5b9a\u597d DNS \u4f3a\u670d\u5668\u554a\uff1f\u9019\u7576\u7136\u5c31\u5f97\u7531\u8edf\u9ad4\u5b89\u88dd\u8ac7\u8d77\u5566\uff01 \u5728\u9019\u500b\u5c0f\u7bc0\uff0c\u6211\u5011\u5148\u4e0d\u8981\u8ac7 DNS \u8a18\u9304\u7684\u6b63\u53cd\u89e3\u549a\u549a\uff0c\u53ea\u8b1b\u5230 hint \u9019\u500b . (root) \u7684 zone\uff0c\u8ac7\u4e00\u8ac7\u6700\u7c21\u55ae\u7684\u50c5\u6709\u5feb\u53d6\u7684 DNS \u4f3a\u670d\u5668 (Caching only DNS server) \u5427\uff01<\/p>\n<hr \/>\n<p><a name=\"what_software\"><\/a><img loading=\"lazy\" decoding=\"async\" src=\"http:\/\/linux.vbird.org\/images\/penguin-s.gif\" alt=\"\u5c0f\u6a19\u984c\u7684\u5716\u793a\" width=\"16\" height=\"23\" align=\"middle\" \/>19.3.1 \u67b6\u8a2d DNS \u6240\u9700\u8981\u7684\u8edf\u9ad4<\/p>\n<p>\u7d42\u65bc\u5ee2\u8a71\u90fd\u8aaa\u5b8c\u4e86\uff01\u76f8\u4fe1\u4f60\u5927\u6982\u4e5f\u6709\u9ede\u7d2f\u7684\u5427\uff1f\u9ce5\u54e5\u662f\u883b\u7d2f\u7684\u5566\uff0c\u56e0\u70ba\u624b\u81c2\u3001\u80a9\u9838\u9178\u75db\u7684\u6bdb\u75c5\u9817\u56b4\u91cd&#8230;.\u54a6\uff01\u8b1b\u9019\u500b\u5e79\u561b\uff1f @_@ \u597d\u5566\uff0c\u6211\u5011\u7d42\u65bc\u8981\u4f86\u5b89\u88dd DNS \u6240\u9700\u8981\u7684\u8edf\u9ad4\u4e86\uff01\u9084\u8a18\u5f97\u524d\u9762\u63d0\u904e\u7684\uff0c\u6211\u5011\u8981\u4f7f\u7528\u7684 DNS \u8edf\u9ad4\u5c31\u662f\u4f7f\u7528\u67cf\u514b\u840a\u5927\u5b78\u767c\u5c55\u51fa\u4f86\u7684 BIND (Berkeley Internet Name Domain, BIND) \u9019\u500b\u5566\uff01\u90a3\u9ebc\u600e\u9ebc\u77e5\u9053\u4f60\u5b89\u88dd\u4e86\u6c92\uff1f\u4e0d\u5c31\u662f rpm \u8207 yum \u55ce\uff1f\u81ea\u5df1\u67e5\u67e5\u770b\u3002<\/p>\n<pre>[root@www ~]# rpm -qa | grep '^bind'\r\nbind-libs-9.7.0-5.P2.el6_0.1.x86_64   &lt;==\u7d66 bind \u8207\u76f8\u95dc\u6307\u4ee4\u4f7f\u7528\u7684\u51fd\u5f0f\u5eab\r\nbind-utils-9.7.0-5.P2.el6_0.1.x86_64  &lt;==\u9019\u500b\u662f\u7528\u6236\u7aef\u641c\u5c0b\u4e3b\u6a5f\u540d\u7a31\u7684\u76f8\u95dc\u6307\u4ee4\r\nbind-9.7.0-5.P2.el6_0.1.x86_64        &lt;==\u5c31\u662f bind \u4e3b\u7a0b\u5f0f\u6240\u9700\u8edf\u9ad4\r\nbind-chroot-9.7.0-5.P2.el6_0.1.x86_64 &lt;==\u5c07 bind \u4e3b\u7a0b\u5f0f\u95dc\u5728\u5bb6\u88e1\u9762\uff01\r\n<\/pre>\n<p>\u4e0a\u9762\u6bd4\u8f03\u91cd\u8981\u7684\u662f\u90a3\u500b\u300e bind-chroot \u300f\u5566\uff01\u6240\u8b02\u7684 chroot \u4ee3\u8868\u7684\u662f\u300e change to root(\u6839\u76ee\u9304) \u300f\u7684\u610f\u601d\uff0croot \u4ee3\u8868\u7684\u662f\u6839\u76ee\u9304\u3002\u65e9\u671f\u7684 bind \u9810\u8a2d\u5c07\u7a0b\u5e8f\u555f\u52d5\u5728 \/var\/named \u7576\u4e2d\uff0c\u4f46\u662f\u8a72\u7a0b\u5e8f\u53ef\u4ee5\u5728\u6839\u76ee\u9304\u4e0b\u7684\u5176\u4ed6\u76ee\u9304\u5230\u8655\u8f49\u79fb\uff0c\u56e0\u6b64\u82e5 bind \u7684\u7a0b\u5f0f\u6709\u554f\u984c\u6642\uff0c\u5247\u8a72\u7a0b\u5e8f\u6703\u9020\u6210\u6574\u500b\u7cfb\u7d71\u7684\u5371\u5bb3\u3002\u70ba\u907f\u514d\u9019\u500b\u554f\u984c\uff0c \u6240\u4ee5\u6211\u5011\u5c07\u67d0\u500b\u76ee\u9304\u6307\u5b9a\u70ba bind \u7a0b\u5f0f\u7684\u6839\u76ee\u9304\uff0c\u7531\u65bc\u5df2\u7d93\u662f\u6839\u76ee\u9304\uff0c\u6240\u4ee5 bind \u4fbf\u4e0d\u80fd\u96e2\u958b\u8a72\u76ee\u9304\uff01\u6240\u4ee5\u82e5\u8a72\u7a0b\u5e8f\u88ab\u653b\u64ca\uff0c\u4e86\u4e0d\u8d77\u4e5f\u662f\u5728\u67d0\u500b\u7279\u5b9a\u76ee\u9304\u5e95\u4e0b\u641e\u7834\u58de\u800c\u5df2\u3002 CentOS 6.x \u9810\u8a2d\u5c07 bind \u9396\u5728 \/var\/named\/chroot \u76ee\u9304\u4e2d\u5594\uff01<\/p>\n<p>\u6211\u5011\u4e3b\u7a0b\u5f0f\u662f\u7531 bind, bind-chroot \u6240\u63d0\u4f9b\uff0c\u90a3\u524d\u4e00\u5c0f\u7bc0\u63d0\u5230\u7684\uff0c\u6bcf\u90e8 DNS \u4f3a\u670d\u5668\u90fd\u8981\u6709\u7684 . (root) \u9019\u500b zone file \u5728\u54ea\u88e1\uff1f\u5b83\u4e5f\u662f\u7531 bind \u6240\u63d0\u4f9b\u7684\u5594\uff01 (CentOS 4.x, 5.x \u6240\u63d0\u4f9b\u7684 caching-nameserver \u8edf\u9ad4\u4e26\u4e0d\u5b58\u5728 CentOS 6.x \u7576\u4e2d\u4e86\u5594\uff01\u5df2\u7d93\u88ab\u6db5\u84cb\u65bc bind \u8edf\u9ad4\u5167\uff01)<\/p>\n<hr \/>\n<p><a name=\"what_pathway\"><\/a><img loading=\"lazy\" decoding=\"async\" src=\"http:\/\/linux.vbird.org\/images\/penguin-s.gif\" alt=\"\u5c0f\u6a19\u984c\u7684\u5716\u793a\" width=\"16\" height=\"23\" align=\"middle\" \/>19.3.2 BIND \u7684\u9810\u8a2d\u8def\u5f91\u8a2d\u5b9a\u8207 chroot<\/p>\n<p>\u8981\u67b6\u8a2d\u597d BIND \u9700\u8981\u4ec0\u9ebc\u8a2d\u5b9a\u8cc7\u6599\u5462\uff1f\u57fa\u672c\u4e0a\u6709\u5169\u500b\u4e3b\u8981\u7684\u8cc7\u6599\u8981\u8655\u7406\uff1a<\/p>\n<ul>\n<li>BIND \u672c\u8eab\u7684\u8a2d\u5b9a\u6a94\uff1a\u4e3b\u8981\u898f\u7bc4\u4e3b\u6a5f\u7684\u8a2d\u5b9a\u3001zone file \u7684\u6240\u5728\u3001\u6b0a\u9650\u7684\u8a2d\u5b9a\u7b49\uff1b<\/li>\n<li>\u6b63\u53cd\u89e3\u8cc7\u6599\u5eab\u6a94\u6848 (zone file)\uff1a\u8a18\u9304\u4e3b\u6a5f\u540d\u7a31\u8207 IP \u5c0d\u61c9\u7684\u7b49\u3002<\/li>\n<\/ul>\n<p>BIND \u7684\u8a2d\u5b9a\u6a94\u70ba \/etc\/named.conf\uff0c\u5728\u9019\u500b\u6a94\u6848\u88e1\u9762\u53ef\u4ee5\u898f\u7bc4 zone file \u7684\u5b8c\u6574\u6a94\u540d\u5594\uff01 \u4e5f\u5c31\u662f\u8aaa\uff0c\u4f60\u7684 zone file \u5176\u5be6\u662f\u7531 \/etc\/named.conf \u6240\u6307\u5b9a\u7684\uff0c\u6240\u4ee5 zone file \u6a94\u540d\u53ef\u4ee5\u96a8\u4fbf\u53d6\u5566\uff01 \u53ea\u8981 \/etc\/named.conf \u5167\u898f\u7bc4\u70ba\u6b63\u78ba\u5373\u53ef\u3002\u4e00\u822c\u4f86\u8aaa\uff0c CentOS 6.x \u7684\u9810\u8a2d\u76ee\u9304\u662f\u9019\u6a23\u7684\uff1a<\/p>\n<ul>\n<li>\/etc\/named.conf \uff1a\u9019\u5c31\u662f\u6211\u5011\u7684\u4e3b\u8a2d\u5b9a\u6a94\u5566\uff01<\/li>\n<li>\/etc\/sysconfig\/named \uff1a\u662f\u5426\u555f\u52d5 chroot \u53ca\u984d\u5916\u7684\u53c3\u6578\uff0c\u5c31\u7531\u9019\u500b\u6a94\u6848\u63a7\u5236\uff1b<\/li>\n<li>\/var\/named\/ \uff1a\u8cc7\u6599\u5eab\u6a94\u6848\u9810\u8a2d\u653e\u7f6e\u5728\u9019\u500b\u76ee\u9304<\/li>\n<li>\/var\/run\/named \uff1anamed \u9019\u652f\u7a0b\u5f0f\u57f7\u884c\u6642\u9810\u8a2d\u653e\u7f6e pid-file \u5728\u6b64\u76ee\u9304\u5167\u3002<\/li>\n<\/ul>\n<p><a name=\"chroot\"><\/a><\/p>\n<ul>\n<li>\n<hr \/>\n<p>\/etc\/sysconfig\/named \u8207 chroot \u74b0\u5883<\/li>\n<\/ul>\n<p>\u4e0d\u904e\uff0c\u70ba\u4e86\u7cfb\u7d71\u7684\u5b89\u5168\u6027\u8003\u91cf\uff0c\u4e00\u822c\u4f86\u8aaa\u76ee\u524d\u5404\u4e3b\u8981 distributions \u90fd\u5df2\u7d93\u81ea\u52d5\u7684\u5c07\u4f60\u7684 bind \u76f8\u95dc\u7a0b\u5f0f\u7d66\u4ed6 chroot \u4e86\uff01 \u90a3\u4f60\u5982\u4f55\u77e5\u9053\u4f60 chroot \u6240\u6307\u5b9a\u7684\u76ee\u9304\u5728\u54ea\u88e1\u5462\uff1f\u5176\u5be6\u662f\u8a18\u9304\u5728 \/etc\/sysconfig\/named \u88e1\u9762\u5566\uff01\u4f60\u53ef\u4ee5\u5148\u67e5\u95b1\u4e00\u4e0b\uff1a<\/p>\n<pre>[root@www ~]# cat \/etc\/sysconfig\/named\r\nROOTDIR=\/var\/named\/chroot\r\n<\/pre>\n<p>\u4e8b\u5be6\u4e0a\u8a72\u6a94\u6848\u5167\u8f03\u6709\u610f\u7fa9\u7684\u5c31\u53ea\u6709\u4e0a\u9762\u9019\u4e00\u884c\uff0c\u610f\u601d\u662f\u8aaa\uff1a\u300e\u6211\u8981\u5c07 named \u7d66\u4ed6 chroot \uff0c\u4e26\u4e14\u8b8a\u66f4\u7684\u6839\u76ee\u9304\u70ba \/var\/named\/chroot \u300f\u5594\uff01\u7531\u65bc\u6839\u76ee\u9304\u5df2\u7d93\u88ab\u8b8a\u66f4\u5230 \/var\/named\/chroot \u4e86\uff0c\u4f46 bind \u7684\u76f8\u95dc\u7a0b\u5f0f\u662f\u9700\u8981 \/etc, \/var\/named, \/var\/run &#8230;\u7b49\u76ee\u9304\u7684\uff0c\u6240\u4ee5\u5be6\u969b\u4e0a\u54b1\u5011 bind \u7684\u76f8\u95dc\u7a0b\u5f0f\u6240\u9700\u8981\u7684\u6240\u6709\u8cc7\u6599\u6703\u662f\u5728\uff1a<\/p>\n<ul>\n<li><b>\/var\/named\/chroot<\/b>\/etc\/named.conf<\/li>\n<li><b>\/var\/named\/chroot<\/b>\/var\/named\/zone_file1<\/li>\n<li><b>\/var\/named\/chroot<\/b>\/var\/named\/zone_file&#8230;..<\/li>\n<li><b>\/var\/named\/chroot<\/b>\/var\/run\/named\/&#8230;<\/li>\n<\/ul>\n<p>\u54c7\uff01\u771f\u662f\u597d\u9ebb\u7169\uff5e\u4e0d\u904e\uff0c\u4e0d\u8981\u592a\u64d4\u5fc3\uff01\u56e0\u70ba\u65b0\u7248\u672c\u7684 CentOS 6.x \u5df2\u7d93\u5c07 chroot \u6240\u9700\u8981\u4f7f\u7528\u5230\u7684\u76ee\u9304\uff0c\u900f\u904e mount &#8211;bind \u7684\u529f\u80fd\u9032\u884c\u76ee\u9304\u9023\u7d50\u4e86 (\u53c3\u8003 \/etc\/init.d\/named \u5167\u5bb9)\uff0c\u8209\u4f8b\u4f86\u8aaa\uff0c\u6211\u5011\u9700\u8981\u7684 \/var\/named \u5728\u555f\u52d5\u8173\u672c\u4e2d\u900f\u904e mount &#8211;bind \/var\/named \/var\/named\/chroot\/var\/named \u9032\u884c\u76ee\u9304\u7d81\u5b9a\u56c9\uff01\u6240\u4ee5\u5728 CentOS 6.x \u7576\u4e2d\uff0c\u4f60\u6839\u672c\u7121\u9808\u5207\u63db\u81f3 \/var\/named\/chroot\/ \u4e86\uff01\u4f7f\u7528\u6b63\u898f\u7684\u76ee\u9304\u5373\u53ef\u5594\uff01\u5c31\u662f\u9019\u6a23\u7c21\u55ae\uff01^_^<\/p>\n<p><b>Tips:<\/b><br \/>\n\u4e8b\u5be6\u4e0a\uff0c \/etc\/sysconfig\/named \u662f\u7531 \/etc\/init.d\/named \u555f\u52d5\u6642\u6240\u8b80\u5165\u7684\uff0c\u6240\u4ee5\u4f60\u4e5f\u53ef\u4ee5\u76f4\u63a5\u4fee\u6539 \/etc\/init.d\/named \u9019\u500b script \u54e9\uff01<br \/>\n<img decoding=\"async\" title=\"\u9ce5\u54e5\u7684\u5716\u793a\" src=\"http:\/\/linux.vbird.org\/images\/vbird_face.gif\" alt=\"\u9ce5\u54e5\u7684\u5716\u793a\" \/><\/p>\n<p><a name=\"20070625\"><\/a><\/p>\n<hr \/>\n<p><a name=\"forwards\"><\/a><img loading=\"lazy\" decoding=\"async\" src=\"http:\/\/linux.vbird.org\/images\/penguin-s.gif\" alt=\"\u5c0f\u6a19\u984c\u7684\u5716\u793a\" width=\"16\" height=\"23\" align=\"middle\" \/>19.3.3 \u55ae\u7d14\u7684 cache-only DNS \u4f3a\u670d\u5668\u8207 forwarding \u529f\u80fd<\/p>\n<p>\u5728\u4e0b\u4e00\u5c0f\u7bc0\u958b\u59cb\u4ecb\u7d39\u6b63\u3001\u53cd\u89e3 zone \u7684\u8cc7\u6599\u8a2d\u5b9a\u4e4b\u524d\uff0c\u5728\u9019\u500b\u5c0f\u7bc0\u7576\u4e2d\uff0c\u6211\u5011\u5148\u4f86\u8ac7\u4e00\u500b\u55ae\u7d14\u4fee\u6539\u8a2d\u5b9a\u6a94\uff0c\u800c\u4e0d\u5fc5\u8a2d\u8a08 zone file \u7684\u74b0\u5883\uff0c\u90a3\u5c31\u662f\u4e0d\u5177\u6709\u81ea\u5df1\u6b63\u53cd\u89e3 zone \u7684\u50c5\u9032\u884c\u5feb\u53d6\u7684 DNS \u4f3a\u670d\u5668\u3002<\/p>\n<ul>\n<li>\n<hr \/>\n<p>\u4ec0\u9ebc\u662f cache-only \u8207 forwarding DNS \u4f3a\u670d\u5668\u5462\uff1f<\/li>\n<\/ul>\n<p>\u6709\u500b\u53ea\u9700\u8981 . \u9019\u500b zone file \u7684\u7c21\u55ae DNS \u4f3a\u670d\u5668\uff0c\u6211\u5011\u7a31\u9019\u7a2e\u6c92\u6709\u81ea\u5df1\u516c\u958b\u7684 DNS \u8cc7\u6599\u5eab\u7684\u4f3a\u670d\u5668\u70bacache-only (\u50c5\u5feb\u53d6) DNS server\uff01\u9867\u540d\u601d\u7fa9\uff0c\u9019\u500b DNS server \u53ea\u6709\u5feb\u53d6\u641c\u5c0b\u7d50\u679c\u7684\u529f\u80fd\uff0c\u4e5f\u5c31\u662f\u8aaa\uff0c\u4ed6\u672c\u8eab\u4e26\u6c92\u6709\u4e3b\u6a5f\u540d\u7a31\u8207 IP \u6b63\u53cd\u89e3\u7684\u8a2d\u5b9a\u6a94\uff0c\u5b8c\u5168\u662f\u7531\u5c0d\u5916\u7684\u67e5\u8a62\u4f86\u63d0\u4f9b\u4ed6\u7684\u8cc7\u6599\u4f86\u6e90\uff01<\/p>\n<p>\u90a3\u5982\u679c\u9023 . \u90fd\u4e0d\u60f3\u8981\u5462\uff1f\u90a3\u5c31\u5f97\u8981\u6307\u5b9a\u4e00\u500b\u4e0a\u5c64 DNS \u4f3a\u670d\u5668\u4f5c\u70ba\u4f60\u7684 forwarding (\u8f49\u905e) \u76ee\u6a19\uff0c\u5c07\u539f\u672c\u81ea\u5df1\u8981\u5f80 . \u67e5\u8a62\u7684\u4efb\u52d9\uff0c\u4e1f\u7d66\u4e0a\u5c64 DNS \u4f3a\u670d\u5668\u53bb\u7169\u60f1\u5373\u53ef\u3002 \u5982\u6b64\u4e00\u4f86\uff0c\u6211\u5011\u9019\u90e8\u5177\u6709 forwarding \u529f\u80fd\u7684 DNS \u4f3a\u670d\u5668\uff0c\u751a\u81f3\u9023 . \u90fd\u4e0d\u9700\u8981\u4e86\uff01\u56e0\u70ba . \u6709\u8a18\u9304\u5728\u4e0a\u5c64 DNS \u4e0a\u982d\u4e86\u561b\uff01<\/p>\n<p>\u5982\u540c\u525b\u525b\u63d0\u5230\u7684\uff0ccache only \u7684 DNS \u4e26\u4e0d\u5b58\u5728\u8cc7\u6599\u5eab (\u5176\u5be6\u9084\u662f\u5b58\u5728 . \u9019\u500b root \u9818\u57df\u7684 zone file)\uff0c \u56e0\u6b64\u4e0d\u8ad6\u662f\u8ab0\u4f86\u67e5\u8a62\u8cc7\u6599\uff0c\u9019\u90e8 DNS \u4e00\u5f8b\u958b\u59cb\u5f9e\u81ea\u5df1\u7684\u5feb\u53d6\u4ee5\u53ca . \u627e\u8d77\uff0c\u6574\u500b\u6d41\u7a0b\u8207<a href=\"http:\/\/linux.vbird.org\/linux_server\/0350dns.php#fig19.1-4\">\u5716 19.1-4<\/a> \u76f8\u540c\u3002\u90a3\u5982\u679c\u5177\u6709 forwarding \u529f\u80fd\u5462\uff1f\u679c\u771f\u5982\u6b64\uff0c\u90a3\u5373\u4f7f\u4f60\u7684 DNS \u5177\u6709 . \u9019\u500b zone file\uff0c\u9019\u90e8 DNS \u9084\u662f\u6703\u5c07\u67e5\u8a62\u6b0a\u300e\u59d4\u8acb\u300f\u4e0a\u5c64 DNS \u67e5\u8a62\u7684\uff0c\u9019\u90e8 DNS \u4f3a\u670d\u5668\u7576\u5834\u8b8a\u6210\u7528\u6236\u7aef\u5566\uff01\u67e5\u8a62\u6d41\u7a0b\u6703\u8b8a\u9019\u6a23\u5594\uff1a<\/p>\n<p><img decoding=\"async\" title=\"\u5177\u6709 forwarding \u529f\u80fd\u7684 DNS \u4f3a\u670d\u5668\u67e5\u8a62\u65b9\u5f0f\" src=\"http:\/\/linux.vbird.org\/linux_server\/0350dns\/\/dns_forwarding.gif\" alt=\"\u5177\u6709 forwarding \u529f\u80fd\u7684 DNS \u4f3a\u670d\u5668\u67e5\u8a62\u65b9\u5f0f\" border=\"0\" \/><br \/>\n\u5716 19.3-1\u3001\u5177\u6709 forwarding \u529f\u80fd\u7684 DNS \u4f3a\u670d\u5668\u67e5\u8a62\u65b9\u5f0f<\/p>\n<p>\u89c0\u5bdf\u4e0a\u5716\u7684\u67e5\u8a62\u65b9\u5411\uff0c\u4f60\u6703\u767c\u73fe\u5230\uff0c\u5177\u6709 forwarding \u6a5f\u5236\u6642\uff0c\u67e5\u8a62\u6b0a\u6703\u59d4\u8acb\u4e0a\u5c64 DNS \u4f3a\u670d\u5668\u4f86\u8655\u7406\uff0c\u6240\u4ee5\u6839\u672c\u4e5f\u4e0d\u9700\u8981 . \u9019\u500b\u4f4d\u7f6e\u6240\u5728\u7684 zone \u5566\u3002\u4e00\u822c\u4f86\u8aaa\uff0c\u5982\u679c\u4f60\u7684\u74b0\u5883\u9700\u8981\u67b6\u8a2d\u4e00\u500b cache-only \u7684 DNS \u4f3a\u670d\u5668\u6642\uff0c\u5176\u5be6\u53ef\u4ee5\u76f4\u63a5\u52a0\u4e0a forwarding \u7684\u6a5f\u5236\uff0c\u8b93\u67e5\u8a62\u6b0a\u6307\u5411\u4e0a\u5c64\u6216\u8005\u662f\u6d41\u91cf\u8f03\u5927\u7684\u4e0a\u5c64 DNS \u4f3a\u670d\u5668\u5373\u53ef\u3002\u90a3\u65e2\u7136 cache only \u7684\u4f3a\u670d\u5668\u4e26\u6c92\u6709\u8cc7\u6599\u5eab\uff0c forwarding \u6a5f\u5236\u751a\u81f3\u4e0d\u9700\u8981 . \u7684 zone \uff0c\u90a3\u5e79\u561b\u9084\u5f97\u8981\u67b6\u8a2d\u9019\u6a23\u7684 DNS \u5462\uff1f\u662f\u6709\u7406\u7531\u7684\u5566\uff01<\/p>\n<ul>\n<li>\n<hr \/>\n<p>\u4ec0\u9ebc\u6642\u5019\u6709\u67b6\u8a2d cache-only DNS \u7684\u9700\u6c42\uff1f<\/li>\n<\/ul>\n<p>\u5728\u67d0\u4e9b\u516c\u53f8\u884c\u865f\u88e1\u982d\uff0c\u70ba\u4e86\u9810\u9632\u54e1\u5de5\u5229\u7528\u516c\u53f8\u7684\u7db2\u8def\u8cc7\u6e90\u4f5c\u81ea\u5df1\u7684\u4e8b\u60c5\uff0c\u6240\u4ee5\u90fd\u6703\u91dd\u5c0d Internet \u7684\u9023\u7dda\u4f5c\u6bd4\u8f03\u56b4\u683c\u7684\u9650\u5236\u3002\u7576\u7136\u5566\uff0c\u9023 port 53 \u9019\u500b DNS \u6703\u7528\u5230\u7684 port \u4e5f\u53ef\u80fd\u6703\u88ab\u64cb\u5728\u9632\u706b\u7246\u4e4b\u5916\u7684\uff5e\u9019\u500b\u6642\u5019\uff0c \u4f60\u53ef\u4ee5\u5728\u300e\u9632\u706b\u7246\u7684\u90a3\u90e8\u6a5f\u5668\u4e0a\u9762\uff0c\u52a0\u88dd\u4e00\u500b cache-only \u7684 DNS \u670d\u52d9\uff01\u300f<\/p>\n<p>\u9019\u662f\u4ec0\u9ebc\u610f\u601d\u5462\uff1f\u5f88\u7c21\u55ae\u554a\uff01\u5c31\u662f\u4f60\u81ea\u5df1\u5229\u7528\u81ea\u5df1\u7684\u9632\u706b\u7246\u4e3b\u6a5f\u4e0a\u7684 DNS \u670d\u52d9\u53bb\u5e6b\u4f60\u7684 Client \u7aef\u89e3\u8b6f hostname &lt;&#8211;&gt; IP \u56c9\uff01\u56e0\u70ba\u9632\u706b\u7246\u4e3b\u6a5f\u53ef\u4ee5\u8a2d\u5b9a\u653e\u884c\u81ea\u5df1\u7684 DNS \u529f\u80fd\uff0c\u800c Client \u7aef\u5c31\u8a2d\u5b9a\u8a72\u9632\u706b\u7246 IP \u70ba DNS \u4f3a\u670d\u5668\u7684 IP \u5373\u53ef\uff01\u54c8\u54c8\uff01\u9019\u6a23\u5c31\u53ef\u4ee5\u53d6\u5f97\u4e3b\u6a5f\u540d\u7a31\u8207 IP \u7684\u8f49\u8b6f\u5566\uff01\u6240\u4ee5\uff0c\u901a\u5e38\u67b6\u8a2d cache only DNS \u4f3a\u670d\u5668\u5927\u90fd\u662f\u70ba\u4e86\u7cfb\u7d71\u5b89\u5168\u56c9\u3002<\/p>\n<ul>\n<li>\n<hr \/>\n<p>\u5be6\u969b\u8a2d\u5b9a cache-only DNS server<\/li>\n<\/ul>\n<p>\u90a3\u5982\u4f55\u5728\u4f60\u7684 Linux \u4e3b\u6a5f\u4e0a\u67b6\u8a2d\u4e00\u500b cache-only \u7684 DNS \u4f3a\u670d\u5668\u5462\uff1f\u5176\u5be6\u771f\u7684\u5f88\u7c21\u55ae\u7684\u5566\uff01\u56e0\u70ba\u4e0d\u9700\u8981\u8a2d\u5b9a\u6b63\u53cd\u89e3\u7684 zone (\u53ea\u9700\u8981 . \u7684 zone \u652f\u63f4\u5373\u53ef)\uff0c\u6240\u4ee5\u53ea\u8981\u8a2d\u5b9a\u4e00\u500b\u6a94\u6848 (\u5c31\u662f named.conf \u4e3b\u8a2d\u5b9a\u6a94) \u5373\u53ef\uff01\u771f\u662f\u5feb\u6a02\u5f97\u4e0d\u5f97\u4e86\u5436\uff01 \u53e6\u5916\uff0ccache-only \u53ea\u8981\u52a0\u4e0a\u500b forwarders \u7684\u8a2d\u5b9a\u5373\u53ef\u6307\u5b9a forwarding \u7684\u8cc7\u6599\uff0c\u6240\u4ee5\u5e95\u4e0b\u6211\u5011\u5c07\u8a2d\u5b9a\u5177\u6709 forwarding \u7684 cache-only DNS \u4f3a\u670d\u5668\u5427\uff01<\/p>\n<ol>\n<li>\n<hr \/>\n<p><a name=\"named.conf_1\"><\/a>\u7de8\u8f2f\u4e3b\u8981\u8a2d\u5b9a\u6a94\uff1a \/etc\/named.conf<br \/>\n\u96d6\u7136\u6211\u5011\u5177\u6709 chroot \u7684\u74b0\u5883\uff0c\u4e0d\u904e\u7531\u65bc CentOS 6.x \u5df2\u7d93\u900f\u904e\u555f\u52d5\u8173\u672c\u5e6b\u6211\u5011\u9032\u884c\u6a94\u6848\u8207\u76ee\u9304\u7684\u639b\u8f09\u9023\u7d50\uff0c\u6240\u4ee5\u8acb\u4f60\u76f4\u63a5\u4fee\u6539 \/etc\/named.conf \u5373\u53ef\u5466\uff01\u4e0d\u8981\u518d\u53bb \/var\/named\/chroot\/etc\/named.conf \u4fee\u6539\u5566\uff01 \u5728\u9019\u500b\u6a94\u6848\u4e2d\uff0c\u4e3b\u8981\u662f\u5b9a\u7fa9\u8ddf\u4f3a\u670d\u5668\u74b0\u5883\u6709\u95dc\u7684\u8a2d\u5b9a\uff0c\u4ee5\u53ca\u5404\u500b zone \u7684\u9818\u57df\u53ca\u8cc7\u6599\u5eab\u6240\u5728\u6a94\u540d\u3002 \u5728\u9ce5\u54e5\u7684\u9019\u500b\u6848\u4f8b\u7576\u4e2d\uff0c\u56e0\u70ba\u4f7f\u7528\u4e86 forwarding \u7684\u6a5f\u5236\uff0c\u6240\u4ee5\u9019\u500b cache-only DNS \u4f3a\u670d\u5668\u4e26\u6c92\u6709 zone (\u9023 . \u90fd\u6c92\u6709)\uff0c\u6240\u4ee5\u6211\u5011\u53ea\u8981\u8a2d\u5b9a\u597d\u8ddf\u4f3a\u670d\u5668\u6709\u95dc\u7684\u8a2d\u5b9a\u5373\u53ef\u3002\u8a2d\u5b9a\u9019\u500b\u6a94\u6848\u7684\u6642\u5019\u8acb\u6ce8\u610f\uff1a<\/li>\n<\/ol>\n<ul>\n<li>\u8a3b\u89e3\u8cc7\u6599\u662f\u653e\u7f6e\u5728\u5169\u689d\u659c\u7dda\u300e \/\/ \u300f\u5f8c\u9762\u63a5\u7684\u8cc7\u6599<\/li>\n<li>\u6bcf\u500b\u6bb5\u843d\u4e4b\u5f8c\u90fd\u9700\u8981\u4ee5\u5206\u865f\u300e ; \u300f\u4f86\u505a\u70ba\u7d50\u5c3e\uff01<\/li>\n<\/ul>\n<p>\u9ce5\u54e5\u5c07\u9019\u500b\u6a94\u6848\u518d\u7c21\u5316\u5982\u4e0b\u7684\u6a23\u5f0f\uff1a<\/p>\n<pre>[root@www ~]# cp \/etc\/named.conf \/etc\/named.conf.raw\r\n[root@www ~]# vim \/etc\/named.conf\r\n\/\/ \u5728\u9810\u8a2d\u7684\u60c5\u6cc1\u4e0b\uff0c\u9019\u500b\u6a94\u6848\u6703\u53bb\u8b80\u53d6 \/etc\/named.rfc1912.zones \u9019\u500b\u9818\u57df\u5b9a\u7fa9\u6a94\r\n\/\/ \u6240\u4ee5\u8acb\u8a18\u5f97\u8981\u4fee\u6539\u6210\u5e95\u4e0b\u7684\u6a23\u5f0f\u554a\uff01\r\noptions {\r\n        listen-on port 53  { any; };     \/\/\u53ef\u4e0d\u8a2d\u5b9a\uff0c\u4ee3\u8868\u5168\u90e8\u63a5\u53d7\r\n        directory          \"\/var\/named\"; \/\/\u8cc7\u6599\u5eab\u9810\u8a2d\u653e\u7f6e\u7684\u76ee\u9304\u6240\u5728\r\n        dump-file          \"\/var\/named\/data\/cache_dump.db\"; \/\/\u4e00\u4e9b\u7d71\u8a08\u8cc7\u8a0a\r\n        statistics-file    \"\/var\/named\/data\/named_stats.txt\";\r\n        memstatistics-file \"\/var\/named\/data\/named_mem_stats.txt\";\r\n        allow-query        { any; };     \/\/\u53ef\u4e0d\u8a2d\u5b9a\uff0c\u4ee3\u8868\u5168\u90e8\u63a5\u53d7\r\n        recursion yes;                   \/\/\u5c07\u81ea\u5df1\u8996\u70ba\u7528\u6236\u7aef\u7684\u4e00\u7a2e\u67e5\u8a62\u6a21\u5f0f\r\n        forward only;                    \/\/\u53ef\u66ab\u6642\u4e0d\u8a2d\u5b9a\r\n        forwarders {                     \/\/\u662f\u91cd\u9ede\uff01\r\n                168.95.1.1;              \/\/\u5148\u7528\u4e2d\u83ef\u96fb\u4fe1\u7684 DNS \u7576\u4e0a\u5c64\r\n                139.175.10.20;           \/\/\u518d\u7528 seednet \u7576\u4e0a\u5c64\r\n        };\r\n};  \/\/\u6700\u7d42\u8a18\u5f97\u8981\u7d50\u5c3e\u7b26\u865f\uff01\r\n<\/pre>\n<p>\u9ce5\u54e5\u5c07\u5927\u90e8\u5206\u7684\u8cc7\u6599\u90fd\u4e88\u4ee5\u522a\u9664\uff0c\u53ea\u5c07\u5c11\u90e8\u5206\u4fdd\u7559\u7684\u8cc7\u6599\u52a0\u4ee5\u5c0f\u90e8\u5206\u7684\u4fee\u8a02\u800c\u5df2\u3002\u5728 named.conf \u7684\u7d50\u69cb\u4e2d\uff0c\u8207\u4f3a\u670d\u5668\u74b0\u5883\u6709\u95dc\u7684\u662f\u7531 options \u9019\u500b\u9805\u76ee\u5167\u5bb9\u8a2d\u5b9a\u7684\uff0c\u56e0\u70ba options \u88e1\u9762\u9084\u6709\u5f88\u591a\u5b50\u53c3\u6578\uff0c \u6240\u4ee5\u5c31\u4ee5\u5927\u62ec\u865f { } \u5305\u8d77\u4f86\u56c9\u3002\u81f3\u65bc options \u5167\u7684\u5b50\u53c3\u6578\u5728\u4e0a\u9762\u63d0\u5230\u7684\u8f03\u91cd\u8981\u7684\u9805\u76ee\u7c21\u55ae\u6558\u8ff0\u5982\u4e0b\uff1a<\/p>\n<ul>\n<li>listen-on port 53 { any; };<br \/>\n\u76e3\u807d\u5728\u9019\u90e8\u4e3b\u6a5f\u7cfb\u7d71\u4e0a\u9762\u7684\u54ea\u500b\u7db2\u8def\u4ecb\u9762\u3002\u9810\u8a2d\u662f\u76e3\u807d\u5728 localhost\uff0c\u4ea6\u5373\u53ea\u6709\u672c\u6a5f\u53ef\u4ee5\u5c0d DNS \u670d\u52d9\u9032\u884c\u67e5\u8a62\uff0c\u90a3\u7576\u7136\u662f\u5f88\u4e0d\u5408\u7406\u554a\uff01 \u6240\u4ee5\u9019\u88e1\u8981\u5c07\u5927\u62ec\u865f\u5167\u7684\u8cc7\u6599\u6539\u5beb\u6210 any\u3002\u8a18\u5f97\uff0c\u56e0\u70ba\u53ef\u4ee5\u76e3\u807d\u591a\u500b\u4ecb\u9762\uff0c\u56e0\u6b64 any \u5f8c\u9762\u5f97\u8981\u52a0\u4e0a\u5206\u865f\u624d\u7b97\u7d50\u675f\u5594\uff01 \u53e6\u5916\uff0c\u9019\u500b\u9805\u76ee\u5982\u679c\u5fd8\u8a18\u5beb\u4e5f\u6c92\u6709\u95dc\u4fc2\uff0c\u56e0\u70ba\u9810\u8a2d\u662f\u5c0d\u6574\u500b\u4e3b\u6a5f\u7cfb\u7d71\u7684\u6240\u6709\u4ecb\u9762\u9032\u884c\u76e3\u807d\u7684\u3002<\/li>\n<li>directory &#8220;\/var\/named&#8221;;<br \/>\n\u610f\u601d\u662f\u8aaa\uff0c\u5982\u679c\u6b64\u6a94\u6848\u5e95\u4e0b\u6709\u898f\u7bc4\u5230\u6b63\u3001\u53cd\u89e3\u7684 zone file \u6a94\u540d\u6642\uff0c\u8a72\u6a94\u540d\u9810\u8a2d\u61c9\u8a72\u653e\u7f6e\u5728\u54ea\u500b\u76ee\u9304\u5e95\u4e0b\u7684\u610f\u601d\u3002\u9810\u8a2d\u653e\u7f6e\u5230 \/var\/named\/ \u5e95\u4e0b\u3002\u7531\u65bc chroot \u7684\u95dc\u4fc2\uff0c\u6700\u7d42\u9019\u4e9b\u8cc7\u6599\u5eab\u6a94\u6848\u6703\u88ab\u4e3b\u52d5\u9023\u7d50\u5230 \/var\/named\/chroot\/var\/named\/ \u9019\u500b\u76ee\u9304\u3002<\/li>\n<li>dump-file, statistics-file, memstatistics-file<br \/>\n\u8207 named \u9019\u500b\u670d\u52d9\u6709\u95dc\u7684\u8a31\u591a\u7d71\u8a08\u8cc7\u8a0a\uff0c\u5982\u679c\u60f3\u8981\u8f38\u51fa\u6210\u70ba\u6a94\u6848\u7684\u8a71\uff0c\u9810\u8a2d\u7684\u6a94\u540d\u5c31\u5982\u4e0a\u6240\u8ff0\u3002\u9ce5\u54e5\u81ea\u5df1\u5f88\u5c11\u770b\u9019\u4e9b\u7d71\u8a08\u8cc7\u6599\uff0c \u6240\u4ee5\uff0c\u9019\u4e09\u500b\u8a2d\u5b9a\u503c\u5beb\u4e0d\u5beb\u61c9\u8a72\u90fd\u662f\u6c92\u6709\u95dc\u4fc2\u7684\u3002<\/li>\n<li>allow-query { any; };<br \/>\n\u9019\u500b\u662f\u91dd\u5c0d\u7528\u6236\u7aef\u7684\u8a2d\u5b9a\uff0c\u5230\u5e95\u8ab0\u53ef\u4ee5\u5c0d\u6211\u7684 DNS \u670d\u52d9\u63d0\u51fa\u67e5\u8a62\u8acb\u6c42\u7684\u610f\u601d\u3002\u539f\u672c\u7684\u6a94\u6848\u5167\u5bb9\u9810\u8a2d\u662f\u91dd\u5c0d localhost \u958b\u653e\u800c\u5df2\uff0c \u6211\u5011\u9019\u88e1\u6539\u6210\u5c0d\u6240\u6709\u7684\u7528\u6236\u958b\u653e (\u7576\u7136\u5566\uff0c\u9632\u706b\u7246\u4e5f\u5f97\u653e\u884c\u624d\u884c)\u3002\u4e0d\u904e\uff0c\u9810\u8a2d DNS \u5c31\u662f\u5c0d\u6240\u6709\u7528\u6236\u653e\u884c\uff0c\u6240\u4ee5\u9019\u500b\u8a2d\u5b9a\u503c\u4e5f\u53ef\u4ee5\u4e0d\u7528\u5beb\u3002<\/li>\n<li>forward only ;<br \/>\n\u9019\u500b\u8a2d\u5b9a\u53ef\u4ee5\u8b93\u4f60\u7684 DNS \u4f3a\u670d\u5668\u50c5\u9032\u884c forward\uff0c\u5373\u4f7f\u6709 . \u9019\u500b zone file \u7684\u8a2d\u5b9a\uff0c\u4e5f\u4e0d\u6703\u4f7f\u7528 . \u7684\u8cc7\u6599\uff0c \u53ea\u6703\u5c07\u67e5\u8a62\u6b0a\u4ea4\u7d66\u4e0a\u5c64 DNS \u4f3a\u670d\u5668\u800c\u5df2\uff0c\u662f cache only DNS \u6700\u5e38\u898b\u7684\u8a2d\u5b9a\u4e86\uff01<\/li>\n<li>forwarders { 168.95.1.1; 139.175.10.20; } ;<br \/>\n\u65e2\u7136\u6709 forward only\uff0c\u90a3\u9ebc\u5230\u5e95\u8981\u5c0d\u54ea\u90e8\u4e0a\u5c64 DNS \u4f3a\u670d\u5668\u9032\u884c\u8f49\u905e\u5462\uff1f\u90a3\u5c31\u662f forwarders (\u4e0d\u8981\u5fd8\u8a18\u90a3\u500b s) \u8a2d\u5b9a\u503c\u7684\u91cd\u8981\u6027\u4e86\uff01\u7531\u65bc\u64d4\u5fc3\u4e0a\u5c64 DNS \u4f3a\u670d\u5668\u4e5f\u53ef\u80fd\u6703\u639b\u9ede\uff0c\u56e0\u6b64\u53ef\u4ee5\u8a2d\u5b9a\u591a\u90e8\u4e0a\u5c64 DNS \u4f3a\u670d\u5668\u5594\uff01\u6bcf\u4e00\u500b forwarder \u4f3a\u670d\u5668\u7684 IP \u90fd\u9700\u8981\u6709\u300e ; \u300f\u4f86\u505a\u70ba\u7d50\u5c3e\uff01<\/li>\n<\/ul>\n<p>\u5f88\u7c21\u55ae\u5427\uff01\u81f3\u65bc\u66f4\u591a\u7684\u53c3\u6578\u6211\u5011\u6703\u5728\u5f8c\u7e8c\u7bc7\u5e45\u7576\u4e2d\u6162\u6162\u4ecb\u7d39\u7684\u3002\u9019\u6a23\u5c31\u5df2\u7d93\u8a2d\u5b9a\u5b8c\u6210\u4e86\u6700\u7c21\u55ae\u7684 cache only DNS server \u4e86\uff01<\/p>\n<p>&nbsp;<\/p>\n<ul>\n<li>\n<hr \/>\n<p>\u555f\u52d5 named \u4e26\u89c0\u5bdf\u670d\u52d9\u7684\u57e0\u53e3<br \/>\n\u555f\u52d5\u7e3d\u4e0d\u6703\u5fd8\u8a18\u5427\uff1f\u8d95\u5feb\u53bb\u555f\u52d5\u4e00\u4e0b\u5427\uff01\u540c\u6642\u555f\u52d5\u5b8c\u7562\u4e4b\u5f8c\uff0c\u89c0\u5bdf\u4e00\u4e0b\u7531 named \u6240\u958b\u555f\u7684\u57e0\u53e3\uff0c\u770b\u770b\u5230\u5e95\u54ea\u4e9b\u57e0\u53e3\u6703\u88ab DNS \u7528\u5230\u7684\uff01<\/p>\n<pre># 1. \u555f\u52d5\u4e00\u4e0b DNS \u9019\u73a9\u610f\u5152\uff01\r\n[root@www ~]# \/etc\/init.d\/named start\r\nStarting named:                     [  OK  ]\r\n[root@www ~]# chkconfig named on\r\n\r\n# 2. \u5230\u5e95\u7528\u4e86\u591a\u5c11\u57e0\u53e3\u5462\uff1f\r\n[root@www ~]# netstat -utlnp | grep named\r\nProto Recv-Q Send-Q Local Address       Foreign Address  State  PID\/Program name\r\ntcp        0      0 192.168.100.254:53  0.0.0.0:*        LISTEN 3140\/named\r\ntcp        0      0 192.168.1.100:53    0.0.0.0:*        LISTEN 3140\/named\r\ntcp        0      0 127.0.0.1:53        0.0.0.0:*        LISTEN 3140\/named\r\n<u>tcp        0      0 127.0.0.1:953       0.0.0.0:*        LISTEN 3140\/named<\/u>\r\ntcp        0      0 ::1:953             :::*             LISTEN 3140\/named\r\nudp        0      0 192.168.100.254:53  0.0.0.0:*               3140\/named\r\nudp        0      0 192.168.1.100:53    0.0.0.0:*               3140\/named\r\nudp        0      0 127.0.0.1:53        0.0.0.0:*               3140\/named\r\n<\/pre>\n<p>\u6211\u5011\u77e5\u9053 DNS \u6703\u540c\u6642\u555f\u7528 UDP\/TCP \u7684 port 53\uff0c\u800c\u4e14\u662f\u91dd\u5c0d\u6240\u6709\u4ecb\u9762\uff0c\u56e0\u6b64\u4e0a\u9762\u7684\u8cc7\u6599\u4e26\u6c92\u6709\u4ec0\u9ebc\u7279\u7570\u7684\u90e8\u5206\u3002\u4e0d\u904e\uff0c\u600e\u9ebc\u6703\u6709 port 953 \u4e14\u50c5\u91dd\u5c0d\u672c\u6a5f\u4f86\u76e3\u807d\u5462\uff1f\u5176\u5be6\u90a3\u662f named \u7684\u9060\u7aef\u63a7\u5236\u529f\u80fd\uff0c\u7a31\u70ba\u9060\u7aef\u540d\u7a31\u89e3\u6790\u670d\u52d9\u63a7\u5236\u529f\u80fd (remote name daemon control, rndc)\u3002\u9810\u8a2d\u7684\u60c5\u6cc1\u4e0b\uff0c\u50c5\u6709\u672c\u6a5f\u53ef\u4ee5\u91dd\u5c0d rndc \u4f86\u63a7\u5236\u3002\u6211\u5011\u6703\u5728\u5f8c\u7e8c\u7684\u7ae0\u7bc0\u518d\u4f86\u63a2\u8a0e\u9019\u500b rndc \u5566\uff0c\u76ee\u524d\u6211\u5011\u53ea\u8981\u77e5\u9053 UDP\/TCP port 53 \u6709\u555f\u52d5\u5373\u53ef\u3002<\/li>\n<li>\n<hr \/>\n<p><a name=\"messages_1\"><\/a>\u6aa2\u67e5 \/var\/log\/messages \u7684\u5167\u5bb9\u8a0a\u606f (\u6975\u91cd\u8981\uff01)<br \/>\nnamed \u9019\u500b\u670d\u52d9\u7684\u8a18\u9304\u6a94\u5c31\u76f4\u63a5\u7d66\u4ed6\u653e\u7f6e\u5728 \/var\/log\/messages \u88e1\u9762\u5566\uff0c\u6240\u4ee5\u4f86\u770b\u770b\u88e1\u9762\u7684\u5e7e\u884c\u767b\u9304\u8cc7\u8a0a\u5427\uff01<\/p>\n<pre>[root@www ~]# tail -n 30 \/var\/log\/messages | grep named\r\nAug  4 14:57:09 www named[3140]: starting BIND 9.7.0-P2-RedHat-9.7.0-5.P2.el6_0.1 -u named\r\n -t \/var\/named\/chroot &lt;==\u8aaa\u660e\u7684\u662f chroot \u5728\u54ea\u500b\u76ee\u9304\u4e0b\uff01\r\nAug  4 14:57:09 www named[3140]: adjusted limit on open files from 1024 to 1048576\r\nAug  4 14:57:09 www named[3140]: found 1 CPU, using 1 worker thread\r\nAug  4 14:57:09 www named[3140]: using up to 4096 sockets\r\nAug  4 14:57:09 www named[3140]: loading configuration from '\/etc\/named.conf'\r\nAug  4 14:57:09 www named[3140]: using default UDP\/IPv4 port range: [1024, 65535]\r\nAug  4 14:57:09 www named[3140]: using default UDP\/IPv6 port range: [1024, 65535]\r\nAug  4 14:57:09 www named[3140]: listening on IPv4 interface lo, 127.0.0.1#53\r\nAug  4 14:57:09 www named[3140]: listening on IPv4 interface eth0, 192.168.1.100#53\r\nAug  4 14:57:09 www named[3140]: listening on IPv4 interface eth1, 192.168.100.254#53\r\nAug  4 14:57:09 www named[3140]: generating session key for dynamic DNS\r\nAug  4 14:57:09 www named[3140]: command channel listening on 127.0.0.1#953\r\nAug  4 14:57:09 www named[3140]: command channel listening on ::1#953\r\nAug  4 14:57:09 www named[3140]: the working directory is not writable\r\nAug  4 14:57:09 www named[3140]: running\r\n<\/pre>\n<p>\u4e0a\u9762\u6700\u91cd\u8981\u7684\u662f\u7b2c\u4e00\u884c\u51fa\u73fe\u7684\u300e-t &#8230;\u300f\u90a3\u500b\u9805\u76ee\u6307\u51fa\u4f60\u7684 chroot \u76ee\u9304\u56c9\u3002\u53e6\u5916\uff0c\u4e0a\u9762\u8868\u683c\u4e2d\u7279\u6b8a\u5b57\u9ad4\u7684\u90e8\u5206\uff0c\u6709\u5beb\u5230\u8b80\u53d6 \/etc\/named.conf\uff0c\u4ee3\u8868\u53ef\u4ee5\u9806\u5229\u7684\u8f09\u5165 \/var\/named\/etc\/named.conf \u7684\u610f\u601d\u3002\u5982\u679c\u4e0a\u9762\u6709\u51fa\u73fe\u5192\u865f\u5f8c\u9762\u63a5\u6578\u5b57 (:10)\uff0c \u90a3\u5c31\u4ee3\u8868\u67d0\u500b\u6a94\u6848\u5167\u7684\u7b2c\u5341\u884c\u6709\u554f\u984c\u7684\u610f\u601d\uff0c\u5c46\u6642\u518d\u9032\u5165\u8655\u7406\u5373\u53ef\u3002\u8981\u6ce8\u610f\u7684\u662f\uff0c\u5373\u4f7f port 53 \u6709\u555f\u52d5\uff0c\u4f46\u6709\u53ef\u80fd DNS \u670d\u52d9\u662f\u932f\u8aa4\u7684\uff0c\u6b64\u6642\u9019\u500b\u767b\u9304\u6a94\u5c31\u986f\u7684\u975e\u5e38\u91cd\u8981\uff01\u6bcf\u6b21\u91cd\u65b0\u555f\u52d5 DNS \u5f8c\uff0c\u8acb\u52d9\u5fc5\u67e5\u95b1\u4e00\u4e0b\u9019\u500b\u6a94\u6848\u7684\u5167\u5bb9\uff01\uff01<\/p>\n<p><b>Tips:<\/b><br \/>\n\u5982\u679c\u4f60\u5728 \/var\/log\/messages \u88e1\u9762\u4e00\u76f4\u770b\u5230\u9019\u6a23\u7684\u932f\u8aa4\u8cc7\u8a0a\uff1a<br \/>\ncouldn&#8217;t add command channel 127.0.0.1#953: not found<br \/>\n\u90a3\u8868\u793a\u4f60\u9084\u5fc5\u9700\u8981\u52a0\u5165 rndc key \uff0c\u8acb\u53c3\u8003\u672c\u7ae0\u5f8c\u9762\u7684 <a href=\"http:\/\/linux.vbird.org\/linux_server\/0350dns.php#rndckey\">\u5229\u7528 RNDC \u6307\u4ee4\u7ba1\u7406 DNS \u4f3a\u670d\u5668<\/a> \u7684\u4ecb\u7d39\uff0c\u5c07\u4ed6\u52a0\u5165\u4f60\u7684 named.conf \u4e2d\uff01<br \/>\n<img decoding=\"async\" title=\"\u9ce5\u54e5\u7684\u5716\u793a\" src=\"http:\/\/linux.vbird.org\/images\/vbird_face.gif\" alt=\"\u9ce5\u54e5\u7684\u5716\u793a\" \/><\/li>\n<li>\n<hr \/>\n<p>\u6e2c\u8a66\uff1a<br \/>\n\u5982\u679c\u4f60\u7684 DNS \u4f3a\u670d\u5668\u5177\u6709\u9023\u4e0a\u7db2\u969b\u7db2\u8def\u7684\u529f\u80fd\uff0c\u90a3\u9ebc\u900f\u904e\u300e dig www.google.com @127.0.0.1 \u300f\u9019\u500b\u57fa\u672c\u6307\u4ee4\u57f7\u884c\u770b\u770b\uff0c \u5982\u679c\u6709\u627e\u5230 google \u7684 IP \uff0c\u4e26\u4e14\u8f38\u51fa\u8cc7\u6599\u7684\u6700\u5e95\u4e0b\u986f\u793a\u300e SERVER: 127.0.0.1#53(127.0.0.1) \u300f\u7684\u5b57\u6a23\uff0c \u90a3\u5c31\u4ee3\u8868\u61c9\u8a72\u662f\u6210\u529f\u5566\uff01\u5176\u4ed6\u66f4\u8a73\u7d30\u7684\u6e2c\u8a66\u8acb\u53c3\u8003\uff1a<a href=\"http:\/\/linux.vbird.org\/linux_server\/0350dns.php#DNS_resolver\">19.2 \u5c0f\u7bc0\u7684\u5167\u5bb9<\/a><\/li>\n<li>\n<ul>\n<li>\n<hr \/>\n<p>\u7279\u5225\u8aaa\u660e\uff1aForwarders \u7684\u597d\u8655\u8207\u554f\u984c\u5206\u6790<\/li>\n<\/ul>\n<p>\u95dc\u65bc forwarder \u7684\u597d\u8655\u8207\u58de\u8655\uff0c\u5176\u5be6\u6709\u5f88\u591a\u7a2e\u7684\u610f\u898b\uff01\u5927\u81f4\u7684\u610f\u898b\u53ef\u5206\u70ba\u9019\u5169\u6d3e\uff1a<\/p>\n<ul>\n<li>\u5229\u7528 Forwarder \u7684\u529f\u80fd\u4f86\u589e\u9032\u6548\u80fd\u7684\u7406\u8ad6\uff1a<br \/>\n\u9019\u4e9b\u670b\u53cb\u5011\u8a8d\u70ba\uff0c\u7576\u5f88\u591a\u7684\u4e0b\u5c64 DNS \u4f3a\u670d\u5668\u90fd\u4f7f\u7528 forwarder \u6642\uff0c\u90a3\u9ebc\u90a3\u500b\u88ab\u8a2d\u5b9a\u70ba forwarder \u7684\u4e3b\u6a5f\uff0c\u7531\u65bc\u6703\u8a18\u9304\u5f88\u591a\u7684\u67e5\u8a62\u8cc7\u8a0a\u8a18\u9304 (\u8acb\u53c3\u8003<a href=\"http:\/\/linux.vbird.org\/linux_server\/0350dns.php#fig19.1-4\">\u5716 19.1-4<\/a> \u7684\u8aaa\u660e)\uff0c\u56e0\u6b64\uff0c\u5c0d\u65bc\u90a3\u4e9b\u4e0b\u5c64\u7684 DNS \u4f3a\u670d\u5668\u800c\u8a00\uff0c\u67e5\u8a62\u901f\u5ea6\u6703\u589e\u5feb\u5f88\u591a\uff0c\u4ea6\u5373\u6703\u7bc0\u7701\u5f88\u591a\u7684\u67e5\u8a62\u6642\u9593\uff01\u56e0\u70ba forwarder \u4f3a\u670d\u5668\u88e1\u9762\u6709\u8f03\u591a\u7684\u5feb\u53d6\u8a18\u9304\u4e86\uff0c \u6240\u4ee5\u5305\u62ec forwarder \u672c\u8eab\uff0c\u4ee5\u53ca\u6240\u6709\u5411\u9019\u90e8 forwarder \u8981\u6c42\u8cc7\u6599\u7684 DNS \u4f3a\u670d\u5668\uff0c\u90fd\u80fd\u5920\u6e1b\u5c11\u5f80 . \u67e5\u8a62\u7684\u6a5f\u6703\uff0c \u56e0\u6b64\u901f\u5ea6\u7576\u7136\u589e\u52a0\u3002<\/li>\n<li>\u5229\u7528 Forwarder \u53cd\u800c\u6703\u4f7f\u6574\u9ad4\u7684\u6548\u80fd\u964d\u4f4e\uff1a<br \/>\n\u4f46\u662f\u53e6\u5916\u4e00\u6d3e\u5247\u6301\u76f8\u53cd\u7684\u898b\u89e3\uff01\u9019\u662f\u56e0\u70ba\u7576\u4e3b DNS \u672c\u8eab\u7684\u300e\u696d\u52d9\u91cf\u300f\u5c31\u5f88\u7e41\u5fd9\u7684\u6642\u5019\uff0c\u90a3\u9ebc\u4f60\u7684 cache only DNS \u4f3a\u670d\u5668\u9084\u5411\u4ed6\u8981\u6c42\u8cc7\u6599\uff0c\u56e0\u70ba\u4ed6\u539f\u672c\u7684\u8cc7\u6599\u50b3\u8f38\u91cf\u5c31\u592a\u5927\u4e86\uff0c\u983b\u5bec\u65b9\u9762\u53ef\u80fd\u8ca0\u8377\u4e0d\u91cf\uff0c\u800c\u592a\u591a\u7684\u4e0b\u5c64 DNS \u9084\u5411\u4ed6\u8981\u6c42\u8cc7\u6599\uff0c\u6240\u4ee5\u4ed6\u7684\u67e5\u8a62\u901f\u5ea6\u6703\u8b8a\u6162\uff01\u56e0\u70ba\u67e5\u8a62\u901f\u5ea6\u8b8a\u6162\u4e86\uff0c\u800c\u4f60\u7684 cache only server \u53c8\u662f\u5411\u4ed6\u63d0\u51fa\u8981\u6c42\u7684\uff0c\u6240\u4ee5\u81ea\u7136\u5169\u908a\u7684\u67e5\u8a62\u901f\u5ea6\u5c31\u6703\u540c\u6b65\u4e0b\u964d\uff01<\/li>\n<\/ul>\n<p>\u5f88\u591a\u7a2e\u8aaa\u6cd5\u5566\uff01\u9ce5\u54e5\u672c\u4eba\u4e5f\u89ba\u5f97\u5f88\u6709\u8da3\u54e9\uff01\u53ea\u662f\u4e0d\u77e5\u9053\u54ea\u4e00\u6d3e\u8f03\u6b63\u78ba\u5c31\u662f\u4e86\uff0c\u4e0d\u904e\u53ef\u4ee5\u77e5\u9053\u7684\u662f\uff0c\u5982\u679c\u4e0a\u5c64\u7684 DNS \u901f\u5ea6\u5f88\u5feb\u7684\u8a71\uff0c\u90a3\u9ebc\u4ed6\u88ab\u8a2d\u5b9a\u70ba forwarder \u6642\uff0c\u6216\u8a31\u771f\u7684\u53ef\u4ee5\u589e\u52a0\u4e0d\u5c11\u6548\u80fd\u54e9\uff01<\/p>\n<hr \/>\n<p><a name=\"DNS_master\"><\/a><img loading=\"lazy\" decoding=\"async\" src=\"http:\/\/linux.vbird.org\/images\/penguin-m.gif\" alt=\"\u5927\u6a19\u984c\u7684\u5716\u793a\" width=\"25\" height=\"34\" align=\"middle\" \/>19.4 DNS \u4f3a\u670d\u5668\u7684\u8a73\u7d30\u8a2d\u5b9a<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<p>\u597d\u4e86\uff0c\u7d93\u904e\u4e0a\u9762\u7684\u8aaa\u660e\u5f8c\uff0c\u6211\u5011\u5927\u6982\u77e5\u9053 DNS \u7684\u5e7e\u500b\u5c0f\u7d30\u7bc0\u662f\u9019\u6a23\u7684\uff1a<\/p>\n<ol>\n<li>DNS \u4f3a\u670d\u5668\u7684\u67b6\u8a2d\u9700\u8981\u4e0a\u5c64 DNS \u7684\u6388\u6b0a\u624d\u53ef\u4ee5\u6210\u70ba\u5408\u6cd5\u7684 DNS \u4f3a\u670d\u5668 (\u5426\u5247\u53ea\u662f\u7df4\u529f)\uff1b<\/li>\n<li>\u8a2d\u5b9a\u6a94\u4f4d\u7f6e\uff1a\u76ee\u524d bind \u7a0b\u5f0f\u5df2\u9032\u884c chroot\uff0c\u76f8\u95dc\u76ee\u9304\u53ef\u53c3\u8003 \/etc\/sysconfig\/named\uff1b<\/li>\n<li>named \u4e3b\u8981\u8a2d\u5b9a\u6a94\u662f \/etc\/named.conf\uff1b<\/li>\n<li>\u6bcf\u500b\u6b63\u3001\u53cd\u89e3\u9818\u57df\u90fd\u9700\u8981\u4e00\u500b\u8cc7\u6599\u5eab\u6a94\u6848\uff0c\u800c\u6a94\u540d\u5247\u662f\u7531 \/etc\/named.conf \u6240\u8a2d\u5b9a\uff1b<\/li>\n<li>\u7576 DNS \u67e5\u8a62\u6642\uff0c\u82e5\u672c\u8eab\u6c92\u6709\u8cc7\u6599\u5eab\u6a94\u6848\uff0c\u5247\u524d\u5f80 root (.) \u6216 forwarders \u4f3a\u670d\u5668\u67e5\u8a62\uff1b<\/li>\n<li>named \u662f\u5426\u555f\u52d5\u6210\u529f\u52d9\u5fc5\u8981\u67e5\u95b1 \/var\/log\/messages \u5167\u7684\u8cc7\u8a0a\uff01<\/li>\n<\/ol>\n<p>\u5176\u4e2d\u7b2c\u4e00\u9ede\u5f88\u91cd\u8981\uff0c\u56e0\u70ba\u6211\u5011\u5c1a\u672a\u5411\u4e0a\u5c64 ISP \u8a3b\u518a\u5408\u6cd5\u7684\u9818\u57df\u540d\u7a31\uff0c\u6240\u4ee5\u6211\u5011\u7576\u7136\u5c31\u6c92\u6709\u6b0a\u5229\u67b6\u8a2d\u5408\u6cd5\u7684 DNS \u4f3a\u670d\u5668\u4e86\u3002 \u800c\u7531\u65bc\u64d4\u5fc3\u6211\u5011\u7684 DNS \u4f3a\u670d\u5668\u6703\u8207\u5916\u90e8\u7db2\u969b\u7db2\u8def\u74b0\u5883\u4e92\u76f8\u5e72\u64fe\uff0c\u6240\u4ee5\u5e95\u4e0b\u9ce5\u54e5\u5c07\u4e3b\u8981\u4ee5\u4e00\u500b centos.vbird \u7684\u9818\u57df\u540d\u7a31\u4f86\u67b6\u8a2d DNS \u4f3a\u670d\u5668\uff0c\u5982\u6b64\u4e00\u4f86\u54b1\u5011\u5c31\u53ef\u4ee5\u597d\u597d\u7684\u73a9\u4e00\u73a9\u81ea\u5df1\u5340\u57df\u7db2\u8def\u5167\u7684 DNS \u5566\uff01<\/p>\n<hr \/>\n<p><a name=\"DNS_master_rr\"><\/a><img loading=\"lazy\" decoding=\"async\" src=\"http:\/\/linux.vbird.org\/images\/penguin-s.gif\" alt=\"\u5c0f\u6a19\u984c\u7684\u5716\u793a\" width=\"16\" height=\"23\" align=\"middle\" \/>19.4.1 \u6b63\u89e3\u6a94\u8a18\u9304\u7684\u8cc7\u6599 (Resource Record, RR)<\/p>\n<p>\u65e2\u7136 DNS \u6700\u65e9\u4e4b\u524d\u7684\u76ee\u7684\u5c31\u662f\u8981\u5f9e\u4e3b\u6a5f\u540d\u7a31\u53bb\u627e\u5230 IP\uff0c\u6240\u4ee5\u5c31\u8b93\u6211\u5011\u5148\u5f9e\u6b63\u89e3 zone \u4f86\u8ac7\u8d77\u5427\u3002\u65e2\u7136\u8981\u8ac7\u6b63\u89e3\uff0c \u90a3\u9ebc\u5c31\u61c9\u8a72\u8981\u77ad\u89e3\u6b63\u89e3\u6a94\u6848\u8a18\u9304\u7684\u8cc7\u8a0a\u6709\u54ea\u4e9b\u5427\uff1f\u5728\u9019\u500b\u5c0f\u7bc0\u88e1\u9762\uff0c\u6211\u5011\u5c31\u5148\u4f86\u8ac7\u8ac7\u6b63\u89e3 zone \u5e38\u5e38\u8a18\u9304\u7684\u8cc7\u6599\u6709\u54ea\u4e9b\u5427\u3002<\/p>\n<ul>\n<li>\n<hr \/>\n<p>\u6b63\u89e3\u6a94\u8cc7\u6e90\u8a18\u9304 (resource record, RR) \u683c\u5f0f<\/li>\n<\/ul>\n<p>\u6211\u5011\u5f9e\u524d\u9762\u5e7e\u500b\u5c0f\u7bc0\u7684 dig \u6307\u4ee4\u8f38\u51fa\u7d50\u679c\u4e2d\uff0c\u53ef\u4ee5\u767c\u73fe\u5230\u4e00\u500b\u6709\u8da3\u7684\u549a\u549a\uff0c\u90a3\u5c31\u662f\u8f38\u51fa\u7684\u8cc7\u6599\u683c\u5f0f\u4f3c\u4e4e\u662f\u56fa\u5b9a\u7684\uff01 \u8209\u4f8b\u4f86\u8aaa\uff0c\u67e5\u8a62 www.ksu.edu.tw \u7684 IP \u6642\uff0c\u8f38\u51fa\u7684\u7d50\u679c\u70ba\uff1a<\/p>\n<pre>[root@www ~]# dig www.ksu.edu.tw\r\n....(\u524d\u9762\u7701\u7565)....\r\n;; ANSWER SECTION:\r\nwww.ksu.edu.tw.         2203    IN      A       120.114.100.101\r\n\r\n;; AUTHORITY SECTION:\r\nksu.edu.tw.             911     IN      NS      dns1.ksu.edu.tw.\r\n....(\u5f8c\u9762\u7701\u7565)....\r\n# \u4e0a\u9762\u7684\u8f38\u51fa\u8cc7\u6599\u5df2\u7d93\u88ab\u7c21\u5316\u904e\u4e86\uff0c\u91cd\u9ede\u662f\u8981\u5927\u5bb6\u77ad\u89e3 RR \u7684\u683c\u5f0f\r\n<\/pre>\n<p>\u5728\u7b54\u6848\u7684\u8f38\u51fa\u968e\u6bb5\uff0c\u4e3b\u8981\u67e5\u8a62\u5f97\u5230\u7684\u662f A \u7684\u6a19\u8a8c\uff0c\u5728\u8a8d\u8b49\u968e\u6bb5\uff0c\u5247\u662f\u63d0\u4f9b ksu.edu.tw \u7684 NS \u4f3a\u670d\u5668\u70ba\u54ea\u4e00\u90e8\u7684\u610f\u601d\u3002 \u683c\u5f0f\u975e\u5e38\u63a5\u8fd1\uff0c\u53ea\u662f A \u5f8c\u9762\u63a5 IP\uff0c\u800c NS \u5f8c\u9762\u63a5\u4e3b\u6a5f\u540d\u7a31\u800c\u5df2\u3002\u6211\u5011\u53ef\u4ee5\u5c07\u6574\u500b\u8f38\u51fa\u7684\u683c\u5f0f\u7c21\u5316\u6210\u70ba\u5982\u4e0b\u7684\u8aaa\u660e\uff1a<\/p>\n<pre>[domain]   [ttl]          IN [[RR type]  [RR data]]\r\n[\u5f85\u67e5\u8cc7\u6599] [\u66ab\u5b58\u6642\u9593(\u79d2)] IN [[\u8cc7\u6e90\u985e\u578b] [\u8cc7\u6e90\u5167\u5bb9]]\r\n<\/pre>\n<p>\u4e0a\u8868\u4e2d\uff0c\u95dc\u9375\u5b57 IN \u662f\u56fa\u5b9a\u7684\uff0c\u800c RR type \u8207 RR data \u5247\u662f\u4e92\u6709\u95dc\u9023\u6027\u7684\uff0c\u4f8b\u5982\u525b\u525b\u624d\u63d0\u904e\u7684 A \u5c31\u662f\u63a5 IP \u800c\u4e0d\u662f\u4e3b\u6a5f\u540d\u7a31\u554a\u3002\u6b64\u5916\uff0c\u5728 domain \u7684\u90e8\u5206\uff0c\u82e5\u53ef\u80fd\u7684\u8a71\uff0c\u8acb\u76e1\u91cf\u4f7f\u7528 FQDN\uff0c\u4ea6\u5373\u662f\u4e3b\u6a5f\u540d\u7a31\u7d50\u5c3e\u52a0\u4e0a\u4e00\u500b\u5c0f\u6578\u9ede\u7684 (.) \u5c31\u88ab\u7a31\u70ba FQDN \u4e86\uff01\u4f8b\u5982\u525b\u525b dig www.ksu.edu.tw \u7684\u8f38\u51fa\u7d50\u679c\u4e2d\uff0c\u5728\u7b54\u6848\u968e\u6bb5\u6642\uff0c\u641c\u5c0b\u7684\u4e3b\u6a5f\u540d\u7a31\u6703\u8b8a\u6210 www.ksu.edu.tw. \u5594\uff01\u6ce8\u610f\u770b\u6700\u5f8c\u9762\u6709\u500b\u5c0f\u6578\u9ede\u5594\uff01\u90a3\u500b\u5c0f\u6578\u9ede\u975e\u5e38\u91cd\u8981\uff01<\/p>\n<p>\u81f3\u65bc ttl \u5c31\u662f time to live \u7684\u7e2e\u5beb\uff0c\u610f\u601d\u5c31\u662f\u7576\u9019\u7b46\u8a18\u9304\u88ab\u5176\u4ed6 DNS \u4f3a\u670d\u5668\u67e5\u8a62\u5230\u5f8c\uff0c \u9019\u500b\u8a18\u9304\u6703\u4fdd\u6301\u5728\u5c0d\u65b9 DNS \u4f3a\u670d\u5668\u7684\u5feb\u53d6\u4e2d\uff0c\u4fdd\u6301\u591a\u5c11\u79d2\u9418\u7684\u610f\u601d\u3002\u6240\u4ee5\uff0c\u7576\u4f60\u53cd\u8986\u57f7\u884c dig www.ksu.edu.tw \u4e4b\u5f8c\uff0c\u5c31\u6703\u767c\u73fe\u9019\u500b\u6642\u9593\u6703\u6e1b\u5c11\uff01\u70ba\u4ec0\u9ebc\u5462\uff1f\u56e0\u70ba\u5728\u4f60\u7684 DNS \u5feb\u53d6\u4e2d\uff0c\u9019\u7b46\u8cc7\u6599\u80fd\u5920\u4fdd\u5b58\u7684\u6642\u9593\u6703\u958b\u59cb\u5012\u6578\uff0c \u7576\u9019\u500b\u6578\u5b57\u6b78\u96f6\u5f8c\uff0c\u4e0b\u6b21\u6709\u4eba\u518d\u91cd\u65b0\u641c\u5c0b\u9019\u7b46\u8a18\u9304\u6642\uff0c\u4f60\u7684 DNS \u5c31\u6703\u91cd\u65b0\u6cbf\u8457 . (root) \u958b\u59cb\u91cd\u4f86\u641c\u5c0b\u4e00\u904d\uff0c \u800c\u4e0d\u6703\u5f9e\u5feb\u53d6\u88e1\u9762\u6349\u53d6\u4e86 (\u56e0\u70ba\u5feb\u53d6\u5167\u7684\u8cc7\u6599\u6703\u88ab\u6368\u68c4)\u3002<\/p>\n<p>\u7531\u65bc ttl \u53ef\u7531\u7279\u5b9a\u7684\u53c3\u6578\u4f86\u7d71\u4e00\u63a7\u7ba1\uff0c\u56e0\u6b64\u5728 RR \u7684\u8a18\u9304\u683c\u5f0f\u4e2d\uff0c\u901a\u5e38\u9019\u500b ttl \u7684\u6b04\u4f4d\u662f\u53ef\u4ee5\u5ffd\u7565\u7684\u3002 \u90a3\u9ebc\u5e38\u898b\u7684 RR \u6709\u54ea\u4e9b\u5462\uff1f\u6211\u5011\u5c07\u6b63\u89e3\u6a94\u7684 RR \u8a18\u9304\u683c\u5f0f\u5f59\u6574\u5982\u4e0b\uff1a<\/p>\n<pre># \u5e38\u898b\u7684\u6b63\u89e3\u6a94 RR \u76f8\u95dc\u8cc7\u8a0a\r\n[domain]    IN  [[RR type]  [RR data]]\r\n\u4e3b\u6a5f\u540d\u7a31.   IN  A           IPv4 \u7684 IP \u4f4d\u5740\r\n\u4e3b\u6a5f\u540d\u7a31.   IN  AAAA        IPv6 \u7684 IP \u4f4d\u5740\r\n\u9818\u57df\u540d\u7a31.   IN  NS          \u7ba1\u7406\u9019\u500b\u9818\u57df\u540d\u7a31\u7684\u4f3a\u670d\u5668\u4e3b\u6a5f\u540d\u5b57.\r\n\u9818\u57df\u540d\u7a31.   IN  SOA         \u7ba1\u7406\u9019\u500b\u9818\u57df\u540d\u7a31\u7684\u4e03\u500b\u91cd\u8981\u53c3\u6578(\u5bb9\u5f8c\u8aaa\u660e)\r\n\u9818\u57df\u540d\u7a31.   IN  MX          \u9806\u5e8f\u6578\u5b57  \u63a5\u6536\u90f5\u4ef6\u7684\u4f3a\u670d\u5668\u4e3b\u6a5f\u540d\u5b57\r\n\u4e3b\u6a5f\u5225\u540d.   IN  CNAME       \u5be6\u969b\u4ee3\u8868\u9019\u500b\u4e3b\u6a5f\u5225\u540d\u7684\u4e3b\u6a5f\u540d\u5b57.\r\n<\/pre>\n<p>\u63a5\u4e0b\u4f86\u6211\u5011\u4ee5\u5d11\u5c71\u79d1\u5927\u7684 DNS \u8a2d\u5b9a\uff0c\u5305\u62ec ksu.edu.tw \u9019\u500b\u9818\u57df (domain, zone)\uff0c\u4ee5\u53ca www.ksu.edu.tw \u9019\u500b\u4e3b\u6a5f\u540d\u7a31 (FQDN) \u7684\u67e5\u8a62\u7d50\u679c\u4f86\u8ddf\u5927\u5bb6\u89e3\u91cb\u6bcf\u500b RR \u8a18\u9304\u7684\u8cc7\u8a0a\u70ba\u4f55\u5466\uff01<\/p>\n<p><a name=\"rr_a\"><\/a><\/p>\n<ul>\n<li>\n<hr \/>\n<p>A, AAAA \uff1a\u67e5\u8a62 IP \u7684\u8a18\u9304<\/li>\n<\/ul>\n<p>\u9019\u500b A \u7684 RR \u985e\u578b\u662f\u5728\u67e5\u8a62\u67d0\u500b\u4e3b\u6a5f\u540d\u7a31\u7684 IP\uff0c\u4e5f\u662f\u6700\u9577\u88ab\u67e5\u8a62\u7684\u4e00\u500b RR \u6a19\u8a8c\u5594\uff01\u8209\u4f8b\u4f86\u8aaa\uff0c\u8981\u627e\u5230 www.ksu.edu.tw \u7684 A \u7684\u8a71\uff0c\u5c31\u662f\u9019\u6a23\u67e5\uff1a<\/p>\n<pre>[root@www ~]# dig [-t a] www.ksu.edu.tw\r\n;; ANSWER SECTION:\r\nwww.ksu.edu.tw.         2987    IN      A       120.114.100.101\r\n# \u4e3b\u6a5fFQDN.             ttl                     \u9019\u90e8\u4e3b\u6a5f\u7684 IP \u5c31\u662f\u9019\u88e1\r\n# \u50c5\u5217\u51fa\u7b54\u6848\u968e\u6bb5\u7684\u8cc7\u6599\uff0c\u5f8c\u7e8c\u7684 RR \u76f8\u95dc\u6a19\u8a8c\u4e5f\u662f\u9019\u6a23\u986f\u793a\u7684\u5594\uff01\r\n# \u6307\u4ee4\u5217\u4e2d\u7684 [-t a] \u53ef\u4ee5\u4e0d\u52a0\uff0c\u800c\u6700\u5de6\u908a\u4e3b\u6a5f\u540d\u7a31\u7d50\u5c3e\u90fd\u6703\u6709\u5c0f\u6578\u9ede\u5594\uff01\r\n<\/pre>\n<p>\u5de6\u908a\u662f\u4e3b\u6a5f\u540d\u7a31\uff0c\u7576\u7136\uff0c\u4f60\u4e5f\u53ef\u4ee5\u8b93\u4f60\u7684 domain \u64c1\u6709\u4e00\u500b A \u7684\u6a19\u8a8c\uff0c\u4f8b\u5982\u300e dig google.com \u300f\u4e5f\u80fd\u627e\u5230 IP\u3002 \u4e0d\u904e\uff0c\u54b1\u5011\u5d11\u5c71\u79d1\u5927\u7684 ksu.edu.tw \u5247\u6c92\u6709\u8a2d\u5b9a IP \u5c31\u662f\u4e86\u3002\u8981\u518d\u6b21\u7279\u5225\u5f37\u8abf\u7684\uff0c\u4e3b\u6a5f\u540d\u7a31\u5982\u679c\u662f\u5168\u540d\uff0c \u7d50\u5c3e\u90e8\u5206\u8acb\u52d9\u5fc5\u52a0\u4e0a\u5c0f\u6578\u9ede\u3002\u5982\u679c\u4f60\u7684 IP \u8a2d\u5b9a\u7684\u662f IPv6 \u7684\u8a71\uff0c\u90a3\u9ebc\u67e5\u8a62\u5c31\u5f97\u8981\u4f7f\u7528 aaaa \u985e\u578b\u624d\u884c\u3002<\/p>\n<p><a name=\"rr_ns\"><\/a><\/p>\n<ul>\n<li>\n<hr \/>\n<p>NS \uff1a\u67e5\u8a62\u7ba1\u7406\u9818\u57df\u540d\u7a31 (zone) \u7684\u4f3a\u670d\u5668\u4e3b\u6a5f\u540d<\/li>\n<\/ul>\n<p>\u5982\u679c\u4f60\u60f3\u8981\u77e5\u9053 www.ksu.edu.tw \u7684\u9019\u7b46\u8a18\u9304\u662f\u7531\u54ea\u90e8 DNS \u4f3a\u670d\u5668\u63d0\u4f9b\u7684\uff0c\u90a3\u5c31\u5f97\u8981\u4f7f\u7528 NS (NameServer) \u7684 RR \u985e\u578b\u6a19\u8a8c\u4f86\u67e5\u8a62\u3002\u4e0d\u904e\uff0c\u7531\u65bc NS \u662f\u7ba1\u7406\u6574\u500b\u9818\u57df\u7684\uff0c\u56e0\u6b64\uff0c\u4f60\u5f97\u8981\u67e5\u8a62\u7684\u76ee\u6a19\u5c07\u5f97\u8f38\u5165 domain\uff0c\u4ea6\u5373 ksu.edu.tw \u624d\u884c\u5594\uff01\u8209\u4f8b\u5982\u4e0b\uff1a<\/p>\n<pre>[root@www ~]# dig -t ns ksu.edu.tw\r\n;; ANSWER SECTION:\r\nksu.edu.tw.             1596    IN      NS  dns1.ksu.edu.tw.\r\n\r\n;; ADDITIONAL SECTION:\r\ndns1.ksu.edu.tw.        577     IN      A   120.114.50.1\r\n# \u9664\u4e86\u5217\u51fa NS \u662f\u54ea\u90e8\u4f3a\u670d\u5668\u4e4b\u5916\uff0c\u8a72\u4f3a\u670d\u5668\u7684 IP \u4e5f\u6703\u984d\u5916\u63d0\u4f9b\uff01\r\n<\/pre>\n<p>\u524d\u9762\u63d0\u904e\uff0cDNS \u4f3a\u670d\u5668\u662f\u5f88\u91cd\u8981\u7684\uff0c\u56e0\u6b64\u81f3\u5c11\u90fd\u6703\u6709\u5169\u90e8\u4ee5\u4e0a\u3002\u5d11\u5c71\u79d1\u5927\u5171\u6709\u4e09\u90e8 DNS \u4f3a\u670d\u5668\uff0c\u9ce5\u54e5\u50c5\u5217\u51fa\u7b2c\u4e00\u90e8\u63d0\u4f9b\u53c3\u8003\u3002 NS \u5f8c\u9762\u6703\u52a0\u4f3a\u670d\u5668\u540d\u7a31\uff0c\u800c\u9019\u500b\u4f3a\u670d\u5668\u7684 IP \u4e5f\u6703\u984d\u5916\u63d0\u4f9b\u624d\u5c0d\uff01\u56e0\u6b64 NS \u7d93\u5e38\u4f34\u96a8 A \u7684\u6a19\u8a8c\u554a\uff01\u9019\u6a23\u4f60\u624d\u80fd\u5230 NS \u53bb\u67e5\u8a62\u8cc7\u6599\u561b\uff01\u9019\u6a23\u8aaa\u6709\u7406\u89e3\u5427\uff1f ^_^<\/p>\n<p><a name=\"rr_soa\"><\/a><\/p>\n<ul>\n<li>\n<hr \/>\n<p>SOA \uff1a\u67e5\u8a62\u7ba1\u7406\u9818\u57df\u540d\u7a31\u7684\u4f3a\u670d\u5668\u7ba1\u7406\u8cc7\u8a0a<\/li>\n<\/ul>\n<p>\u5982\u679c\u4f60\u6709\u591a\u90e8 DNS \u4f3a\u670d\u5668\u7ba1\u7406\u540c\u4e00\u500b\u9818\u57df\u540d\u7a31\u6642\uff0c\u90a3\u9ebc\u6700\u597d\u4f7f\u7528 master\/slave \u7684\u65b9\u5f0f\u4f86\u9032\u884c\u7ba1\u7406\u3002\u65e2\u7136\u8981\u9019\u6a23\u7ba1\u7406\uff0c \u90a3\u5c31\u5f97\u8981\u5ba3\u544a\u88ab\u7ba1\u7406\u7684 zone file \u662f\u5982\u4f55\u9032\u884c\u50b3\u8f38\u7684\uff0c\u6b64\u6642\u5c31\u5f97\u8981 SOA (Start Of Authority) \u7684\u6a19\u8a8c\u4e86\u3002\u5148\u4f86\u77a7\u77a7\u5d11\u5c71\u79d1\u5927\u7684\u8a2d\u5b9a\u662f\u600e\u6a23\uff1a<\/p>\n<pre>[root@www ~]# dig -t soa ksu.edu.tw\r\n;; ANSWER SECTION:\r\nksu.edu.tw.       3600   IN     SOA    dns1.ksu.edu.tw.   abuse.mail.ksu.edu.tw. \r\n  2010080369 1800 900 604800 86400\r\n# \u4e0a\u8ff0\u7684\u8f38\u51fa\u7d50\u679c\u662f\u540c\u4e00\u884c\u5594\uff01\r\n<\/pre>\n<p>SOA \u4e3b\u8981\u662f\u8207\u9818\u57df\u6709\u95dc\uff0c\u6240\u4ee5\u524d\u9762\u7576\u7136\u8981\u5beb ksu.edu.tw \u9019\u500b\u9818\u57df\u540d\u3002\u800c SOA \u5f8c\u9762\u5171\u6703\u63a5\u4e03\u500b\u53c3\u6578\uff0c\u9019\u4e03\u500b\u53c3\u6578\u7684\u610f\u7fa9\u4f9d\u5e8f\u662f\uff1a<\/p>\n<ol>\n<li>Master DNS \u4f3a\u670d\u5668\u4e3b\u6a5f\u540d\u7a31\uff1a\u9019\u500b\u9818\u57df\u4e3b\u8981\u662f\u54ea\u90e8 DNS \u4f5c\u70ba master \u7684\u610f\u601d\u3002\u5728\u672c\u4f8b\u4e2d\uff0c dns1.ksu.edu.tw \u70ba ksu.edu.tw \u9019\u500b\u9818\u57df\u7684\u4e3b\u8981 DNS \u4f3a\u670d\u5668\u56c9\uff1b<\/li>\n<li>\u7ba1\u7406\u54e1\u7684 email\uff1a\u90a3\u9ebc\u7ba1\u7406\u54e1\u7684 email \u70ba\u4f55\uff1f\u767c\u751f\u554f\u984c\u53ef\u4ee5\u806f\u7d61\u9019\u500b\u7ba1\u7406\u54e1\u3002\u8981\u6ce8\u610f\u7684\u662f\uff0c \u7531\u65bc @ \u5728\u8cc7\u6599\u5eab\u6a94\u6848\u4e2d\u662f\u6709\u7279\u5225\u610f\u7fa9\u7684\uff0c\u56e0\u6b64\u9019\u88e1\u5c31\u5c07 abuse@mail.ksu.edu.tw \u6539\u5beb\u6210 abuse.mail.ksu.edu.tw \uff0c\u9019\u6a23\u770b\u7684\u61c2\u4e86\u55ce\uff1f<\/li>\n<li>\u5e8f\u865f (Serial)\uff1a\u9019\u500b\u5e8f\u865f\u4ee3\u8868\u7684\u662f\u9019\u500b\u8cc7\u6599\u5eab\u6a94\u6848\u7684\u65b0\u820a\uff0c\u5e8f\u865f\u8d8a\u5927\u4ee3\u8868\u8d8a\u65b0\u3002 \u7576 slave \u8981\u5224\u65b7\u662f\u5426\u4e3b\u52d5\u4e0b\u8f09\u65b0\u7684\u8cc7\u6599\u5eab\u6642\uff0c\u5c31\u4ee5\u5e8f\u865f\u662f\u5426\u6bd4 slave \u4e0a\u7684\u9084\u8981\u65b0\u4f86\u5224\u65b7\uff0c\u82e5\u662f\u5247\u4e0b\u8f09\uff0c\u82e5\u4e0d\u662f\u5247\u4e0d\u4e0b\u8f09\u3002 \u6240\u4ee5\u7576\u4f60\u4fee\u8a02\u4e86\u8cc7\u6599\u5eab\u5167\u5bb9\u6642\uff0c\u8a18\u5f97\u8981\u5c07\u9019\u500b\u6578\u503c\u653e\u5927\u624d\u884c\uff01 \u70ba\u4e86\u65b9\u4fbf\u4f7f\u7528\u8005\u8a18\u61b6\uff0c\u901a\u5e38\u5e8f\u865f\u90fd\u6703\u4f7f\u7528\u65e5\u671f\u683c\u5f0f\u300eYYYYMMDDNU\u300f\u4f86\u8a18\u61b6\uff0c\u4f8b\u5982\u5d11\u5c71\u79d1\u5927\u7684 2010080369 \u5e8f\u865f\u4ee3\u8868 2010\/08\/03 \u7576\u5929\u7684\u7b2c 69 \u6b21\u66f4\u65b0\u7684\u611f\u89ba\u3002\u4e0d\u904e\uff0c\u5e8f\u865f\u4e0d\u53ef\u5927\u65bc 2 \u7684 32 \u6b21\u65b9\uff0c\u4ea6\u5373\u5fc5\u9808\u5c0f\u65bc 4294967296 \u624d\u884c\u5594\u3002<\/li>\n<li>\u66f4\u65b0\u983b\u7387 (Refresh)\uff1a\u90a3\u9ebc\u5565\u6642 slave \u6703\u53bb\u5411 master \u8981\u6c42\u8cc7\u6599\u66f4\u65b0\u7684\u5224\u65b7\uff1f \u5c31\u662f\u9019\u500b\u6578\u503c\u5b9a\u7fa9\u7684\u3002\u5d11\u5c71\u79d1\u5927\u7684 DNS \u8a2d\u5b9a\u6bcf 1800 \u79d2\u9032\u884c\u4e00\u6b21 slave \u5411 master \u8981\u6c42\u8cc7\u6599\u66f4\u65b0\u3002\u90a3\u6bcf\u6b21 slave \u53bb\u66f4\u65b0\u6642\uff0c \u5982\u679c\u767c\u73fe\u5e8f\u865f\u6c92\u6709\u6bd4\u8f03\u5927\uff0c\u90a3\u5c31\u4e0d\u6703\u4e0b\u8f09\u8cc7\u6599\u5eab\u6a94\u6848\u3002<\/li>\n<li>\u5931\u6557\u91cd\u65b0\u5617\u8a66\u6642\u9593 (Retry)\uff1a\u5982\u679c\u56e0\u70ba\u67d0\u4e9b\u56e0\u7d20\uff0c\u5c0e\u81f4 slave \u7121\u6cd5\u5c0d master \u9054\u6210\u9023\u7dda\uff0c \u90a3\u9ebc\u5728\u591a\u4e45\u7684\u6642\u9593\u5167\uff0cslave \u6703\u5617\u8a66\u91cd\u65b0\u9023\u7dda\u5230 master\u3002\u5728\u5d11\u5c71\u79d1\u5927\u7684\u8a2d\u5b9a\u4e2d\uff0c900 \u79d2\u6703\u91cd\u65b0\u5617\u8a66\u4e00\u6b21\u3002\u610f\u601d\u662f\u8aaa\uff0c\u6bcf 1800 \u79d2 slave \u6703\u4e3b\u52d5\u5411 master \u9023\u7dda\uff0c\u4f46\u5982\u679c\u8a72\u6b21\u9023\u7dda\u6c92\u6709\u6210\u529f\uff0c\u90a3\u63a5\u4e0b\u4f86\u5617\u8a66\u9023\u7dda\u7684\u6642\u9593\u6703\u8b8a\u6210 900 \u79d2\u3002\u82e5\u5f8c\u4f86\u6709\u6210\u529f\uff0c\u5247\u53c8\u6703\u6062\u5fa9\u5230 1800 \u79d2\u624d\u518d\u4e00\u6b21\u9023\u7dda\u3002<\/li>\n<li>\u5931\u6548\u6642\u9593 (Expire)\uff1a\u5982\u679c\u4e00\u76f4\u5931\u6557\u5617\u8a66\u6642\u9593\uff0c\u6301\u7e8c\u9023\u7dda\u5230\u9054\u9019\u500b\u8a2d\u5b9a\u503c\u6642\u9650\uff0c \u90a3\u9ebc slave \u5c07\u4e0d\u518d\u7e7c\u7e8c\u5617\u8a66\u9023\u7dda\uff0c\u4e26\u4e14\u5617\u8a66\u522a\u9664\u9019\u4efd\u4e0b\u8f09\u7684 zone file \u8cc7\u8a0a\u3002\u5d11\u5c71\u79d1\u5927\u8a2d\u5b9a\u70ba 604800 \u79d2\u3002\u610f\u601d\u662f\u8aaa\uff0c\u7576\u9023\u7dda\u4e00\u76f4\u5931\u6557\uff0c\u6bcf 900 \u79d2\u5617\u8a66\u5230\u9054 604800 \u79d2\u5f8c\uff0c\u5d11\u5c71\u79d1\u5927\u7684 slave \u5c07\u4e0d\u518d\u66f4\u65b0\uff0c\u53ea\u80fd\u7b49\u5f85\u7cfb\u7d71\u7ba1\u7406\u54e1\u7684\u8655\u7406\u3002<\/li>\n<li>\u5feb\u53d6\u6642\u9593 (Minumum TTL)\uff1a\u5982\u679c\u9019\u500b\u8cc7\u6599\u5eab zone file \u4e2d\uff0c\u6bcf\u7b46 RR \u8a18\u9304\u90fd\u6c92\u6709\u5beb\u5230 TTL \u5feb\u53d6\u6642\u9593\u7684\u8a71\uff0c\u90a3\u9ebc\u5c31\u4ee5\u9019\u500b SOA \u7684\u8a2d\u5b9a\u503c\u70ba\u4e3b\u3002<\/li>\n<\/ol>\n<p>\u9664\u4e86 Serial \u4e0d\u53ef\u4ee5\u8d85\u904e 2 \u7684 32 \u6b21\u65b9\u4e4b\u5916\uff0c\u6709\u6c92\u6709\u5176\u5b83\u7684\u9650\u5236\u554a\u91dd\u5c0d\u9019\u5e7e\u500b\u6578\u503c\uff1f\u662f\u6709\u7684\uff0c\u57fa\u672c\u4e0a\u5c31\u662f\u9019\u6a23\uff1a<\/p>\n<ul>\n<li>Refresh &gt;= Retry *2<\/li>\n<li>Refresh + Retry &lt; Expire<\/li>\n<li>Expire &gt;= Rrtry * 10<\/li>\n<li>Expire &gt;= 7Days<\/li>\n<\/ul>\n<p>\u4e00\u822c\u4f86\u8aaa\uff0c\u5982\u679c DNS RR \u8cc7\u6599\u8b8a\u66f4\u60c5\u6cc1\u983b\u7e41\u7684\uff0c\u90a3\u9ebc\u4e0a\u8ff0\u7684\u76f8\u95dc\u6578\u503c\u53ef\u4ee5\u8a02\u5b9a\u7684\u5c0f\u4e00\u4e9b\uff0c\u5982\u679c DNS RR \u662f\u5f88\u7a69\u5b9a\u7684\uff0c \u70ba\u4e86\u7bc0\u7701\u983b\u5bec\uff0c\u5247\u53ef\u4ee5\u5c07 Refresh \u8a2d\u5b9a\u7684\u8f03\u5927\u4e00\u4e9b\u3002<\/p>\n<p><a name=\"rr_cname\"><\/a><\/p>\n<ul>\n<li>\n<hr \/>\n<p>CNAME \uff1a\u8a2d\u5b9a\u67d0\u4e3b\u6a5f\u540d\u7a31\u7684\u5225\u540d (alias)<\/li>\n<\/ul>\n<p>\u6709\u6642\u5019\u4f60\u4e0d\u60f3\u8981\u91dd\u5c0d\u67d0\u500b\u4e3b\u6a5f\u540d\u7a31\u8a2d\u5b9a A \u7684\u6a19\u8a8c\uff0c\u800c\u662f\u60f3\u900f\u904e\u53e6\u5916\u4e00\u90e8\u4e3b\u6a5f\u540d\u7a31\u7684 A \u4f86\u898f\u7bc4\u9019\u500b\u65b0\u4e3b\u6a5f\u540d\u7a31\u6642\uff0c \u53ef\u4ee5\u4f7f\u7528\u5225\u540d (CNAME) \u7684\u8a2d\u5b9a\u5594\uff01\u8209\u4f8b\u4f86\u8aaa\uff0c\u8ffd\u8e64 www.google.com \u6642\uff0c\u4f60\u6703\u767c\u73fe\u9019\u6a23\uff1a<\/p>\n<pre>[root@www ~]# dig www.google.com\r\n;; ANSWER SECTION:\r\nwww.google.com.         557697  IN      CNAME   www.l.google.com.\r\nwww.l.google.com.       298     IN      A       72.14.203.99\r\n<\/pre>\n<p>\u610f\u601d\u662f\u8aaa\uff0c\u7576\u4f60\u8981\u8ffd\u67e5 www.google.com \u6642\uff0c\u8acb\u627e www.1.google.com \u90a3\u500b\u4e3b\u6a5f\uff0c\u800c\u90a3\u500b\u4e3b\u6a5f\u7684 A \u5c31\u4e0a\u9762\u7b2c\u4e8c\u884c\u7684\u986f\u793a\u4e86\u3002 \u9ce5\u54e5\u5e38\u5e38\u958b\u73a9\u7b11\u7684\u8aaa\uff0c\u4f60\u77e5\u9053\u9ce5\u54e5\u7684\u8eab\u4efd\u8b49\u5b57\u865f\u55ce\uff1f\u4f60\u5230\u6236\u653f\u4e8b\u52d9\u6240\u53bb\u67e5\u300e\u9ce5\u54e5\u300f\u6642\uff0c\u4ed6\u6703\u8aaa\uff1a\u300e\u6c92\u9019\u500b\u4eba\u554a\uff01\u56e0\u70ba\u6c92\u6709\u4eba\u59d3\u9ce5&#8230;\u300f\uff0c \u9019\u500b\u300e\u9ce5\u54e5\u300f\u5c31\u662f\u5225\u540d (CNAME) \uff0c\u800c\u5c0d\u61c9\u5230\u7684\u540d\u7a31\u5c31\u662f\u300e\u8521\u67d0\u67d0\u300f\uff0c\u9019\u500b\u8521\u67d0\u67d0\u624d\u771f\u7684\u6709\u8eab\u4efd\u5b57\u865f\u7684\u610f\u601d\uff5e \u4e00\u5c64\u4e00\u5c64\u53bb\u8ffd\u8e64\u56c9\uff5e<\/p>\n<p>\u9019\u500b CNAME \u6709\u5565\u597d\u8655\u5462\uff1f\u7528 A \u5c31\u597d\u4e86\u5427\uff1f\u5176\u5be6\u9084\u662f\u6709\u597d\u8655\u7684\uff0c\u8209\u4f8b\u4f86\u8aaa\uff0c\u5982\u679c\u4f60\u6709\u4e00\u500b IP\uff0c\u9019\u500b IP \u662f\u7d66\u5f88\u591a\u4e3b\u6a5f\u540d\u7a31\u4f7f\u7528\u7684\u3002 \u90a3\u9ebc\u7576\u4f60\u7684 IP \u66f4\u6539\u6642\uff0c\u6240\u6709\u7684\u8cc7\u6599\u5c31\u5f97\u901a\u901a\u66f4\u65b0 A \u6a19\u8a8c\u624d\u884c\u3002\u5982\u679c\u4f60\u53ea\u6709\u4e00\u500b\u4e3b\u8981\u4e3b\u6a5f\u540d\u7a31\u8a2d\u5b9a A\uff0c\u800c\u5176\u4ed6\u7684\u6a19\u8a8c\u4f7f\u7528 CNAME \u6642\uff0c\u90a3\u9ebc\u7576 IP \u66f4\u6539\uff0c\u90a3\u4f60\u53ea\u8981\u4fee\u8a02\u4e00\u500b A \u7684\u6a19\u8a8c\uff0c\u5176\u4ed6\u7684 CNAME \u5c31\u8ddf\u8457\u8b8a\u52d5\u4e86\uff01\u8655\u7406\u8d77\u4f86\u6bd4\u8f03\u5bb9\u6613\u554a\uff01<\/p>\n<p><a name=\"rr_mx\"><\/a><\/p>\n<ul>\n<li>\n<hr \/>\n<p>MX \uff1a\u67e5\u8a62\u67d0\u9818\u57df\u540d\u7a31\u7684\u90f5\u4ef6\u4f3a\u670d\u5668\u4e3b\u6a5f\u540d\u7a31<\/li>\n<\/ul>\n<p>MX \u662f Mail eXchanger (\u90f5\u4ef6\u4ea4\u63db) \u7684\u610f\u601d\uff0c\u901a\u5e38\u4f60\u7684\u6574\u500b\u9818\u57df\u6703\u8a2d\u5b9a\u4e00\u500b MX \uff0c\u4ee3\u8868\uff0c\u6240\u6709\u5bc4\u7d66\u9019\u500b\u9818\u57df\u7684 email \u61c9\u8a72\u8981\u9001\u5230\u5f8c\u982d\u7684 email server \u4e3b\u6a5f\u540d\u4e0a\u982d\u624d\u662f\u3002\u5148\u770b\u770b\u5d11\u5927\u7684\u8cc7\u6599\uff1a<\/p>\n<pre>[root@www ~]# dig -t mx ksu.edu.tw\r\n;; ANSWER SECTION:\r\nksu.edu.tw.             3600    IN      MX      8 mx01.ksu.edu.tw.\r\n\r\n;; ADDITIONAL SECTION:\r\nmx01.ksu.edu.tw.        3600    IN      A       120.114.100.28\r\n<\/pre>\n<p>\u4e0a\u982d\u7684\u610f\u601d\u662f\u8aaa\uff0c\u7576\u6709\u4fe1\u4ef6\u8981\u9001\u7d66 ksu.edu.tw \u9019\u500b\u9818\u57df\u6642\uff0c\u5247\u9810\u5148\u5c07\u4fe1\u4ef6\u50b3\u9001\u7d66 mx01.ksu.edu.tw \u9019\u90e8\u90f5\u4ef6\u4f3a\u670d\u5668\u7ba1\u7406\uff0c \u7576\u7136\u5566\uff0c\u9019\u90e8 mx01.ksu.edu.tw \u81ea\u7136\u5c31\u662f\u5d11\u5927\u81ea\u5df1\u7ba1\u7406\u7684\u90f5\u4ef6\u4f3a\u670d\u5668\u624d\u884c\uff01MX \u5f8c\u9762\u63a5\u7684\u4e3b\u6a5f\u540d\u7a31\u901a\u5e38\u5c31\u662f\u5408\u6cd5 mail server\uff0c \u800c\u60f3\u8981\u7576 MX \u4f3a\u670d\u5668\uff0c\u5c31\u5f97\u8981\u6709 A \u7684\u6a19\u8a8c\u624d\u884c\uff5e\u6240\u4ee5\u4e0a\u8868\u5f8c\u9762\u5c31\u6703\u51fa\u73fe mx01.ksu.edu.tw \u7684 A \u554a\uff01<\/p>\n<p>\u90a3\u9ebc\u5728 mx01 \u4e4b\u524d\u7684 8 \u662f\u4ec0\u9ebc\u610f\u601d\uff1f\u7531\u65bc\u64d4\u5fc3\u90f5\u4ef6\u6703\u907a\u5931\uff0c\u56e0\u6b64\u8f03\u5927\u578b\u7684\u4f01\u696d\u6703\u6709\u591a\u90e8\u9019\u6a23\u7684\u4e0a\u5c64\u90f5\u4ef6\u4f3a\u670d\u5668\u4f86\u9810\u5148\u6536\u53d7\u4fe1\u4ef6\u3002 \u90a3\u9ebc\u5230\u5e95\u54ea\u90e8\u90f5\u4ef6\u4e3b\u6a5f\u6703\u5148\u6536\u4e0b\u5462\uff1f\u5c31\u4ee5\u6578\u5b57\u8f03\u5c0f\u7684\u90a3\u90e8\u512a\u5148\u56c9\uff01\u8209\u4f8b\u4f86\u8aaa\uff0c\u5982\u679c\u4f60\u53bb\u67e5 google.com \u7684 MX \u6a19\u8a8c\uff0c \u5c31\u6703\u767c\u73fe\u4ed6\u6709 5 \u90e8\u9019\u6a23\u7684\u4f3a\u670d\u5668\u5462\uff01<\/p>\n<hr \/>\n<p><a name=\"DNS_master_rr_re\"><\/a><img loading=\"lazy\" decoding=\"async\" src=\"http:\/\/linux.vbird.org\/images\/penguin-s.gif\" alt=\"\u5c0f\u6a19\u984c\u7684\u5716\u793a\" width=\"16\" height=\"23\" align=\"middle\" \/>19.4.2 \u53cd\u89e3\u6a94\u8a18\u9304\u7684 RR \u8cc7\u6599<\/p>\n<p>\u8b1b\u5b8c\u4e86\u6b63\u89e3\u4f86\u8ac7\u8ac7\u53cd\u89e3\u5427\uff01\u5728\u8b1b\u53cd\u89e3\u4e4b\u524d\uff0c\u5148\u4f86\u8ac7\u8ac7\u6b63\u89e3\u4e3b\u6a5f\u540d\u7a31\u7684\u8ffd\u8e64\u65b9\u5f0f\u3002\u4ee5 www.ksu.edu.tw. \u4f86\u8aaa\uff0c\u6574\u500b\u7db2\u57df\u7684\u6982\u5ff5\u4f86\u770b\uff0c \u8d8a\u53f3\u908a\u51fa\u73fe\u7684\u540d\u7a31\u4ee3\u8868\u7db2\u57df\u8d8a\u5927\uff01\u8209\u4f8b\u4f86\u8aaa\uff0c.(root) &gt; tw &gt; edu \u4ee5\u6b64\u985e\u63a8\u3002\u56e0\u6b64\u8ffd\u8e64\u6642\uff0c\u662f\u7531\u5927\u7bc4\u570d\u627e\u5230\u5c0f\u7bc4\u570d\uff0c \u6700\u5f8c\uff0c\u6211\u5011\u5c31\u77e5\u9053\u8ffd\u8e64\u7684\u65b9\u5411\u5982<a href=\"http:\/\/linux.vbird.org\/linux_server\/0350dns.php#fig19.1-4\">\u5716 19.1-4<\/a> \u6240\u793a\u90a3\u6a23\u3002<\/p>\n<p>\u4f46\u662f IP \u5247\u4e0d\u4e00\u6a23\u554a\uff01\u4ee5\u5d11\u5927\u7684 120.114.100.101 \u4f86\u8aaa\u597d\u4e86\uff0c\u7576\u7136\u662f 120 &gt; 114 &gt; 100 &gt; 101 \uff0c\u5de6\u908a\u7684\u7db2\u57df\u6700\u5927\uff01 \u8207\u9810\u8a2d\u7684 DNS \u5f9e\u53f3\u908a\u5411\u5de6\u908a\u67e5\u8a62\u4e0d\u4e00\u6a23\u554a\uff01\u90a3\u600e\u8fa6\uff1f\u70ba\u4e86\u89e3\u6c7a\u9019\u500b\u554f\u984c\uff0c\u6240\u4ee5\u53cd\u89e3\u7684 zone \u5c31\u5fc5\u9808\u8981\u5c07 IP \u53cd\u904e\u4f86\u5beb\uff0c\u800c\u5728\u7d50\u5c3e\u6642\u52a0\u4e0a .in-addr.arpa. \u7684\u7d50\u5c3e\u5b57\u6a23\u5373\u53ef\u3002\u6240\u4ee5\uff0c\u7576\u4f60\u60f3\u8981\u8ffd\u8e64\u53cd\u89e3\u6642\uff0c\u90a3\u9ebc\u53cd\u89e3\u7684\u7d50\u679c\u5c31\u6703\u662f\uff1a<\/p>\n<pre>[root@www ~]# dig -x 120.114.100.101\r\n;; ANSWER SECTION:\r\n101.100.114.120.in-addr.arpa. 3600 IN   PTR     www.ksu.edu.tw.\r\n<\/pre>\n<p>\u4f8b\u5982\u4e0a\u8ff0\u7684\u7d50\u679c\u4e2d\uff0c\u6211\u5011\u8981\u67e5\u8a62\u7684\u4e3b\u6a5f\u540d\u7a31\u7adf\u7136\u8b8a\u6210\u4e86 IP \u53cd\u8f49\u7684\u6a21\u6a23\uff01\u6240\u4ee5\u624d\u7a31\u70ba\u53cd\u89e3\u561b\uff01\u800c\u53cd\u89e3\u7684\u6a19\u8a8c\u6700\u91cd\u8981\u7684\u5c31\u662f PTR \u4e86\uff01<\/p>\n<p><a name=\"rr_ptr\"><\/a><\/p>\n<ul>\n<li>\n<hr \/>\n<p>PTR \uff1a\u5c31\u662f\u53cd\u89e3\u554a\uff01\u6240\u4ee5\u662f\u67e5\u8a62 IP \u6240\u5c0d\u61c9\u7684\u4e3b\u6a5f\u540d\u7a31<\/li>\n<\/ul>\n<p>\u9032\u884c\u53cd\u89e3\u6642\uff0c\u8981\u6ce8\u610f\u7684\u5c31\u662f zone \u7684\u540d\u7a31\u4e86\uff01\u8981\u5c07 IP \u53cd\u8f49\u904e\u4f86\u5beb\uff0c\u4e26\u4e14\u7d50\u5c3e\u52a0\u4e0a .in-addr.arpa. \u624d\u884c\uff01 \u4f8b\u5982 120.114.100.0\/24 \u9019\u500b class C IP \u7db2\u6bb5\u7684\u53cd\u89e3\u8a2d\u5b9a\uff0c\u5c31\u5fc5\u9808\u8981\u5beb\u6210\uff1a 100.114.120.in-addr.arpa. \u9019\u6a23\u7684 zone \u540d\u7a31\u624d\u884c\u3002 \u800c PTR \u5f8c\u9762\u63a5\u7684\u81ea\u7136\u5c31\u662f\u4e3b\u6a5f\u540d\u7a31\u56c9\uff01<\/p>\n<p>\u5728\u53cd\u89e3\u6700\u91cd\u8981\u7684\u5730\u65b9\u5c31\u662f\uff1a\u5f8c\u9762\u7684\u4e3b\u6a5f\u540d\u7a31\u76e1\u91cf\u4f7f\u7528\u5b8c\u6574 FQDN\uff0c\u4ea6\u5373\u52a0\u4e0a\u5c0f\u6578\u9ede (.) \uff01\u70ba\u4ec0\u9ebc\u5462\uff1f\u8209 100.114.120.in-addr.arpa. \u70ba\u4f8b\uff0c\u5982\u679c\u4f60\u53ea\u662f\u586b\u5beb\u4e3b\u6a5f\u540d\u7a31\uff0c\u4e26\u6c92\u6709\u586b\u5beb\u9818\u57df\u540d\u7a31\uff0c \u90a3\u9ebc\u7576\u4eba\u5bb6\u8ffd\u8e64\u4f60\u7684\u4e3b\u6a5f\u540d\u7a31\u6642\uff0c\u4f60\u7684\u4e3b\u6a5f\u540d\u7a31\u6703\u8b8a\u6210\uff1a www.100.114.120.in-addr.arpa. \u7684\u602a\u6a21\u6a23\u3002 \u9019\u662f\u6bd4\u8f03\u9700\u8981\u6ce8\u610f\u7684\u5730\u65b9\u3002<\/p>\n<p><b>Tips:<\/b><br \/>\n\u8001\u5be6\u8aaa\uff0c\u9ce5\u5712\u8a0e\u8ad6\u5340\u7684\u4e00\u4e9b\u6709\u7d93\u9a57\u7684\u670b\u53cb\u4e00\u76f4\u5728\u8b1b\uff0c\u5982\u679c\u64d4\u5fc3\u6703\u6709\u8aa4\u89e3\uff0c\u4e3b\u6a5f\u540d\u7a31\u7684\u8a2d\u5b9a\u5247\u901a\u901a\u8a18\u5f97\u662f\u8981\u586b\u5beb FQDN \u5c31\u662f\u4e86\uff01 \u9019\u6a23\u7d55\u5c0d\u4e0d\u6703\u6709\u554f\u984c\uff01 ^_^<br \/>\n<img decoding=\"async\" title=\"\u9ce5\u54e5\u7684\u5716\u793a\" src=\"http:\/\/linux.vbird.org\/images\/vbird_face.gif\" alt=\"\u9ce5\u54e5\u7684\u5716\u793a\" \/><\/p>\n<hr \/>\n<p><a name=\"DNS_master_case\"><\/a><img loading=\"lazy\" decoding=\"async\" src=\"http:\/\/linux.vbird.org\/images\/penguin-s.gif\" alt=\"\u5c0f\u6a19\u984c\u7684\u5716\u793a\" width=\"16\" height=\"23\" align=\"middle\" \/>19.4.3 \u6b65\u9a5f\u4e00\uff1aDNS \u7684\u74b0\u5883\u898f\u5283\uff1a\u6b63\u89e3\u3001\u53cd\u89e3 zone \u7684\u9810\u5148\u5b9a\u7fa9\u6848\u4f8b\u8aaa\u660e<\/p>\n<p>\u73fe\u5728\u5047\u8a2d\u9ce5\u54e5\u7684\u5340\u7db2\u74b0\u5883\u4e2d\u60f3\u8981\u8a2d\u5b9a DNS \u4f3a\u670d\u5668\uff0c\u9ce5\u54e5\u7684\u5340\u7db2\u539f\u672c\u898f\u5283\u7684\u7db2\u57df\u540d\u7a31\u5c31\u662f centos.vbird\uff0c\u4e14\u642d\u914d\u7684 IP \u7db2\u6bb5\u70ba 192.168.100.0\/24 \u9019\u4e00\u6bb5\uff0c\u56e0\u6b64\u4e3b\u8981\u7684\u6b63\u89e3\u7db2\u57df\u70ba centos.vbird\uff0c\u800c\u53cd\u89e3\u7684\u7db2\u57df\u5247\u70ba 192.168.100.0\/24\uff0c \u9ce5\u54e5\u7684\u9019\u90e8 DNS \u4f3a\u670d\u5668\u60f3\u8981\u81ea\u5df1\u627e\u5c0b .(root) \u800c\u4e0d\u900f\u904e forwarders \u7684\u8f14\u52a9\uff0c\u56e0\u6b64\u9084\u5f97\u8981 . \u7684\u9818\u57df\u6b63\u89e3\u6a94\u3002 \u7d9c\u5408\u8d77\u4f86\u8aaa\uff0c\u9ce5\u54e5\u9700\u8981\u8a2d\u5b9a\u5230\u7684\u6a94\u6848\u5c31\u6709\u9019\u5e7e\u500b\uff1a<\/p>\n<ol>\n<li>named.conf (\u4e3b\u8981\u8a2d\u5b9a\u6a94)<\/li>\n<li>named.centos.vbird (\u4e3b\u8981\u7684 centos.vbird \u7684\u6b63\u89e3\u6a94)<\/li>\n<li>named.192.168.100 (\u4e3b\u8981\u7684 192.168.100.0\/24 \u7684\u53cd\u89e3\u6a94)<\/li>\n<li>named.ca (\u7531 bind \u8edf\u9ad4\u63d0\u4f9b\u7684 . \u6b63\u89e3\u6a94)<\/li>\n<\/ol>\n<p>\u5982\u679c\u6211\u9084\u60f3\u8981\u52a0\u5165\u5176\u4ed6\u7684\u9818\u57df\uff0c\u4f8b\u5982 niki.vbird \u53ef\u4e0d\u53ef\u4ee5\u554a\uff1f\u7576\u7136\u53ef\u4ee5\u554a\uff01\u5c31\u518d\u591a\u4e00\u500b\u8cc7\u6599\u5eab\u6b63\u89e3\u6a94\u6848\u5373\u53ef\uff01 \u9084\u6709\uff0c\u9ce5\u54e5\u4e0a\u982d\u9019\u500b\u8a2d\u5b9a\u8cc7\u6599\u70ba\u5167\u90e8\u79c1\u6709\u7684\uff0c\u6240\u4ee5\u4f60\u53ef\u4ee5\u5b8c\u5168\u7167\u8457\u73a9\uff01\u4e26\u4e0d\u6703\u5f71\u97ff\u5230\u5916\u90e8\u7684\u7db2\u969b\u7db2\u8def\u5566\uff01 \u53ea\u662f\uff0c\u7db2\u969b\u7db2\u8def\u4e5f\u67e5\u4e0d\u5230\u4f60\u7684 DNS \u8a2d\u5b9a\u5c31\u662f\u4e86\uff5e\u53cd\u6b63\u662f\u7df4\u529f\u561b\uff01^_^<\/p>\n<p>\u81f3\u65bc\u8cc7\u6599\u5eab\u7684\u6b63\u3001\u53cd\u89e3\u5c0d\u61c9\u4e0a\uff0c\u4f9d\u64da\u5be6\u969b\u7684\u6e2c\u8a66\u74b0\u5883\uff0c\u898f\u5283\u5982\u4e0b (\u4ea6\u8acb\u53c3\u8003\u7b2c\u4e09\u7ae0<a href=\"http:\/\/linux.vbird.org\/linux_server\/0120intranet.php#fig3.2-1\">\u5716 3.2-1<\/a>)\uff1a<\/p>\n<p>\u4f5c\u696d\u7cfb\u7d71\u8207IP<br \/>\n\u4e3b\u6a5f\u540d\u7a31\u8207 RR \u6a19\u8a8c<br \/>\n\u8aaa\u660e<\/p>\n<p>Linux (192.168.100.254)<br \/>\nmaster.centos.vbird (NS, A)<br \/>\nwww.centos.vbird (A)<br \/>\nlinux.centos.vbird (CNAME)<br \/>\nftp.centos.vbird (CNAME)<br \/>\nforum.centos.vbird (CNAME)<br \/>\nwww.centos.vbird (MX)<br \/>\nDNS \u8a2d\u7f6e\u662f\u4f7f\u7528 master.centos.vbird \u9019\u500b DNS \u4f3a\u670d\u5668\u540d\u7a31\u3002\u81f3\u65bc\u9019\u90e8\u4e3b\u6a5f\u7684\u53e6\u4e00\u500b\u4e3b\u8981\u540d\u7a31\u662f www.centos.vbird\uff0c\u5176\u4ed6\u7684\u90fd\u662f CNAME\uff0c\u9019\u6a23\u672a\u4f86\u6bd4\u8f03\u597d\u4fee\u6539\u3002\u540c\u6642\u7d66\u4e88\u4e00\u500b MX \u7684\u6a19\u8a8c\u7d66\u4e3b\u8981\u4e3b\u6a5f\u540d\u5594<\/p>\n<p>Linux (192.168.100.10)<br \/>\nslave.centos.vbird (NS, A)<br \/>\nclientlinux.centos.vbird(A)<br \/>\n\u672a\u4f86\u4f5c\u70ba slave DNS \u7684\u63a5\u73ed\u4eba\uff5e<\/p>\n<p>WinXP (192.168.1.101)<br \/>\nworkstation.centos.vbird (A)<br \/>\n\u4e00\u90e8\u7d93\u5e38\u7528\u4f86\u5de5\u4f5c\u7684\u5de5\u4f5c\u6a5f<\/p>\n<p>WinXP (192.168.100.20)<br \/>\nwinxp.centos.vbird (A)<br \/>\n\u4e00\u90e8\u7528\u4f86\u6e2c\u8a66\u7684 Windows XP<\/p>\n<p>Win7 (192.168.100.30)<br \/>\nwin7.centos.vbird (A)<br \/>\n\u4e00\u90e8\u7528\u4f86\u6e2c\u8a66\u7684 Windows 7<\/p>\n<p>\u8acb\u7279\u5225\u7559\u610f\u554a\uff0c\u4e00\u500b IP \u53ef\u4ee5\u5c0d\u61c9\u7d66\u591a\u500b\u4e3b\u6a5f\u540d\u7a31\uff0c\u540c\u6a23\u7684\uff0c\u4e00\u500b\u4e3b\u6a5f\u540d\u7a31\u53ef\u4ee5\u7d66\u4e88\u591a\u500b IP \u5594\uff01 \u4e3b\u8981\u662f\u56e0\u70ba\u90a3\u90e8 www.centos.vbird \u7684\u6a5f\u5668\u672a\u4f86\u7684\u7528\u9014\u76f8\u7576\u7684\u591a\uff0c\u9ce5\u54e5\u5e0c\u671b\u90a3\u4e00\u90e8\u4e3b\u6a5f\u6709\u591a\u500b\u540d\u7a31\uff0c\u4ee5\u65b9\u4fbf\u672a\u4f86\u984d\u5916\u7684\u898f\u5283\u554a\u3002 \u6240\u4ee5\u5c31\u5c0d\u8a72 IP \u5c0d\u61c9\u4e86\u56db\u500b\u4e3b\u6a5f\u540d\u7a31\u554a\uff01<\/p>\n<p><b>Tips:<\/b><br \/>\n\u5728\u81ea\u5bb6\u8a2d\u7684\u6c92\u6709\u7d93\u904e\u5408\u6cd5\u6388\u6b0a\u7684 DNS \u6700\u597d\u4e0d\u8981\u4ee5 Internet \u4e0a\u9762\u5df2\u7d93\u5b58\u5728\u7684\u9818\u57df\u540d\u7a31\u4f86\u7df4\u7fd2\u67b6\u8a2d\uff01 \u8209\u4f8b\u4f86\u8aaa\uff0c\u5047\u8a2d\u4eca\u5929\u4f60\u4ee5 192.168.100.254 \u90a3\u90e8\u6a5f\u5668\u4f86\u67b6\u8a2d *.yahoo.com \u7684\u9818\u57df\uff0c \u56e0\u70ba\u6211\u5c07 192.168.100.254 \u653e\u7f6e\u5728\u7b2c\u4e00\u4f4d\uff0c\u5c0e\u81f4\u6bcf\u6b21\u7684\u67e5\u8a62\u5176\u5be6 yahoo.com \u9019\u500b\u9818\u57df\u7684\u8cc7\u6599\u90fd\u662f\u76f4\u63a5\u7531 192.168.100.254 \u6240\u63d0\u4f9b\uff0c\u9019\u5f88\u4e0d\u597d\uff5e\u56e0\u70ba\u53ef\u80fd\u6703\u9020\u6210\u4f60\u7684\u7528\u6236\u7aef\u7684\u4e0d\u4fbf\uff5e<br \/>\n<img decoding=\"async\" title=\"\u9ce5\u54e5\u7684\u5716\u793a\" src=\"http:\/\/linux.vbird.org\/images\/vbird_face.gif\" alt=\"\u9ce5\u54e5\u7684\u5716\u793a\" \/><\/p>\n<hr \/>\n<p><a name=\"DNS_master_named.conf\"><\/a><img loading=\"lazy\" decoding=\"async\" src=\"http:\/\/linux.vbird.org\/images\/penguin-s.gif\" alt=\"\u5c0f\u6a19\u984c\u7684\u5716\u793a\" width=\"16\" height=\"23\" align=\"middle\" \/>19.4.4 \u6b65\u9a5f\u4e8c\uff1a\u4e3b\u8a2d\u5b9a\u6a94 \/etc\/named.conf \u7684\u8a2d\u7f6e<\/p>\n<p>\u9019\u500b\u8a2d\u5b9a\u6a94\u8f03\u591a\u7684 options \u53c3\u6578\u6211\u5011\u5df2\u7d93\u5728 <a href=\"http:\/\/linux.vbird.org\/linux_server\/0350dns.php#named.conf_1\">19.3.3<\/a> \u88e1\u9762\u8ac7\u904e\uff0c\u5728\u6211\u5011\u76ee\u524d\u7684\u6848\u4f8b\u4e2d\uff0c \u5247\u5fc5\u9808\u8981\u5c07 forwarders \u76f8\u95dc\u529f\u80fd\u53d6\u6d88\uff0c\u4e26\u52a0\u4e0a\u7981\u6b62\u50b3\u8f38 zone file \u7684\u53c3\u6578\u5373\u53ef\u3002\u81f3\u65bc zone \u7684\u8a2d\u5b9a\u4e0a\uff0c\u5fc5\u9808\u8981\u5305\u542b\u4e0a\u500b\u5c0f\u7bc0\u8ac7\u5230\u7684\u4e09\u500b\u4e3b\u8981\u7684 zone \u5594\uff01\u56e0\u6b64\u9019\u500b\u6a94\u6848\u7684\u4efb\u52d9\u662f\uff1a<\/p>\n<ul>\n<li>options\uff1a\u898f\u7bc4 DNS \u4f3a\u670d\u5668\u7684\u4f7f\u7528\u6b0a\u9650 (\u53ef\u5426\u67e5\u8a62\u3001forward \u8207\u5426\u7b49)\uff1b<\/li>\n<li>zone\uff1a\u8a2d\u5b9a\u51fa zone (domain name) \u4ee5\u53ca zone file \u7684\u6240\u5728 (\u5305\u542b master\/slave\/hint)\uff1b<\/li>\n<li>\u5176\u4ed6\uff1a\u8a2d\u5b9a DNS \u672c\u6a5f\u7ba1\u7406\u4ecb\u9762\u4ee5\u53ca\u5176\u76f8\u95dc\u7684\u91d1\u9470\u6a94\u6848 (key file)\u3002(\u672c\u7ae0\u7a0d\u5f8c\u9032\u968e\u61c9\u7528\u518d\u8ac7)<\/li>\n<\/ul>\n<p>\u90a3\u5c31\u76f4\u63a5\u770b\u4e00\u4e0b\u9ce5\u54e5\u7684\u7bc4\u672c\u5427\uff1a<\/p>\n<pre>[root@www ~]# vim \/etc\/named.conf\r\noptions {\r\n        directory       \"\/var\/named\";\r\n        dump-file       \"\/var\/named\/data\/cache_dump.db\";\r\n        statistics-file \"\/var\/named\/data\/named_stats.txt\";\r\n        memstatistics-file \"\/var\/named\/data\/named_mem_stats.txt\";\r\n        allow-query     { any; };\r\n        recursion yes;\r\n        allow-transfer  { none; };   \/\/ \u4e0d\u8a31\u5225\u4eba\u9032\u884c zone \u8f49\u79fb\r\n};\r\n\r\nzone \".\" IN {\r\n        type hint;\r\n        file \"named.ca\";\r\n};\r\nzone \"centos.vbird\" IN {            \/\/ \u9019\u500b zone \u7684\u540d\u7a31\r\n        type master;                \/\/ \u662f\u4ec0\u9ebc\u985e\u578b\r\n        file \"named.centos.vbird\";  \/\/ \u6a94\u6848\u653e\u5728\u54ea\u88e1\r\n};\r\nzone \"100.168.192.in-addr.arpa\" IN {\r\n        type master;\r\n        file \"named.192.168.100\";\r\n};\r\n<\/pre>\n<p>\u5728 options \u88e1\u9762\u50c5\u65b0\u589e\u4e00\u500b\u65b0\u7684\u53c3\u6578\uff0c\u5c31\u662f allow-transfer\uff0c\u610f\u7fa9\u70ba\uff1a<\/p>\n<ul>\n<li>allow-transfer ( none; };<br \/>\n\u662f\u5426\u5141\u8a31\u4f86\u81ea slave DNS \u5c0d\u6211\u7684\u6574\u500b\u9818\u57df\u8cc7\u6599\u9032\u884c\u50b3\u9001\uff1f\u9019\u500b\u8a2d\u5b9a\u503c\u8207 master\/slave DNS \u4f3a\u670d\u5668\u4e4b\u9593\u7684\u8cc7\u6599\u5eab\u50b3\u9001\u6709\u95dc\u3002\u9664\u975e\u4f60\u6709 slave DNS \u4f3a\u670d\u5668\uff0c\u5426\u5247\u9019\u88e1\u4e0d\u8981\u958b\u653e\u5594\uff01\u56e0\u6b64\u9019\u88e1\u6211\u5011\u5148\u8a2d\u5b9a\u70ba none\u3002<\/li>\n<\/ul>\n<p>\u81f3\u65bc\u5728 zone \u88e1\u9762\u7684\u8a2d\u5b9a\u503c\uff0c\u4e3b\u8981\u5247\u6709\u5e95\u4e0b\u5e7e\u500b\uff1a<\/p>\n<p>zone \u5167\u7684\u76f8\u95dc\u53c3\u6578\u8aaa\u660e<\/p>\n<p>\u8a2d\u5b9a\u503c<br \/>\n\u610f\u7fa9<\/p>\n<p>type<br \/>\n\u8a72 zone \u7684\u985e\u578b\uff0c\u4e3b\u8981\u7684\u985e\u578b\u6709\u91dd\u5c0d . \u7684 hint\uff0c\u4ee5\u53ca\u81ea\u5df1\u624b\u52d5\u4fee\u6539\u8cc7\u6599\u5eab\u6a94\u6848\u7684 master\uff0c\u8207\u53ef\u81ea\u52d5\u66f4\u65b0\u8cc7\u6599\u5eab\u7684 slave\u3002<\/p>\n<p>file<br \/>\n\u5c31\u662f zone file \u7684\u6a94\u540d\u554a\uff01(\u6ce8\u610f chroot \u8207\u5426\u5466\uff01)<\/p>\n<p>\u53cd\u89e3 zone<br \/>\n\u4e3b\u8981\u5c31\u662f in-addr.arpa \u9019\u500b\u73a9\u610f\u5152\uff01\u8acb\u53c3\u8003 <a href=\"http:\/\/linux.vbird.org\/linux_server\/0350dns.php#DNS_master_rr_re\">19.4.2<\/a> \u7684\u89e3\u91cb<\/p>\n<p>\u70ba\u4f55\u6a94\u540d\u90fd\u662f named \u958b\u982d\u5462\uff1f\u9019\u53ea\u662f\u500b\u7fd2\u6163\u800c\u5df2\uff0c\u4f60\u4e5f\u53ef\u4ee5\u4f9d\u64da\u81ea\u5df1\u7684\u7fd2\u6163\u4f86\u8a02\u5b9a\u6a94\u540d\u7684\u3002\u7d93\u904e\u4e0a\u9762\u7684\u8aaa\u660e\uff0c\u6240\u4ee5\u6211\u5011\u6703\u77e5\u9053\uff0czone file \u6a94\u540d\u90fd\u662f\u900f\u904e named.conf \u9019\u500b\u8a2d\u5b9a\u6a94\u4f86\u898f\u7bc4\u7684\u554a\uff01<\/p>\n<hr \/>\n<p><a name=\"DNS_master_root\"><\/a><img loading=\"lazy\" decoding=\"async\" src=\"http:\/\/linux.vbird.org\/images\/penguin-s.gif\" alt=\"\u5c0f\u6a19\u984c\u7684\u5716\u793a\" width=\"16\" height=\"23\" align=\"middle\" \/>19.4.5 \u6b65\u9a5f\u4e09\uff1a\u6700\u4e0a\u5c64 . (root) \u8cc7\u6599\u5eab\u6a94\u6848\u7684\u8a2d\u5b9a<\/p>\n<p>\u5f9e <a href=\"http:\/\/linux.vbird.org\/linux_server\/0350dns.php#fig19.1-4\">\u5716 19.1-4<\/a> \u53ef\u4ee5\u77e5\u9053 . \u7684\u91cd\u8981\u6027\uff01\u90a3\u9ebc\u9019\u500b . \u5728\u54ea\u88e1\u5462\uff1f\u4e8b\u5be6\u4e0a\uff0c\u5b83\u662f\u7531 INTERNIC \u6240\u7ba1\u7406\u7dad\u8b77\u7684\uff0c\u5168\u4e16\u754c\u5171\u6709 13 \u90e8\u7ba1\u7406 . \u7684 DNS \u4f3a\u670d\u5668\u5462\uff01\u76f8\u95dc\u7684\u6700\u65b0\u8a2d\u5b9a\u5728\uff1a<\/p>\n<ul>\n<li><a href=\"ftp:\/\/rs.internic.net\/domain\/named.root\">ftp:\/\/rs.internic.net\/domain\/named.root<\/a><\/li>\n<\/ul>\n<p>\u8981\u4e0d\u8981\u4e0b\u8f09\u6700\u65b0\u7684\u8cc7\u6599\u96a8\u4f60\u4fbf\uff0c\u56e0\u70ba\u6211\u5011\u7684 CentOS 6.x \u5167\u7684 bind \u8edf\u9ad4\u5df2\u7d93\u63d0\u4f9b\u4e86\u4e00\u500b\u540d\u70ba named.ca \u7684\u6a94\u6848\u4e86\uff0c\u9ce5\u54e5\u662f\u76f4\u63a5\u4f7f\u7528\u7cfb\u7d71\u63d0\u4f9b\u7684\u8cc7\u6599\u5566\u3002\u9019\u500b\u6a94\u6848\u7684\u5167\u5bb9\u6709\u9ede\u50cf\u9019\u6a23\uff1a<\/p>\n<pre>[root@www ~]# vim \/var\/named\/named.ca\r\n. &lt;==\u9019\u88e1\u6709\u500b\u5c0f\u6578\u9ede     518400  IN      NS      A.ROOT-SERVERS.NET.\r\nA.ROOT-SERVERS.NET.     3600000 IN      A       198.41.0.4\r\n# \u4e0a\u9762\u9019\u5169\u884c\u662f\u6210\u5c0d\u7684\uff01\u4ee3\u8868\u9ede\u7531 A.ROOT-SERVERS.NET. \u7ba1\u7406\uff0c\u4e26\u9644\u4e0a IP \u67e5\u8a62\r\n. &lt;==\u9019\u88e1\u6709\u500b\u5c0f\u6578\u9ede     518400  IN      NS      M.ROOT-SERVERS.NET.\r\nM.ROOT-SERVERS.NET.     3600000 IN      A       202.12.27.33\r\nM.ROOT-SERVERS.NET.     3600000 IN      AAAA    2001:dc3::35\r\n# \u4e0a\u9762\u9019\u4e09\u884c\u662f\u6210\u5c0d\u7684\uff0c\u4ee3\u8868 M \u958b\u982d\u7684\u4f3a\u670d\u5668\u6709 A \u8207 AAAA \u7684\u8a18\u9304\r\n<\/pre>\n<p>\u76f8\u95dc\u7684\u6b63\u89e3\u6a19\u8a8c NS, A, AAAA \u610f\u7fa9\uff0c\u8acb\u56de <a href=\"http:\/\/linux.vbird.org\/linux_server\/0350dns.php#DNS_master_rr\">19.4.1<\/a> \u53bb\u67e5\u8a62\uff0c\u9019\u88e1\u4e0d\u518d\u89e3\u91cb\u3002 \u6bd4\u8f03\u7279\u6b8a\u7684\u662f\uff0c\u7531\u65bc\u8003\u616e IPv6 \u672a\u4f86\u7684\u6d41\u884c\u6027\uff0c\u56e0\u6b64\u5f88\u591a\u90e8 . \u4f3a\u670d\u5668\u90fd\u52a0\u4e0a AAAA \u7684 IPv6 \u529f\u80fd\u56c9\u3002 \u9019\u500b\u6a94\u6848\u7684\u5167\u5bb9\u4f60\u4e0d\u8981\u4fee\u6539\u554a\uff5e\u56e0\u70ba\u9019\u500b\u5167\u5bb9\u662f Internet \u4e0a\u9762\u901a\u7528\u7684\u8cc7\u6599\uff0c\u4e00\u822c\u4f86\u8aaa\uff0c\u4e5f\u4e0d\u6703\u5e38\u5e38\u8b8a\u52d5\uff0c \u6240\u4ee5\u4e0d\u9700\u8981\u66f4\u52d5\u4ed6\uff0c\u5c07\u4ed6\u653e\u7f6e\u5230\u6b63\u78ba\u7684\u76ee\u9304\u4e26\u6539\u6210\u4f60\u6240\u6307\u5b9a\u7684\u6a94\u540d\u5373\u53ef\u554a\uff01\u63a5\u4e0b\u4f86\u53ef\u4ee5\u770b\u770b\u5176\u4ed6\u6b63\u89e3\u6a94\u6848\u5566\uff01<\/p>\n<hr \/>\n<p><a name=\"DNS_master_name\"><\/a><img loading=\"lazy\" decoding=\"async\" src=\"http:\/\/linux.vbird.org\/images\/penguin-s.gif\" alt=\"\u5c0f\u6a19\u984c\u7684\u5716\u793a\" width=\"16\" height=\"23\" align=\"middle\" \/>19.4.6 \u6b65\u9a5f\u56db\uff1a\u6b63\u89e3\u8cc7\u6599\u5eab\u6a94\u6848\u7684\u8a2d\u5b9a<\/p>\n<p>\u518d\u4f86\u958b\u59cb\u6b63\u89e3\u6a94\u7684\u8a2d\u5b9a\u5427\uff01\u6b63\u89e3\u6a94\u4e00\u5b9a\u8981\u6709\u7684 RR \u6a19\u8a8c\u6709\u5e95\u4e0b\u5e7e\u500b\u5594\uff1a<\/p>\n<ul>\n<li>\u95dc\u65bc\u672c\u9818\u57df\u7684\u57fa\u790e\u8a2d\u5b9a\u65b9\u9762\uff1a\u4f8b\u5982\u5feb\u53d6\u8a18\u61b6\u6642\u9593 (TTL)\u3001\u9818\u57df\u540d\u7a31 (ORIGIN) \u7b49\uff1b<\/li>\n<li>\u95dc\u65bc master\/slave \u7684\u8a8d\u8b49\u65b9\u9762 (SOA)\uff1b<\/li>\n<li>\u95dc\u65bc\u672c\u9818\u57df\u7684\u9818\u57df\u540d\u7a31\u4f3a\u670d\u5668\u6240\u5728\u4e3b\u6a5f\u540d\u7a31\u8207 IP \u5c0d\u61c9 (NS, A)\uff1b<\/li>\n<li>\u5176\u4ed6\u6b63\u53cd\u89e3\u76f8\u95dc\u7684\u8cc7\u6e90\u8a18\u9304 (A, MX, CNAME \u7b49)\u3002<\/li>\n<\/ul>\n<p>\u76f8\u95dc\u7684 RR \u610f\u7fa9\u8acb\u56de <a href=\"http:\/\/linux.vbird.org\/linux_server\/0350dns.php#DNS_master_rr\">19.4.1<\/a> \u53bb\u67e5\u8a62\u3002\u6b64\u5916\uff0c\u9019\u500b\u6a94\u6848\u7684\u7279\u6b8a\u7b26\u865f\u4e5f\u5f97\u8ddf\u5927\u5bb6\u5831\u544a\u4e00\u4e0b\uff1a<\/p>\n<p>\u5b57\u5143<br \/>\n\u610f\u7fa9<\/p>\n<p>\u4e00\u5b9a\u5f9e\u884c\u9996\u958b\u59cb<br \/>\n\u6240\u6709\u8a2d\u5b9a\u8cc7\u6599\u4e00\u5b9a\u8981\u5f9e\u884c\u9996\u958b\u59cb\uff0c\u524d\u9762\u4e0d\u53ef\u6709\u7a7a\u767d\u5b57\u5143\u3002\u82e5\u6709\u7a7a\u767d\u5b57\u5143\uff0c\u4ee3\u8868\u5ef6\u7e8c\u524d\u4e00\u500b domain \u7684\u610f\u601d\uff5e\u975e\u5e38\u91cd\u8981\uff5e<\/p>\n<p>@<br \/>\n\u9019\u500b\u7b26\u865f\u4ee3\u8868 zone \u7684\u610f\u601d\uff01\u4f8b\u5982\u5beb\u5728 named.centos.vbird \u4e2d\uff0c@ \u4ee3\u8868 centos.vbird.\uff0c\u5982\u679c\u5beb\u5728 named.192.168.100 \u6a94\u6848\u4e2d\uff0c\u5247 @ \u4ee3\u8868 100.168.192.in-addr.arpa. \u7684\u610f\u601d (\u53c3\u8003 named.conf \u5167\u7684 zone \u8a2d\u5b9a)<\/p>\n<p>.<br \/>\n\u9019\u500b\u9ede (.) \u5f88\u91cd\u8981\uff01\u56e0\u70ba\u4ed6\u4ee3\u8868\u4e00\u500b\u5b8c\u6574\u4e3b\u6a5f\u540d\u7a31 (FQDN) \u800c\u4e0d\u662f\u50c5\u6709 hostname \u800c\u5df2\u3002\u8209\u4f8b\u4f86\u8aaa\uff0c\u5728 named.centos.vbird \u7576\u4e2d\u5beb www.centos.vbird \u5247\u4ee3\u8868 FQDN \u70ba www.centos.vbird.@ ==&gt; www.centos.vbird.centos.vbird. \u5594\uff01\u56e0\u6b64\u7576\u7136\u8981\u5beb\u6210 www.centos.vbird. \u624d\u5c0d\uff01<\/p>\n<p>;<br \/>\n\u4ee3\u8868\u8a3b\u89e3\u7b26\u865f\uff5e\u4f3c\u4e4e # \u4e5f\u662f\u8a3b\u89e3\uff5e\u5169\u500b\u7b26\u865f\u90fd\u80fd\u4f7f\u7528<\/p>\n<p>\u9ce5\u54e5\u6253\u7b97\u6cbf\u7528\u7cfb\u7d71\u63d0\u4f9b\u7684\u4e00\u4e9b\u8a2d\u5b9a\u6a94\uff0c\u7136\u5f8c\u64da\u4ee5\u4fee\u6539\u6210\u70ba\u9ce5\u54e5\u81ea\u5df1\u9700\u8981\u7684\u74b0\u5883\u3002\u6574\u500b DNS \u662f\u7531 master.centos.vbird \u9019\u90e8\u4f3a\u670d\u5668\u7ba1\u7406\u7684\uff0c\u800c\u7ba1\u7406\u8005\u7684 email \u70ba vbird@www.centos.vbird \u9019\u500b\u3002\u6574\u500b\u6b63\u89e3\u6a94\u6700\u7d42\u6709\u9ede\u50cf\u9019\u6a23\uff1a<\/p>\n<pre>[root@www ~]# vim \/var\/named\/named.centos.vbird\r\n# \u8207\u6574\u500b\u9818\u57df\u76f8\u95dc\u6027\u8f03\u9ad8\u7684\u8a2d\u5b9a\u5305\u62ec NS, A, MX, SOA \u7b49\u6a19\u8a8c\u7684\u8a2d\u5b9a\u8655\uff01\r\n$TTL    600\r\n@                       IN <u>SOA   master.centos.vbird. vbird.www.centos.vbird. (<\/u>\r\n                                 <u>2011080401 3H 15M 1W 1D )<\/u> ; \u8207\u4e0a\u9762\u662f\u540c\u4e00\u884c\r\n@                       IN <u>NS    master.centos.vbird.<\/u>  ; DNS \u4f3a\u670d\u5668\u540d\u7a31\r\nmaster.centos.vbird.    IN <u>A     192.168.100.254<\/u>         ; DNS \u4f3a\u670d\u5668 IP\r\n@                       IN <u>MX 10 www.centos.vbird.<\/u>     ; \u9818\u57df\u540d\u7a31\u7684\u90f5\u4ef6\u4f3a\u670d\u5668\r\n\r\n# \u91dd\u5c0d 192.168.100.254 \u9019\u90e8\u4e3b\u6a5f\u7684\u6240\u6709\u76f8\u95dc\u6b63\u89e3\u8a2d\u5b9a\u3002\r\nwww.centos.vbird.       IN <u>A     192.168.100.254<\/u>\r\nlinux.centos.vbird.     IN CNAME www.centos.vbird.\r\nftp.centos.vbird.       IN CNAME www.centos.vbird.\r\nforum.centos.vbird.     IN CNAME www.centos.vbird.\r\n\r\n# \u5176\u4ed6\u5e7e\u90e8\u4e3b\u6a5f\u7684\u4e3b\u6a5f\u540d\u7a31\u6b63\u89e3\u8a2d\u5b9a\u3002\r\nslave.centos.vbird.       IN A    192.168.100.10\r\nclientlinux.centos.vbird. IN A    192.168.100.10\r\nworkstation.centos.vbird. IN A    192.168.1.101\r\nwinxp.centos.vbird.       IN A    192.168.100.20\r\n<u>win7                      IN A    192.168.100.30<\/u>  ; \u9019\u662f\u7c21\u5316\u7684\u5beb\u6cd5\uff01\r\n<\/pre>\n<p>\u518d\u6b21\u5f37\u8abf\uff0c\u4e00\u500b\u6b63\u89e3\u7684\u8cc7\u6599\u5eab\u8a2d\u5b9a\u4e2d\uff0c\u81f3\u5c11\u61c9\u8a72\u8981\u6709 $TTL, SOA, NS (\u8207\u9019\u90e8 NS \u4e3b\u6a5f\u540d\u7a31\u7684 A)\uff0c \u9ce5\u54e5\u5c07\u9019\u4e9b\u57fa\u672c\u8981\u7528\u5230\u7684\u6a19\u8a8c\u5beb\u5728\u4e0a\u8868\u7684\u7b2c\u4e00\u90e8\u4efd\u3002\u81f3\u65bc\u5176\u4ed6\u7684\uff0c\u5247\u662f\u76f8\u95dc\u7684\u4e3b\u6a5f\u540d\u7a31\u6b63\u89e3\u8a2d\u5b9a\u56c9\u3002 \u5982\u679c\u9019\u4e9b\u8a2d\u5b9a\u503c\u4f60\u770b\u4e0d\u61c2\uff0c\u90a3\u9ebc\uff0c\u53ef\u4ee5\u80af\u5b9a\u7684\u662f\uff0c\u8acb\u56de <a href=\"http:\/\/linux.vbird.org\/linux_server\/0350dns.php#DNS_master_rr\">19.4.1<\/a> \u53bb\u77a7\u77a7\u5427\uff01 \u5e95\u4e0b\u5f37\u8abf\u4e00\u4e0b\u4e4b\u524d\u6c92\u6709\u8b1b\u5230\u7684\u8a2d\u5b9a\u503c\u9805\u76ee\uff1a<\/p>\n<p>\u95dc\u65bc\u672c\u9818\u57df\u7684\u4e00\u4e9b\u8a2d\u5b9a\u503c<\/p>\n<p>\u8a2d\u5b9a\u503c<br \/>\n\u8aaa\u660e<\/p>\n<p>$TTL<br \/>\n\u70ba\u4e86\u7c21\u5316\u6bcf\u7b46 RR \u8a18\u9304\u7684\u8a2d\u5b9a\uff0c\u56e0\u6b64\u6211\u5011\u5c07 TTL \u632a\u5230\u6700\u524d\u9762\u7d71\u4e00\u8a2d\u5b9a\u3002\u56e0\u70ba\u9ce5\u54e5\u7684 DNS \u4f3a\u670d\u5668\u9084\u5728\u6e2c\u8a66\u4e2d\uff0c\u6240\u4ee5 TTL \u5beb\u4e86\u500b\u6bd4\u8f03\u5c0f\u7684\u6578\u503c\uff0c\u53ef\u4ee5\u5b58\u5728\u5c0d\u65b9 DNS \u4f3a\u670d\u5668\u7684\u5feb\u53d6 600 \u79d2\u800c\u5df2\u3002<\/p>\n<p>$ORIGIN<br \/>\n\u9019\u500b\u8a2d\u5b9a\u503c\u53ef\u4ee5\u91cd\u65b0\u6307\u5b9a zone \u7684\u5b9a\u7fa9\u3002\u5728\u9810\u8a2d\u7684\u60c5\u6cc1\u4e0b\uff0c\u9019\u500b\u6b63\u53cd\u89e3\u8cc7\u6599\u5eab\u6a94\u6848\u4e2d\u7684 zone \u662f\u7531 named.conf \u6240\u6307\u5b9a\u7684\uff0c\u5c31\u662f zone \u90a3\u500b\u53c3\u6578\u7684\u529f\u80fd\u3002 \u4e0d\u904e\uff0c\u9019\u500b zone \u662f\u53ef\u4ee5\u6539\u7684\uff0c\u5c31\u662f\u7528 $ORIGIN \u4f86\u4fee\u8a02\u5c31\u662f\u4e86\u3002\u901a\u5e38\u9019\u500b\u8a2d\u5b9a\u503c\u4e0d\u6703\u7528\u5230\u7684<\/p>\n<p>\u8001\u5be6\u8aaa\uff0c\u521d\u6b21\u8a2d\u5b9a DNS \u7684\u670b\u53cb\u5927\u6982\u90fd\u6703\u88ab\u90a3\u500b\u5c0f\u6578\u9ede (.) \u73a9\u6b7b\uff5e\u5176\u5be6\u4f60\u4e0d\u8981\u592a\u7dca\u5f35\uff0c\u53ea\u8981\u8a18\u4f4f\uff1a\u300e \u52a0\u4e0a\u4e86 . \u8868\u793a\u9019\u662f\u500b\u5b8c\u6574\u7684\u4e3b\u6a5f\u540d\u7a31 (FQDN)\uff0c\u4ea6\u5373\u662f &#8220;hostname + domain name&#8221; \u4e86\uff0c \u5982\u679c\u6c92\u6709\u52a0\u4e0a . \u7684\u8a71\uff0c\u8868\u793a\u8a72\u540d\u7a31\u50c5\u70ba &#8220;hostname&#8221; \u800c\u5df2\uff01\u56e0\u70ba\u6211\u5011\u9019\u500b\u8a2d\u5b9a\u6a94\u7684 zone \u662f centos.vbird\uff0c \u6240\u4ee5\u4e0a\u8868\u7684\u6700\u5f8c\u4e00\u884c\uff0c\u9ce5\u54e5\u53ea\u5beb\u51fa\u4e3b\u6a5f\u540d\u7a31 (win7) \uff0c\u56e0\u70ba\u6c92\u6709\u5c0f\u6578\u9ede\u7d50\u5c3e\uff0c\u56e0\u6b64\u5b8c\u6574\u7684 FQDN \u8981\u52a0\u4e0a zone\uff0c\u6240\u4ee5\u4e3b\u6a5f\u540d\u7a31 win7 \u4ee3\u8868\u7684\u662f\uff1a win7.centos.vbird. \u5594\uff01<\/p>\n<hr \/>\n<p><a name=\"DNS_master_ip\"><\/a><img loading=\"lazy\" decoding=\"async\" src=\"http:\/\/linux.vbird.org\/images\/penguin-s.gif\" alt=\"\u5c0f\u6a19\u984c\u7684\u5716\u793a\" width=\"16\" height=\"23\" align=\"middle\" \/>19.4.7 \u6b65\u9a5f\u4e94\uff1a\u53cd\u89e3\u8cc7\u6599\u5eab\u6a94\u6848\u7684\u8a2d\u5b9a<\/p>\n<p>\u53cd\u89e3\u8ddf\u6b63\u89e3\u4e00\u6a23\uff0c\u9084\u90fd\u9700\u8981 TTL, SOA, NS \u7b49\u7b49\u7684\uff0c\u4f46\u662f\u76f8\u5c0d\u65bc\u6b63\u89e3\u88e1\u9762\u6709 A\uff0c\u53cd\u89e3\u88e1\u9762\u5247\u50c5\u6709 PTR \u5594\uff01 \u53e6\u5916\uff0c\u7531\u65bc\u53cd\u89e3\u7684 zone \u540d\u7a31\u662f\u5f88\u602a zz.yy.xx.in-addr.arpa. \u7684\u6a21\u6a23\uff0c\u56e0\u6b64\u53ea\u8981\u5728\u53cd\u89e3\u88e1\u9762\u8981\u7528\u5230\u4e3b\u6a5f\u540d\u7a31\u6642\uff0c \u52d9\u5fc5\u4f7f\u7528 FQDN \u4f86\u8a2d\u5b9a\u554a\uff01\u66f4\u591a\u8207\u53cd\u89e3\u6709\u95dc\u7684\u8cc7\u6599\uff0c\u8acb\u5230 <a href=\"http:\/\/linux.vbird.org\/linux_server\/0350dns.php#DNS_master_rr_re\">19.4.2<\/a> \u53bb\u67e5\u95b1\u5594\uff01 \u81f3\u65bc 192.168.100.0\/24 \u9019\u500b\u7db2\u57df\u7684 DNS \u53cd\u89e3\u5247\u6210\u70ba\uff1a<\/p>\n<pre>[root@www ~]# vim \/var\/named\/named.192.168.100\r\n$TTL    600\r\n@       IN SOA  master.centos.vbird. vbird.www.centos.vbird. (\r\n                2011080401 3H 15M 1W 1D )\r\n@       IN NS   master.centos.vbird.\r\n254     IN PTR  master.centos.vbird.  ; \u5c07\u539f\u672c\u7684 A \u6539\u6210 PTR \u7684\u6a19\u8a8c\u800c\u5df2\r\n\r\n254     IN PTR  www.centos.vbird.     ; \u9019\u4e9b\u662f\u7279\u5b9a\u7684 IP \u5c0d\u61c9\r\n10      IN PTR  slave.centos.vbird.\r\n20      IN PTR  winxp.centos.vbird.\r\n30      IN PTR  win7.centos.vbird.\r\n\r\n101     IN PTR  dhcp101.centos.vbird.  ; \u53ef\u80fd\u91dd\u5c0d DHCP (\u7b2c\u5341\u4e8c\u7ae0) \u7684 IP \u8a2d\u5b9a\r\n102     IN PTR  dhcp102.centos.vbird.\r\n....(\u4e2d\u9593\u7701\u7565)....\r\n200     IN PTR  dhcp200.centos.vbird.\r\n<\/pre>\n<p>\u56e0\u70ba\u6211\u5011\u7684 zone \u662f 100.168.192.in-addr.arpa. \u9019\u4e00\u500b\uff0c\u56e0\u6b64 IP \u7684\u5168\u540d\u90e8\u5206\u5df2\u7d93\u542b\u6709 192.168.100 \u4e86\uff0c \u6240\u4ee5\u5728\u4e0a\u8868\u7576\u4e2d\u7684\u6700\u5de6\u908a\uff0c\u6578\u503c\u53ea\u9700\u8981\u5b58\u5728\u6700\u5f8c\u4e00\u500b IP \u5373\u53ef\u3002\u56e0\u6b64 254 \u5c31\u4ee3\u8868 192.168.100.254 \u56c9\uff01 \u6b64\u5916\uff0c\u70ba\u4e86\u64d4\u5fc3 DHCP \u81ea\u52d5\u5206\u914d\u7684 IP \u6c92\u6709\u5c0d\u61c9\u7684\u4e3b\u6a5f\u540d\u7a31\uff0c\u6240\u4ee5\u9019\u88e1\u4e5f\u9644\u639b\u4e86 192.168.100.{101~200} \u7684\u4e3b\u6a5f\u540d\u7a31\u5c0d\u61c9\u5594\uff01<\/p>\n<hr \/>\n<p><a name=\"DNS_master_start\"><\/a><img loading=\"lazy\" decoding=\"async\" src=\"http:\/\/linux.vbird.org\/images\/penguin-s.gif\" alt=\"\u5c0f\u6a19\u984c\u7684\u5716\u793a\" width=\"16\" height=\"23\" align=\"middle\" \/>19.4.8 \u6b65\u9a5f\u516d\uff1aDNS \u7684\u555f\u52d5\u3001\u89c0\u5bdf\u8207\u9632\u706b\u7246<\/p>\n<p>DNS \u7684\u555f\u52d5\u4e5f\u592a\u7c21\u55ae\u4e86\u5427\uff1f\u5c31\u76f4\u63a5\u5229\u7528\u7cfb\u7d71\u63d0\u4f9b\u7684\u555f\u52d5 script \u5373\u53ef\uff01<\/p>\n<pre>[root@www ~]# \/etc\/init.d\/named start  &lt;==\u4e5f\u53ef\u80fd\u662f\u9700\u8981 restart \u5594\r\n[root@www ~]# chkconfig named on\r\n<\/pre>\n<p>\u4f46\u5373\u4f7f\u756b\u9762\u4e0a\u51fa\u73fe\u7684\u662f\u300e\u78ba\u5b9a\u300f\u6216\u300eOK\u300f\uff0c\u90fd\u4e0d\u898b\u5f97\u4f60\u7684 DNS \u670d\u52d9\u662f\u6b63\u5e38\u7684\u3002\u6240\u4ee5\uff0c\u8acb\u4f60\u300e\u52d9\u5fc5\u300f\u67e5\u95b1 \/var\/log\/messages \u7684\u5167\u5bb9\u624d\u884c\uff01\u57fa\u672c\u4e0a\uff0c\u5167\u5bb9\u6703\u6709\u9ede\u50cf\u9019\u6a23\uff1a<\/p>\n<pre>[root@www ~]# tail -n 30 \/var\/log\/messages | grep named\r\nnamed[3511]: starting BIND 9.7.0-P2-RedHat-9.7.0-5.P2.el6_0.1 <u>-u named -t \r\n\/var\/named\/chroot<\/u>\r\nnamed[3511]: adjusted limit on open files from 1024 to 1048576\r\nnamed[3511]: found 1 CPU, using 1 worker thread\r\nnamed[3511]: using up to 4096 sockets\r\nnamed[3511]: <u>loading configuration from '\/etc\/named.conf'<\/u>\r\nnamed[3511]: using default UDP\/IPv4 port range: [1024, 65535]\r\nnamed[3511]: using default UDP\/IPv6 port range: [1024, 65535]\r\nnamed[3511]: listening on IPv4 interface lo, 127.0.0.1#53\r\nnamed[3511]: listening on IPv4 interface eth0, 192.168.1.100#53\r\nnamed[3511]: listening on IPv4 interface eth1, 192.168.100.254#53\r\nnamed[3511]: command channel listening on 127.0.0.1#953\r\nnamed[3511]: command channel listening on ::1#953\r\nnamed[3511]: the working directory is not writable\r\nnamed[3511]: <u>zone 100.168.192.in-addr.arpa\/IN: loaded serial 2011080401<\/u>\r\nnamed[3511]: <u>zone centos.vbird\/IN: loaded serial 2011080401<\/u>\r\nnamed[3511]: running\r\n<\/pre>\n<p>\u4e0a\u9762\u7684\u8f38\u51fa\u8a0a\u606f\u4e2d\uff0c\u4f60\u5f97\u8981\u7279\u5225\u6ce8\u610f\u6709\u756b\u5e95\u7dda\u7684\u90e8\u5206\u3002\u5305\u62ec -t chroot_dir \u662f\u8a2d\u5b9a chroot \u76ee\u9304\u7684\u4f4d\u7f6e\uff0c \u800c\u8a2d\u5b9a\u6a94 (configuration) \u5247\u662f \/etc\/named.conf\uff0c\u6700\u91cd\u8981\u7684\u662f\u4f60\u7684\u6240\u6709\u7684 zone (hint \u985e\u578b\u7684 . \u9664\u5916) \u7684\u5e8f\u865f (serial) \u865f\u78bc\u8981\u8ddf\u4f60\u7684\u8cc7\u6599\u5eab\u5167\u5bb9\u4e00\u81f4\u624d\u884c\uff01\u800c\u4e14\u4e0d\u80fd\u5920\u6709\u51fa\u73fe\u300e\u8a2d\u5b9a\u7684\u6a94\u540d:\u6578\u5b57\u300f\u7684\u5167\u5bb9\uff0c \u5426\u5247\u80af\u5b9a\u5c31\u662f\u8a2d\u5b9a\u6a94\u6709\u554f\u984c\uff5e\u4e0a\u9762\u7684\u8a0a\u606f\u770b\u8d77\u4f86\u9084\u7b97 OK \u5566\uff01<\/p>\n<p>\u5728\u4e0a\u8ff0\u7684\u8f38\u51fa\u8cc7\u6599\u7576\u4e2d\u56e0\u70ba\u8cc7\u8a0a\u592a\u9577\u4e86\uff0c\u6240\u4ee5\u9ce5\u54e5\u5c07\u767b\u9304\u7684\u6642\u9593\u8207\u4e3b\u6a5f\u7684\u6b04\u4f4d\u62ff\u6389\u4e86\uff01\u4e0a\u9762\u662f\u9806\u5229\u555f\u52d5\u6642\u7684\u72c0\u6cc1\uff0c \u5982\u679c\u51fa\u73fe\u554f\u984c\u600e\u8fa6\uff1f\u901a\u5e38\u51fa\u73fe\u554f\u984c\u7684\u539f\u56e0\u662f\u56e0\u70ba\uff1a<\/p>\n<ul>\n<li>\u8a9e\u6cd5\u8a2d\u5b9a\u932f\u8aa4\uff1a<br \/>\n\u9019\u500b\u554f\u984c\u597d\u89e3\u6c7a\uff0c\u56e0\u70ba\u5728 \/var\/log\/messages \u88e1\u9762\u6709\u8a73\u7d30\u7684\u8aaa\u660e\uff0c\u6309\u7167\u5167\u5bb9\u53bb\u4fee\u8a02\u5373\u53ef\uff1b<\/li>\n<li>\u908f\u8f2f\u8a2d\u5b9a\u932f\u8aa4\uff1a<br \/>\n\u9019\u500b\u5c31\u6bd4\u8f03\u56f0\u64fe\u4e86\uff01\u70ba\u4ec0\u9ebc\u5462\uff1f\u56e0\u70ba\u4ed6\u4e3b\u8981\u767c\u751f\u5728\u4f60\u8a2d\u5b9a DNS \u4e3b\u6a5f\u7684\u6642\u5019\uff0c\u8003\u616e\u4e0d\u9031\u6240\u7522\u751f\u7684\u554f\u984c\uff01\u4f8b\u5982\u5fd8\u8a18\u52a0\u4e0a (.)\uff0c \u7cfb\u7d71\u4e0d\u6703\u986f\u793a\u932f\u8aa4\u8a0a\u606f\uff0c\u4f46\u662f\u537b\u6703\u9020\u6210\u67e5\u8a62\u7684\u8aa4\u5224\uff0c\u800c MX \u8a2d\u5b9a\u7684\u4e3b\u6a5f\u540d\u7a31\u932f\u8aa4\uff0c\u4e5f\u4e0d\u6703\u51fa\u73fe\u6709\u554f\u984c\u7684\u8a0a\u606f\uff0c\u4f46\u662f mail server \u5c31\u662f\u6703\u6536\u4e0d\u5230\u4fe1\u7b49\u7b49\uff5e\u9019\u4e9b\u932f\u8aa4\u90fd\u9700\u8981\u5f88\u8a73\u7d30\u7684 DNS client \u7684\u6e2c\u8a66\u624d\u80fd\u77e5\u9053\u554f\u984c\u7684\u6240\u5728\u3002<\/li>\n<\/ul>\n<p>\u6211\u5011\u9019\u88e1\u5148\u5c31\u8a9e\u6cd5\u8a2d\u5b9a\u932f\u8aa4\u65b9\u9762\u9032\u884c\u4ecb\u7d39\uff0c\u81f3\u65bc\u908f\u8f2f\u8a2d\u5b9a\u7684\u554f\u984c\uff0c\u90a3\u500b\u5c31\u9700\u8981\u591a\u591a\u7684\u9032\u884c\u6e2c\u8a66\u624d\u80fd\u77e5\u9053\u4e86\uff5e \u5e95\u4e0b\u7684\u932f\u8aa4\u8a0a\u606f\u90fd\u6703\u8a18\u9304\u5728 \/var\/log\/messages \u88e1\u9762\u5594\uff01<\/p>\n<pre>named: \/etc\/named.conf:8: missing ';' before '}'\r\n# \u6ce8\u610f\u5230\u4e0a\u9762\u63d0\u5230\u7684\u6a94\u540d\u8207\u6578\u5b57\u55ce\uff1f\u8aaa\u660e\u7684\u662f \/etc\/named.conf \u7684\u7b2c 8 \u884c\uff0c\r\n# \u81f3\u65bc\u932f\u8aa4\u662f\u56e0\u70ba\u7f3a\u5c11\u5206\u865f (;) \u6240\u81f4\uff01\u53bb\u4fee\u6b63\u4e00\u4e0b\u5373\u53ef\u3002\r\n\r\ndns_rdata_fromtext: named.centos.vbird:4: near eol: unexpected end of input\r\nzone centos.vbird\/IN: loading master file named.centos.vbird: unexpected end of input\r\n_default\/centos.vbird\/IN: unexpected end of input\r\n# \u6307\u7684\u662f named.centos.vbird \u7684\u7b2c 4 \u884c\u6709\u554f\u984c\uff0c\u5bdf\u770b\u6a94\u6848\u5167\u5bb9\u7b2c 4 \u884c\u662f SOA \u7684\u9805\u76ee\uff0c\r\n# \u901a\u5e38\u662f SOA \u90a3\u4e94\u500b\u6578\u5b57\u6c92\u6709\u5b8c\u5168\uff01\u8d95\u7dca\u53bb\u4fee\u8a02\u4e00\u4e0b\u5373\u53ef\u554a\uff01\r\n\r\ndns_rdata_fromtext: named.centos.vbird:7: near 'www.centos.vbird.': \r\nnot a valid number\r\n# \u8aaa\u660e\u7b2c 7 \u884c\u5728 www.centos.vbird \u9644\u8fd1\u9700\u8981\u6709\u4e00\u500b\u5408\u6cd5\u7684\u6578\u5b57\uff01\u525b\u597d\u662f MX \uff0c\r\n# \u6240\u4ee5\uff0c\u8d95\u7dca\u52a0\u4e0a\u4e00\u500b\u5408\u6cd5\u7684\u6578\u5b57\uff0c\u53bb\u77a7\u77a7\u6539\u6539\u5373\u53ef\uff01\r\n<\/pre>\n<p>\u901a\u5e38\u6700\u5927\u7684\u554f\u984c\u662f&#8230;\u6253\u932f\u5b57\uff01\u6240\u4ee5\uff0c\u52d9\u5fc5\u8981\u6162\u6162\u6253\u5b57\uff0c\u6162\u6162\u5bdf\u770b\u6e05\u695a\uff0c\u5c24\u5176\u662f\u767b\u9304\u6a94\u5167\u7684\u8cc7\u8a0a\u5594\uff01\u90fd\u8655\u7406\u5b8c\u7562\u4e4b\u5f8c\uff0c \u4e5f\u80fd\u5920\u900f\u904e netstat \u53bb\u67e5\u5230 port 53 \u6709\u5728\u76e3\u807d\uff0c\u518d\u4f86\u5c31\u662f\u8981\u653e\u884c\u4eba\u5bb6\u7684\u67e5\u8a62\u4e86\uff01\u6240\u4ee5\uff0c\u53c8\u5f97\u8981\u4fee\u6539\u9632\u706b\u7246\u56c9\uff01 \u5047\u8a2d\u4f60\u9084\u662f\u5b89\u88dd\u9ce5\u54e5\u7684\u9632\u706b\u7246\u8173\u672c\uff0c\u90a3\u9ebc\u63a5\u4e0b\u4f86\u5c31\u662f\uff1a<\/p>\n<pre>[root@www ~]# vim \/usr\/local\/virus\/iptables\/iptables.rule\r\n# \u627e\u5230\u5982\u4e0b\u5169\u884c\uff0c\u5c07\u8a3b\u89e3\u62ff\u6389\u5373\u53ef\uff01\r\niptables -A INPUT -p UDP -i $EXTIF --dport  53  --sport 1024:65534 -j ACCEPT\r\niptables -A INPUT -p TCP -i $EXTIF --dport  53  --sport 1024:65534 -j ACCEPT\r\n\r\n[root@www ~]# \/usr\/local\/virus\/iptables\/iptables.rule\r\n<\/pre>\n<hr \/>\n<p><a name=\"DNS_master_update\"><\/a><img loading=\"lazy\" decoding=\"async\" src=\"http:\/\/linux.vbird.org\/images\/penguin-s.gif\" alt=\"\u5c0f\u6a19\u984c\u7684\u5716\u793a\" width=\"16\" height=\"23\" align=\"middle\" \/>19.4.9 \u6b65\u9a5f\u4e03\uff1a\u6e2c\u8a66\u8207\u8cc7\u6599\u5eab\u66f4\u65b0<\/p>\n<p>\u5728\u4e0a\u9762\u7684\u8a2d\u5b9a\u90fd\u641e\u5b9a\uff0c\u4e26\u4e14\u555f\u52d5\u4e4b\u5f8c\uff0c\u4f60\u7684 DNS \u4f3a\u670d\u5668\u61c9\u8a72\u662f\u5df2\u7d93\u59a5\u7576\u7684\u5728\u904b\u4f5c\u4e86\u3002 \u90a3\u4f60\u600e\u9ebc\u77e5\u9053\u4f60\u7684\u8a2d\u5b9a\u662f\u5426\u5408\u7406\uff1f\u7576\u7136\u8981\u4f5c\u6e2c\u8a66\u5594\uff01\u6e2c\u8a66\u6709\u5169\u7a2e\u65b9\u5f0f\uff0c\u4e00\u7a2e\u662f\u85c9\u7531 client \u7aef\u7684\u67e5\u8a62\u529f\u80fd\uff0c \u76ee\u7684\u662f\u6aa2\u9a57\u4f60\u7684\u8cc7\u6599\u5eab\u8a2d\u5b9a\u6709\u7121\u932f\u8aa4\uff1b\u53e6\u5916\u4f60\u4e5f\u53ef\u4ee5\u9023\u4e0a\u5e95\u4e0b\u9019\u500b\u7db2\u7ad9\uff1a<\/p>\n<ul>\n<li><a href=\"http:\/\/thednsreport.com\/\">http:\/\/thednsreport.com\/<\/a><\/li>\n<\/ul>\n<p>\u9019\u500b\u7db2\u7ad9\u53ef\u4ee5\u5e6b\u4f60\u6aa2\u9a57\u4f60\u7684 DNS \u4f3a\u670d\u5668\u7684\u4e3b\u8981\u8a2d\u5b9a\u662f\u5426\u6709\u554f\u984c\uff01\u4e0d\u904e\uff0c\u9019\u500b\u7db2\u7ad9\u7684\u6aa2\u9a57\u4e3b\u8981\u662f\u4ee5\u5408\u6cd5\u6388\u6b0a\u7684 zone \u70ba\u4e3b\uff0c\u6211\u5011\u81ea\u5df1\u4e82\u641e\u7684 DNS \u662f\u6c92\u6709\u8fa6\u6cd5\u6aa2\u67e5\u7684\u5566\uff01\u771f\u662f\u53ef\u60dc\uff5e\u597d\u4e86\uff0c\u5c31\u8b93\u6211\u5011\u4f86\u6e2c\u8a66\u6e2c\u8a66\u7d50\u679c\u5427\uff01\u9996\u5148\uff0c \u5f97\u5c07 DNS \u4f3a\u670d\u5668\u81ea\u5df1\u7684 \/etc\/resolv.conf \u6539\u6210\u5982\u4e0b\u6a21\u6a23\u8f03\u4f73\uff1a<\/p>\n<pre>[root@www ~]# vim \/etc\/resolv.conf\r\nnameserver 192.168.100.254   &lt;==\u81ea\u5df1\u7684 IP \u4e00\u5b9a\u8981\u6700\u65e9\u51fa\u73fe\uff01\r\nnameserver 168.95.1.1\r\n<\/pre>\n<p>\u63a5\u4e0b\u4f86\uff0c\u5c31\u8b93\u6211\u5011\u91dd\u5c0d\u4e0a\u9762\u8f03\u91cd\u8981\u7684\u6b63\u3001\u53cd\u89e3\u8cc7\u8a0a\u9032\u884c\u6aa2\u6e2c\u5427\uff01\u540c\u6a23\u7684\uff0c\u9ce5\u54e5\u4e5f\u50c5\u5217\u51fa\u7b54\u6848\u7684\u90e8\u5206\u800c\u5df2\uff01<\/p>\n<pre># 1. \u6aa2\u67e5 master.centos.vbird \u4ee5\u53ca www.centos.vbird \u7684 A \u6a19\u8a8c\r\n[root@www ~]# dig master.centos.vbird\r\n;; ANSWER SECTION:\r\nmaster.centos.vbird.    600     IN      <u>A       192.168.100.254<\/u>\r\n[root@www ~]# dig www.centos.vbird\r\n;; ANSWER SECTION:\r\nwww.centos.vbird.       600     IN      <u>A       192.168.100.254<\/u>\r\n\r\n# 2. \u6aa2\u67e5 ftp.centos.vbird \u8207 winxp \u7b49\u7b49\u7684 A \u6a19\u8a8c\r\n[root@www ~]# dig ftp.centos.vbird\r\n;; ANSWER SECTION:\r\nftp.centos.vbird.       600     IN      <u>CNAME   www.centos.vbird.<\/u>\r\nwww.centos.vbird.       600     IN      <u>A       192.168.100.254<\/u>\r\n[root@www ~]# dig winxp.centos.vbird\r\n;; ANSWER SECTION:\r\nwinxp.centos.vbird.     600     IN      <u>A       192.168.100.20<\/u>\r\n\r\n# 3. \u6aa2\u67e5 centos.vbird \u9019\u500b zone \u7684 MX\r\n[root@www ~]# dig -t mx centos.vbird\r\n;; ANSWER SECTION:\r\ncentos.vbird.           600     IN      <u>MX      10 www.centos.vbird.<\/u>\r\n\r\n# 4. \u6aa2\u67e5 192.168.100.254 \u53ca 192.168.100.10 \u7684\u53cd\u89e3\r\n[root@www ~]# dig -x 192.168.100.254\r\n;; ANSWER SECTION:\r\n254.100.168.192.in-addr.arpa. 600 IN    PTR     www.centos.vbird.\r\n<u>254.100.168.192.in-addr.arpa. 600 IN    PTR     master.centos.vbird.<\/u>\r\n[root@www ~]# dig -x 192.168.100.10\r\n;; ANSWER SECTION:\r\n10.100.168.192.in-addr.arpa. 600 IN     <u>PTR     slave.centos.vbird.<\/u>\r\n<\/pre>\n<p>\u6e2c\u8a66\u8981\u6210\u529f\u624d\u884c\u5466\uff01\u4ec0\u9ebc\u662f\u6210\u529f\u5462\uff1f\u9664\u4e86\u8981\u771f\u7684\u6709\u8cc7\u6599\u986f\u793a\u4e4b\u5916\uff0c\u8a72\u8cc7\u6599\u662f\u5426\u6b63\u662f\u4f60\u8981\u7684\u6a21\u6a23\uff1f\u90a3\u624d\u662f\u9806\u5229\u6210\u529f\u3002 \u5982\u679c\u6709\u51fa\u73fe\u932f\u8aa4\u7684\u8cc7\u8a0a\uff0c\u4f8b\u5982\u627e\u4e0d\u5230 www.centos.vbird \u4e4b\u985e\u7684\uff0c\u90a3\u5c31\u5931\u6557\u4e86\uff0c\u5f97\u8981\u627e\u51fa\u554f\u984c\u624d\u884c\u3002<\/p>\n<p>\u53e6\u5916\uff0c\u5982\u679c\u4f60\u7684\u8cc7\u6599\u5eab\u9700\u8981\u66f4\u65b0\u6642\uff0c\u61c9\u8a72\u505a\u54ea\u4e9b\u8209\u52d5\u554a\uff1f\u8209\u4f8b\u4f86\u8aaa\uff0c\u4f60\u7684\u67d0\u500b\u4e3b\u6a5f IP \u6216\u8005\u4e3b\u6a5f\u540d\u7a31\u8981\u8b8a\u66f4\uff0c\u4e5f\u53ef\u80fd\u662f\u65b0\u589e\u67d0\u500b\u4e3b\u6a5f\u540d\u7a31\u8207 IP \u7684\u5c0d\u61c9\u5462\uff01\u5f88\u7c21\u55ae\u5566\uff0c\u901a\u5e38\u9019\u6a23\u505a\u5c31\u597d\u4e86\uff1a<\/p>\n<ol>\n<li>\u5148\u91dd\u5c0d\u8981\u66f4\u6539\u7684\u90a3\u500b zone \u7684\u8cc7\u6599\u5eab\u6a94\u6848\u53bb\u505a\u66f4\u65b0\uff0c\u5c31\u662f\u52a0\u5165 RR \u7684\u6a19\u8a8c\u5373\u662f\uff01<\/li>\n<li>\u66f4\u6539\u8a72 zone file \u7684\u5e8f\u865f (Serial) \uff0c\u5c31\u662f\u90a3\u500b SOA \u7684\u7b2c\u4e09\u500b\u53c3\u6578 (\u7b2c\u4e00\u500b\u6578\u5b57)\uff0c\u56e0\u70ba\u9019\u500b\u6578\u5b57\u6703\u5f71\u97ff\u5230 master\/slave \u7684\u5224\u5b9a\u66f4\u65b0\u8207\u5426\u5594\uff01<\/li>\n<li>\u91cd\u65b0\u555f\u52d5 named \uff0c\u6216\u8005\u662f\u8b93 named \u91cd\u65b0\u8b80\u53d6\u8a2d\u5b9a\u6a94\u5373\u53ef\u3002<\/li>\n<\/ol>\n<p>\u5c31\u9019\u9ebc\u7c21\u55ae\u554a\uff01\u4e0d\u904e\u5927\u5bb6\u5e38\u5e38\u6703\u5fd8\u8a18\u7b2c\u4e8c\u500b\u6b65\u9a5f\u5566\uff01\u5c31\u662f\u5c07\u5e8f\u865f\u8b8a\u5927\u554a\uff01\u5982\u679c\u5e8f\u865f\u6c92\u6709\u8b8a\u5927\uff0c\u90a3 master\/slave \u7684\u8cc7\u6599\u5eab\u53ef\u80fd\u4e0d\u6703\u4e3b\u52d5\u7684\u66f4\u65b0\uff0c\u6703\u9020\u6210\u4e00\u4e9b\u56f0\u64fe\u5594\uff01<\/p>\n<hr \/>\n<p><a name=\"DNS_slave\"><\/a><img loading=\"lazy\" decoding=\"async\" src=\"http:\/\/linux.vbird.org\/images\/penguin-m.gif\" alt=\"\u5927\u6a19\u984c\u7684\u5716\u793a\" width=\"25\" height=\"34\" align=\"middle\" \/>19.5 \u5354\u540c\u5de5\u4f5c\u7684 DNS\uff1a Slave DNS \u53ca\u5b50\u7db2\u57df\u6388\u6b0a\u8a2d\u5b9a<\/p>\n<p>\u6211\u5011\u5728\u672c\u7ae0\u4e00\u958b\u59cb\u5c31\u66fe\u8ac7\u904e\uff0cDNS \u5927\u6982\u662f\u672a\u4f86\u6700\u91cd\u8981\u7684\u7db2\u8def\u670d\u52d9\u4e4b\u4e00\uff0c\u56e0\u70ba\u6240\u6709\u7684\u4e3b\u6a5f\u540d\u7a31\u9700\u6c42\u90fd\u5f97\u8981 DNS \u63d0\u4f9b\u624d\u884c\u3002 \u56e0\u6b64\uff0cISP \u5728\u63d0\u4f9b domain name \u8a3b\u518a\u6642\uff0c\u5c31\u5f37\u8abf\u5f97\u8981\u6709\u5169\u90e8\u4ee5\u4e0a\u7684 DNS \u4f3a\u670d\u5668\u624d\u884c\u3002\u800c\u70ba\u4e86\u7c21\u5316 DNS \u7ba1\u7406\u4eba\u54e1\u7684\u8ca0\u64d4\uff0c \u4f7f\u7528 Master\/Slave DNS \u67b6\u69cb\u7684\u60c5\u6cc1\u6703\u6bd4\u8f03\u597d\uff01\u70ba\u4ec0\u9ebc\u5462\uff1f\u8b93\u6211\u5011\u518d\u56de\u61b6\u4e00\u4e0b Slave DNS \u7684\u7279\u8272\uff1a<\/p>\n<ul>\n<li>\u70ba\u4e86\u4e0d\u9593\u65b7\u7684\u63d0\u4f9b DNS \u670d\u52d9\uff0c\u4f60\u7684\u9818\u57df\u81f3\u5c11\u9700\u8981\u6709\u5169\u90e8 DNS \u4f3a\u670d\u5668\u4f86\u63d0\u4f9b\u67e5\u8a62\u7684\u529f\u80fd\uff1b<\/li>\n<li>\u627f\u4e0a\uff0c\u9019\u5e7e\u90e8 DNS \u4f3a\u670d\u5668\u61c9\u8a72\u8981\u5206\u6563\u5728\u5169\u500b\u4ee5\u4e0a\u7684\u4e0d\u540c IP \u7db2\u57df\u624d\u597d\uff1b<\/li>\n<li>\u70ba\u65b9\u4fbf\u7ba1\u7406\uff0c\u901a\u5e38\u9664\u4e86\u4e00\u90e8\u4e3b\u8981 Master DNS \u4e4b\u5916\uff0c\u5176\u4ed6\u7684 DNS \u6703\u4f7f\u7528 slave \u7684\u6a21\u5f0f\uff1b<\/li>\n<li>slave DNS \u4f3a\u670d\u5668\u672c\u8eab\u4e26\u6c92\u6709\u8cc7\u6599\u5eab\uff0c\u4ed6\u7684\u8cc7\u6599\u5eab\u662f\u7531 master DNS \u6240\u63d0\u4f9b\u7684\uff1b<\/li>\n<li>master\/slave DNS \u5fc5\u9700\u8981\u53ef\u4ee5\u76f8\u4e92\u50b3\u8f38 zone file \u7684\u76f8\u95dc\u8cc7\u8a0a\u624d\u884c\uff0c\u9019\u90e8\u4efd\u9700\u8981 \/etc\/named.conf \u4e4b\u8a2d\u5b9a\u8f14\u52a9\u3002<\/li>\n<\/ul>\n<p>\u9664\u6b64\u4e4b\u5916\uff0c\u5982\u679c\u4f60\u6709\u670b\u53cb\u6216\u8005\u662f\u5b78\u751f\u60f3\u8981\u8ddf\u4f60\u8981\u4e00\u500b\u5b50\u7db2\u57df\uff0c\u90a3\u53c8\u8a72\u5982\u4f55\u8a2d\u5b9a\u53e6\u4e00\u90e8 DNS \u4f3a\u670d\u5668\u5462\uff1f\u5c31\u8b93\u6211\u5011\u4f9d\u5e8f\u4f86\u8ac7\u8ac7\u56c9\uff5e<\/p>\n<hr \/>\n<p><a name=\"DNS_slave_master\"><\/a><img loading=\"lazy\" decoding=\"async\" src=\"http:\/\/linux.vbird.org\/images\/penguin-s.gif\" alt=\"\u5c0f\u6a19\u984c\u7684\u5716\u793a\" width=\"16\" height=\"23\" align=\"middle\" \/>19.5.1 master DNS \u6b0a\u9650\u7684\u958b\u653e<\/p>\n<p>\u6211\u5011\u4f7f\u7528 <a href=\"http:\/\/linux.vbird.org\/linux_server\/0350dns.php#DNS_master_case\">19.4.3<\/a> \u7684\u6848\u4f8b\uff0c\u7e7c\u7e8c\u4f86\u67b6\u8a2d\u4e00\u90e8\u652f\u63f4\u8a72\u6848\u4f8b\u7684 slave DNS \u5427\uff01\u57fa\u672c\u7684\u5047\u8a2d\u70ba\uff1a<\/p>\n<ul>\n<li>\u63d0\u4f9b slave DNS \u4f3a\u670d\u5668\u9032\u884c zone transfer \u7684\u4f3a\u670d\u5668\u70ba master.centos.vbird<\/li>\n<li>centos.vbird \u53ca 100.168.192.in-addr.arpa \u5169\u500b zone \u90fd\u63d0\u4f9b\u7d66 slave DNS \u4f7f\u7528<\/li>\n<li>master.centos.vbird \u7684 named \u50c5\u63d0\u4f9b\u7d66 slave.centos.vbird \u9019\u90e8\u4e3b\u6a5f\u9032\u884c zone transfer<\/li>\n<li>Slave DNS server \u67b6\u8a2d\u5728 192.168.100.10 \u9019\u90e8\u4f3a\u670d\u5668\u4e0a\u9762 (\u6240\u4ee5 zone file \u8981\u4fee\u8a02)<\/li>\n<\/ul>\n<p>\u5982\u4e0a\u6240\u793a\uff0c\u6211\u5011\u7684 master.centos.vbird \u9019\u90e8\u4f3a\u670d\u5668\u9664\u4e86 named.conf \u9700\u8981\u8abf\u6574\u4e4b\u5916\uff0c\u5169\u500b zone file \u4e5f\u90fd\u9700\u8981\u8abf\u6574\uff01 \u5728 named.conf \u7576\u4e2d\uff0c\u9700\u8981\u8a2d\u5b9a\u54ea\u500b IP \u53ef\u4ee5\u5c0d\u6211\u7684 zone \u9032\u884c\u50b3\u8f38 (allow-transfer)\uff0c\u800c\u5728 zone file \u7576\u4e2d\uff0c\u5c31\u662f\u5404\u52a0\u5165\u4e00\u7b46 NS \u7684\u8a18\u9304\u5373\u53ef\uff01\u589e\u52a0\u7684\u90e8\u5206\u5982\u4e0b\u6240\u793a\uff1a<\/p>\n<pre># 1. \u4fee\u8a02 named.conf\uff0c\u4e3b\u8981\u4fee\u6539 zone \u53c3\u6578\u5167\u7684 allow-transfer \u9805\u76ee\r\n[root@www ~]# vim \/etc\/named.conf\r\n....\u524d\u9762\u7701\u7565....\r\nzone \"centos.vbird\" IN {\r\n        type master;\r\n        file \"named.centos.vbird\";\r\n        allow-transfer { 192.168.100.10; };  \/\/ \u5728\u9019\u88e1\u65b0\u589e slave \u7684 IP\r\n};\r\nzone \"100.168.192.in-addr.arpa\" IN {\r\n        type master;\r\n        file \"named.192.168.100\";\r\n        allow-transfer { 192.168.100.10; };  \/\/ \u5728\u9019\u88e1\u65b0\u589e slave \u7684 IP\r\n};\r\n<\/pre>\n<p>\u5728\u4e0a\u982d\u6240\u5217\u793a\u7684\u90a3\u5169\u500b\u8cc7\u6599\u5eab\u6a94\u6848\u7576\u4e2d\uff0c\u4f60\u5fc5\u9808\u8981\u65b0\u589e\u6240\u9700\u8981\u7684 NS \u6a19\u8a8c\u624d\u884c\uff01NS \u5c0d\u61c9\u7684\u4e3b\u6a5f\u540d\u7a31\u70ba slave.centos.vbird\uff0c IP \u5247\u662f 192.168.100.10 \u5466\uff01\u7d50\u679c\u5982\u4e0b\uff1a<\/p>\n<pre># 2. \u5728 zone file \u88e1\u9762\u65b0\u589e NS \u6a19\u8a8c\uff0c\u8981\u6ce8\u610f\u9700\u8981\u6709 A(\u6b63\u89e3) \u53ca PTR(\u53cd\u89e3) \u7684\u8a2d\u5b9a\r\n[root@www ~]# vim \/var\/named\/named.centos.vbird\r\n$TTL    600\r\n@                       IN SOA   master.centos.vbird. vbird.www.centos.vbird. (\r\n                                 2011080402 3H 15M 1W 1D )\r\n@                       IN NS    master.centos.vbird.\r\n@                       IN NS    slave.centos.vbird.\r\nmaster.centos.vbird.    IN A     192.168.100.254\r\nslave.centos.vbird.     IN A     192.168.100.10\r\n@                       IN MX 10 www.centos.vbird.\r\n....(\u5e95\u4e0b\u7701\u7565)....\r\n\r\n[root@www ~]# vim \/var\/named\/named.192.168.100\r\n$TTL    600\r\n@       IN SOA  master.centos.vbird. vbird.www.centos.vbird. (\r\n                2011080402 3H 15M 1W 1D )\r\n@       IN NS   master.centos.vbird.\r\n@       IN NS   slave.centos.vbird.\r\n254     IN PTR  master.centos.vbird.\r\n10      IN PTR  slave.centos.vbird.\r\n....(\u5e95\u4e0b\u7701\u7565)....\r\n# \u8981\u7279\u5225\u6ce8\u610f\u4e00\u4ef6\u4e8b\uff0c\u90a3\u5c31\u662f\uff0c\u4f60\u7684 zone file \u5167\u7684\u5e8f\u865f\u8981\u589e\u52a0\uff01\u9ce5\u54e5\u6e2c\u8a66\u65e5\u671f\u662f 8\/4\uff0c\r\n# \u7b2c 2 \u6b21\u9032\u884c\uff0c\u6240\u4ee5\u5e8f\u865f\u5c31\u4ee5\u8a72\u5929\u7684\u65e5\u671f\u70ba\u6e96\u4f86\u8a2d\u8a08\u7684\uff01\u6700\u5f8c\u8a18\u5f97 restart \u4e00\u4e0b\u5566\uff01\r\n\r\n[root@www ~]# \/etc\/init.d\/named restart\r\n[root@www ~]# tail -n 30 \/var\/log\/messages | grep named\r\nstarting BIND 9.7.0-P2-RedHat-9.7.0-5.P2.el6_0.1 -u named -t \/var\/named\/chroot\r\n....(\u4e2d\u9593\u7701\u7565)....\r\nzone 100.168.192.in-addr.arpa\/IN: loaded serial 2011080402\r\nzone centos.vbird\/IN: loaded serial 2011080402\r\nzone 100.168.192.in-addr.arpa\/IN: <u>sending notifies (serial 2011080402)<\/u>\r\nzone centos.vbird\/IN: <u>sending notifies (serial 2011080402)<\/u>\r\n<\/pre>\n<p>\u53cd\u6b63\u91cd\u65b0\u555f\u52d5\u904e named \u5f8c\uff0c\u76f4\u89ba\u8a18\u5f97\u5c31\u662f\u8981\u67e5\u95b1 messages \u767b\u9304\u8cc7\u8a0a\u5c31\u5c0d\u4e86\u3002\u5f9e\u4e0a\u8868\u7684\u8f38\u51fa\u4f86\u770b\uff0c\u6703\u591a\u4e00\u500b sending notifies (\u50b3\u9001\u6ce8\u610f\u4e8b\u9805) \u95dc\u9375\u5b57\u7684\u8cc7\u6599\uff0c\u90a3\u5c31\u662f\u63d0\u9192 slave DNS \u4f86\u6bd4\u5c0d\u5e8f\u865f\u5927\u5c0f\u4e86\uff01\u6240\u4ee5\uff0c\u4f60\u8aaa\uff0c\u5e8f\u865f\u6709\u6c92\u6709\u5f88\u91cd\u8981\u5462\uff1f\u7576\u7136\u5f88\u91cd\u8981\u554a\uff01 \u9023\u767b\u9304\u8a0a\u606f\u90fd\u6703\u544a\u77e5\u5e8f\u865f\u7684\u5927\u5c0f\u54e9\uff01\u9019\u6a23 master DNS \u5c31\u8a2d\u5b9a\u59a5\u7576\u56c9\uff01\u63a5\u4e0b\u4f86\u73a9\u73a9 Slave \u7684\u8a2d\u5b9a\u5427\uff01<\/p>\n<hr \/>\n<p><a name=\"DNS_slave_slave\"><\/a><img loading=\"lazy\" decoding=\"async\" src=\"http:\/\/linux.vbird.org\/images\/penguin-s.gif\" alt=\"\u5c0f\u6a19\u984c\u7684\u5716\u793a\" width=\"16\" height=\"23\" align=\"middle\" \/>19.5.2 Slave DNS \u7684\u8a2d\u5b9a\u8207\u8cc7\u6599\u5eab\u6b0a\u9650\u554f\u984c<\/p>\n<p>\u65e2\u7136 Slave DNS \u4e5f\u662f DNS \u4f3a\u670d\u5668\u561b\uff01\u6240\u4ee5\uff0c\u7576\u7136\u4e5f\u662f\u9700\u8981\u5b89\u88dd bind, bind-chroot \u7b49\u7b49\u7684\u8edf\u9ad4\uff01 \u9019\u90e8\u4efd\u56de\u53bb <a href=\"http:\/\/linux.vbird.org\/linux_server\/0350dns.php#what_software\">19.3.1<\/a> \u88e1\u9762\u77a7\u77a7\u5373\u53ef\uff0c\u53cd\u6b63\u8a18\u5f97\u4f7f\u7528 yum \u5b89\u88dd\u5c31\u5c0d\u4e86\u3002 \u63a5\u4e0b\u4f86\u5f97\u8981\u8a2d\u5b9a named.conf \u5427\uff1f\u800c\u65e2\u7136 Master\/Slave \u7684\u8cc7\u6599\u5eab\u662f\u76f8\u540c\u7684\uff0c\u6240\u4ee5\uff0c\u7406\u8ad6\u4e0a\uff0c named.conf \u5167\u5bb9\u5c31\u662f\u5927\u540c\u5c0f\u7570\u56c9\uff5e \u552f\u4e00\u8981\u6ce8\u610f\u7684\u5c31\u662f zone type \u985e\u578b\u7684\u5dee\u7570\uff0c\u4ee5\u53ca\u5ba3\u544a master \u5728\u54ea\u88e1\u5c31\u662f\u4e86\u3002 \u81f3\u65bc zone filename \u90e8\u5206\uff0c\u7531\u65bc zone file \u90fd\u662f\u5f9e master \u53d6\u5f97\u7684\uff0c\u900f\u904e named \u9019\u500b\u7a0b\u5f0f\u4f86\u4e3b\u52d5\u5efa\u7acb\u8d77\u9700\u8981\u7684 zone file\uff0c\u56e0\u6b64\u9019\u500b zone file \u653e\u7f6e\u7684\u76ee\u9304\u6b0a\u9650\u5c31\u5f88\u91cd\u8981\uff01\u8b93\u6211\u5011\u76f4\u63a5\u4f86\u8655\u7406\u770b\u770b\uff1a<\/p>\n<pre># 1. \u6e96\u5099 named.conf \u7684\u5167\u5bb9\uff1a\r\n[root@clientlinux ~]# vim \/etc\/named.conf\r\n....(\u524d\u9762\u7684\u90e8\u5206\u5b8c\u5168\u8207 master.centos.vbird \u76f8\u540c\uff0c\u6545\u7701\u7565)....\r\nzone \"centos.vbird\" IN {\r\n        type slave;\r\n        file \"slaves\/named.centos.vbird\";\r\n        masters { 192.168.100.254; };\r\n};\r\nzone \"100.168.192.in-addr.arpa\" IN {\r\n        type slave;\r\n        file \"slaves\/named.192.168.100\";\r\n        masters { 192.168.100.254; };\r\n};\r\n\r\n# 2. \u6aa2\u67e5 zone file \u9810\u8a08\u5efa\u7acb\u7684\u76ee\u9304\u6b0a\u9650\u662f\u5426\u6b63\u78ba\uff01\u5e95\u4e0b\u76ee\u9304\u70ba\u7cfb\u7d71\u9810\u8a2d\u503c\uff1a\r\n[root@clientlinux ~]# ll -d \/var\/named\/slaves\r\ndrwxrwx---. 2 named named 4096 2011-06-25 11:48 \/var\/named\/slaves\r\n# \u6ce8\u610f\u6b0a\u9650\u3001\u4f7f\u7528\u8005\u4ee5\u53ca\u7fa4\u7d44\u4e09\u500b\u6b04\u4f4d\u7684\u8cc7\u6599\uff01\u9700\u8981\u8207 named \u9019\u500b\u7528\u6236\u53ca\u7fa4\u7d44\u6709\u95dc\uff01\r\n\r\n[root@clientlinux ~]# ll -dZ \/var\/named\/slaves\r\ndrwxrwx---. named named system_u:object_r:named_cache_t:s0 \/var\/named\/slaves\r\n# \u4e5f\u4e0d\u8981\u5fd8\u8a18\u8207 SELinux \u6709\u95dc\u7684\u4e8b\u60c5\uff01\r\n<\/pre>\n<p>\u70ba\u4e86\u65b9\u4fbf\u4f7f\u7528\u8005\u8a2d\u5b9a\uff0cCentOS \u9810\u8a2d\u5728 \/var\/named\/slaves\/ \u8655\u7406\u597d\u4e86\u76f8\u95dc\u6b0a\u9650\uff5e\u6240\u4ee5\u4f60\u53ef\u4ee5\u8f15\u9b06\u7684\u8655\u7406\u6b0a\u9650\u554f\u984c\uff5e \u6211\u5011\u5c31\u5efa\u8b70\u4f60\u7684 slave zone file \u653e\u7f6e\u5728\u8a72\u76ee\u9304\u4e0b\uff01\u6240\u4ee5\u4e0a\u8868\u7576\u4e2d\u7684 file \u53c3\u6578\u624d\u6703\u9019\u9ebc\u5beb\uff5e\u6b64\u5916\uff0c\u90a3\u500b masters \u7d50\u5c3e\u6709\u500b s \u5594\uff01\u9019\u88e1\u6700\u5bb9\u6613\u5beb\u932f\uff5e\u90a3\u9ebc\u8981\u4e0d\u8981\u8655\u7406 zone file \u5462\uff1f\u9664\u4e86 named.ca \u9019\u500b . \u9700\u8981\u4e3b\u52d5\u5b58\u5728\u4e4b\u5916\uff0c \u53e6\u5916\u5169\u500b type slave \u7684\u8cc7\u6599\u5eab\u6a94\u6848\uff0c\u7576\u7136\u4e0d\u5fc5\u5b58\u5728\u554a\uff01\u56e0\u70ba\u6703\u5f9e master \u8655\u53d6\u5f97\u561b\uff01\u63a5\u4e0b\u4f86\uff0c\u5c31\u8b93\u6211\u5011\u4f86\u555f\u52d5 named \u4e26\u9032\u884c\u89c0\u5bdf\u5427\uff01<\/p>\n<pre>[root@clientlinux ~]# \/etc\/init.d\/named start\r\n[root@clientlinux ~]# chkconfig named on\r\n[root@clientlinux ~]# tail -n 30 \/var\/log\/messages | grep named\r\nstarting BIND 9.7.0-P2-RedHat-9.7.0-5.P2.el6_0.1 -u named -t \/var\/named\/chroot\r\nloading configuration from '\/etc\/named.conf'\r\n....(\u4e2d\u9593\u7701\u7565)....\r\nrunning\r\nzone <u>100.168.192.in-addr.arpa<\/u>\/IN: <u>Transfer started<\/u>.\r\nzone <u>100.168.192.in-addr.arpa<\/u>\/IN: <u>transferred serial 2011080402<\/u>\r\nzone <u>centos.vbird<\/u>\/IN: <u>Transfer started.<\/u>\r\nzone <u>centos.vbird<\/u>\/IN: <u>transferred serial 2011080402<\/u>  &lt;==\u6ce8\u610f\u5e8f\u865f\u6b63\u78ba\u5426\r\n# \u4f60\u6703\u770b\u5230\u5982\u4e0a\u7684\u8a0a\u606f\uff0c\u91cd\u9ede\u662f\u9084\u6709\u544a\u77e5\u5e8f\u865f\u5594\uff01\u975e\u5e38\u91cd\u8981\uff01\r\n\r\n[root@clientlinux ~]# ll \/var\/named\/slaves\r\n-rw-r--r--. 1 named named 3707 2011-08-05 14:12 named.192.168.100\r\n-rw-r--r--. 1 named named  605 2011-08-05 14:12 named.centos.vbird\r\n# \u9019\u5169\u500b zone file \u6703\u4e3b\u52d5\u88ab\u5efa\u7acb\u8d77\u4f86\u5462\uff01\r\n\r\n[root@clientlinux ~]# dig master.centos.vbird @127.0.0.1\r\n[root@clientlinux ~]# dig -x 192.168.100.254 @127.0.0.1\r\n# \u4e0a\u8ff0\u5169\u500b\u6aa2\u6e2c\u7684\u6307\u4ee4\u5982\u679c\u662f\u6b63\u78ba\u7684\u986f\u793a\u51fa A \u8207 PTR \u7684\u8a71\uff0c\u90a3\u5c31\u5b8c\u6210\u4e86\uff01\r\n<\/pre>\n<p>\u4f60\u77a7\uff01\u5982\u6b64\u4e00\u4f86\u4f60\u7684 zone file \u5c31\u6703\u4e3b\u52d5\u7684\u88ab\u5efa\u7acb\u8d77\u4f86\u5594\uff01\u672a\u4f86\u5982\u679c\u4f60\u7684 master DNS \u8981\u66f4\u65b0\u8cc7\u6599\u5eab\u6642\uff0c \u53ea\u8981\u4fee\u6539\u904e\u5e8f\u865f\uff0c\u4e26\u91cd\u65b0\u555f\u52d5 named \u5f8c\uff0c\u9019\u90e8 slave DNS \u5c31\u6703\u8ddf\u8457\u66f4\u65b0\u5566\uff01\u554a\uff01\u771f\u662f\u300e\u798f\u6c23\u5566\uff01\u300f\uff01\uff01 \u4e0d\u904e\uff0c\u5982\u679c\u4f60\u767c\u73fe\u5230\u555f\u52d5 slave DNS \u6642\uff0c\u4f60\u7684\u767b\u9304\u8cc7\u8a0a\u7adf\u7136\u662f\u9019\u6a23\uff1a<\/p>\n<pre>zone <u>centos.vbird<\/u>\/IN: Transfer started.\r\ntransfer of 'centos.vbird\/IN' from 192.168.100.254#53: connected using \r\n192.168.100.10#58187\r\ndumping master file: tmp-a1bYfCd3i3: <u>open: permission denied<\/u>\r\ntransfer of 'centos.vbird\/IN' from 192.168.100.254#53: failed while receiving \r\nresponses: <u>permission denied<\/u>\r\ntransfer of 'centos.vbird\/IN' from 192.168.100.254#53: end of transfer\r\n<\/pre>\n<p>\u5982\u679c\u51fa\u73fe\u985e\u4f3c\u9019\u6a23\u7684\u8a0a\u606f\u6642\uff0c\u4e0d\u5fc5\u61f7\u7591\u5566\uff01\u80af\u5b9a\u662f\u6b0a\u9650\u932f\u8aa4\u5566\uff01\u8acb\u518d\u6b21\u6aa2\u67e5\u4f60\u7684\u8cc7\u6599\u5eab\u6a94\u6848\u6240\u653e\u7f6e\u7684\u76ee\u9304\u6b0a\u9650\u662f\u5426\u53ef\u4ee5\u8b93 named \u5beb\u5165\u554a\uff01\u8655\u7406\u8655\u7406\u5c31\u597d\u4e86\uff01\u73fe\u5728\uff0c\u4f60\u7684 DNS \u6703\u8b8a\u7684\u66f4\u52a0\u5f37\u58ef\u56c9\uff01\u56e0\u70ba\u6709\u985e\u4f3c\u7684\u5099\u63f4\u7cfb\u7d71\u56c9\uff5e\u4e0d\u904e\u4ecd\u7136\u8981\u6ce8\u610f\u7684\u662f\uff0c \u7db2\u8def\u67e5\u8a62 centos.vbird \u6642\uff0cmaster \u8207 slave \u7684\u5730\u4f4d\u662f\u76f8\u540c\u7684\uff0c\u4e26\u4e0d\u662f master \u639b\u9ede\u624d\u4f7f\u7528 slave \u4f86\u67e5\u8a62\u5594\uff01\u6240\u4ee5\uff0c\u9019\u5169\u90e8\u4f3a\u670d\u5668\u7684\u76f8\u540c domain \u7684\u8cc7\u6599\u5eab\u5167\u5bb9\u8981\u5b8c\u5168\u4e00\u81f4\u624d\u884c\uff01<\/p>\n<hr \/>\n<p><a name=\"sub_net\"><\/a><img loading=\"lazy\" decoding=\"async\" src=\"http:\/\/linux.vbird.org\/images\/penguin-s.gif\" alt=\"\u5c0f\u6a19\u984c\u7684\u5716\u793a\" width=\"16\" height=\"23\" align=\"middle\" \/>19.5.3 \u5efa\u7f6e\u5b50\u7db2\u57df DNS \u4f3a\u670d\u5668\uff1a\u5b50\u7db2\u57df\u6388\u6b0a\u8ab2\u984c<\/p>\n<p>\u9664\u4e86 Master\/Slave \u9700\u8981\u5354\u540c DNS \u4f3a\u670d\u5668\u5171\u540c\u63d0\u4f9b\u670d\u52d9\u4e4b\u5916\uff0cDNS \u4e4b\u9593\u5982\u679c\u6709\u4e0a\u5c64\u3001\u4e0b\u5c6c\u7684\u95dc\u4fc2\u6642\uff0c\u8a72\u5982\u4f55\u8a2d\u5b9a\uff1f \u4ea6\u5373\uff0c\u5047\u8a2d\u6211\u7684\u7db2\u57df\u5f88\u5927\uff0c\u6211\u53ea\u60f3\u8981\u8ca0\u8cac\u4e0a\u5c64\u7684 DNS \u800c\u5df2\uff0c\u4e0b\u5c64\u5e0c\u671b\u76f4\u63a5\u4ea4\u7d66\u5404\u55ae\u4f4d\u7684\u8ca0\u8cac\u4eba\u4f86\u8ca0\u8cac\uff0c\u8981\u600e\u9ebc\u8a2d\u5b9a\u5462\uff1f \u8209\u500b\u4f8b\u5b50\u4f86\u8aaa\uff0c\u4ee5\u6210\u5927\u70ba\u4f8b\uff0c\u6210\u5927\u8a08\u4e2d\u50c5\u7ba1\u7406\u5404\u500b\u7cfb\u6240\u7684 DNS \u4f3a\u670d\u5668 IP \u800c\u5df2\uff0c\u7531\u65bc\u5404\u500b\u7cfb\u6240\u7684\u4e3b\u6a5f\u6578\u91cf\u53ef\u80fd\u5f88\u5927\uff0c \u5982\u679c\u6bcf\u500b\u4eba\u90fd\u8981\u8acb\u8a08\u4e2d\u4f86\u8a2d\u5b9a\uff0c\u90a3\u9ebc\u7ba1\u7406\u54e1\u53ef\u80fd\u6703\u760b\u6389\uff0c\u800c\u4e14\u5728\u5be6\u969b\u8a2d\u8a08\u4e0a\u4e5f\u4e0d\u592a\u4eba\u6027\u5316\u3002<\/p>\n<p>\u6240\u4ee5\u56c9\uff0c\u8a08\u4e2d\u5c31\u5c07\u5404\u500b subdomain (\u5b50\u7db2\u57df) \u7684\u7ba1\u7406\u6b0a\u4ea4\u7d66\u5404\u500b\u7cfb\u6240\u7684\u4e3b\u6a5f\u7ba1\u7406\u54e1\u53bb\u7ba1\u7406\uff0c\u5982\u6b64\u4e00\u4f86\uff0c \u5404\u7cfb\u6240\u7684\u8a2d\u5b9a\u4e0a\u9762\u6703\u6bd4\u8f03\u9748\u6d3b\uff0c\u4e14\u4e0a\u5c64 DNS \u4f3a\u670d\u5668\u7ba1\u7406\u54e1\u4e5f\u4e0d\u7528\u592a\u9ebb\u7169\u5436\uff01<\/p>\n<p>\u597d\u4e86\uff0c\u90a3\u9ebc\u5982\u4f55\u958b\u653e\u5b50\u7db2\u57df\u6388\u6b0a\u5462\uff1f\u6211\u5011\u4ee5\u525b\u525b\u5728 master \u4e0a\u9762\u5efa\u7acb\u7684 centos.vbird \u9019\u500b zone \u70ba\u4f8b\uff0c \u5047\u8a2d\u4eca\u5929\u4f60\u662f\u500b ISP \uff0c\u6709\u500b\u4eba\u60f3\u8981\u8ddf\u59b3\u7533\u8acb domain name \uff0c\u4ed6\u8981\u7684 domain \u662f\u300e niki.centos.vbird \u300f\uff0c \u90a3\u4f60\u8a72\u5982\u4f55\u8655\u7406\uff1f<\/p>\n<ul>\n<li>\u4e0a\u5c64 DNS \u4f3a\u670d\u5668\uff1a\u4ea6\u5373\u662f master.centos.vbird \u9019\u4e00\u90e8\uff0c\u53ea\u8981\u5728 centos.vbird \u90a3\u500b zone file \u5167\uff0c\u589e\u52a0\u6307\u5b9a NS \u4e26\u6307\u5411\u4e0b\u5c64 DNS \u7684\u4e3b\u6a5f\u540d\u7a31\u8207 IP (A) \u5373\u53ef\uff0c\u800c zone file \u7684\u5e8f\u865f\u4e5f\u8981\u589e\u52a0\u624d\u884c\uff1b<\/li>\n<li>\u4e0b\u5c64 DNS \u4f3a\u670d\u5668\uff1a\u7533\u8acb\u7684\u9818\u57df\u540d\u7a31\u5fc5\u9808\u662f\u4e0a\u5c64 DNS \u6240\u53ef\u4ee5\u63d0\u4f9b\u7684\u540d\u7a31\uff0c\u4e26\u544a\u77e5\u4e0a\u5c64 DNS \u7ba1\u7406\u54e1\uff0c\u6211\u5011\u9019\u500b zone \u6240\u9700\u6307\u5b9a\u7684 DNS \u4e3b\u6a5f\u540d\u7a31\u8207\u5c0d\u61c9\u7684 IP \u5373\u53ef\u3002\u7136\u5f8c\u5c31\u958b\u59cb\u8a2d\u5b9a\u81ea\u5df1\u7684 zone \u8207 zone file \u76f8\u95dc\u8cc7\u6599\u3002<\/li>\n<\/ul>\n<p>\u5047\u8a2d\u6211\u5011\u7ba1\u7406 niki.centos.vbird \u7684\u4f3a\u670d\u5668\u4e3b\u6a5f\u540d\u7a31\u70ba dns.niki.centos.vbird \uff0c\u800c\u9019\u90e8\u4e3b\u6a5f\u7684 IP \u70ba 192.168.100.200\uff0c \u90a3\u63a5\u4e0b\u4f86\u5c31\u8b93\u6211\u5011\u5be6\u969b\u4f86\u8a2d\u5b9a\u5427\uff01<\/p>\n<ul>\n<li>\n<hr \/>\n<p>\u4e0a\u5c64 DNS \u4f3a\u670d\u5668\uff1a\u53ea\u9700\u65b0\u589e zone file \u7684 NS \u8207 A \u5373\u53ef<\/li>\n<\/ul>\n<p>\u4e0a\u5c64 DNS \u7684\u8655\u7406\u771f\u662f\u7c21\u55ae\u5230\u7206\u70b8\uff01\u6211\u5011\u53ea\u8981\u4fee\u6539 master DNS (www.centos.vbird \u90a3\u4e00\u90e8) \u88e1\u9762\u7684 named.centos.vbird \u9019\u500b\u6b63\u89e3\u6a94\u6848\u5373\u53ef\u3002slave DNS \u4e0d\u7528\u4fee\u6539\uff0c\u662f\u56e0\u70ba\u4ed6\u6703\u81ea\u52d5\u66f4\u65b0\u561b\uff01\u65b0\u589e\u5982\u4e0b\u7684\u8cc7\u6599\u5373\u53ef\uff1a<\/p>\n<pre>[root@www ~]# vim \/var\/named\/named.centos.vbird\r\n@                       IN SOA   master.centos.vbird. vbird.www.centos.vbird. (\r\n                                 2011080501 3H 15M 1W 1D )\r\n# \u4e0a\u9762\u7684 SOA \u90e8\u5206\u5e8f\u865f\u52a0\u5927\uff0c\u5e95\u4e0b\u65b0\u589e\u9019\u5169\u884c\u5373\u53ef (\u539f\u672c\u7684\u8cc7\u6599\u90fd\u4fdd\u7559\u4e0d\u52d5)\uff01\r\nniki.centos.vbird.      IN NS    dns.niki.centos.vbird.\r\ndns.niki.centos.vbird.  IN A     192.168.100.200\r\n\r\n[root@www ~]# \/etc\/init.d\/named restart\r\n[root@www ~]# tail -n 30 \/var\/log\/messages | grep named\r\nAug  5 14:22:36 www named[9564]: zone centos.vbird\/IN: loaded serial <u>2011080501<\/u>\r\n# \u767b\u9304\u6a94\u7684\u95dc\u9375\u662f\u4e0a\u9762\u7684\u5e8f\u865f\u90e8\u5206\uff5e\u5fc5\u9808\u662f\u6211\u5011\u586b\u5beb\u7684\u65b0\u7684\u5e8f\u865f\u624d\u5c0d\uff01\r\n\r\n[root@www ~]# dig dns.niki.centos.vbird @127.0.0.1\r\n# \u4f60\u6703\u767c\u73fe\u662f\u932f\u8aa4\u7684\uff01\u627e\u4e0d\u5230 A \u5594\uff01\r\n<\/pre>\n<p>\u4e0a\u5c64 DNS \u7684\u8a2d\u5b9a\u975e\u5e38\u7c21\u55ae\uff01\u53ea\u8981\u4fee\u6539 zone file \u5373\u53ef\uff5e\u4e0d\u904e\uff0c\u7531\u65bc zone file \u6307\u5b9a\u7684\u662f NS \u7684\u67e5\u8a62\u6b0a\u529f\u80fd\uff0c \u56e0\u6b64\uff0c\u6700\u5f8c\u90a3\u500b\u6307\u4ee4\u5728 dig dns.niki.centos.vbird \u6642\uff0c\u537b\u6703\u627e\u4e0d\u5230 A \u5594\uff01\u90a3\u662f\u6b63\u5e38\u7684\uff5e\u56e0\u70ba 192.168.100.200 \u5c1a\u672a\u8a2d\u5b9a\u597d niki.centos.vbird \u9019\u500b\u9818\u57df\u561b\uff01\u6240\u4ee5\u8ffd\u8e64\u7684\u7d50\u679c\u4e26\u6c92\u6709\u767c\u73fe\u5728 192.168.100.200 \u6709 niki.centos.vbird \u7684 zone \u554a\uff01 \u6240\u4ee5\u7576\u7136\u627e\u4e0d\u5230\u3002\u6b64\u6642\u8cc7\u6599\u5eab\u7684\u7ba1\u7406\u6b0a\u5728 192.168.100.200 \u4e0a\u5566\uff01\u9019\u6a23\u53ef\u4ee5\u7406\u89e3\u55ce\uff1f\u518d\u4f86\u8655\u7406\u4e0b\u5c64 DNS \u5427\uff01<\/p>\n<ul>\n<li>\n<hr \/>\n<p>\u4e0b\u5c64 DNS \u4f3a\u670d\u5668\uff1a\u9700\u8981\u6709\u5b8c\u6574\u7684 zone \u76f8\u95dc\u8a2d\u5b9a<\/li>\n<\/ul>\n<p>\u4e0b\u5c64\u7684 DNS \u8a2d\u5b9a\u5c31\u8207 <a href=\"http:\/\/linux.vbird.org\/linux_server\/0350dns.php#DNS_master\">19.4<\/a> \u7684\u8a73\u7d30\u5167\u5bb9\u4e00\u6a23\u4e86\uff01\u6240\u4ee5\u5728\u9019\u88e1\u6211\u5011\u50c5\u5217\u51fa\u91cd\u8981\u7684\u9805\u76ee\uff1a<\/p>\n<pre># 1. \u4fee\u6539 named.conf \uff0c\u589e\u52a0 zone \u7684\u53c3\u6578\uff0c\u5047\u8a2d\u6a94\u540d\u70ba named.niki.centos.vbird\r\n[root@niki ~]# vim \/etc\/named.conf\r\n....(\u524d\u9762\u7701\u7565)....\r\nzone \"niki.centos.vbird\" IN {\r\n        type master;\r\n        file \"named.niki.centos.vbird\";\r\n};\r\n\r\n# 2. \u5efa\u7acb named.niki.centos.vbird\r\n[root@niki ~]# vim \/var\/named\/named.niki.centos.vbird\r\n$TTL   600\r\n@      IN SOA   dns.niki.centos.vbird. root.niki.centos.vbird. (\r\n                2011080501 3H 15M 1W 1D )\r\n@      IN NS    dns.niki.centos.vbird.\r\ndns    IN A     192.168.100.200\r\nwww    IN A     192.168.100.200\r\n@      IN MX 10 www.niki.centos.vbird.\r\n@      IN A     192.168.100.200\r\n# \u70ba\u4e86\u7c21\u5316\u6574\u500b\u7248\u9762\uff0c\u6240\u4ee5\u9ce5\u54e5\u90fd\u4f7f\u7528 hostname \u800c\u975e FQDN\uff01\u8acb\u898b\u8ad2\uff01\r\n\r\n# 3. \u555f\u52d5\u4e26\u89c0\u5bdf\u76f8\u95dc\u767b\u9304\u8cc7\u8a0a\r\n[root@niki ~]# \/etc\/init.d\/named restart\r\n[root@niki ~]# tail -n 30 \/var\/log\/messages | grep named\r\n....(\u524d\u9762\u7701\u7565)....\r\nzone <u>niki.centos.vbird<\/u>\/IN: loaded serial <u>2011080501<\/u>\r\n....(\u5e95\u4e0b\u7701\u7565)....\r\n# \u540c\u6642\uff0c<u>\u8a18\u5f97\u8655\u7406\u4e00\u4e0b\u9632\u706b\u7246\u7684\u653e\u884c\u554f\u984c<\/u>\uff01\u5426\u5247\u6e2c\u8a66\u6703\u5931\u6557\uff01\uff01\r\n\r\n[root@niki ~]# dig www.niki.centos.vbird @192.168.100.254\r\n# \u4e0a\u8ff0\u7684\u52d5\u4f5c\u5fc5\u9808\u8981\u6709\u56de\u61c9\u624d\u884c\uff01\u5426\u5247\u5c31\u6703\u51fa\u554f\u984c\uff5e\r\n<\/pre>\n<hr \/>\n<p><a name=\"view\"><\/a><img loading=\"lazy\" decoding=\"async\" src=\"http:\/\/linux.vbird.org\/images\/penguin-s.gif\" alt=\"\u5c0f\u6a19\u984c\u7684\u5716\u793a\" width=\"16\" height=\"23\" align=\"middle\" \/>19.5.4 \u4f9d\u4e0d\u540c\u4ecb\u9762\u7d66\u4e88\u4e0d\u540c\u7684 DNS \u4e3b\u6a5f\u540d\u7a31\uff1a view \u529f\u80fd\u7684\u61c9\u7528<\/p>\n<p>\u60f3\u50cf\u4e00\u500b\u74b0\u5883\uff0c\u4ee5\u6211\u5011\u76ee\u524d\u7684\u5340\u57df\u7db2\u8def\u4f3a\u670d\u5668\u4f86\u8aaa\uff0c\u6211\u7684 master.centos.vbird \u6709\u5169\u500b\u4ecb\u9762\uff0c\u5206\u5225\u662f 192.168.100.254\/24 (\u5c0d\u5167) \u53ca 192.168.1.100\/24 (\u5c0d\u5916)\uff0c\u90a3\u7576\u6211\u5916\u908a\u7684\u7528\u6236\u60f3\u8981\u77ad\u89e3\u5230 master.centos.vbird \u9019\u90e8\u4f3a\u670d\u5668\u7684 IP \u6642\uff0c\u53d6\u5f97\u7684\u7adf\u7136\u662f 192.168.100.254\uff0c\u56e0\u6b64\u9084\u5f97\u8981\u900f\u904e NAT \u624d\u80fd\u9023\u7dda\u5230\u8a72\u4ecb\u9762\uff0c\u4f46\u660e\u660e 192.168.100.254 \u8207\u5916\u90e8\u7684 192.168.1.100 \u662f\u540c\u4e00\u53f0\u4f3a\u670d\u5668\u4e3b\u6a5f\u561b\uff01\u5e79\u561b\u9084\u5f97\u8981\u7d93\u904e NAT \u8f49\u5230\u5167\u90e8\u4ecb\u9762\u5462\uff1f\u6709\u6c92\u6709\u8fa6\u6cd5\u8b93\u5916\u90e8\u7684\u67e5\u8a62\u627e\u5230 master.centos.vbird \u662f 192.168.1.100 \u800c\u5167\u90e8\u7684\u627e\u5230\u5247\u56de\u61c9 192.168.100.254 \u5462\uff1f\u53ef\u4ee5\u7684\uff01\u90a3\u5c31\u900f\u904e view \u7684\u529f\u80fd\uff01<\/p>\n<p>\u90a3\u9ebc view \u8981\u600e\u9ebc\u8655\u7406\u5462\uff1f\u5176\u5be6\u5c31\u662f\u8b93\u4e0d\u540c\u4f86\u6e90\u7684\u7528\u6236\uff0c\u80fd\u5920\u53d6\u5f97\u4ed6\u5011\u81ea\u5df1\u7684 zone \u56de\u61c9\u5c31\u662f\u4e86\u3002\u8209\u4f8b\u4f86\u8aaa\uff0c\u7576\u7528\u6236\u4f86\u81ea 10.0.0.1 \u6642\uff0c\u9019\u500b\u4f86\u6e90\u4e0d\u53ef\u80fd\u662f\u5167\u90e8 (192.168.100.0\/24) \uff0c\u56e0\u6b64\u9019\u500b\u4f86\u6e90\u5c31\u6703\u4f7f\u7528\u5916\u90e8\u7684 zone file \u5167\u5bb9\u4f86\u56de\u61c9\u3002 \u56e0\u6b64\uff0c\u6211\u5011\u5c31\u5f97\u8981\u6e96\u5099\u540c\u4e00\u500b zone \u9700\u8981\u5169\u500b\u4e0d\u540c\u7684\u8a2d\u5b9a\uff0c\u518d\u5c07\u500b\u5225\u7684\u8a2d\u5b9a\u5e36\u5165\u81ea\u5df1\u7684\u7528\u6236\u7aef\u67e5\u8a62\u7576\u4e2d\u3002<\/p>\n<p>\u73fe\u5728\u6211\u5011\u91dd\u5c0d\u9019\u500b\u6982\u5ff5\uff0c\u5c0d\u65bc\u9ce5\u54e5\u7684\u5340\u7db2\u8a2d\u5b9a view \u7684\u539f\u5247\u662f\u9019\u6a23\u7684\uff1a<\/p>\n<ul>\n<li>\u5efa\u7acb\u4e00\u500b\u540d\u70ba intranet \u7684\u540d\u5b57\uff0c\u9019\u500b\u540d\u5b57\u4ee3\u8868\u7528\u6236\u7aef\u70ba 192.168.100.0\/24 \u7684\u4f86\u6e90\uff1b<\/li>\n<li>\u5efa\u7acb\u4e00\u500b\u540d\u70ba internet \u7684\u540d\u5b57\uff0c\u9019\u500b\u540d\u5b57\u4ee3\u8868\u7528\u6236\u7aef\u70ba\u975e 192.168.100.0\/24 \u7684\u5176\u4ed6\u4f86\u6e90<\/li>\n<li>intranet \u4f7f\u7528\u7684 zone file \u70ba\u672c\u7ae0\u524d\u9762\u5404\u5c0f\u7bc0\u6240\u5efa\u7acb\u7684 zone filename\uff0cinternet \u4f7f\u7528\u7684 zone filename \u5247\u5728\u539f\u672c\u7684\u6a94\u540d\u5f8c\u9762\u7d2f\u52a0 inter \u7684\u526f\u6a94\u540d\uff0c\u4e26\u4fee\u8a02\u5404\u6a19\u8a8c\u7684\u7d50\u679c\u3002<\/li>\n<\/ul>\n<p>\u518d\u6b21\u5f37\u8abf\uff0c\u6700\u7d42\u7684\u7d50\u679c\u7576\u4e2d\uff0c\u5f9e\u5167\u7db2\u67e5\u5230\u7684 www.centos.vbird IP \u61c9\u8a72\u662f 192.168.100.254\uff0c\u800c\u53ea\u8981\u4e0d\u662f\u9ce5\u54e5\u5167\u7db2\u4f86\u6e90\u7684\u7528\u6236\u7aef\uff0c \u67e5\u5230\u7684 www.centos.vbird IP \u61c9\u8a72\u662f 192.168.1.100 \u624d\u5c0d\uff01\u90a3\u5c31\u8b93\u6211\u5011\u4f86\u5be6\u969b\u8a2d\u5b9a\u6b64\u4e00\u9805\u76ee\u5427\uff01<\/p>\n<pre>[root@www ~]# vim \/etc\/named.conf\r\noptions {\r\n        directory       \"\/var\/named\";\r\n        dump-file       \"\/var\/named\/data\/cache_dump.db\";\r\n        statistics-file \"\/var\/named\/data\/named_stats.txt\";\r\n        memstatistics-file \"\/var\/named\/data\/named_mem_stats.txt\";\r\n        allow-query     { any; };\r\n        recursion yes;\r\n        allow-transfer  { none; };\r\n};\r\n\r\nacl intranet { 192.168.100.0\/24; };        &lt;==\u91dd\u5c0d intranet \u7d66\u4e88\u7684\u4f86\u6e90 IP \u6307\u5b9a\r\nacl internet { ! 192.168.100.0\/24; any; }; &lt;==\u52a0\u4e0a\u9a5a\u5606\u865f (!) \u4ee3\u8868\u53cd\u5411\u9078\u64c7\u7684\u610f\u601d\r\n\r\nview \"lan\" {                            &lt;==\u53ea\u662f\u4e00\u500b\u540d\u5b57\uff0c\u4ee3\u8868\u7684\u662f\u5167\u7db2\r\n        match-clients { \"intranet\"; };  &lt;==\u543b\u5408\u9019\u500b\u4f86\u6e90\u7684\u624d\u4f7f\u7528\u5e95\u4e0b\u7684 zone\r\n        zone \".\" IN {\r\n                type hint;\r\n                file \"named.ca\";\r\n        };\r\n        zone \"centos.vbird\" IN {\r\n                type master;\r\n                file \"named.centos.vbird\";\r\n                allow-transfer { 192.168.100.10; };\r\n        };\r\n        zone \"100.168.192.in-addr.arpa\" IN {\r\n                type master;\r\n                file \"named.192.168.100\";\r\n                allow-transfer { 192.168.100.10; };\r\n        };\r\n};\r\n\r\nview \"wan\" {                           &lt;==\u540c\u6a23\uff0c\u53ea\u662f\u500b\u540d\u5b57\u800c\u5df2\uff01\r\n        match-clients { \"internet\"; }; &lt;==\u4ee3\u8868\u7684\u5247\u662f\u5916\u7db2\u7684 internet \u4f86\u6e90\r\n        zone \".\" IN {\r\n                type hint;\r\n                file \"named.ca\";\r\n        };\r\n        zone \"centos.vbird\" IN {\r\n                type master;\r\n                file \"named.centos.vbird.inter\"; &lt;==\u6a94\u540d\u5fc5\u9808\u8207\u539f\u6709\u7684\u4e0d\u540c\uff01\r\n        };\r\n        \/\/ \u5916\u7db2\u56e0\u70ba\u6c92\u6709\u4f7f\u7528\u5230\u5167\u7db2\u7684 IP\uff0c\u6240\u4ee5 IP \u53cd\u89e3\u90e8\u5206\u53ef\u4ee5\u4e0d\u5beb\u65bc\u6b64\r\n};\r\n<\/pre>\n<p>\u4e0a\u8868\u4e2d\uff0c\u6709\u4e9b\u8cc7\u6599\u662f\u91cd\u8907\u7684\uff0c\u6709\u4e9b\u5247\u9700\u8981\u7d93\u904e\u4fee\u6539\u3002\u73fe\u5728\uff0c\u8b93\u6211\u5011\u4f86\u6539\u6539 named.centos.vbird.inter \u5427\uff01<\/p>\n<pre>[root@www ~]# cd \/var\/named\r\n[root@www named]# cp -a named.centos.vbird named.centos.vbird.inter\r\n[root@www named]# vim named.centos.vbird.inter\r\n$TTL    600\r\n@                       IN SOA   master.centos.vbird. vbird.www.centos.vbird. (\r\n                                 2011080503 3H 15M 1W 1D )\r\n@                       IN NS    master.centos.vbird.\r\nmaster.centos.vbird.    IN A     192.168.1.100\r\n@                       IN MX 10 www.centos.vbird.\r\n\r\nwww.centos.vbird.       IN A     192.168.1.100\r\nlinux.centos.vbird.     IN CNAME www.centos.vbird.\r\nftp.centos.vbird.       IN CNAME www.centos.vbird.\r\nforum.centos.vbird.     IN CNAME www.centos.vbird.\r\nworkstation.centos.vbird. IN A    192.168.1.101\r\n\r\n[root@www named]# \/etc\/init.d\/named restart\r\n[root@www named]# tail -n 30 \/var\/log\/messages\r\n[root@www named]# dig www.centos.vbird @192.168.100.254\r\nwww.centos.vbird.       600     IN      A       <u>192.168.100.254<\/u>\r\n# \u8981\u5f97\u5230\u4e0a\u9762\u7684 IP \u624d\u662f\u5c0d\u7684\u5594\uff01\u56e0\u70ba\u4ecb\u9762\u4f86\u81ea\u65bc 192.168.100.0\/24 \u7db2\u6bb5\r\n\r\n[root@wwww named]# dig www.centos.vbird @192.168.1.100\r\nwww.centos.vbird.       600     IN      A       <u>192.168.1.100<\/u>\r\n# \u8981\u5f97\u5230\u4e0a\u9762\u7684 IP \u624d\u662f\u5c0d\u7684\u5594\uff01\u56e0\u70ba\u4ecb\u9762\u4f86\u81ea\u975e 192.168.100.0\/24 \u7db2\u6bb5\r\n<\/pre>\n<p>\u6709\u6c92\u6709\u5f88\u7c21\u55ae\uff01\u9019\u6a23\u5c31\u80fd\u8b93\u4f60\u7684 DNS \u4f9d\u64da\u4e0d\u540c\u7684\u7528\u6236\u4f86\u6e90\uff0c\u5206\u5225\u7d66\u4e88\u540c\u4e00\u500b\u4e3b\u6a5f\u540d\u7a31\u7684\u4e0d\u540c\u89e3\u6790\u5462\uff01<\/p>\n<p>\u4f8b\u984c\uff1a<\/p>\n<p>\u4f60\u7684\u7db2\u7ad9\u8b80\u8005\u975e\u5e38\u7684\u591a\uff0c\u4f46\u662f\u5206\u4f48\u5728\u4e16\u754c\u5404\u5730\u3002\u4f60\u60f3\u8b93\u4e9e\u6d32\u5340\u7684\u8b80\u8005\u9023\u7dda\u5230\u53f0\u7063\u7684\u7ad9\u53f0\uff0c\u800c\u5176\u4ed6\u570b\u5bb6\u7684\u9023\u7dda\u5247\u9023\u5230\u7f8e\u570b\u7684\u7ad9\u53f0\uff0c \u4f46\u53c8\u4e0d\u60f3\u8981\u8b93\u4f7f\u7528\u8005\u81ea\u5df1\u6311\u9078\u4e0d\u540c\u7684\u4e3b\u6a5f\u540d\u7a31\uff0c\u60f3\u4f7f\u7528\u540c\u4e00\u7d44\u4e3b\u6a5f\u540d\u7a31\uff0c\u6b64\u6642\u8a72\u5982\u4f55\u662f\u597d\uff1f<\/p>\n<p>\u7b54\uff1a<\/p>\n<p>\u9ce5\u54e5\u53ef\u4ee5\u60f3\u5230\u7684\u6700\u7c21\u55ae\u7684\u65b9\u6848\uff0c\u5c31\u662f\u900f\u904e DNS \u4f86\u8a2d\u5b9a\u76f8\u540c\u4e3b\u6a5f\u540d\u7a31\u7684\u4e0d\u540c IP \u76ee\u6a19\uff0c\u4ea6\u5373\u662f\u900f\u904e view \u4f86\u898f\u7bc4\u5373\u53ef\u3002 \u4e0d\u904e\uff0c\u8207\u4e0a\u8ff0\u9ce5\u54e5\u7684\u5340\u7db2\u7c21\u55ae\u7bc4\u4f8b\u4e0d\u540c\uff0c\u6211\u5011\u5f97\u8981\u6536\u96c6\u4e9e\u6d32\u5340\u7684 IP \u624d\u884c\uff0c\u9019\u4e9b\u5340\u6bb5\u53ef\u80fd\u53ef\u4ee5\u900f\u904e\u5e95\u4e0b\u7684\u7db2\u7ad9\u4f86\u53d6\u5f97\uff1a<\/p>\n<ul>\n<li>\u4e94\u5927\u6d32\u7684 IP \u7ba1\u7406\u6240\u5c6c\u4eba\uff1a<a href=\"http:\/\/www.iana.org\/numbers\/\">http:\/\/www.iana.org\/numbers\/<\/a><\/li>\n<li>\u6bcf\u500b\u55ae\u4f4d\u7684 IP \u5206\u4f48\uff1a<br \/>\n<a href=\"http:\/\/www.iana.org\/assignments\/ipv4-address-space\/ipv4-address-space.xml\">http:\/\/www.iana.org\/assignments\/ipv4-address-space\/ipv4-address-space.xml<\/a><\/li>\n<li>\u53f0\u7063\u5730\u5340 IP \u5206\u4f48\uff1a<br \/>\n<a href=\"http:\/\/rms.twnic.net.tw\/twnic\/User\/Member\/Search\/main7.jsp?Order=inet_aton%28Startip%29\">http:\/\/rms.twnic.net.tw\/twnic\/User\/Member\/Search\/main7.jsp?Order=inet_aton%28Startip%29<\/a><\/li>\n<\/ul>\n<p>\u7136\u5f8c\u518d\u900f\u904e acl \u4ee5\u53ca view \u4f86\u898f\u7bc4\u5373\u53ef\u3002\u9ce5\u54e5\u7684\u6536\u96c6\u8cc7\u6599\u5982\u4e0b\uff0c\u5982\u679c\u6709\u8aa4\uff0c\u9084\u8acb\u544a\u77e5\uff01<\/p>\n<pre>acl asia { 1.0.0.0\/8;  14.0.0.0\/8;  27.0.0.0\/8;  36.0.0.0\/8;  39.0.0.0\/8;\r\n          42.0.0.0\/0;  49.0.0.0\/8;  58.0.0.0\/8;  59.0.0.0\/8;  60.0.0.0\/8;\r\n          61.0.0.0\/8; 101.0.0.0\/8; 103.0.0.0\/8; 106.0.0.0\/8; 110.0.0.0\/8;\r\n         111.0.0.0\/8; 112.0.0.0\/8; 113.0.0.0\/8; 114.0.0.0\/8; 115.0.0.0\/8;\r\n         116.0.0.0\/8; 117.0.0.0\/8; 118.0.0.0\/8; 119.0.0.0\/8; 120.0.0.0\/8;\r\n         121.0.0.0\/8; 122.0.0.0\/8; 123.0.0.0\/8; 124.0.0.0\/8; 125.0.0.0\/8;\r\n         126.0.0.0\/8; 175.0.0.0\/8; 180.0.0.0\/8; 182.0.0.0\/8; 183.0.0.0\/8;\r\n         202.0.0.0\/8; 203.0.0.0\/8; 210.0.0.0\/8; 211.0.0.0\/8; 218.0.0.0\/8;\r\n         219.0.0.0\/8; 220.0.0.0\/8; 221.0.0.0\/8; 222.0.0.0\/8; 223.0.0.0\/8;\r\n         139.175.0.0\/16; 140.0.0.0\/8;150.116.0.0\/16;150.117.0.0\/16;\r\n         163.0.0.0\/8; 168.95.0.0\/16;192.0.0.0\/8; \r\n};\r\nacl nonasia { ! \"asia\"; any; };\r\n<\/pre>\n<p>\u5982\u4e0a\u6240\u793a\uff0c\u52a0\u5165 asia \u8207 nonasia \u7684\u76f8\u95dc\u8a2d\u5b9a\uff0c\u518d\u4f7f\u7528 view \u4f86\u8655\u7406\u76f8\u95dc\u7684 zone \uff0c\u4e26\u4fee\u6539 zone file \u5167\u5bb9\uff0c \u5c31\u80fd\u5920\u8655\u7406\u597d\u9019\u500b\u6848\u4f8b\u7684\u9700\u6c42\u56c9\uff01<\/p>\n<hr \/>\n<p><a name=\"upgrade\"><\/a><img loading=\"lazy\" decoding=\"async\" src=\"http:\/\/linux.vbird.org\/images\/penguin-m.gif\" alt=\"\u5927\u6a19\u984c\u7684\u5716\u793a\" width=\"25\" height=\"34\" align=\"middle\" \/>19.6 DNS \u4f3a\u670d\u5668\u7684\u9032\u968e\u8a2d\u5b9a<\/p>\n<p>\u5176\u5be6\uff0c DNS \u4f3a\u670d\u5668\u7684\u904b\u4f5c\u539f\u7406\u8207\u67b6\u8a2d\u65b9\u5f0f\u7684\u8b8a\u5316\uff0c\u771f\u7684\u5f88\u9ad8\u6df1\u83ab\u6e2c\u7684\uff01\u5728\u9019\u88e1\uff0c\u6211\u5011\u984d\u5916\u7684\u63d0\u51fa\u4e00\u4e9b\u6bd4\u8f03\u9032\u968e\u7684\u5167\u5bb9\u7d66\u5927\u5bb6\u53c3\u8003\u53c3\u8003\uff0c \u4f8b\u5982\u67b6\u8a2d\u4e00\u500b\u5408\u6cd5\u6388\u6b0a\u7684 DNS \u4f3a\u670d\u5668\u4ee5\u53ca\u5229\u7528 rndc \u63a7\u7ba1 DNS \u7cfb\u7d71\u5594\uff01<\/p>\n<hr \/>\n<p><a name=\"OK_DNS\"><\/a><img loading=\"lazy\" decoding=\"async\" src=\"http:\/\/linux.vbird.org\/images\/penguin-s.gif\" alt=\"\u5c0f\u6a19\u984c\u7684\u5716\u793a\" width=\"16\" height=\"23\" align=\"middle\" \/>19.6.1 \u67b6\u8a2d\u4e00\u500b\u5408\u6cd5\u6388\u6b0a\u7684 DNS \u4f3a\u670d\u5668<\/p>\n<p>\u597d\u5566\uff01\u73fe\u5728\u4f60\u61c9\u8a72\u77e5\u9053\u4ec0\u9ebc\u662f\u300e\u7d93\u4e0a\u6e38\u6388\u6b0a\u7684\u5408\u6cd5 DNS \u4f3a\u670d\u5668\u300f\u4e86\u5427\uff1f \u6c92\u932f\uff01\u5c31\u662f\u4e0a\u6e38\u7684 DNS \u4f3a\u670d\u5668\u5c07\u5b50\u7db2\u57df\u7684\u67e5\u6838\u6b0a\u958b\u653e\u7d66\u4f60\u4f86\u8a2d\u5b9a\u5c31\u5c0d\u5566\uff01\u55ef\uff01\u96d6\u7136\u77e5\u9053\u539f\u7406\uff0c\u4f46\u662f\u90a3\u9ebc\u6211\u8981\u5982\u4f55\u4f86\u67b6\u8a2d\u4e00\u500b\u5408\u6cd5\u7684 DNS \u4f3a\u670d\u5668\u5462\uff1f\u597d\u8b93\u6211\u81ea\u5df1\u7ba1\u7406\u81ea\u5df1\u7684 domain\uff01\u8209\u4f8b\u4f86\u8aaa\uff0c\u9ce5\u54e5\u7684 vbird.idv.tw \u5c31\u662f\u9ce5\u54e5\u81ea\u5df1\u7ba1\u7406\u7684\u54e9\uff5e\u5e95\u4e0b\u6211\u5011\u5c31\u4f86\u8ac7\u4e00\u8ac7\uff0c\u5982\u4f55\u5411 ISP \u7533\u8acb\u4e00\u500b\u5408\u6cd5\u6388\u6b0a\u7684 DNS \u4f3a\u670d\u5668\uff0c\u6216\u8005\u662f\u5408\u6cd5\u7684\u4e3b\u6a5f\u540d\u7a31\u554a\uff01<\/p>\n<ul>\n<li>\n<hr \/>\n<p>1. \u7533\u8acb\u4e00\u500b\u5408\u6cd5\u7684 domain name &#8230;\u5c31\u662f\u8981\u82b1\u9322\uff01<\/li>\n<\/ul>\n<p>\u65e2\u7136\u662f\u8981\u5efa\u7acb\u4e00\u500b\u5408\u6cd5\u7684 DNS server\uff0c\u81ea\u7136\u5c31\u8981\u5411\u5408\u6cd5\u7684 ISP \u7533\u8acb\u6388\u6b0a\u56c9\uff01\u76ee\u524d\u4f60\u53ef\u4ee5\u5230\u5e95\u4e0b\u7684\u5730\u65b9\u53bb\u7533\u8acb\u5594\uff01<\/p>\n<ul>\n<li><a href=\"http:\/\/www.twnic.net\/index3.php\">http:\/\/www.twnic.net\/index3.php<\/a><\/li>\n<\/ul>\n<p>\u5176\u5be6 TWNIC \u5df2\u7d93\u5c07\u53f0\u7063\u5730\u5340\u7684\u4e00\u4e9b domain \u6388\u6b0a\u7d66\u5404\u5927 ISP \u7ba1\u7406\u4e86\uff0c\u6240\u4ee5\u4f60\u9023\u63a5\u4e0a\u8ff0\u7684\u7db2\u7ad9\u4e4b\u5f8c\uff0c\u53ef\u4ee5\u9ede\u9078\u88e1\u982d\u76f8\u95dc\u7684\u9023\u7d50\u5230\u5404\u5927 ISP \u53bb\u8a3b\u518a\uff01\u4f8b\u5982\u9ce5\u54e5\u5c31\u5728 Hinet \u8a3b\u518a\u4e86 vbird.idv.tw \u9019\u500b\u7db2\u57df\uff01\u73fe\u5728\u9ce5\u54e5\u5c31\u4ee5 Hinet \u7684\u8a3b\u518a\u505a\u70ba\u8aaa\u660e\u5427\uff1a<\/p>\n<ol>\n<li>\u9032\u5165\u4e3b\u756b\u9762\uff1a<br \/>\n\u76f4\u63a5\u9023\u7d50\u5230\u5e95\u4e0b\u7684\u7db2\u9801\u53bb\uff1a <a href=\"http:\/\/domain.hinet.net\/\">http:\/\/domain.hinet.net<\/a><\/li>\n<li>\u9078\u64c7\u9700\u8981\u7684\u7db2\u57df\u540d\u7a31\uff0c\u4e26\u67e5\u8a62\u8a72\u7db2\u57df\u662f\u5426\u5df2\u5b58\u5728\uff1a<br \/>\n\u56e0\u70ba\u7db2\u57df\u5fc5\u9700\u662f\u7368\u4e00\u7121\u4e8c\u7684\uff0c\u6240\u4ee5\u4f60\u5fc5\u9700\u4f7f\u7528\u8a72\u7db2\u9801\u7576\u4e2d\u63d0\u4f9b\u7684\u67e5\u8a62\u529f\u80fd\uff0c \u53bb\u67e5\u8a62\u4e00\u4e0b\u4f60\u60f3\u8981\u7684\u7db2\u57df\u662f\u5426\u5df2\u7d93\u88ab\u8a3b\u518a\u4e86\u5462\uff1f\u4e00\u5b9a\u8981\u6c92\u6709\u88ab\u8a3b\u518a\u7684\u7db2\u57df\u624d\u53ef\u4ee5\u5594\uff01<\/li>\n<li>\u9010\u6b65\u9032\u884c\u8a3b\u518a\uff1a<br \/>\n\u4f60\u53ef\u4ee5\u9078\u64c7\u5f88\u591a\u7a2e\u985e\u7684\u9818\u57df\u4f86\u8a3b\u518a\uff0c\u5982\u679c\u60f3\u8981\u8a3b\u518a\u500b\u4eba\u7db2\u7ad9\uff0c\u8acb\u6309\u4e0b\u5716\u6240\u6307\u7684 (1) \u8655\uff0c\u5982\u679c\u60f3\u8981\u8a3b\u518a\u985e\u4f3c vbird.tw \u9019\u7a2e\u7db2\u57df\u7684\u8a71\uff0c\u5247\u53ef\u4ee5\u9078\u64c7 (2) \u6240\u6307\u7684\u90a3\u500b\u9805\u76ee\u3002\u7136\u5f8c\u4ee5\u8a72\u7db2\u7ad9\u63d0\u4f9b\u7684\u529f\u80fd\u4e00\u6b65\u4e00\u6b65\u7684\u5f80\u4e0b\u53bb\u9032\u884c\uff0c \u4f8b\u5982\u4ee5\u9ce5\u54e5\u7684\u300e\u500b\u4eba\u7db2\u5740\u300f\u4e4b\u8a3b\u518a\u70ba\u4f8b\uff0c\u6309\u4e0b\u500b\u4eba\u7db2\u5740\u4e4b\u5f8c\uff0c\u6703\u51fa\u73fe\u6d41\u7a0b\u6b65\u9a5f\u70ba\uff1a<img decoding=\"async\" title=\"\u4ee5 Hinet \u7db2\u7ad9\u70ba\u4f9d\u64da\u4ecb\u7d39\u8a3b\u518a domain \u7684\u65b9\u6cd5\" src=\"http:\/\/linux.vbird.org\/linux_server\/0350dns\/\/hinet_reg_01.gif\" alt=\"\u4ee5 Hinet \u7db2\u7ad9\u70ba\u4f9d\u64da\u4ecb\u7d39\u8a3b\u518a domain \u7684\u65b9\u6cd5\" border=\"1\" \/><br \/>\n\u5716 19.6-1\u3001\u4ee5 Hinet \u7db2\u7ad9\u70ba\u4f9d\u64da\u4ecb\u7d39\u8a3b\u518a domain \u7684\u65b9\u6cd5\u8acb\u4f9d\u5e8f\u4e00\u6b65\u4e00\u6b65\u7684\u5c07\u4ed6\u5b8c\u6210\uff0c\u6700\u5f8c\u4f60\u6703\u5f97\u5230\u4e00\u7d44\u5e33\u865f\u5bc6\u78bc\uff0c\u5c31\u80fd\u5920\u4fee\u6539\u81ea\u5df1\u7684\u9818\u57df\u5566\uff01<\/li>\n<li>\u9078\u64c7\u7db2\u7ad9\u4ee3\u7ba1\u6216\u67b6\u8a2d DNS \u6a21\u5f0f\uff1a<br \/>\n\u6211\u5011\u53ef\u4ee5\u76f4\u63a5\u8acb ISP \u5e6b\u6211\u5011\u8a2d\u5b9a\u597d host \u5c0d\u61c9 IP \u5c31\u597d(\u6700\u591a\u4e09\u90e8)\uff0c\u7576\u7136\u4e5f\u53ef\u4ee5\u81ea\u884c\u8a2d\u5b9a\u4e00\u4e0b\u6211\u5011\u6240\u9700\u8981\u7684 DNS \u4f3a\u670d\u5668\u5566\uff01\u5982\u679c\u672a\u4f86\u4f60\u53ef\u80fd\u6703\u67b6\u8a2d mail server \uff0c\u6240\u4ee5\u9084\u662f\u81ea\u884c\u8a2d\u5b9a DNS \u4e3b\u6a5f\u597d\u4e86\uff01\u4f60\u53ef\u4ee5\u9078\u64c7\u5716 19.6-1 \u5728 (3) \u6240\u6307\u7684\u300eDNS\u7570\u52d5\u8207\u67e5\u8a62\u300f\u9805\u76ee\uff0c\u6703\u51fa\u73fe\u4e0b\u9762\u5716\u793a\u3002\u8a18\u5f97\u9078\u64c7\u300eDNS\u300f\u53ca\u586b\u5beb\u4f60\u7684 hostname \u8207\u6b63\u78ba\u7684 IP \u5373\u53ef\u5594\uff01\u6ce8\u610f\uff1a \u8981\u586b\u9078\u9019\u500b\u9805\u76ee\uff0c\u6700\u597d\u4f60\u7684 IP \u662f\u56fa\u5b9a\u5236\u7684\uff0c\u6d6e\u52d5\u5236\u7684 IP \u4e0d\u5efa\u8b70\u7528\u9019\u500b\u9078\u9805\uff01<img decoding=\"async\" title=\"\u4ee5 Hinet \u7db2\u7ad9\u70ba\u4f9d\u64da\u4ecb\u7d39\u8a3b\u518a domain \u7684\u65b9\u6cd5\" src=\"http:\/\/linux.vbird.org\/linux_server\/0350dns\/\/hinet_reg_02.gif\" alt=\"\u4ee5 Hinet \u7db2\u7ad9\u70ba\u4f9d\u64da\u4ecb\u7d39\u8a3b\u518a domain \u7684\u65b9\u6cd5\" border=\"1\" \/><br \/>\n\u5716 19.6-2\u3001\u4ee5 Hinet \u7db2\u7ad9\u70ba\u4f9d\u64da\u4ecb\u7d39\u8a3b\u518a domain \u7684\u65b9\u6cd5<\/li>\n<\/ol>\n<ul>\n<li>\n<hr \/>\n<p>2. \u4ee5 <a href=\"http:\/\/linux.vbird.org\/linux_server\/0350dns.php#DNS_master\">DNS \u4f3a\u670d\u5668\u7684\u8a73\u7d30\u8a2d\u5b9a (19.4)<\/a> \u4e4b\u8a2d\u5b9a\u5167\u5bb9\u4f86\u8a2d\u5b9a\u4f60\u7684\u4e3b\u6a5f\uff1a<\/li>\n<\/ul>\n<p>\u5982\u679c\u4f60\u5df2\u7d93\u4ee5 DNS \u4f3a\u670d\u5668\u7684\u65b9\u5f0f\u7533\u8acb\u4e86\u4e00\u500b domain name \uff0c\u90a3\u9ebc\u4f60\u5c31\u5fc5\u9808\u8981\u8a2d\u5b9a\u4f60\u7684 DNS \u4e3b\u6a5f\u4e86\uff01 \u8acb\u6ce8\u610f\uff0c\u9019\u500b\u60c5\u6cc1\u4e4b\u4e0b\uff0c\u4f60\u53ea\u8981\u8a2d\u5b9a\u4f60\u7684\u8a3b\u518a\u7684\u7db2\u57df\u7684\u6b63\u89e3\u5373\u53ef\uff01 \u53cd\u89e3\u90e8\u5206\u5247\u5148\u4e0d\u8981\u7406\u6703\uff0c\u7576\u7136\uff0c\u5982\u679c\u4f60\u6709\u8fa6\u6cd5\u7684\u8a71\uff0c\u6700\u597d\u9084\u662f\u8acb\u4e0a\u5c64\u7684 ISP \u5e6b\u4f60\u8a2d\u5b9a\u56c9\uff01<\/p>\n<ul>\n<li>\n<hr \/>\n<p>3. \u6e2c\u8a66\uff1a<\/li>\n<\/ul>\n<p>\u8a2d\u5b9a\u4e00\u90e8\u5408\u6cd5\u7684 DNS \u5b8c\u7562\u5f8c\uff0c\u5efa\u8b70\u4f60\u53ef\u4ee5\u5230\u9019\u500b\u7db2\u7ad9\u53bb\u67e5\u8a62\u4e00\u4e0b\u4f60\u7684\u8a2d\u5b9a\u662f\u5426\u59a5\u7576\uff1a<\/p>\n<ul>\n<li><a href=\"http:\/\/thednsreport.com\/\">http:\/\/thednsreport.com\/<\/a><\/li>\n<\/ul>\n<p>\u5982\u6b64\u4e00\u4f86\uff0c\u4f60\u7684 DNS \u4e3b\u6a5f\u4e0a\u9762\u8a2d\u5b9a\u7684\u4efb\u4f55\u8cc7\u8a0a\uff0c\u90fd\u53ef\u4ee5\u900f\u904e Internet \u4e0a\u9762\u7684\u4efb\u4f55\u4e00\u90e8\u4e3b\u6a5f\u4f86\u67e5\u8a62\u5230\u5594\uff01\u5920\u68d2\u5427\uff01\u5fc3\u52d5\u4e86\u55ce\uff1f\u8d95\u5feb\u53bb\u8a66\u770b\u770b\u5427\uff01 ^_^<\/p>\n<hr \/>\n<p><a name=\"Lame_server\"><\/a><img loading=\"lazy\" decoding=\"async\" src=\"http:\/\/linux.vbird.org\/images\/penguin-s.gif\" alt=\"\u5c0f\u6a19\u984c\u7684\u5716\u793a\" width=\"16\" height=\"23\" align=\"middle\" \/>19.6.2 LAME Server \u7684\u554f\u984c<\/p>\n<p>\u6216\u8a31\u4f60\u66fe\u7d93\u5728 \/var\/log\/messages \u88e1\u9762\u770b\u5230\u985e\u4f3c\u9019\u6a23\u7684\u8a0a\u606f\uff1a<\/p>\n<pre>[root@www ~]# more \/var\/log\/messages\r\n1 Oct  5 05:02:30 test named[432]: lame server resolving '68.206.244.205.\r\n  in-addr.arpa' (in '206.244.205.in-addr.arpa'?): 205.244.200.3#53\r\n2 Oct  5 05:02:31 test named[432]: lame server resolving '68.206.244.205.\r\n  in-addr.arpa' (in '206.244.205.in-addr.arpa'?): 206.105.201.35#53\r\n3 Oct  5 05:02:41 test named[432]: lame server resolving '68.206.244.205.\r\n  in-addr.arpa' (in '206.244.205.in-addr.arpa'?): 205.244.112.20#53\r\n<\/pre>\n<p>\u9019\u662f\u4ec0\u9ebc\u6771\u897f\u5436\uff1f\u6839\u64da\u5b98\u65b9\u63d0\u4f9b\u7684\u6587\u4ef6\u8cc7\u6599\u4f86\u770b ( \u5728\u4f60\u7684 CentOS 6.x \u7684\u7cfb\u7d71\u4e0b\uff0c\u8acb\u5bdf\u770b\u9019\u500b\u6a94\u6848\u300e \/usr\/share\/doc\/bind-9.7.0\/arm\/Bv9ARM.ch06.html \u300f )\uff0c\u7576\u6211\u5011\u7684 DNS \u4f3a\u670d\u5668\u5728\u5411\u5916\u9762\u7684 DNS \u7cfb\u7d71\u67e5\u8a62\u67d0\u4e9b\u6b63\u53cd\u89e3\u6642\uff0c\u53ef\u80fd\u7531\u65bc \u300e\u5c0d\u65b9\u300f DNS \u4e3b\u6a5f\u7684\u8a2d\u5b9a\u932f\u8aa4\uff0c\u5c0e\u81f4\u7121\u6cd5\u89e3\u6790\u5230\u9810\u671f\u7684\u6b63\u53cd\u89e3\u7d50\u679c\uff0c\u9019\u500b\u6642\u5019\u5c31\u6703\u767c\u751f\u6240\u8b02\u7684 lame server \u7684\u932f\u8aa4\uff01<\/p>\n<p>\u90a3\u9ebc\u9019\u500b\u932f\u8aa4\u6703\u8b93\u6211\u5011\u7684 DNS \u4f3a\u670d\u5668\u767c\u751f\u4ec0\u9ebc\u56b4\u91cd\u7684\u5f8c\u679c\u55ce\uff1f\u65e2\u7136\u50c5\u662f\u5c0d\u65b9\u7684\u8a2d\u5b9a\u932f\u8aa4\uff0c\u6240\u4ee5\u81ea\u7136\u5c31\u4e0d\u6703\u5f71\u97ff\u6211\u5011\u7684 DNS \u4f3a\u670d\u5668\u7684\u6b63\u5e38\u4f5c\u696d\u4e86\u3002 \u53ea\u662f\u6211\u5011\u7684 DNS \u4e3b\u6a5f\u5728\u67e5\u8a62\u6642\uff0c\u6703\u767c\u751f\u7121\u6cd5\u6b63\u78ba\u89e3\u6790\u7684\u8b66\u544a\u8a0a\u606f\u800c\u5df2\uff0c \u9019\u500b\u8a0a\u606f\u96d6\u7136\u4e0d\u6703\u5c0d\u6211\u5011\u7684 Linux \u4e3b\u6a5f\u767c\u751f\u4ec0\u9ebc\u56f0\u64fe\uff0c\u4e0d\u904e\uff0c\u5c0d\u65bc\u7cfb\u7d71\u7ba1\u7406\u54e1\u4f86\u8aaa\uff0c \u8981\u5929\u5929\u67e5\u8a62\u7684 \/var\/log\/messages \u6a94\u6848\u7adf\u7136\u6709\u9019\u9ebc\u591a\u7684\u767b\u9304\u8cc7\u8a0a\uff0c\u9019\u662f\u5f88\u8a0e\u53ad\u7684\u4e00\u4ef6\u4e8b\uff01<\/p>\n<p>\u597d\u4e86\uff0c\u6211\u5011\u77e5\u9053 lame server \u662f\u5c0d\u65b9\u4e3b\u6a5f\u7684\u554f\u984c\uff0c\u5c0d\u6211\u5011\u4e3b\u6a5f\u6c92\u6709\u5f71\u97ff\uff0c\u4f46\u662f\u537b\u53c8\u4e0d\u60f3\u8981\u8b93\u8a72\u8a0a\u606f\u51fa\u73fe\u5728\u6211\u5011\u7684\u767b\u9304\u6a94 \/var\/log\/messages \u7576\u4e2d\uff0c\u600e\u9ebc\u9054\u5230\u9019\u6a23\u7684\u529f\u80fd\u5462\uff1f\u5475\u5475\uff01\u5c31\u76f4\u63a5\u5229\u7528 BIND \u9019\u500b\u8edf\u9ad4\u6240\u63d0\u4f9b\u7684\u767b\u9304\u6a94\u53c3\u6578\u554a\uff01 \u52d5\u4f5c\u5f88\u7c21\u55ae\uff0c\u5728\u4f60\u7684 \/etc\/named.conf \u6a94\u6848\u7576\u4e2d\u7684\u6700\u5e95\u4e0b\uff0c\u52a0\u5165\u9019\u500b\u53c3\u6578\u5373\u53ef\uff1a<\/p>\n<pre># 1. \u4fee\u6539 \/etc\/named.conf\r\n[root@www ~]# vim \/etc\/named.conf\r\n\/\/ \u52a0\u5165\u5e95\u4e0b\u9019\u500b\u53c3\u6578\uff1a\r\nlogging {\r\n        category lame-servers { null; };\r\n};\r\n\r\n# 2. \u91cd\u65b0\u555f\u52d5 bind\r\n[root@www ~]# \/etc\/init.d\/named restart\r\n<\/pre>\n<p>\u57fa\u672c\u4e0a\uff0c\u90a3\u500b logging \u662f\u4e3b\u6a5f\u7684\u767b\u9304\u6a94\u8a18\u9304\u7684\u4e00\u500b\u8a2d\u5b9a\u9805\u76ee\uff0c\u56e0\u70ba\u6211\u5011\u4e0d\u8981 lame server \u7684\u8cc7\u8a0a\uff0c \u6240\u4ee5\u624d\u5c07\u4ed6\u8a2d\u5b9a\u70ba\u7121 (null) \uff0c\u9019\u6a23\u5c31\u6539\u5b8c\u4e86\uff01\u8a18\u5f97\u91cd\u65b0\u555f\u52d5 named \u4e4b\u5f8c\uff0c\u9084\u662f\u8981\u5bdf\u770b\u4e00\u4e0b \/var\/log\/messages \u5594\uff01 \u4ee5\u78ba\u5b9a named \u7684\u6b63\u78ba\u555f\u52d5\u8207\u5426\uff01\u7136\u5f8c\uff0c\u563f\u563f\uff0c\u4ee5\u5f8c\u5c31\u4e0d\u6703\u770b\u5230 lame server \u54af\uff01<\/p>\n<hr \/>\n<p><a name=\"rndckey\"><\/a><img loading=\"lazy\" decoding=\"async\" src=\"http:\/\/linux.vbird.org\/images\/penguin-s.gif\" alt=\"\u5c0f\u6a19\u984c\u7684\u5716\u793a\" width=\"16\" height=\"23\" align=\"middle\" \/>19.6.3 \u5229\u7528 RNDC \u6307\u4ee4\u7ba1\u7406 DNS \u4f3a\u670d\u5668<\/p>\n<p>\u4e0d\u77e5\u9053\u4f60\u6703\u4e0d\u6703\u89ba\u5f97\u5f88\u5947\u602a\uff0c\u90a3\u5c31\u662f\u70ba\u5565\u555f\u52d5 DNS \u5f8c\uff0c\u5728 \/var\/log\/messages \u8001\u662f\u770b\u5230\u9019\u4e00\u53e5\u8a71\uff1a<\/p>\n<pre>command channel listening on 127.0.0.1#953\r\n<\/pre>\n<p>\u800c\u4e14\u5728\u672c\u6a5f\u7aef\u7684 port 953 \u9084\u591a\u4e86\u500b named \u6240\u555f\u52d5\u7684\u670d\u52d9\uff0c\u90a3\u662f\u5565\uff1f\u90a3\u5c31\u662f\u6240\u8b02\u7684 rndc \u4e86\u3002\u9019\u500b rndc \u662f BIND version 9 \u4ee5\u5f8c\u6240\u63d0\u4f9b\u7684\u529f\u80fd\u5566\uff0c\u4ed6\u53ef\u4ee5\u8b93\u4f60\u5f88\u8f15\u9b06\u7684\u7ba1\u7406\u4f60\u81ea\u5df1\u7684 DNS \u4f3a\u670d\u5668\u5594\uff01 \u5305\u62ec\u53ef\u4ee5\u6aa2\u67e5\u5df2\u7d93\u5b58\u5728 DNS \u5feb\u53d6\u7576\u4e2d\u7684\u8cc7\u6599\u3001\u91cd\u65b0\u66f4\u65b0\u67d0\u500b zone \u800c\u4e0d\u9700\u8981\u91cd\u65b0\u555f\u52d5\u6574\u500b DNS \uff0c \u4ee5\u53ca\u6aa2\u67e5 DNS \u7684\u72c0\u614b\u8207\u7d71\u8a08\u8cc7\u6599\u7b49\u7b49\u7684\uff0c\u633a\u6709\u8da3\u7684\uff01<\/p>\n<p>\u4e0d\u904e\uff0c\u56e0\u70ba rndc \u53ef\u4ee5\u5f88\u6df1\u5165\u7684\u7ba1\u7406\u4f60\u7684 DNS \u4f3a\u670d\u5668\uff0c\u6240\u4ee5\u7576\u7136\u8981\u9032\u884c\u4e00\u4e9b\u63a7\u7ba1\u5566\uff01 \u63a7\u7ba1\u7684\u65b9\u5f0f\u662f\u7d93\u904e rndc \u7684\u8a2d\u5b9a\u4f86\u5efa\u7acb\u4e00\u652f\u91d1\u9470 (rndc key)\uff0c\u4e26\u5c07\u9019\u652f\u91d1\u9470\u76f8\u95dc\u7684\u8cc7\u8a0a\u5beb\u5165\u4f60\u7684 named.conf \u8a2d\u5b9a\u6a94\u7576\u4e2d\uff0c\u91cd\u65b0\u555f\u52d5 DNS \u5f8c\uff0c\u4f60\u7684 DNS \u5c31\u80fd\u5920\u85c9\u7531 rndc \u9019\u500b\u6307\u4ee4\u4f86\u7ba1\u7406\u56c9\uff01 \u4e8b\u5be6\u4e0a\uff0c\u65b0\u7248\u7684 distributions \u901a\u5e38\u5df2\u7d93\u5e6b\u4f60\u4e3b\u52d5\u7684\u5efa\u7acb\u597d rndc key \u4e86\uff0c\u6240\u4ee5\u4f60\u4e0d\u9700\u8981\u5fd9\u788c\uff5e \u4e0d\u904e\uff0c\u5982\u679c\u4f60\u9084\u662f\u5728\u767b\u9304\u6a94\u7576\u4e2d\u767c\u73fe\u4e00\u4e9b\u932f\u8aa4\uff0c\u4f8b\u5982\uff1a<\/p>\n<pre>couldn't add command channel 127.0.0.1#953: not found\r\n<\/pre>\n<p>\u90a3\u5c31\u8868\u793a\u4f60 DNS \u7684 rndc key \u6c92\u6709\u8a2d\u5b9a\u597d\u5566\uff01\u90a3\u8981\u5982\u4f55\u8a2d\u5b9a\u597d\uff1f\u5f88\u7c21\u55ae\uff5e\u53ea\u8981\u5148\u5efa\u7acb\u4e00\u628a rndc key \uff0c\u7136\u5f8c\u52a0\u5230 named.conf \u7576\u4e2d\u53bb\u5373\u53ef\uff01\u4f60\u53ef\u4ee5\u4f7f\u7528 bind \u63d0\u4f9b\u7684\u6307\u4ee4\u4f86\u9032\u884c\u9019\u6a23\u7684\u5de5\u4f5c\u5594\uff01<\/p>\n<pre># 1. \u5148\u5efa\u7acb rndc key \u7684\u76f8\u95dc\u8cc7\u6599\u5427\uff01\r\n[root@www ~]# rndc-confgen\r\n# Start of rndc.conf &lt;==\u5e95\u4e0b\u6c92\u6709 # \u7684\u7b2c\u4e00\u90e8\u4efd\u8acb\u8907\u88fd\u5230 \/etc\/rndc.conf \u4e2d\r\nkey \"rndc-key\" {\r\n        algorithm hmac-md5;\r\n        secret \"UUqxyIwui+22CobCYFj5kg==\";\r\n};\r\n\r\noptions {\r\n        default-key \"rndc-key\";\r\n        default-server 127.0.0.1;\r\n        default-port 953;\r\n};\r\n# End of rndc.conf\r\n\r\n# \u81f3\u65bc\u5e95\u4e0b\u7684 key \u8207 controls \u90e8\u5206\uff0c\u5247\u8acb\u8907\u88fd\u5230 named.conf \u4e14\u89e3\u958b # \u5594\uff01\r\n# Use with the following in named.conf, adjusting the allow list as needed:\r\n# key \"rndc-key\" {\r\n#       algorithm hmac-md5;\r\n#       secret \"UUqxyIwui+22CobCYFj5kg==\";\r\n# };\r\n#\r\n# controls {\r\n#       inet 127.0.0.1 port 953\r\n#               allow { 127.0.0.1; } keys { \"rndc-key\"; };\r\n# };\r\n# End of named.conf\r\n# \u8acb\u6ce8\u610f\uff0c\u9019\u500b rndc-confgen \u662f\u5229\u7528\u4e82\u6578\u8a08\u7b97\u51fa\u52a0\u5bc6\u7684\u90a3\u628a key \uff0c\r\n# \u6240\u4ee5\u6bcf\u6b21\u57f7\u884c\u7684\u7d50\u679c\u90fd\u4e0d\u4e00\u6a23\u3002\u6240\u4ee5\u4e0a\u8ff0\u7684\u8cc7\u6599\u8207\u4f60\u7684\u87a2\u5e55\u6703\u6709\u9ede\u4e0d\u540c\u3002\r\n\r\n# 2. \u5efa\u7acb rndc.key \u6a94\u6848\r\n[root@www ~]# vim \/etc\/rndc.key\r\n# \u5728\u9019\u500b\u6a94\u6848\u7576\u4e2d\u5c07\u539f\u672c\u7684\u8cc7\u6599\u5168\u90e8\u522a\u9664\uff0c\u4e26\u5c07\u525b\u525b\u5f97\u5230\u7684\u7d50\u679c\u7d66\u4ed6\u8cbc\u4e0a\u53bb\r\nkey \"rndc-key\" {\r\n        algorithm hmac-md5;\r\n        secret \"UUqxyIwui+22CobCYFj5kg==\";\r\n};\r\n\r\n# 3. \u4fee\u6539 named.conf\r\n[root@www ~]# vim \/etc\/named.conf\r\n# \u5728\u67d0\u500b\u4e0d\u88ab\u5f71\u97ff\u7684\u89d2\u843d\u5efa\u7f6e\u5982\u4e0b\u7684\u5167\u5bb9\uff1a\r\nkey \"rndc-key\" {\r\n       algorithm hmac-md5;\r\n       secret \"UUqxyIwui+22CobCYFj5kg==\";\r\n};\r\ncontrols {\r\n       inet 127.0.0.1 port 953\r\n               allow { 127.0.0.1; } keys { \"rndc-key\"; };\r\n};\r\n\r\n[root@www ~]# \/etc\/init.d\/named restart\r\n<\/pre>\n<p>\u5efa\u7acb\u4e86rndc key \u4e26\u4e14\u555f\u52d5 DNS \uff0c\u540c\u6642\u4f60\u7684\u7cfb\u7d71\u4e5f\u5df2\u7d93\u6709 port 953 \u4e4b\u5f8c\uff0c\u6211\u5011\u5c31\u53ef\u4ee5\u5728\u672c\u6a5f\u57f7\u884c rndc \u9019\u500b\u6307\u4ee4\u4e86\u3002\u9019\u500b\u6307\u4ee4\u7684\u7528\u6cd5\u8acb\u76f4\u63a5\u8f38\u5165 rndc \u4f86\u67e5\u8a62\u5373\u53ef\uff1a<\/p>\n<pre>[root@www ~]# rndc\r\nUsage: rndc [-c config] [-s server] [-p port]\r\n        [-k key-file ] [-y key] [-V] command\r\n\r\ncommand is one of the following:\r\n\r\n  reload        Reload configuration file and zones.\r\n  stats         Write server statistics to the statistics file.\r\n  dumpdb        Dump cache(s) to the dump file (named_dump.db).\r\n  flush         Flushes all of the server's caches.\r\n  status        Display status of the server.\r\n# \u5176\u4ed6\u5c31\u7d66\u4ed6\u7701\u7565\u5566\uff01\u8acb\u81ea\u884c\u8f38\u5165\u9019\u500b\u6307\u4ee4\u4f86\u53c3\u8003\u56c9\uff01\r\n<\/pre>\n<p>\u90a3\u5982\u4f55\u4f7f\u7528\u5462\uff1f\u6211\u5011\u8209\u5e7e\u500b\u5c0f\u4f8b\u5b50\u4f86\u8aaa\u660e\u5427\uff01<\/p>\n<pre># \u7bc4\u4f8b\u4e00\uff1a\u5c07\u76ee\u524d DNS \u4f3a\u670d\u5668\u7684\u72c0\u614b\u986f\u793a\u51fa\u4f86\r\n[root@www ~]# rndc status\r\nversion: 9.7.0-P2-RedHat-9.7.0-5.P2.el6_0.1\r\nCPUs found: 1\r\nworker threads: 1\r\nnumber of zones: 27         &lt;==\u9019\u90e8 DNS \u7ba1\u7406\u7684 zone \u6578\u91cf\r\ndebug level: 0              &lt;==\u662f\u5426\u5177\u6709 debug \u53ca debug \u7684\u7b49\u7d1a\r\nxfers running: 0\r\nxfers deferred: 0\r\nsoa queries in progress: 0\r\nquery logging is OFF        &lt;==\u662f\u5426\u5177\u6709 debug \u53ca debug \u7684\u7b49\u7d1a\r\nrecursive clients: 0\/0\/1000\r\ntcp clients: 0\/100\r\nserver is up and running    &lt;==\u662f\u5426\u5177\u6709 debug \u53ca debug \u7684\u7b49\u7d1a\r\n\r\n# \u7bc4\u4f8b\u4e8c\uff1a\u5c07\u76ee\u524d\u7cfb\u7d71\u7684 DNS \u7d71\u8a08\u8cc7\u6599\u8a18\u9304\u4e0b\u4f86\r\n[root@www ~]# rndc stats\r\n# \u6b64\u6642\uff0c\u9810\u8a2d\u6703\u5728 \/var\/named\/data \u5167\u7522\u751f\u65b0\u6a94\u6848\uff0c\u4f60\u53ef\u4ee5\u53bb\u67e5\u95b1\uff1a\r\n[root@www ~]# cat \/var\/named\/data\/named_stats.txt\r\n+++ Statistics Dump +++ (1312528012)\r\n....(\u4e2d\u9593\u7701\u7565)....\r\n++ Zone Maintenance Statistics ++\r\n                   2 IPv4 notifies sent\r\n++ Resolver Statistics ++\r\n....(\u4e2d\u9593\u7701\u7565)....\r\n++ Cache DB RRsets ++\r\n[View: lan (Cache: lan)]\r\n[View: wan (Cache: wan)]\r\n[View: _bind (Cache: _bind)]\r\n[View: _meta (Cache: _meta)]\r\n++ Socket I\/O Statistics ++\r\n                   5 UDP\/IPv4 sockets opened\r\n                   4 TCP\/IPv4 sockets opened\r\n                   2 UDP\/IPv4 sockets closed\r\n                   1 TCP\/IPv4 sockets closed\r\n                   2 TCP\/IPv4 connections accepted\r\n++ Per Zone Query Statistics ++\r\n--- Statistics Dump --- (1312528012)\r\n\r\n# \u7bc4\u4f8b\u4e09\uff1a\u5c07\u76ee\u524d\u5feb\u53d6\u8a18\u61b6\u9ad4\u7576\u4e2d\u7684\u8cc7\u6599\u8a18\u9304\u4e0b\u4f86\r\n[root@www ~]# rndc dumpdb\r\n# \u8207 stats \u985e\u4f3c\uff0c\u6703\u5c07 cache \u7684\u8cc7\u6599\u653e\u7f6e\u6210\u70ba\u4e00\u500b\u6a94\u6848\uff0c\u4f60\u53ef\u4ee5\u53bb\u67e5\u95b1\uff1a\r\n# \/var\/named\/data\/cache_dump.db\r\n<\/pre>\n<p>\u5982\u679c\u4f60\u5728\u57f7\u884c rndc \u6307\u4ee4\u6642\u8001\u662f\u51fa\u73fe\u5982\u4e0b\u932f\u8aa4\uff1a<\/p>\n<pre>rndc: connection to remote host closed\r\nThis may indicate that the remote server is using an older version of\r\nthe command protocol, this host is not authorized to connect,\r\nor the key is invalid.\r\n<\/pre>\n<p>\u9019\u8868\u793a\u4f60\u7684 \/etc\/rndc.key \u8207 \/etc\/rndc.conf \u5167\u91d1\u9470\u7684\u7de8\u78bc\u4e0d\u540c\u6240\u81f4\u3002 \u8acb\u4f60\u81ea\u884c\u4ee5\u4e0a\u8ff0\u7684 rndc-confgen \u7684\u65b9\u5f0f\u81ea\u884c\u8655\u7406\u4f60\u7684 rndc key \uff0c\u4e26\u91cd\u65b0\u555f\u52d5 named \u5373\u53ef\u554a\uff01 \u7528\u9019\u6771\u897f\u7ba1\u7406\uff0c\u4f60\u5c31\u4e0d\u9700\u8981\u6bcf\u6b21\u90fd\u91cd\u65b0\u555f\u52d5 named \u56c9\uff01 ^_^<\/p>\n<hr \/>\n<p><a name=\"ddns\"><\/a><img loading=\"lazy\" decoding=\"async\" src=\"http:\/\/linux.vbird.org\/images\/penguin-s.gif\" alt=\"\u5c0f\u6a19\u984c\u7684\u5716\u793a\" width=\"16\" height=\"23\" align=\"middle\" \/>19.6.4 \u67b6\u8a2d\u52d5\u614b DNS \u4f3a\u670d\u5668\uff1a \u8b93\u4f60\u6210\u70ba ISP \u5566\uff01<\/p>\n<p>\u4ec0\u9ebc\u662f\u52d5\u614b DNS (Dynamic DNS, DDNS) \u4e3b\u6a5f\u5462\uff1f\u9084\u8a18\u5f97\u6211\u5011\u5728<a href=\"http:\/\/linux.vbird.org\/linux_server\/0270dynamic_dns.php\">\u7b2c\u5341\u7ae0<\/a>\u88e1\u9762\u63d0\u5230\uff0c \u5982\u679c\u6211\u5011\u672c\u8eab\u662f\u4ee5\u64a5\u63a5\u5236\u7684 ADSL \u9023\u4e0a Internet \u6642\uff0c\u6211\u5011\u7684 IP \u901a\u5e38\u662f ISP \u96a8\u6a5f\u63d0\u4f9b\u7684\uff0c\u56e0\u6b64\u6bcf\u6b21\u4e0a\u7db2\u7684 IP \u90fd\u4e0d\u56fa\u5b9a\uff0c\u6240\u4ee5\uff0c \u6211\u5011\u6c92\u6709\u8fa6\u6cd5\u4ee5\u4e0a\u9762\u7684 DNS \u8a2d\u5b9a\u4f86\u7d66\u4e88\u9019\u7a2e\u9023\u4e0a Internet \u7684\u65b9\u6cd5\u4e00\u500b\u9069\u7576\u7684\u4e3b\u6a5f\u540d\u7a31\u3002<\/p>\n<p>\u4e5f\u56e0\u6b64\uff0c\u5982\u679c\u6211\u5011\u60f3\u8981\u5229\u7528\u9019\u7a2e\u6c92\u6709\u56fa\u5b9a IP \u7684\u9023\u7dda\u65b9\u6cd5\u67b6\u8a2d\u7db2\u7ad9\u6642\uff0c\u5c31\u5f97\u8981\u6709\u7279\u6b8a\u7684\u7ba1\u9053\u4e86\uff5e \u5176\u4e2d\u4e4b\u4e00\u7684\u65b9\u6cd5\u5c31\u662f\u5229\u7528 Internet \u4e0a\u9762\u5df2\u7d93\u63d0\u4f9b\u7684\u514d\u8cbb\u52d5\u614b IP \u5c0d\u61c9\u4e3b\u6a5f\u540d\u7a31\u7684\u670d\u52d9\uff01 \u4f8b\u5982\uff1a <a href=\"http:\/\/www.no-ip.org\/\">http:\/\/www.no-ip.org<\/a> \u3002<\/p>\n<p>\u63d0\u4f9b\u9019\u6a23\u7684\u670d\u52d9\u5229\u7528\u7684\u662f\u4ec0\u9ebc\u539f\u7406\u5462\uff1f\u57fa\u672c\u4e0a\uff0c DNS \u4e3b\u6a5f\u9084\u662f\u5f97\u8981\u63d0\u4f9b Internet \u76f8\u95dc\u7684 zone \u7684\u4e3b\u6a5f\u540d\u7a31\u8207 IP \u7684\u5c0d\u61c9\u8cc7\u6599\u624d\u884c\uff0c\u6240\u4ee5\uff0cDDNS \u4e3b\u6a5f \u5c31\u5fc5\u9808\u8981\u63d0\u4f9b\u4e00\u500b\u6a5f\u5236\uff0c\u8b93\u7528\u6236\u7aef\u53ef\u4ee5\u900f\u904e\u9019\u500b\u6a5f\u5236\u4f86\u4fee\u6539\u4ed6\u5011\u5728 DDNS \u4e3b\u6a5f\u4e0a\u9762\u7684 zone file \u5167\u7684\u8cc7\u6599\u624d\u884c\u3002<\/p>\n<p>\u90a3\u6703\u4e0d\u6703\u5f88\u96e3\u554a\uff1f\u4e0d\u6703\u554a\uff01\u6211\u5011\u7684 BIND 9 \u5c31\u6709\u63d0\u4f9b\u985e\u4f3c\u7684\u6a5f\u5236\u5566\uff01\u90a3\u5c31\u662f\u5229\u7528 update-policy \u9019\u500b\u9078\u9805\uff0c\u914d\u5408\u8a8d\u8b49\u7528\u7684 key \u4f86\u9032\u884c\u8cc7\u6599\u6a94\u6848\u7684\u66f4\u65b0\u3002\u7c21\u55ae\u7684\u8aaa\uff0c 1) \u6211\u5011\u7684 DDNS \u4e3b\u6a5f\u5148\u63d0\u4f9b Client \u4e00\u628a Key (\u5c31\u662f\u8a8d\u8b49\u7528\u7684\u8cc7\u6599\uff0c \u4f60\u53ef\u4ee5\u5c07\u4ed6\u60f3\u6210\u662f\u5e33\u865f\u8207\u5bc6\u78bc\u7684\u6982\u5ff5)\uff0c 2) Client \u7aef\u5229\u7528\u9019\u628a Key \uff0c\u4e26\u914d\u5408 BIND 9 \u7684 nsupdate \u6307\u4ee4\uff0c \u5c31\u53ef\u4ee5\u9023\u4e0a DDNS \u4e3b\u6a5f\uff0c\u4e26\u4e14\u4fee\u6539\u4e3b\u6a5f\u4e0a\u9762\u7684 Zone file \u5167\u7684\u5c0d\u61c9\u8868\u4e86\u3002\u611f\u89ba\u4e0a\u5f88\u50cf\u5f88\u7c21\u55ae\u5594\uff01 \u6c92\u932f\u554a\uff01\u67b6\u8a2d\u4e0a\u771f\u7684\u5f88\u7c21\u55ae\u7684\uff5e\u5e95\u4e0b\u6211\u5011\u5c31\u4f86\u5617\u8a66\u8a2d\u5b9a\u4e00\u4e0b\u5594\uff1a<\/p>\n<ul>\n<li>\n<hr \/>\n<p>1. DDNS Server \u7aef\u7684\u8a2d\u5b9a\uff1a<\/li>\n<\/ul>\n<p>\u5047\u8a2d\u6211\u6709\u4e00\u500b\u670b\u53cb\uff0c\u4ed6\u4f7f\u7528\u7684 Linux \u4e3b\u6a5f\u7684 IP \u662f\u6703\u96a8\u6642\u8b8a\u52d5\u7684\uff0c\u4f46\u662f\u4ed6\u60f3\u8981\u67b6\u8a2d Web \u7db2\u7ad9\uff0c \u6240\u4ee5\u4ed6\u5411\u6211\u7533\u8acb\u4e86\u4e00\u500b\u9818\u57df\u540d\u7a31\uff0c\u90a3\u5c31\u662f web.centos.vbird \uff0c\u6b64\u6642\u6211\u5fc5\u9700\u8981\u7d66\u4ed6\u4e00\u628a\u91d1\u9470\uff0c \u4e26\u4e14\u8a2d\u5b9a\u6211\u7684 named.conf \u8b93 centos.vbird \u9019\u500b zone \u80fd\u5920\u63a5\u53d7\u4f86\u81ea\u7528\u6236\u7aef\u7684\u8cc7\u6599\u66f4\u65b0\u624d\u884c\uff01\u9996\u5148\u4f86\u5efa\u7acb\u9019\u628a\u91d1\u9470\u5427\uff01<\/p>\n<pre>[root@www ~]# dnssec-keygen -a [\u6f14\u7b97\u6cd5] -b [\u5bc6\u78bc\u9577\u5ea6] -n [\u985e\u578b] \u540d\u7a31\r\n\u9078\u9805\u8207\u53c3\u6578\uff1a\r\n-a \uff1a\u5f8c\u9762\u63a5\u7684 [type] \u70ba\u6f14\u7b97\u65b9\u5f0f\u7684\u610f\u601d\uff0c\u4e3b\u8981\u6709 RSAMD5, RSA, DSA, DH\r\n     \u8207 HMAC-MD5 \u7b49\u3002\u5efa\u8b70\u4f60\u53ef\u4ee5\u4f7f\u7528\u5e38\u898b\u7684 HMAC-MD5 \u4f86\u6f14\u7b97\u5bc6\u78bc\uff1b\r\n-b \uff1a\u4f60\u7684\u5bc6\u78bc\u9577\u5ea6\u70ba\u591a\u5c11\uff1f\u901a\u5e38\u7d66\u4e88 512 \u4f4d\u5143\u7684 HMAC-MD5\uff1b\r\n-n \uff1a\u5f8c\u9762\u63a5\u7684\u5247\u662f\u7528\u6236\u7aef\u80fd\u5920\u66f4\u65b0\u7684\u985e\u578b\uff0c\u4e3b\u8981\u6709\u5e95\u4e0b\u5169\u7a2e\uff0c\u5efa\u8b70\u7d66 HOST \u5373\u53ef\uff1a\r\n     ZONE\uff1a\u7528\u6236\u7aef\u53ef\u4ee5\u66f4\u65b0\u4efb\u4f55\u6a19\u8a8c\u53ca\u6574\u500b ZONE\uff1b\r\n     HOST\uff1a\u7528\u6236\u7aef\u50c5\u53ef\u4ee5\u91dd\u5c0d\u4ed6\u7684\u4e3b\u6a5f\u540d\u7a31\u4f86\u66f4\u65b0\u3002\r\n\r\n[root@www ~]# cd \/etc\/named\r\n[root@www named]# dnssec-keygen -a HMAC-MD5 -b 512 -n HOST web\r\nKweb.+157+36124\r\n[root@www named]# ls -l \r\n-rw-------. 1 root root 112 Aug  5 15:22 Kweb.+157+36124.key\r\n-rw-------. 1 root root 229 Aug  5 15:22 Kweb.+157+36124.private\r\n# \u4e0a\u9762\u90a3\u628a\u662f\u516c\u9470\uff0c\u4e0b\u9762\u90a3\u628a\u5247\u662f\u79c1\u9470\u6a94\u6848\uff01\r\n\r\n[root@www named]# cat Kweb.+157+36124.key  &lt;==\u770b\u4e00\u4e0b\u516c\u9470\uff01\r\nweb. IN KEY 512 3 157 <u>xZmUo8ozG8f2OSg\/cqH8Bqxk59Ho8....3s9IjUxpFB4Q==<\/u>\r\n# \u6ce8\u610f\u5230\u6700\u53f3\u908a\u7684\u90a3\u500b\u5bc6\u78bc\u9577\u5ea6\uff0c\u7b49\u4e00\u4e0b\u6211\u5011\u8981\u8907\u88fd\u7684\u50c5\u6709\u90a3\u500b\u5730\u65b9\uff01\r\n<\/pre>\n<p>\u63a5\u4e0b\u4f86\u4f60\u5fc5\u9700\u8981\uff1a\u5c07\u516c\u9470\u7684\u5bc6\u78bc\u8907\u88fd\u5230 \/etc\/named.conf \u7576\u4e2d\uff0c\u5c07\u79c1\u9470\u50b3\u7d66\u4f60\u7684 web.centos.vbird \u90a3\u90e8\u4e3b\u6a5f\u4e0a\uff01\u597d\u4e86\uff0c\u90a3\u5c31\u958b\u59cb\u4f86\u4fee\u6539 named.conf \u5167\u7684\u76f8\u95dc\u8a2d\u5b9a\u5427\uff01<\/p>\n<pre>[root@www ~]# vim \/etc\/named.conf\r\n\/\/ \u5148\u5728\u4efb\u610f\u5730\u65b9\u52a0\u5165\u9019\u500b Key \u7684\u76f8\u95dc\u5bc6\u78bc\u8cc7\u8a0a\uff01\r\nkey \"web\" {\r\n        algorithm hmac-md5;\r\n        secret \"xZmUo8ozG8f2OSg\/cqH8Bqxk59Ho8....3s9IjUxpFB4Q==\";\r\n};\r\n\r\n\/\/ \u7136\u5f8c\u5c07\u4f60\u539f\u672c\u7684 zone \u52a0\u5165\u5e95\u4e0b\u9019\u4e00\u6bb5\u5ba3\u793a\r\n        zone \"centos.vbird\" IN {\r\n                type master;\r\n                file \"named.centos.vbird\";\r\n                allow-transfer { 192.168.100.10; };\r\n                update-policy {\r\n                        grant web name web.centos.vbird. A;\r\n                };\r\n        };\r\n\r\n[root@www ~]# chmod g+w \/var\/named\r\n[root@www ~]# chown named \/var\/named\/named.centos.vbird\r\n[root@www ~]# \/etc\/init.d\/named restart\r\n[root@www ~]# setsebool -P named_write_master_zones=1\r\n<\/pre>\n<p>\u6ce8\u610f\u5230\u4e0a\u982d\u7684 grant web name web.centos.vbird. A; \u90a3\u4e00\u884c\uff0c grant \u5f8c\u9762\u63a5\u7684\u5c31\u662f key \u7684\u540d\u7a31\uff0c\u4e5f\u5c31\u662f\u8aaa\uff0c\u6211\u9019\u628a web \u7684 key \u5728\u9019\u500b zone (centos.vbird) \u88e1\u9762\u53ef\u4ee5\u4fee\u6539\u4e3b\u6a5f\u540d\u7a31 web.centos.vbird \u7684 A \u7684\u6a19\u8a8c\uff0c\u4ea6\u5373\u662f\u4fee\u6539\u4e3b\u6a5f\u7684 IP \u5c0d\u61c9\u5566\uff01\u8a9e\u6cd5\u4e5f\u5c31\u662f\uff1a grant [key_name] name [hostname] \u6a19\u7c64 \u4e5f\u5c31\u662f\u8aaa\uff0c\u6211\u7684\u4e00\u628a key \u5176\u5be6\u53ef\u4ee5\u7d66\u4e88\u591a\u7a2e\u6b0a\u9650\u5594\uff01\u5c31\u770b\u4f60\u5982\u4f55\u898f\u7bc4\u4e86\u3002<\/p>\n<p>\u8a2d\u5b9a\u597d\u4e4b\u5f8c\uff0c\u7531\u65bc\u672a\u4f86\u7528\u6236\u7aef\u50b3\u4f86\u7684\u8cc7\u8a0a\u662f\u7531\u6211\u5011\u4e3b\u6a5f\u7684 named \u6240\u5beb\u5165\uff0c \u5beb\u5165\u7684\u76ee\u9304\u5728 \/var\/named\/ \u7576\u4e2d\uff0c\u6240\u4ee5\u4f60\u5fc5\u9700\u8981\u4fee\u6539\u4e00\u4e0b\u6b0a\u9650\u5594\uff01 \u7d66\u4ed6\u91cd\u65b0\u555f\u52d5 DNS\uff0c\u7136\u5f8c\u89c0\u5bdf\u4e00\u4e0b \/var\/log\/messages \u88e1\u9762\u6709\u6c92\u6709\u932f\u8aa4\u5373\u53ef\uff01 \u5982\u6b64\u4e00\u4f86\uff0cDDNS \u4e3b\u6a5f\u7aef\u5c31\u8a2d\u5b9a\u59a5\u7576\u56c9\uff01<\/p>\n<ul>\n<li>\n<hr \/>\n<p>2. Client \u7aef\u7684\u66f4\u65b0\uff1a<\/li>\n<\/ul>\n<p>\u63a5\u4e0b\u4f86\u5247\u662f DDNS Client \u7aef\u7684\u66f4\u65b0\u4e86\u3002\u9996\u5148\uff0c\u4f60\u5fc5\u9808\u8981\u7531 Server \u7aef\u53d6\u5f97\u525b\u525b\u5efa\u7acb\u7684\u90a3\u5169\u500b\u6a94\u6848\uff0c \u8acb\u5c07\u525b\u525b\u5efa\u7acb\u7684 Kweb.+157+36124.key \u53ca Kweb.+157+36124.private \u5229\u7528 SSH \u7684 sftp \u50b3\u9001\u5230\u7528\u6236\u7aef\uff0c \u4ea6\u5373\u662f\u90a3\u90e8 web.centos.vbird \u4e3b\u6a5f\u4e0a\u982d\uff0c \u5047\u8a2d\u4f60\u5df2\u7d93\u5c07\u9019\u5169\u500b\u6a94\u6848\u653e\u7f6e\u5230 \/usr\/local\/ddns \u88e1\u9762\u53bb\uff0c\u7136\u5f8c\u6e2c\u8a66\u770b\u770b\uff1a<\/p>\n<pre>[root@web ~]# cd \/usr\/local\/ddns\r\n[root@web ddns]# nsupdate -k Kweb.+157+36124.key\r\n&gt; server 192.168.100.254\r\n&gt; update delete web.centos.vbird                    &lt;==\u522a\u9664\u539f\u6709\u7684\r\n&gt; update add web.centos.vbird 600 A 192.168.100.200 &lt;==\u66f4\u65b0\u5230\u6700\u65b0\u7684\r\n&gt; send\r\n&gt; \u6700\u5f8c\u5728\u6b64\u6309\u4e0b [ctrl]+D \u5373\u53ef\r\n<\/pre>\n<p>\u8acb\u6ce8\u610f\u5230\u300e update add web.centos.vbird 600 A 192.168.100.200 \u300f\u9019\u884c\uff0c \u4ed6\u7684\u610f\u7fa9\u8aaa\u7684\u662f\uff0c\u65b0\u589e\u4e00\u7b46\u8cc7\u6599\uff0c ttl \u662f 600 \uff0c\u7d66\u4e88 A \u7684\u6a19\u7c64\uff0c\u5c0d\u61c9\u5230 192.168.100.200 \u7684\u610f\u601d\uff5e \u81f3\u65bc nsupdate -k \u5f8c\u9762\u52a0\u7684\u5247\u662f\u6211\u5011\u5728 Server \u7aef\u7522\u751f\u7684\u90a3\u500b key \u6a94\u6848\uff01<\/p>\n<p>\u7136\u5f8c\u4f60\u5c31\u6703\u767c\u73fe\u5230\u5728 DNS \u4f3a\u670d\u5668\u7aef\u7684 \/var\/named\/ \u88e1\u9762\u591a\u51fa\u4e00\u500b\u66ab\u5b58\u6a94\uff0c\u90a3\u5c31\u662f named.centos.vbird.jnl \u7576\u7136\uff0c\/var\/named\/named.centos.vbird \u5c31\u6703\u96a8\u8457\u7528\u6236\u7aef\u7684\u8981\u6c42\u800c\u66f4\u65b0\u8cc7\u6599\u5594\uff01<\/p>\n<p>\u7531\u65bc\u624b\u52d5\u66f4\u65b0\u597d\u50cf\u633a\u9ebb\u7169\u7684\uff0c\u6211\u5011\u5c31\u8b93 Client \u81ea\u52d5\u66f4\u65b0\u5427\uff01\u5229\u7528\u5e95\u4e0b\u9019\u500b script \u5373\u53ef\uff01<\/p>\n<pre>[root@web ~]# vim \/usr\/local\/ddns\/ddns_update.sh\r\n#!\/bin\/bash\r\nPATH=\/sbin:\/bin:\/usr\/sbin:\/usr\/bin\r\nexport PATH\r\n\r\n# 0. keyin your parameters\r\nbasedir=\"\/usr\/local\/ddns\"                  # \u57fa\u672c\u5de5\u4f5c\u76ee\u9304\r\nkeyfile=\"$basedir\"\/\"Kweb.+157+36124.key\"   # \u5c07\u6a94\u540d\u586b\u9032\u53bb\u5427\uff01\r\nttl=600                                    # \u4f60\u53ef\u4ee5\u6307\u5b9a ttl \u7684\u6642\u9593\u5594\uff01\r\noutif=\"eth0\"                               # \u5c0d\u5916\u7684\u9023\u7dda\u4ecb\u9762\uff01\r\nhostname=\"web.centos.vbird\"                # \u4f60\u5411 ISP \u53d6\u5f97\u7684\u90a3\u500b\u4e3b\u6a5f\u540d\u7a31\u5566\uff01\r\nservername=\"192.168.100.254\"               # \u5c31\u662f\u4f60\u7684 ISP \u554a\uff01\r\n\r\n# Get your new IP\r\nnewip=`ifconfig \"$outif\" | grep 'inet addr' | \\\r\n        awk '{print $2}' | sed -e \"s\/addr\\:\/\/\"`\r\ncheckip=`echo $newip | grep \"^[0-9]\"`\r\nif [ \"$checkip\" == \"\" ]; then\r\n        echo \"$0: The interface can't connect internet....\"\r\n        exit 1\r\nfi\r\n\r\n# create the temporal file\r\ntmpfile=$basedir\/tmp.txt\r\ncd $basedir\r\necho \"server $servername\"                       &gt;  $tmpfile\r\necho \"update delete $hostname A \"               &gt;&gt; $tmpfile\r\necho \"update add    $hostname $ttl A $newip\"    &gt;&gt; $tmpfile\r\necho \"send\"                                     &gt;&gt; $tmpfile\r\n\r\n# send your IP to server\r\nnsupdate -k $keyfile -v $tmpfile\r\n<\/pre>\n<p>\u4f60\u53ea\u8981\u5c07\u4e0a\u8ff0\u7684\u7a0b\u5f0f\u88e1\u9762\uff0c\u7279\u6b8a\u5b57\u9ad4\u7684\u90e8\u5206\u7d66\u4ed6\u4fee\u6539\u4e00\u4e0b\uff0c\u5c31\u80fd\u5920\u4ee5 \/etc\/crontab \u7684\u65b9\u5f0f\u5728\u4f60\u7684\u7cfb\u7d71\u5167\u81ea\u52d5\u57f7\u884c\u4e86\uff01\u9019\u652f\u7a0b\u5f0f\u4f60\u4e5f\u53ef\u4ee5\u5728\u5e95\u4e0b\u7684\u9023\u7d50\u4e0b\u8f09\uff1a<\/p>\n<ul>\n<li><a href=\"http:\/\/linux.vbird.org\/linux_server\/0350dns\/ddns_update.sh\">http:\/\/linux.vbird.org\/linux_server\/0350dns\/ddns_update.sh<\/a><\/li>\n<\/ul>\n<p>\u5229\u7528 BIND 9 \u6240\u63d0\u4f9b\u7684\u9019\u500b\u670d\u52d9\uff0c\u6211\u5011\u53ea\u8981\u5177\u6709\u4e00\u7d44\u56fa\u5b9a\u7684 IP \uff0c\u4e26\u5411 ISP \u7533\u8acb\u4e00\u500b\u5408\u6cd5\u6388\u6b0a\u7684 domain name\uff0c \u5c31\u53ef\u4ee5\u63d0\u4f9b\u4e0d\u8ad6\u662f\u56fa\u5b9a\u6216\u8005\u662f\u975e\u56fa\u5b9a\u7684 IP \u4f7f\u7528\u8005\uff0c\u4e00\u500b\u5408\u6cd5\u7684\u4e3b\u6a5f\u540d\u7a31\u4e86\uff01 \u4e26\u4e14\uff0c\u4f7f\u7528\u8005\u4e5f\u53ef\u4ee5\u81ea\u884c\u900f\u904e nsupdate \u4f86\u4fee\u6539\u81ea\u5df1\u7684 IP \u5c0d\u61c9\uff01\u4ee5\u8b93\u81ea\u5df1\u7684\u4e3b\u6a5f IP \u6c38\u9060\u8207\u4e3b\u6a5f\u540d\u7a31\u4fdd\u6301\u6b63\u78ba\u7684\u5c0d\u61c9\uff01\u9019\u5c0d\u53ea\u6709\u64a5\u63a5\u5236\u4e0a\u7db2\u7684\u7528\u6236\u4f86\u8aaa\uff0c\u771f\u662f\u65b9\u4fbf\u554a\uff01<\/p>\n","protected":false},"excerpt":{"rendered":"<p>\u63a8\u8350\u53c2\u8003\u9e1f\u54e5\u7684\u79c1\u623f\u83dc\uff1a<a title=\"http:\/\/linux.vbird.org\/linux_server\/0350dns.php\" href=\"http:\/\/linux.vbird.org\/linux_server\/0350dns.php\">http:\/\/linux.vbird.org\/linux_server\/0350dns.php<\/a><\/p>\n<p>19.1 \u4ec0\u9ebc\u662f DNS<\/p>\n<p>DNS \u8d8a\u4f86\u8d8a\u91cd\u8981\uff0c\u5c24\u5176\u672a\u4f86 IPv6 \u9019\u500b\u9700\u8981 128bits \u4f4d\u5740\u7684\u73a9\u610f\u5152\u3002\u56e0\u70ba\u6211\u5011\u9023 IPv4 \u7684 32bits \u90fd\u80cc\u4e0d\u8d77\u4f86\u4e86\uff0c 128bits \u8981\u600e\u9ebc\u80cc\uff1f \u9019\u6642\u4e3b\u6a5f\u540d\u7a31\u81ea\u52d5\u89e3\u6790\u70ba IP \u5c31\u5f88\u91cd\u8981\u5566\uff01\u90a3\u5c31\u662f DNS\u3002\u4f46\u662f DNS \u7684\u67b6\u8a2d\u6709\u9ede\u9ebb\u7169\uff0c\u91cd\u9ede\u662f\u539f\u7406\u7684\u90e8\u5206\u6bd4\u8f03\u4e0d\u597d\u7406\u89e3\u3002 \u56e0\u6b64\u5728\u9019\u500b\u5c0f\u7bc0\u7576\u4e2d\uff0c\u8b93\u6211\u5011\u5148\u4f86\u8ac7\u8ac7\u8207\u7db2\u8def\u4e3b\u6a5f\u540d\u7a31\u6709\u95dc\u7684\u4e00\u4e9b\u77e5\u8b58\uff0c\u9019\u6a23\u67b6\u8a2d DNS \u624d\u4e0d\u6703\u51fa\u554f\u984c\u3002<\/p>\n<hr \/>\n<p><a name=\"Whatisdns\"><\/a><img loading=\"lazy\" decoding=\"async\" src=\"http:\/\/linux.vbird.org\/images\/penguin-s.gif\" alt=\"\u5c0f\u6a19\u984c\u7684\u5716\u793a\" width=\"16\" height=\"23\" align=\"middle\" \/>19.1.1 \u7528\u7db2\u8def\u4e3b\u6a5f\u540d\u7a31\u53d6\u5f97 IP \u7684\u6b77\u53f2\u6df5\u6e90<\/p>\n<p>\u76ee\u524d\u7684\u7db2\u969b\u7db2\u8def\u4e16\u754c\u4f7f\u7528\u7684\u662f\u6240\u8b02\u7684 TCP\/IP \u5354\u5b9a\uff0c\u5176\u4e2d IP \u70ba\u7b2c\u56db\u7248\u7684 IPv4 \u3002\u4e0d\u904e\uff0c\u9019\u500b IPv4 \u662f\u7531 32 \u4f4d\u5143\u6240\u7d44\u6210\uff0c\u70ba\u4e86\u4eba\u8166\u5df2\u7d93\u8f49\u6210\u56db\u7d44\u5341\u9032\u4f4d\u7684\u6578\u5b57\u4e86\uff0c\u4f8b\u5982 12.34.56.78 \u9019\u6a23\u7684\u683c\u5f0f\u3002\u7576\u6211\u5011\u5229\u7528 Internet \u50b3\u9001\u8cc7\u6599\u7684\u6642\u5019\uff0c\u5c31\u9700\u8981\u9019\u500b IP \uff0c\u5426\u5247\u8cc7\u6599\u5c01\u5305\u600e\u9ebc\u77e5\u9053\u8981\u88ab\u9001\u5230\u54ea\u88e1\u53bb\uff1f<\/p>\n<p><a name=\"hosts\"><\/a><\/p>\n<ul>\n<li>\n<hr \/>\n<p>\u55ae\u4e00\u6a94\u6848\u8655\u7406\u4e0a\u7db2\u7684\u5e74\u4ee3\uff1a \/etc\/hosts<\/li>\n<\/ul>\n<p>\u7136\u800c\u4eba\u8166\u5c0d\u65bc IP \u9019\u7a2e\u6578\u5b57\u7684\u73a9\u610f\u5152\uff0c\u8a18\u61b6\u529b\u5be6\u5728\u662f\u4e0d\u600e\u9ebc\u6a23\u3002\u4f46\u662f\u8981\u4e0a Internet \u53c8\u4e00\u5b9a\u9700\u8981 IP\uff0c\u600e\u9ebc\u8fa6\uff1f\u70ba\u4e86\u61c9\u4ed8\u9019\u500b\u554f\u984c\uff0c \u65e9\u671f\u7684\u670b\u53cb\u60f3\u5230\u4e00\u500b\u65b9\u6cd5\uff0c\u90a3\u5c31\u662f\u5229\u7528\u67d0\u4e9b\u7279\u5b9a\u7684\u6a94\u6848\u5c07\u4e3b\u6a5f\u540d\u7a31\u8207 IP \u4f5c\u4e00\u500b\u5c0d\u61c9\uff0c \u5982\u6b64\u4e00\u4f86\uff0c\u6211\u5011\u5c31\u53ef\u4ee5\u900f\u904e\u4e3b\u6a5f\u540d\u7a31\u4f86\u53d6\u5f97\u8a72\u4e3b\u6a5f\u7684 IP \u4e86\uff01\u771f\u662f\u500b\u597d\u4e3b\u610f\uff0c\u56e0\u70ba\u4eba\u985e\u5c0d\u65bc\u540d\u5b57\u7684\u8a18\u61b6\u529b\u53ef\u5c31\u597d\u591a\u4e86\uff01 \u90a3\u5c31\u662f \/etc\/hosts \u9019\u500b\u6a94\u6848\u7684\u7528\u9014\u4e86\u3002<\/p>\n<p>\u53ef\u60dc\u7684\u662f\uff0c\u9019\u500b\u65b9\u6cd5\u9084\u662f\u6709\u7f3a\u61be\u7684\uff0c\u90a3\u5c31\u662f\u4e3b\u6a5f\u540d\u7a31\u8207 IP \u7684\u5c0d\u61c9\u7121\u6cd5\u81ea\u52d5\u65bc\u6240\u6709\u7684\u96fb\u8166\u5167\u66f4\u65b0\uff0c \u4e14\u8981\u5c07\u4e3b\u6a5f\u540d\u7a31\u52a0\u5165\u8a72\u6a94\u6848\u50c5\u80fd\u5411 INTERNIC \u8a3b\u518a\uff0c\u82e5 IP \u6578\u91cf\u592a\u591a\u6642\uff0c\u8a72\u6a94\u6848\u6703\u5927\u5230\u4e0d\u50cf\u8a71\uff0c\u4e5f\u5c31\u66f4\u4e0d\u5229\u65bc\u5176\u4ed6\u4e3b\u6a5f\u540c\u6b65\u5316\u4e86\u3002 \u5982\u4e0b\u5716\u6240\u793a\uff0c\u7528\u6236\u7aef\u96fb\u8166\u6bcf\u6b21\u90fd\u5f97\u8981\u91cd\u65b0\u4e0b\u8f09\u4e00\u6b21\u6a94\u6848\u624d\u80fd\u9806\u5229\u806f\u7db2\uff01<\/p>\n<p><img decoding=\"async\" title=\"\u65e9\u671f\u900f\u904e\u55ae\u4e00\u6a94\u6848\u9032\u884c\u7db2\u8def\u9023\u7dda\u7684\u793a\u610f\u5716\" src=\"http:\/\/linux.vbird.org\/linux_server\/0350dns\/\/hosts.gif\" alt=\"\u65e9\u671f\u900f\u904e\u55ae\u4e00\u6a94\u6848\u9032\u884c\u7db2\u8def\u9023\u7dda\u7684\u793a\u610f\u5716\" border=\"0\" \/><br \/>\n\u5716 19.1-1\u3001\u65e9\u671f\u900f\u904e\u55ae\u4e00\u6a94\u6848\u9032\u884c\u7db2\u8def\u9023\u7dda\u7684\u793a\u610f\u5716<\/p>\n<p>\u5728<a href=\"http:\/\/linux.vbird.org\/linux_server\/0130internet_connect.php#connect_fix_IP\">\u7b2c\u56db\u7ae0 4.2.1<\/a> \u88e1\u9762\u6211\u5011\u7d04\u7565\u8ac7\u904e \/etc\/hosts \u9019\u500b\u6a94\u6848\u7684\u7528\u6cd5\uff0c\u57fa\u672c\u4e0a\u8a72\u6a94\u6848\u5167\u5bb9\u5c31\u662f\u300eIP \u4e3b\u6a5f\u540d\u7a31 \u4e3b\u6a5f\u5225\u540d\u4e00 \u4e3b\u6a5f\u5225\u540d\u4e8c&#8230;\u300f\u3002\u5728\u88e1\u9762\u6700\u91cd\u8981\u7684\u5c31\u662f localhost \u5c0d\u61c9\u5230 127.0.0.1 \u9019\u500b\u549a\u549a\uff01\u4f60\u5343\u842c\u4e0d\u80fd\u522a\u9664\u8a72\u7b46\u8a18\u9304\u7684\u3002\u9019\u88e1\u4e5f\u518d\u6b21\u5f37\u8abf\uff0c\u5728\u4f60\u7684\u79c1\u6709\u7db2\u57df\u5167\u90e8\uff0c\u6700\u597d\u5c07\u6240\u6709\u7684\u79c1\u6709 IP \u8207\u4e3b\u6a5f\u540d\u7a31\u5c0d\u61c9\u90fd\u5beb\u5165\u9019\u500b\u6a94\u6848\u4e2d\u5566\uff01<\/p>\n<p><a name=\"dns\"><\/a><\/p>\n<ul>\n<li>\n<hr \/>\n<p>\u5206\u6563\u5f0f\u3001\u968e\u5c64\u5f0f\u4e3b\u6a5f\u540d\u7a31\u7ba1\u7406\u67b6\u69cb\uff1a DNS \u7cfb\u7d71<\/li>\n<\/ul>\n<p>\u65e9\u671f\u7db2\u8def\u5c1a\u672a\u6d41\u884c\u4e14\u96fb\u8166\u6578\u91cf\u4e0d\u591a\u6642\uff0c\/etc\/hosts \u5012\u662f\u9084\u5920\u7528\u7684\uff0c\u4f46\u81ea\u5f9e 90 \u5e74\u4ee3\u7db2\u8def\u71b1\u9580\u5316\u5f8c\uff0c\u55ae\u4e00\u6a94\u6848 \/etc\/hosts \u7684\u806f\u7db2\u554f\u984c\u5c31\u767c\u751f\u4e0a\u9762\u8b1b\u7684\u72c0\u6cc1\u5566\uff01\u70ba\u4e86\u89e3\u6c7a\u9019\u500b\u65e5\u76ca\u56b4\u91cd\u7684\u554f\u984c\uff0c\u67cf\u514b\u840a\u5927\u5b78\u767c\u5c55\u51fa\u53e6\u5916\u4e00\u5957\u968e\u5c64\u5f0f\u7ba1\u7406\u4e3b\u6a5f\u540d\u7a31\u5c0d\u61c9 IP \u7684\u7cfb\u7d71\uff0c \u6211\u5011\u7a31\u5b83\u70ba Berkeley Internet Name Domain, BIND \uff0c\u9019\u500b\u7cfb\u7d71\u53ef\u5c31\u512a\u79c0\u7684\u591a\u4e86\uff5e \u900f\u904e\u968e\u5c64\u5f0f\u7ba1\u7406\uff0c\u53ef\u4ee5\u8f15\u9b06\u7684\u9032\u884c\u7dad\u8b77\u7684\u5de5\u4f5c\uff5e\u592a\u68d2\u4e86\uff01\u9019\u4e5f\u662f\u76ee\u524d\u5168\u4e16\u754c\u4f7f\u7528\u6700\u5ee3\u6cdb\u7684\u9818\u57df\u540d\u7a31\u7cfb\u7d71 (Domain Name System, DNS) \u54e9\uff5e\u900f\u904e DNS \uff0c\u6211\u5011\u4e0d\u9700\u8981\u77e5\u9053\u4e3b\u6a5f\u7684 IP \uff0c\u53ea\u8981\u77e5\u9053\u8a72\u4e3b\u6a5f\u7684\u540d\u7a31\uff0c\u5c31\u80fd\u5920\u8f15\u6613\u7684\u9023\u4e0a\u8a72\u4e3b\u6a5f\u4e86\uff01<\/p>\n<p>DNS \u5229\u7528\u985e\u4f3c\u6a39\u72c0\u76ee\u9304\u7684\u67b6\u69cb\uff0c\u5c07\u4e3b\u6a5f\u540d\u7a31\u7684\u7ba1\u7406\u5206\u914d\u5728\u4e0d\u540c\u5c64\u7d1a\u7684 DNS \u4f3a\u670d\u5668\u7576\u4e2d\uff0c\u7d93\u7531\u5206\u5c64\u7ba1\u7406\uff0c \u6240\u4ee5\u6bcf\u4e00\u90e8 DNS \u4f3a\u670d\u5668\u8a18\u61b6\u7684\u8cc7\u8a0a\u5c31\u4e0d\u6703\u5f88\u591a\uff0c\u800c\u4e14\u82e5\u6709 IP \u7570\u52d5\u6642\u4e5f\u76f8\u7576\u5bb9\u6613\u4fee\u6539\uff01\u56e0\u70ba\u4f60\u5982\u679c\u5df2\u7d93\u7533\u8acb\u5230\u4e3b\u6a5f\u540d\u7a31\u89e3\u6790\u7684\u6388\u6b0a\uff0c \u90a3\u9ebc\u5728\u4f60\u81ea\u5df1\u7684 DNS \u4f3a\u670d\u5668\u4e2d\uff0c\u5c31\u80fd\u5920\u4fee\u6539\u5168\u4e16\u754c\u90fd\u53ef\u4ee5\u67e5\u8a62\u5230\u7684\u4e3b\u6a5f\u540d\u7a31\u4e86\uff01\u800c\u4e0d\u7528\u900f\u904e\u4e0a\u5c64 ISP \u7684\u7dad\u8b77\u5462\uff01 \u81ea\u5df1\u52d5\u624b\u7576\u7136\u662f\u6700\u5feb\u7684\u5566\uff01<\/p>\n<p>\u7531\u65bc\u76ee\u524d\u7684 IPv4 \u5df2\u7d93\u63a5\u8fd1\u767c\u9001\u5b8c\u7562\u7684\u968e\u6bb5\uff0c\u56e0\u6b64\u672a\u4f86\u90a3\u500b 128bits \u7684 IPv6 \u6703\u9010\u6f38\u71b1\u9580\u8d77\u4f86\u3002\u90a3\u9ebc\u4f60\u9700\u8981\u80cc 128bits \u7684 IP \u4f86\u4e0a\u7db2\u55ce\uff1f\u60f3\u5fc5\u662f\u4e0d\u53ef\u80fd\u7684\uff01\u56e0\u6b64\u9019\u500b\u53ef\u4ee5\u900f\u904e\u4e3b\u6a5f\u540d\u7a31\u5c31\u89e3\u6790\u5230 IP \u7684 DNS \u670d\u52d9\uff0c\u53ef\u4ee5\u60f3\u50cf\u7684\u5230\uff0c\u5b83\u6703\u8d8a\u4f86\u8d8a\u91cd\u8981\u3002\u6b64\u5916\uff0c\u76ee\u524d\u5168\u4e16\u754c\u7684 WWW \u4e3b\u6a5f\u540d\u7a31\u4e5f\u90fd\u662f\u900f\u904e DNS \u7cfb\u7d71\u5728\u8655\u7406 IP \u7684\u5c0d\u61c9\uff0c\u6240\u4ee5\uff0c\u7576 DNS \u639b\u9ede\u6642\uff0c\u6211\u5011\u5c07\u7121\u6cd5\u900f\u904e\u4e3b\u6a5f\u540d\u7a31\u4f86\u9023\u7dda\uff0c\u90a3\u5c31\u5e7e\u4e4e\u76f8\u7576\u65bc\u6c92\u6709 Internet \u4e86\uff01<\/p>\n<p>\u56e0\u70ba DNS \u662f\u9019\u9ebc\u7684\u91cd\u8981\uff0c\u6240\u4ee5\u5373\u4f7f\u6211\u5011\u6c92\u6709\u67b6\u8a2d\u5b83\u7684\u5fc5\u8981\u6642\uff0c\u9084\u662f\u5f97\u8981\u719f\u6089\u4e00\u4e0b\u5b83\u7684\u539f\u7406\u624d\u597d\u3002\u56e0\u6b64\uff0c\u8ddf DNS \u6709\u95dc\u7684 FQDN\u3001Hostname \u8207 IP \u7684\u67e5\u8a62\u6d41\u7a0b\uff0c\u6b63\u89e3\u8207\u53cd\u89e3\u3001\u5408\u6cd5\u6388\u6b0a\u7684 DNS \u4f3a\u670d\u5668\u4e4b\u610f\u7fa9\uff0c\u4ee5\u53ca Zone \u7b49\u7b49\u7684\u77e5\u8b58\u4f5c\u4e00\u500b\u8a8d\u8b58\u624d\u884c\uff01<\/p>\n<p><b>Tips:<\/b><br \/>\n\u5728\u5e95\u4e0b\u7684\u8aaa\u660e\u7576\u4e2d\uff0c\u6211\u5011\u6709\u6642\u6703\u63d0\u5230 DNS \u6709\u6642\u6703\u63d0\u5230 BIND \uff0c\u9019\u6709\u4ec0\u9ebc\u4e0d\u540c\uff1f \u7531\u4e0a\u9762\u7684\u8aaa\u660e\u88e1\u9762\uff0c\u4f60\u53ef\u4ee5\u77ad\u89e3\u5230\uff0c DNS \u662f\u4e00\u7a2e\u7db2\u969b\u7db2\u8def\u7684\u901a\u8a0a\u5354\u5b9a\u540d\u7a31\uff0c \u81f3\u65bc Bind \u5247\u662f\u63d0\u4f9b\u9019\u500b DNS \u670d\u52d9\u7684\u8edf\u9ad4\uff5e\u9019\u6a23\u4f60\u77ad\u89e3\u4e86\u55ce\uff1f\uff01<br \/>\n<img decoding=\"async\" title=\"\u9ce5\u54e5\u7684\u5716\u793a\" src=\"http:\/\/linux.vbird.org\/images\/vbird_face.gif\" alt=\"\u9ce5\u54e5\u7684\u5716\u793a\" \/><\/p>\n<p><a name=\"fqdn\"><\/a><\/p>\n<ul>\n<li>\n<hr \/>\n<p>\u5b8c\u6574\u4e3b\u6a5f\u540d\u7a31\uff1a Fully Qualified Domain Name (FQDN)<\/li>\n<\/ul>\n<p>\u7b2c\u4e00\u500b\u8207 DNS \u6709\u95dc\u7684\u4e3b\u6a5f\u540d\u7a31\u6982\u5ff5\uff0c\u5c31\u662f\u300e\u4e3b\u6a5f\u540d\u7a31\u8207\u9818\u57df\u540d\u7a31 (hostname and domain name)\u300f\u7684\u89c0\u5ff5\uff0c\u4ee5\u53ca\u7531\u9019\u5169\u8005\u7d44\u6210\u7684\u5b8c\u6574\u4e3b\u6a5f\u540d\u7a31 Fully Qualified Domain Name, FQDN \u7684\u610f\u7fa9\u4e86\u3002\u5728\u8a0e\u8ad6\u9019\u500b\u4e3b\u984c\u4e4b\u524d\uff0c\u6211\u5011\u4f86\u804a\u4e00\u804a\u6bd4\u8f03\u751f\u6d3b\u5316\u7684\u8a71\u984c\uff1a<\/p>\n<ul>\n<li>\u4ee5\u5340\u57df\u4f86\u5340\u5206\u540c\u540d\u540c\u59d3\u8005\u7684\u5dee\u7570\uff1a \u7db2\u8def\u4e16\u754c\u5176\u5be6\u6709\u5f88\u591a\u4eba\u81ea\u7a31\u70ba\u300e\u9ce5\u54e5\u300f\u7684\uff0c\u5305\u62ec\u655d\u4eba\u5728\u4e0b\u5c0f\u751f\u6211\u5566\uff01\u90a3\u9ebc\u4f60\u600e\u9ebc\u77e5\u9053\u6b64\u9ce5\u54e5\u975e\u5f7c\u9ce5\u54e5\u5462\uff1f \u9019\u500b\u6642\u5019\u4f60\u53ef\u4ee5\u5229\u7528\u6bcf\u500b\u9ce5\u54e5\u7684\u6240\u5728\u5730\u4f86\u4f5c\u70ba\u5340\u5206\u554a\uff0c\u6bd4\u5982\u8aaa\u53f0\u5357\u7684\u9ce5\u54e5\u8207\u53f0\u5317\u7684\u9ce5\u54e5\u7b49\u3002 \u90a3\u842c\u4e00\u53f0\u5357\u9084\u6709\u5169\u500b\u4eba\u81ea\u7a31\u9ce5\u54e5\u600e\u9ebc\u8fa6\uff1f\u6c92\u95dc\u4fc2\uff0c\u4f60\u9084\u53ef\u4ee5\u4f9d\u7167\u9109\u93ae\u4f86\u5340\u5206\u5462\uff01\u6bd4\u5982\u8aaa\u53f0\u5357\u5317\u5340\u7684\u9ce5\u54e5\u53ca\u53f0\u5357\u4e2d\u5340\u7684\u9ce5\u54e5\u3002 \u5982\u679c\u5c07\u9019\u500b\u549a\u549a\u5217\u51fa\u4f86\uff0c\u5c31\u6709\u9ede\u50cf\u9019\u6a23\uff1a\u9ce5\u54e5\u3001\u5317\u5340\u3001\u53f0\u5357<br \/>\n\u9ce5\u54e5\u3001\u4e2d\u5340\u3001\u53f0\u5357<br \/>\n\u9ce5\u54e5\u3001\u53f0\u5317<br \/>\n&#8230;&#8230;\u662f\u5426\u5c31\u53ef\u4ee5\u5206\u8fa8\u6bcf\u500b\u9ce5\u54e5\u7684\u4e0d\u540c\u9ede\u4e86\u5462\uff1f\u5475\u5475\uff01\u6c92\u932f\uff01\u5c31\u662f\u9019\u6a23\uff01\u90a3\u500b\u5730\u5340\u5c31\u662f\u300e\u9818\u57df (domain) \u300f\uff0c\u800c\u9ce5\u54e5\u5c31\u662f\u4e3b\u6a5f\u540d\u5566\uff01<\/p>\n<p>&nbsp;<\/li>\n<li>\u4ee5\u5340\u57df\u865f\u78bc\u4f86\u5340\u5206\u76f8\u540c\u7684\u96fb\u8a71\u865f\u78bc\uff1a \u53e6\u5916\u4e00\u500b\u4f8b\u5b50\u53ef\u4ee5\u4f7f\u7528\u96fb\u8a71\u865f\u78bc\u4f86\u770b\uff0c\u5047\u5982\u9ad8\u96c4\u6709\u500b 1234567 \u800c\u53f0\u5357\u4e5f\u6709\u500b 1234567\uff0c\u90a3\u9ebc(1)\u4f60\u5728\u9ad8\u96c4\u76f4\u63a5\u64a5\u63a5 1234567 \u6642\uff0c\u4ed6\u6703\u76f4\u63a5\u639b\u5165\u9ad8\u96c4\u7684 1234567 \u96fb\u8a71\u4e2d\uff0c(2)\u4f46\u5982\u679c\u4f60\u8981\u64a5\u5230\u53f0\u5357\u53bb\uff0c\u5c31\u5f97\u52a0\u5165 (06) \u9019\u500b\u5340\u78bc\u624d\u884c\uff01\u6211\u5011\u5c31\u662f\u4f7f\u7528\u5340\u78bc\u4f86\u505a\u70ba\u8fa8\u8b58\u4e4b\u7528\u7684\uff01\u6b64\u6642\u90a3\u500b 06 \u5340\u78bc\u5c31\u662f domain name\uff0c\u800c\u96fb\u8a71\u865f\u78bc\u5c31\u662f\u4e3b\u6a5f\u540d\u7a31\u5566\uff01<\/li>\n<\/ul>\n<p>\u6709\u6c92\u6709\u4e00\u9ede\u9ede\u77ad\u89e3\u9ce5\u54e5\u60f3\u8868\u9054\u7684\u5566\uff1f\u6211\u5011\u4e0a\u9762\u8b1b\u5230\uff0cDNS \u662f\u4ee5\u6a39\u72c0\u76ee\u9304\u5206\u968e\u5c64\u7684\u65b9\u5f0f\u4f86\u8655\u7406\u4e3b\u6a5f\u540d\u7a31\uff0c\u90a3\u6211\u5011\u77e5\u9053\u6a39\u72c0\u76ee\u9304\u4e2d\uff0c \u90a3\u500b\u76ee\u9304\u53ef\u4ee5\u8a18\u9304\u6a94\u540d\u3002\u90a3\u9ebc DNS \u8a18\u9304\u7684\u54ea\u500b\u549a\u549a\u8ddf\u300e\u76ee\u9304\u300f\u6709\u95dc\uff1f\u5c31\u662f\u90a3\u500b\u9818\u57df\u540d\u7a31\u3002\u9818\u57df\u540d\u7a31\u5e95\u4e0b\u9084\u53ef\u4ee5\u8a18\u9304\u5404\u500b\u4e3b\u6a5f\u540d\u7a31\uff0c \u7d44\u5408\u8d77\u4f86\u624d\u662f\u5b8c\u6574\u7684\u4e3b\u6a5f\u540d\u7a31 (FQDN)\u3002<\/p>\n<p>\u8209\u4f8b\u4f86\u8aaa\uff0c\u6211\u5011\u5e38\u5e38\u6703\u767c\u73fe\u4e3b\u6a5f\u540d\u7a31\u90fd\u662f www \u7684\u7db2\u7ad9\uff0c\u4f8b\u5982 www.google.com.tw, www.seednet.net, www.hinet.net \u7b49\u7b49\uff0c\u90a3\u9ebc\u6211\u5011\u600e\u9ebc\u77e5\u9053\u9019\u4e9b www \u540d\u7a31\u7684\u4e3b\u6a5f\u5728\u4e0d\u540c\u7684\u5730\u65b9\u5462\uff1f\u5c31\u9700\u8981\u7d66\u4ed6\u9818\u57df\u540d\u7a31\u56c9\uff01\u4e5f\u5c31\u662f .google.com.tw, .seednet.net, .hinet.net \u7b49\u7b49\u7684\u4e0d\u540c\uff0c\u6240\u4ee5\u5373\u4f7f\u4f60\u7684\u4e3b\u6a5f\u540d\u7a31\u76f8\u540c\uff0c\u4f46\u662f\u53ea\u8981\u4e0d\u662f\u5728\u540c\u4e00\u500b\u9818\u57df\u5167\uff0c\u90a3\u9ebc\u5c31\u53ef\u4ee5\u88ab\u5206\u8fa8\u51fa\u4e0d\u540c\u7684\u4f4d\u7f6e\u56c9\uff01<\/p>\n<p>\u6211\u5011\u77e5\u9053\u76ee\u9304\u6a39\u7684\u6700\u9802\u5c64\u662f\u6839\u76ee\u9304 (\/)\uff0c\u90a3\u9ebc DNS \u65e2\u7136\u4e5f\u662f\u968e\u5c64\u5f0f\u7684\uff0c\u6700\u9802\u5c64\u662f\u5565\u5462\uff1f\u6bcf\u4e00\u5c64\u7684 domain name \u8207 hostname \u53c8\u8a72\u600e\u9ebc\u5206\uff1f\u6211\u5011\u8209\u9ce5\u54e5\u6240\u5728\u7684\u5d11\u5c71\u79d1\u5927\u7684 WWW \u4f3a\u670d\u5668\u70ba\u4f8b\u597d\u4e86 (www.ksu.edu.tw) \uff1a<\/p>\n<p><img decoding=\"async\" title=\"\u5206\u968e\u5c64\u7684 DNS \u67b6\u69cb\uff0c\u4ee5\u5d11\u5c71\u79d1\u5927\u70ba\u4f8b\" src=\"http:\/\/linux.vbird.org\/linux_server\/0350dns\/\/www_ksu.gif\" alt=\"\u5206\u968e\u5c64\u7684 DNS \u67b6\u69cb\uff0c\u4ee5\u5d11\u5c71\u79d1\u5927\u70ba\u4f8b\" border=\"0\" \/><br \/>\n\u5716 19.1-2\u3001\u5206\u968e\u5c64\u7684 DNS \u67b6\u69cb\uff0c\u4ee5\u5d11\u5c71\u79d1\u5927\u70ba\u4f8b (hostname &amp; domain name)<\/p>\n<p>\u5728\u4e0a\u9762\u7684\u4f8b\u5b50\u7576\u4e2d\uff0c\u7531\u4e0a\u5411\u4e0b\u6578\u7684\u7b2c\u4e8c\u5c64\u88e1\u9762\uff0c\u90a3\u500b .tw \u662f domain name \uff0c\u800c com, edu, gov \u5247\u662f\u4e3b\u6a5f\u7684\u540d\u7a31\uff0c\u800c\u5728\u9019\u500b\u4e3b\u6a5f\u7684\u540d\u7a31\u4e4b\u7ba1\u7406\u4e0b\uff0c\u9084\u6709\u5176\u4ed6\u66f4\u5c0f\u7db2\u57df\u7684\u4e3b\u6a5f\uff0c\u6240\u4ee5\u5728\u7b2c\u4e09\u5c64\u7684\u6642\u5019\uff0c\u57fa\u672c\u4e0a\uff0c\u90a3\u500b edu.tw \u5c31\u8b8a\u6210\u4e86 domain name \u4e86\uff01\u800c\u5d11\u5c71\u79d1\u5927\u8207\u6210\u5927\u7684 ksu, ncku \u5247\u6210\u70ba\u4e86 hostname \u56c9\uff01<\/p>\n<p>\u4ee5\u6b64\u985e\u63a8\uff0c\u6700\u5f8c\u5f97\u5230\u6211\u5011\u7684\u4e3b\u6a5f\u90a3\u500b www \u662f\u4e3b\u6a5f\u540d\u7a31\uff0c\u800c domain name \u662f\u7531 ksu.edu.tw \u90a3\u500b\u540d\u5b57\u6240\u6c7a\u5b9a\u7684\uff01\u81ea\u7136\uff0c\u6211\u5011\u7684\u4e3b\u6a5f\u5c31\u662f\u8b93\u7ba1\u7406 ksu.edu.tw \u9019\u500b domain name \u7684 DNS \u4f3a\u670d\u5668\u6240\u7ba1\u7406\u7684\u56c9\uff01\u9019\u6a23\u662f\u5426\u77ad\u89e3\u4e86 domain name \u8207 hostname \u7684\u4e0d\u540c\u4e86\u5462\uff1f<\/p>\n<p><b>Tips:<\/b><br \/>\n\u4e26\u4e0d\u662f\u4ee5\u5c0f\u6578\u9ede (.) \u5340\u5206 domain name \u8207 hostname \u5594\uff01\u67d0\u4e9b\u6642\u523b domain name \u6240\u7ba1\u7406\u7684 hostname \u6703\u542b\u6709\u5c0f\u6578\u9ede\u3002 \u8209\u4f8b\u4f86\u8aaa\uff0c\u9ce5\u54e5\u6240\u5728\u7684\u8cc7\u8a0a\u50b3\u64ad\u7cfb\u4e26\u6c92\u6709\u984d\u5916\u7684 DNS \u4f3a\u670d\u5668\u67b6\u8a2d\uff0c\u56e0\u6b64\u6211\u5011\u7684\u4e3b\u6a5f\u540d\u7a31\u70ba www.dic \uff0c\u800c domain name \u9084\u662f ksu.edu.tw \uff0c\u56e0\u6b64\u5168\u540d\u70ba <a href=\"http:\/\/www.dic.ksu.edu.tw\/\">www.dic.ksu.edu.tw<\/a> \u54e9\uff01<br \/>\n<img decoding=\"async\" title=\"\u9ce5\u54e5\u7684\u5716\u793a\" src=\"http:\/\/linux.vbird.org\/images\/vbird_face.gif\" alt=\"\u9ce5\u54e5\u7684\u5716\u793a\" \/><\/p>\n<hr \/>\n<p><a name=\"DNS_search\"><\/a><img loading=\"lazy\" decoding=\"async\" src=\"http:\/\/linux.vbird.org\/images\/penguin-s.gif\" alt=\"\u5c0f\u6a19\u984c\u7684\u5716\u793a\" width=\"16\" height=\"23\" align=\"middle\" \/>19.1.2 DNS \u7684\u4e3b\u6a5f\u540d\u7a31\u5c0d\u61c9 IP \u7684\u67e5\u8a62\u6d41\u7a0b<\/p>\n<p>\u7d04\u7565\u77ad\u89e3\u4e86 FQDN \u7684 domain name \u8207 hostname \u4e4b\u5f8c\uff0c\u63a5\u4e0b\u4f86\u6211\u5011\u8981\u8ac7\u4e00\u8ac7\u9019\u500b DNS \u7684\uff1a (1)\u968e\u5c64\u67b6\u69cb\u662f\u600e\u6a23\uff1f (2)\u67e5\u8a62\u539f\u7406\u662f\u600e\u6a23\uff1f\u7e3d\u662f\u8981\u5148\u77e5\u9053\u67b6\u69cb\u624d\u80fd\u77e5\u9053\u5982\u4f55\u67e5\u8a62\u4e3b\u6a5f\u540d\u7a31\u7684\u5436\uff01\u6240\u4ee5\u5e95\u4e0b\u6211\u5011\u5148\u4f86\u4ecb\u7d39\u4e00\u4e0b\u6574\u9ad4\u7684 DNS \u968e\u5c64\u67b6\u69cb\u3002<\/p>\n<p><a name=\"step\"><\/a><\/p>\n<ul>\n<li>\n<hr \/>\n<p>DNS \u7684\u968e\u5c64\u67b6\u69cb\u8207 TLD<\/li>\n<\/ul>\n<p>\u6211\u5011\u4f9d\u820a\u4f7f\u7528\u53f0\u7063\u5b78\u8853\u7db2\u8def\u7684 DNS \u4f3a\u670d\u5668\u6240\u7ba1\u7406\u7684\u5404 domain \u70ba\u4f8b\uff0c\u5c07\u6700\u4e0a\u5c64\u5230\u5d11\u5c71\u79d1\u5927 (ksu) \u6642\uff0c\u4e4b\u9593\u7684\u5404\u5c64\u7e6a\u88fd\u5982\u4e0b\u5716\uff1a<\/p>\n<p><img decoding=\"async\" title=\"\u5f9e\u6700\u4e0a\u5c64\u5230\u5d11\u5c71\u79d1\u5927\u4e4b\u9593\u7684 DNS \u968e\u5c64\u793a\u610f\u5716\" src=\"http:\/\/linux.vbird.org\/linux_server\/0350dns\/\/dns_dot.gif\" alt=\"\u5f9e\u6700\u4e0a\u5c64\u5230\u5d11\u5c71\u79d1\u5927\u4e4b\u9593\u7684 DNS \u968e\u5c64\u793a\u610f\u5716\" width=\"550\" border=\"0\" \/><br \/>\n\u5716 19.1-3\u3001\u5f9e\u6700\u4e0a\u5c64\u5230\u5d11\u5c71\u79d1\u5927\u4e4b\u9593\u7684 DNS \u968e\u5c64\u793a\u610f\u5716<\/p>\n<p>\u5728\u6574\u500b DNS \u7cfb\u7d71\u7684\u6700\u4e0a\u65b9\u4e00\u5b9a\u662f . (\u5c0f\u6578\u9ede) \u9019\u500b DNS \u4f3a\u670d\u5668 (\u7a31\u70ba root)\uff0c\u6700\u65e9\u4ee5\u524d\u5b83\u5e95\u4e0b\u7ba1\u7406\u7684\u5c31\u53ea\u6709 (1)com, edu, gov, mil, org, .net \u9019\u7a2e\u7279\u6b8a\u9818\u57df\u4ee5\u53ca (2)\u4ee5\u570b\u5bb6\u70ba\u5206\u985e\u7684\u7b2c\u4e8c\u5c64\u7684\u4e3b\u6a5f\u540d\u7a31\u4e86\uff01\u9019\u5169\u8005\u7a31\u70ba Top Level Domains (TLDs) \u5594\uff01<\/p>\n<ul>\n<li>\u4e00\u822c\u6700\u4e0a\u5c64\u9818\u57df\u540d\u7a31 (Generic TLDs, gTLD)\uff1a\u4f8b\u5982 .com, .org, .gov \u7b49\u7b49<\/li>\n<li>\u570b\u78bc\u6700\u4e0a\u5c64\u9818\u57df\u540d\u7a31 (Country code TLDs, ccTLD)\uff1a\u4f8b\u5982 .tw, .uk, .jp, .cn \u7b49<\/li>\n<\/ul>\n<p>\u5148\u4f86\u8ac7\u8ac7\u4e00\u822c\u6700\u4e0a\u5c64\u9818\u57df (gTLD) \u597d\u4e86\uff0c\u6700\u65e9 root \u50c5\u7ba1\u7406\u516d\u5927\u9818\u57df\u540d\u7a31\uff0c\u5206\u5225\u5982\u4e0b\uff1a<\/p>\n<p>\u540d\u7a31<br \/>\n\u4ee3\u8868\u610f\u7fa9<\/p>\n<p>com<br \/>\n\u516c\u53f8\u3001\u884c\u865f\u3001\u4f01\u696d<\/p>\n<p>org<br \/>\n\u7d44\u7e54\u3001\u6a5f\u69cb<\/p>\n<p>edu<br \/>\n\u6559\u80b2\u55ae\u4f4d<\/p>\n<p>gov<br \/>\n\u653f\u5e9c\u55ae\u4f4d<\/p>\n<p>net<br \/>\n\u7db2\u8def\u3001\u901a\u8a0a<\/p>\n<p>mil<br \/>\n\u8ecd\u4e8b\u55ae\u4f4d<\/p>\n<p>\u4f46\u662f\u7db2\u969b\u7db2\u8def\u6210\u9577\u7684\u901f\u5ea6\u592a\u5feb\u4e86\uff0c\u56e0\u6b64\u5f8c\u4f86\u9664\u4e86\u4e0a\u8ff0\u7684\u516d\u5927\u985e\u5225\u4e4b\u5916\uff0c\u9084\u6709\u8af8\u5982 .asia, .info, .jobs (<a href=\"http:\/\/linux.vbird.org\/linux_server\/0350dns.php#ps1\">\u8a3b1<\/a>) \u7b49\u9818\u57df\u540d\u7a31\u7684\u958b\u653e\u3002\u6b64\u5916\uff0c\u70ba\u4e86\u8b93\u67d0\u4e9b\u570b\u5bb6\u4e5f\u80fd\u5920\u6709\u81ea\u5df1\u7684\u6700\u4e0a\u5c64\u9818\u57df\u540d\u7a31\uff0c\u56e0\u6b64\uff0c \u5c31\u6709\u6240\u8b02\u7684 ccTLD \u4e86\u3002\u9019\u6a23\u505a\u6709\u4ec0\u9ebc\u597d\u8655\u5462\uff1f\u56e0\u70ba\u81ea\u5df1\u7684\u570b\u5bb6\u5167\u6709\u6700\u4e0a\u5c64 ccTLD \uff0c\u6240\u4ee5\u5982\u679c\u6709 domain name \u7684\u9700\u6c42\uff0c\u5247\u53ea\u8981\u5411\u81ea\u5df1\u7684\u570b\u5bb6\u7533\u8acb\u5373\u53ef\uff0c\u4e0d\u9700\u8981\u518d\u5230\u6700\u4e0a\u5c64\u53bb\u7533\u8acb\u56c9\uff01<\/p>\n<ul>\n<li>\n<hr \/>\n<p>\u6388\u6b0a\u8207\u5206\u5c64\u8ca0\u8cac<\/li>\n<\/ul>\n<p>\u65e2\u7136 TLD \u9019\u9ebc\u597d\uff0c\u90a3\u9ebc\u662f\u5426\u6211\u5011\u53ef\u4ee5\u81ea\u5df1\u8a2d\u5b9a TLD \u5462\uff1f\u7576\u7136\u4e0d\u884c\uff01\u56e0\u70ba\u6211\u5011\u5f97\u5411\u4e0a\u5c64 ISP \u7533\u8acb\u9818\u57df\u540d\u7a31\u7684\u6388\u6b0a\u624d\u884c\u3002\u4f8b\u5982\u53f0\u7063\u5730\u5340\u6700\u4e0a\u5c64\u7684\u9818\u57df\u540d\u7a31\u662f\u4ee5 .tw \u70ba\u958b\u982d\uff0c\u7ba1\u7406\u9019\u500b\u9818\u57df\u540d\u7a31\u7684\u6a5f\u5668 IP \u662f\u5728\u53f0\u7063\uff0c\u4f46\u662f .tw \u9019\u90e8\u4f3a\u670d\u5668\u5fc5\u9808\u5411 root (.) \u8a3b\u518a\u9818\u57df\u540d\u7a31\u67e5\u8a62\u6388\u6b0a\u624d\u884c (\u5982\u4e0a\u5716 19.1-3 \u6240\u793a)\u3002<\/p>\n<p>\u90a3\u9ebc\u6bcf\u500b\u570b\u5bb6\u4e4b\u4e0b\u8a18\u9304\u7684\u4e3b\u8981\u4e0b\u5c64\u6709\u54ea\u4e9b\u9818\u57df\u5462\uff1f\u57fa\u672c\u4e0a\u5c31\u662f\u539f\u5148 root \u7ba1\u7406\u7684\u90a3\u516d\u5927\u985e\u3002 \u4e0d\u904e\uff0c\u7531\u65bc\u5404\u5c64 DNS \u90fd\u80fd\u7ba1\u7406\u81ea\u5df1\u8f44\u4e0b\u7684\u4e3b\u6a5f\u540d\u7a31\u6216\u5b50\u9818\u57df\uff0c\u56e0\u6b64\uff0c\u6211\u5011\u7684 .tw \u53ef\u4ee5\u81ea\u884c\u898f\u5283\u81ea\u5df1\u7684\u5b50\u9818\u57df\u540d\u7a31\u5594\uff01 \u4f8b\u5982\u76ee\u524d\u53f0\u7063 ISP \u5e38\u63d0\u4f9b\u7684 .idv.tw \u7684\u500b\u4eba\u7db2\u7ad9\u5c31\u662f\u4e00\u4f8b\u554a\uff01<\/p>\n<p>\u518d\u5f37\u8abf\u4e00\u6b21\uff0cDNS \u7cfb\u7d71\u662f\u4ee5\u6240\u8b02\u7684\u968e\u5c64\u5f0f\u7684\u7ba1\u7406\uff0c\u6240\u4ee5\uff0c\u8acb\u6ce8\u610f\u5594\uff01\u90a3\u500b .tw \u53ea\u8a18\u9304\u5e95\u4e0b\u90a3\u4e00\u5c64\u7684\u9019\u6578\u500b\u4e3b\u8981\u7684 domain \u7684\u4e3b\u6a5f\u800c\u5df2\uff01\u81f3\u65bc\u4f8b\u5982 edu.tw \u5e95\u4e0b\u9084\u6709\u500b ksu.edu.tw \u9019\u90e8\u6a5f\u5668\uff0c\u90a3\u5c31\u76f4\u63a5\u6388\u6b0a\u4ea4\u7d66 edu.tw \u90a3\u90e8\u6a5f\u5668\u53bb\u7ba1\u7406\u4e86\uff01\u4e5f\u5c31\u662f\u8aaa\u300e \u6bcf\u500b\u4e0a\u4e00\u5c64\u7684 DNS \u4f3a\u670d\u5668\u6240\u8a18\u9304\u7684\u8cc7\u8a0a\uff0c\u5176\u5be6\u53ea\u6709\u5176\u4e0b\u4e00\u5c64\u7684\u4e3b\u6a5f\u540d\u7a31\u800c\u5df2\uff01 \u300f\u81f3\u65bc\u518d\u4e0b\u4e00\u5c64\uff0c\u5247\u76f4\u63a5\u300e\u6388\u6b0a\u300f\u7d66\u4e0b\u5c64\u7684\u67d0\u90e8\u4e3b\u6a5f\u4f86\u7ba1\u7406\u56c9\uff01\u5475\u5475\uff01\u6240\u4ee5\u4f60\u5c31\u61c9\u8a72\u6703\u77e5\u9053 DNS \u5230\u5e95\u662f\u5982\u4f55\u7ba1\u7406\u7684\u5427\uff01<\/p>\n<p>\u6703\u9019\u6a23\u8a2d\u5b9a\u7684\u539f\u56e0\u4e0d\u662f\u6c92\u6709\u9053\u7406\u7684\uff01\u9019\u6a23\u8a2d\u8a08\u7684\u597d\u8655\u5c31\u662f\uff1a\u6bcf\u90e8\u6a5f\u5668\u7ba1\u7406\u7684\u53ea\u6709\u4e0b\u4e00\u5c64\u7684 hostname \u5c0d\u61c9 IP \u800c\u5df2\uff0c\u6240\u4ee5\u6e1b\u5c11\u4e86\u7ba1\u7406\u4e0a\u7684\u56f0\u64fe\uff01\u800c\u4e0b\u5c64 Client \u7aef\u5982\u679c\u6709\u554f\u984c\uff0c\u53ea\u8981\u8a62\u554f\u4e0a\u4e00\u5c64\u7684 DNS server \u5373\u53ef\uff01\u4e0d\u9700\u8981\u8de8\u8d8a\u4e0a\u5c64\uff0c\u9664\u932f\u4e0a\u9762\u4e5f\u6703\u6bd4\u8f03\u7c21\u55ae\u5462\uff01<\/p>\n<p><a name=\"flow\"><\/a><\/p>\n<ul>\n<li>\n<hr \/>\n<p>\u900f\u904e DNS \u67e5\u8a62\u4e3b\u6a5f\u540d\u7a31 IP \u7684\u6d41\u7a0b<\/li>\n<\/ul>\n<p>\u525b\u525b\u8aaa\u904e DNS \u662f\u4ee5\u985e\u4f3c\u300e\u6a39\u72c0\u76ee\u9304\u300f\u7684\u578b\u614b\u4f86\u9032\u884c\u4e3b\u6a5f\u540d\u7a31\u7684\u7ba1\u7406\u7684\uff01\u6240\u4ee5\u6bcf\u4e00\u90e8 DNS \u4f3a\u670d\u5668\u90fd\u300e\u50c5\u7ba1\u7406\u81ea\u5df1\u7684\u4e0b\u4e00\u5c64\u4e3b\u6a5f\u540d\u7a31\u7684\u8f49\u8b6f\u300f\u800c\u5df2\uff0c \u81f3\u65bc\u4e0b\u5c64\u7684\u4e0b\u5c64\uff0c\u5247\u300e\u6388\u6b0a\u300f\u7d66\u4e0b\u5c64\u7684 DNS \u4e3b\u6a5f\u4f86\u7ba1\u7406\u5566\uff01\u9019\u6a23\u8aaa\u597d\u50cf\u5f88\u7e5e\u53e3\uff0c\u597d\u5427\uff01\u6211\u5011\u5c31\u4ee5\u4e0b\u5716\u4f86\u8aaa\u4e00\u8aaa\u539f\u7406\u56c9\uff1a<\/p>\n<p><a name=\"fig19.1-4\"><\/a><\/p>\n<p><img decoding=\"async\" title=\"\u900f\u904e DNS \u7cfb\u7d71\u67e5\u8a62\u4e3b\u6a5f\u540d\u7a31\u89e3\u8b6f\u7684\u6d41\u7a0b\" src=\"http:\/\/linux.vbird.org\/linux_server\/0350dns\/\/dns_search.gif\" alt=\"\u900f\u904e DNS \u7cfb\u7d71\u67e5\u8a62\u4e3b\u6a5f\u540d\u7a31\u89e3\u8b6f\u7684\u6d41\u7a0b\" border=\"0\" \/><br \/>\n\u5716 19.1-4\u3001\u900f\u904e DNS \u7cfb\u7d71\u67e5\u8a62\u4e3b\u6a5f\u540d\u7a31\u89e3\u8b6f\u7684\u6d41\u7a0b<\/p>\n<p>\u9996\u5148\uff0c\u7576\u4f60\u5728\u700f\u89bd\u5668\u7684\u7db2\u5740\u5217\u8f38\u5165 <a href=\"http:\/\/www.ksu.edu.tw\/\">http:\/\/www.ksu.edu.tw<\/a> \u6642\uff0c\u4f60\u7684\u96fb\u8166\u5c31\u6703\u4f9d\u64da\u76f8\u95dc\u8a2d\u5b9a (\u5728 Linux \u5e95\u4e0b\u5c31\u662f\u5229\u7528 \/etc\/resolv.conf \u9019\u500b\u6a94\u6848) \u6240\u63d0\u4f9b\u7684 DNS \u7684 IP \u53bb\u9032\u884c\u9023\u7dda\u67e5\u8a62\u4e86\u3002\u7531\u65bc\u76ee\u524d\u6700\u5e38\u898b\u7684 DNS \u4f3a\u670d\u5668\u5c31\u5c6c Hinet \u7684 168.95.1.1 \u9019\u500b DNS\uff0c\u6240\u4ee5\u6211\u5011\u5c31\u62ff\u4ed6\u4f86\u505a\u4f8b\u5b50\u5427\uff01\u55ef\uff01\u9019\u500b\u6642\u5019\uff0chinet \u7684\u9019\u90e8\u4f3a\u670d\u5668\u6703\u9019\u6a23\u5de5\u4f5c\uff1a<\/p>\n<ol>\n<li>\u6536\u5230\u7528\u6236\u7684\u67e5\u8a62\u8981\u6c42\uff0c\u5148\u67e5\u770b\u672c\u8eab\u6709\u6c92\u6709\u7d00\u9304\uff0c\u82e5\u7121\u5247\u5411 . \u67e5\u8a62\uff1a<br \/>\n\u7531\u65bc DNS \u662f\u968e\u5c64\u5f0f\u7684\u67b6\u69cb\uff0c\u6bcf\u90e8\u4e3b\u6a5f\u90fd\u6703\u7ba1\u7406\u81ea\u5df1\u8f44\u4e0b\u7684\u4e3b\u6a5f\u540d\u7a31\u89e3\u8b6f\u800c\u5df2\u3002\u56e0\u70ba hinet \u4e26\u6c92\u6709\u7ba1\u7406\u53f0\u7063\u5b78\u8853\u7db2\u8def\u7684\u6b0a\u529b\uff0c \u56e0\u6b64\u5c31\u7121\u6cd5\u76f4\u63a5\u56de\u5831\u7d66\u7528\u6236\u7aef\u3002\u6b64\u6642 168.95.1.1 \u5c31\u6703\u5411\u6700\u9802\u5c64\uff0c\u4e5f\u5c31\u662f . (root) \u7684\u4f3a\u670d\u5668\u67e5\u8a62\u76f8\u95dc IP \u8cc7\u8a0a\u3002<\/li>\n<li>\u5411\u6700\u9802\u5c64\u7684 . (root) \u67e5\u8a62\uff1a<br \/>\n168.95.1.1 \u6703\u4e3b\u52d5\u7684\u5411 . \u8a62\u554f www.ksu.edu.tw \u5728\u54ea\u88e1\u5462\uff1f\u4f46\u662f\u7531\u65bc . \u53ea\u8a18\u9304\u4e86 .tw \u7684\u8cc7\u8a0a (\u56e0\u70ba\u53f0\u7063\u53ea\u6709 .tw \u5411 . \u8a3b\u518a\u800c\u5df2)\uff0c\u6b64\u6642 . \u6703\u544a\u77e5\u300e\u6211\u662f\u4e0d\u77e5\u9053\u9019\u90e8\u4e3b\u6a5f\u7684 IP \u5566\uff0c\u4e0d\u904e\uff0c\u4f60\u61c9\u8a72\u5411 .tw \u53bb\u8a62\u554f\u624d\u5c0d\uff0c\u6211\u9019\u88e1\u4e0d\u7ba1\uff01 \u6211\u8ddf\u4f60\u8aaa .tw \u5728\u54ea\u88e1\u5427\uff01\u300f<\/li>\n<li>\u5411\u7b2c\u4e8c\u5c64\u7684 .tw \u4f3a\u670d\u5668\u67e5\u8a62\uff1a<br \/>\n168.95.1.1 \u63a5\u8457\u53c8\u5230 .tw \u53bb\u67e5\u8a62\uff0c\u800c\u8a72\u90e8\u6a5f\u5668\u7ba1\u7406\u7684\u53c8\u50c5\u6709 .edu.tw, .com.tw, gov.tw&#8230; \u90a3\u5e7e\u90e8\u4e3b\u6a5f\uff0c\u7d93\u904e\u6bd4\u5c0d\u5f8c\u767c\u73fe\u6211\u5011\u8981\u7684\u662f .edu.tw \u7684\u7db2\u57df\uff0c\u6240\u4ee5\u9019\u500b\u6642\u5019 .tw \u53c8\u544a\u8a34 168.95.1.1 \u8aaa\uff1a\u300e\u4f60\u8981\u53bb\u7ba1\u7406 .edu.tw \u9019\u500b\u7db2\u57df\u7684\u4e3b\u6a5f\u90a3\u88e1\u67e5\u8a62\uff0c\u6211\u6709\u4ed6\u7684 IP \uff01\u300f<\/li>\n<li>\u5411\u7b2c\u4e09\u5c64\u7684 .edu.tw \u4f3a\u670d\u5668\u67e5\u8a62\uff1a<br \/>\n\u540c\u7406\u53ef\u8b49\uff0c .edu.tw \u53ea\u6703\u544a\u8a34 168.95.1.1 \uff0c\u61c9\u8a72\u8981\u53bb .ksu.edu.tw \u9032\u884c\u67e5\u8a62\uff0c\u9019\u88e1\u53ea\u80fd\u544a\u77e5 .ksu.edu.tw \u7684 IP \u800c\u5df2\u3002<\/li>\n<li>\u5411\u7b2c\u56db\u5c64\u7684 .ksu.edu.tw \u4f3a\u670d\u5668\u67e5\u8a62\uff1a<br \/>\n\u7b49\u5230 168.95.1.1 \u627e\u5230 .ksu.edu.tw \u4e4b\u5f8c\uff0c Bingo \uff01.ksu.edu.tw \u8aaa\uff1a\u300e\u6c92\u932f\uff01\u9019\u90e8\u4e3b\u6a5f\u540d\u7a31\u662f\u6211\u7ba1\u7406\u7684\uff5e \u6211\u8ddf\u4f60\u8aaa\u4ed6\u7684 IP \u662f&#8230;\u6240\u4ee5\u6b64\u6642 168.95.1.1 \u5c31\u80fd\u5920\u67e5\u5230 www.ksu.edu.tw \u7684 IP \u56c9\uff01<\/li>\n<li>\u8a18\u9304\u66ab\u5b58\u8a18\u61b6\u9ad4\u4e26\u56de\u5831\u7528\u6236\uff1a<br \/>\n\u67e5\u5230\u4e86\u6b63\u78ba\u7684 IP \u5f8c\uff0c168.95.1.1 \u7684 DNS \u6a5f\u5668\u7e3d\u4e0d\u6703\u5728\u4e0b\u6b21\u6709\u4eba\u67e5\u8a62 www.ksu.edu.tw \u7684\u6642\u5019\u518d\u8dd1\u4e00\u6b21\u9019\u6a23\u7684\u6d41\u7a0b\u5427\uff01 \u7c89\u9060\u7c89\u7d2f\u7684\u5436\uff01\u800c\u4e14\u4e5f\u5f88\u8017\u7cfb\u7d71\u7684\u8cc7\u6e90\u8207\u7db2\u8def\u7684\u983b\u5bec\uff0c\u6240\u4ee5\u5462\uff0c168.95.1.1 \u9019\u500b DNS \u6703\u5f88\u8070\u660e\u7684\u5148\u8a18\u9304\u4e00\u4efd\u67e5\u8a62\u7684\u7d50\u679c\u5728\u81ea\u5df1\u7684\u66ab\u5b58\u8a18\u61b6\u9ad4\u7576\u4e2d\uff0c\u4ee5\u65b9\u4fbf\u56de\u61c9\u4e0b\u4e00\u6b21\u7684\u76f8\u540c\u8981\u6c42\u554a\uff01 \u6700\u5f8c\u5247\u5c07\u7d50\u679c\u56de\u5831\u7d66 client \u7aef\uff01\u7576\u7136\u5566\uff0c\u90a3\u500b\u8a18\u61b6\u5728 cache \u7576\u4e2d\u7684\u8cc7\u6599\uff0c\u5176\u5be6\u662f\u6709\u6642\u9593\u6027\u7684\uff0c\u7576\u904e\u4e86 DNS \u8a2d\u5b9a\u8a18\u61b6\u7684\u6642\u9593 (\u901a\u5e38\u53ef\u80fd\u662f 24 \u5c0f\u6642)\uff0c\u90a3\u9ebc\u8a72\u8a18\u9304\u5c31\u6703\u88ab\u91cb\u653e\u5594\uff01<\/li>\n<\/ol>\n<p>\u6574\u500b\u5206\u5c64\u67e5\u8a62\u7684\u6d41\u7a0b\u5c31\u662f\u9019\u6a23\uff0c\u7e3d\u662f\u5f97\u8981\u5148\u7d93\u904e . \u4f86\u5411\u4e0b\u4e00\u5c64\u9032\u884c\u67e5\u8a62\uff0c\u6700\u7d42\u7e3d\u662f\u80fd\u5f97\u5230\u7b54\u6848\u7684\u3002\u9019\u6a23\u5206\u5c64\u7684\u597d\u8655\u662f\uff1a<\/p>\n<ul>\n<li>\u4e3b\u6a5f\u540d\u7a31\u4fee\u6539\u7684\u50c5\u9700\u81ea\u5df1\u7684 DNS \u66f4\u52d5\u5373\u53ef\uff0c\u4e0d\u9700\u901a\u77e5\u5176\u4ed6\u4eba\uff1a<br \/>\n\u7576\u4e00\u500b\u300e\u5408\u6cd5\u300f\u7684 DNS \u4f3a\u670d\u5668\u88e1\u9762\u7684\u8a2d\u5b9a\u4fee\u6539\u4e86\u4e4b\u5f8c\uff0c\u4f86\u81ea\u4e16\u754c\u5404\u5730\u4efb\u4f55\u4e00\u500b DNS \u7684\u8981\u6c42\uff0c\u90fd\u6703\u6b63\u78ba\u7121\u8aa4\u7684\u986f\u793a\u6b63\u78ba\u7684\u4e3b\u6a5f\u540d\u7a31\u5c0d\u61c9 IP \u7684\u8cc7\u8a0a\uff0c\u56e0\u70ba\u4ed6\u5011\u6703\u4e00\u5c64\u4e00\u5c64\u7684\u5c0b\u627e\u4e0b\u4f86\u3002\u6240\u4ee5\uff0c\u8981\u627e\u4f60\u7684\u4e3b\u6a5f\u540d\u7a31\u5c0d\u61c9\u7684 IP \u5c31\u4e00\u5b9a\u5f97\u8981\u900f\u904e\u4f60\u7684\u4e0a\u5c64 DNS \u4f3a\u670d\u5668\u7684\u7d00\u9304\u624d\u884c\uff01\u56e0\u6b64\uff0c\u53ea\u8981\u4f60\u7684\u4e3b\u6a5f\u540d\u5b57\u662f\u7d93\u904e\u4e0a\u5c64\u300e\u5408\u6cd5\u7684 DNS\u300f\u4f3a\u670d\u5668\u8a2d\u5b9a\u7684\uff0c\u90a3\u9ebc\u5c31\u53ef\u4ee5\u5728 Internet \u4e0a\u9762\u88ab\u67e5\u8a62\u5230\u5566\uff01\u5475\u5475\uff01\u5f88\u7c21\u55ae\u7dad\u8b77\u5427\uff0c\u6a5f\u52d5\u6027\u4e5f\u5f88\u9ad8\u3002<\/li>\n<li>DNS \u4f3a\u670d\u5668\u5c0d\u4e3b\u6a5f\u540d\u7a31\u89e3\u6790\u7d50\u679c\u7684\u5feb\u53d6\u6642\u9593\uff1a<br \/>\n\u7531\u65bc\u6bcf\u6b21\u67e5\u8a62\u5230\u7684\u7d50\u679c\u90fd\u6703\u5132\u5b58\u5728 DNS \u4f3a\u670d\u5668\u7684\u5feb\u53d6\u8a18\u61b6\u9ad4\u4e2d\uff0c\u4ee5\u65b9\u4fbf\u82e5\u4e0b\u6b21\u6709\u76f8\u540c\u9700\u6c42\u7684\u89e3\u6790\u6642\uff0c\u80fd\u5920\u5feb\u901f\u7684\u56de\u61c9\u3002 \u4e0d\u904e\uff0c\u67e5\u8a62\u7d50\u679c\u5df2\u7d93\u88ab\u5feb\u53d6\u4e86\uff0c\u4f46\u662f\u539f\u59cb DNS \u7684\u4e3b\u6a5f\u540d\u7a31\u8207 IP \u5c0d\u61c9\u537b\u4fee\u6539\u4e86\uff0c\u6b64\u6642\u82e5\u6709\u4eba\u518d\u6b21\u67e5\u8a62\uff0c \u7cfb\u7d71\u53ef\u80fd\u6703\u56de\u5831\u820a\u7684 IP \u5594\uff01\u6240\u4ee5\uff0c\u5728\u5feb\u53d6\u5167\u7684\u7b54\u6848\u662f\u6709\u6642\u9593\u6027\u7684\uff01\u901a\u5e38\u662f\u6578\u5341\u5206\u9418\u5230\u4e09\u5929\u4e4b\u5167\u3002 \u9019\u4e5f\u662f\u70ba\u4ec0\u9ebc\u6211\u5011\u5e38\u8aaa\u7576\u4f60\u4fee\u6539\u4e86\u4e00\u500b domain name \u4e4b\u5f8c\uff0c\u53ef\u80fd\u8981 2 ~ 3 \u5929\u5f8c\u624d\u80fd\u5168\u9762\u7684\u555f\u7528\u7684\u7de3\u6545\u5566\uff01<\/li>\n<li>\u53ef\u6301\u7e8c\u5411\u4e0b\u6388\u6b0a (\u5b50\u9818\u57df\u540d\u7a31\u6388\u6b0a)\uff1a<br \/>\n\u6bcf\u4e00\u90e8\u53ef\u4ee5\u8a18\u9304\u4e3b\u6a5f\u540d\u7a31\u8207 IP \u5c0d\u61c9\u7684 DNS \u4f3a\u670d\u5668\u90fd\u53ef\u4ee5\u96a8\u610f\u66f4\u52d5\u4ed6\u81ea\u5df1\u7684\u8cc7\u6599\u5eab\u5c0d\u61c9\uff0c \u56e0\u6b64\u4e3b\u6a5f\u540d\u7a31\u8207\u7db2\u57df\u540d\u7a31\u5728\u5404\u500b\u4e3b\u6a5f\u5e95\u4e0b\u90fd\u4e0d\u76f8\u540c\u3002\u8209\u4f8b\u4f86\u8aaa\uff0c idv.tw \u662f\u50c5\u6709\u53f0\u7063\u624d\u6709\u9019\u500b idv \u7684\u7db2\u57df\uff5e \u56e0\u70ba\u9019\u500b idv \u662f\u7531 .tw \u6240\u7ba1\u7406\u7684\uff0c\u6240\u4ee5\u53ea\u8981\u53f0\u7063 .tw \u7dad\u8b77\u5c0f\u7d44\u540c\u610f\uff0c\u5c31\u80fd\u5920\u5efa\u7acb\u8a72\u7db2\u57df\u5594\uff01<\/li>\n<\/ul>\n<p>\u597d\u5566\uff01\u65e2\u7136 DNS \u9019\u9ebc\u68d2\uff0c\u7136\u5f8c\u6211\u5011\u53c8\u9700\u8981\u67b6\u7ad9\uff0c\u6240\u4ee5\u9700\u8981\u4e00\u500b\u4e3b\u6a5f\u7684\u540d\u7a31\uff0c\u90a3\u9ebc\u6211\u5011\u9700\u8981\u67b6\u8a2d DNS \u4e86\u55ce\uff1f\u7576\u7136\u4e0d\u662f\uff0c\u70ba\u4ec0\u9ebc\u5462\uff1f\u525b\u525b\u9ce5\u54e5\u63d0\u5230\u4e86\u5f88\u591a\u6b21\u7684\u300e\u5408\u6cd5\u300f\u7684\u5b57\u773c\uff0c\u56e0\u70ba\u4ed6\u5c31\u727d\u6d89\u5230\u300e\u6388\u6b0a\u300f\u7684\u554f\u984c\u4e86\uff01 \u6211\u5011\u5728<a href=\"http:\/\/linux.vbird.org\/linux_server\/0270dynamic_dns.php\">\u7b2c\u5341\u7ae0<\/a>\u7576\u4e2d\u4e5f\u63d0\u5230\uff0c\u53ea\u8981\u4e3b\u6a5f\u540d\u7a31\u5408\u6cd5\u5373\u53ef\uff0c\u4e0d\u898b\u5f97\u9700\u8981\u67b6\u8a2d DNS \u7684\u5566\uff01<\/p>\n<p>\u4f8b\u984c\uff1a<\/p>\n<p>\u900f\u904e dig \u5be6\u4f5c\u51fa\u672c\u5c0f\u7bc0\u8ac7\u5230\u7684 . &#8211;&gt; .tw &#8211;&gt; .edu.tw &#8211;&gt; .ksu.edu.tw &#8211;&gt; www.ksu.edu.tw \u7684\u67e5\u8a62\u6d41\u7a0b\uff0c\u4e26\u5206\u6790\u6bcf\u500b\u67e5\u8a62\u968e\u6bb5\u7684 DNS \u4f3a\u670d\u5668\u6709\u5e7e\u90e8\uff1f<\/p>\n<p>\u7b54\uff1a<\/p>\n<p>\u4e8b\u5be6\u4e0a\uff0c\u6211\u5011\u53ef\u4ee5\u900f\u904e<a href=\"http:\/\/linux.vbird.org\/linux_server\/0130internet_connect.php\">\u7b2c\u56db\u7ae0<\/a>\u7d04\u7565\u8ac7\u904e\u7684 dig \u9019\u500b\u6307\u4ee4\u4f86\u5be6\u4f5c\u51fa\u5594\uff01\u4f7f\u7528\u8ffd\u8e64\u529f\u80fd (+trace) \u5c31\u80fd\u5920\u9054\u5230\u9019\u500b\u76ee\u7684\u4e86\u3002\u4f7f\u7528\u65b9\u5f0f\u5982\u4e0b\uff1a<\/p>\n<pre>[root@www ~]# dig +trace www.ksu.edu.tw\r\n; &lt;&lt;&gt;&gt; DiG 9.3.6-P1-RedHat-9.3.6-16.P1.el5 &lt;&lt;&gt;&gt;+trace www.ksu.edu.tw\r\n;; global options:  printcmd\r\n.                       486278  IN      NS      a.root-servers.net.\r\n.                       486278  IN      NS      b.root-servers.net.\r\n....(\u5e95\u4e0b\u7701\u7565)....\r\n# \u4e0a\u9762\u7684\u90e8\u5206\u5728\u8ffd\u8e64 . \u7684\u4f3a\u670d\u5668\uff0c\u53ef\u5f9e a ~ m.root-servers.net.\r\n;; Received 500 bytes from 168.95.1.1#53(168.95.1.1) in 22 ms\r\n\r\ntw.                     172800  IN      NS      ns.twnic.net.\r\ntw.                     172800  IN      NS      a.dns.tw.\r\ntw.                     172800  IN      NS      b.dns.tw.\r\n....(\u5e95\u4e0b\u7701\u7565)....\r\n# \u4e0a\u9762\u7684\u90e8\u5206\u5728\u8ffd\u8e64 .tw. \u7684\u4f3a\u670d\u5668\uff0c\u53ef\u5f9e a ~ h.dns.tw. \u5305\u62ec ns.twnic.net.\r\n;; Received 474 bytes from 192.33.4.12#53(c.root-servers.net) in 168 ms\r\n\r\nedu.tw.                 86400   IN      NS      a.twnic.net.tw.\r\nedu.tw.                 86400   IN      NS      b.twnic.net.tw.\r\n# \u8ffd\u8e64 .edu.tw. \u7684\u5247\u6709 7 \u90e8\u4f3a\u670d\u5668\r\n;; Received 395 bytes from 192.83.166.11#53(ns.twnic.net) in 22 ms\r\n\r\nksu.edu.tw.             86400   IN      NS      dns2.ksu.edu.tw.\r\nksu.edu.tw.             86400   IN      NS      dns3.twaren.net.\r\nksu.edu.tw.             86400   IN      NS      dns1.ksu.edu.tw.\r\n;; Received 131 bytes from 192.83.166.9#53(a.twnic.net.tw) in 22 ms\r\n\r\n<u>www.ksu.edu.tw.         3600    IN      A       120.114.100.101<\/u>\r\nksu.edu.tw.             3600    IN      NS      dns2.ksu.edu.tw.\r\nksu.edu.tw.             3600    IN      NS      dns1.ksu.edu.tw.\r\nksu.edu.tw.             3600    IN      NS      dns3.twaren.net.\r\n;; Received 147 bytes from 120.114.150.1#53(dns2.ksu.edu.tw) in 14 ms\r\n<\/pre>\n<p>\u6700\u7d42\u7684\u7d50\u679c\u6709\u627e\u5230 A (Address) \u662f 120.114.100.101\uff0c\u4e0d\u904e\u9019\u500b\u4f8b\u984c\u7684\u91cd\u9ede\u662f\uff0c\u8981\u8b93\u5927\u5bb6\u77a7\u77a7\u6574\u500b DNS \u7684\u641c\u5c0b\u904e\u7a0b\uff01 \u5728 dig \u52a0\u4e0a +trace \u7684\u9078\u9805\u5f8c\uff0c\u5c31\u80fd\u5920\u9054\u5230\u9019\u500b\u76ee\u7684\u3002\u81f3\u65bc\u5176\u4ed6\u7684\u90fd\u662f\u4f3a\u670d\u5668 (NS) \u7684\u8a2d\u5b9a\u503c\u8207\u8ffd\u8e64\u904e\u7a0b\u5594\uff01 \u6709\u6c92\u6709\u5f88\u6e05\u695a\u554a\uff1f^_^\u3002\u81f3\u65bc A \u8207 NS \u7b49\u76f8\u95dc\u7684\u8cc7\u6599\uff0c\u6211\u5011\u5728\u5f8c\u7e8c\u7684 DNS \u8cc7\u6599\u5eab\u4ecb\u7d39\u4e2d\uff0c\u518d\u5206\u5225\u4ecb\u7d39\u56c9\u3002<\/p>\n<p><a name=\"port\"><\/a><\/p>\n<ul>\n<li>\n<hr \/>\n<p>DNS \u4f7f\u7528\u7684 port number<\/li>\n<\/ul>\n<p>\u597d\u4e86\uff0c\u65e2\u7136 DNS \u7cfb\u7d71\u4f7f\u7528\u7684\u662f\u7db2\u8def\u7684\u67e5\u8a62\uff0c\u90a3\u9ebc\u81ea\u7136\u9700\u8981\u6709\u76e3\u807d\u7684 port \u56c9\uff01\u6c92\u932f\uff01\u5f88\u5408\u7406\uff01\u90a3\u9ebc DNS \u4f7f\u7528\u7684\u662f\u90a3\u4e00\u500b port \u5462\uff1f\u90a3\u5c31\u662f 53 \u9019\u500b port \u5566\uff01\u4f60\u53ef\u4ee5\u5230\u4f60\u7684 Linux \u5e95\u4e0b\u7684 \/etc\/services \u9019\u500b\u6a94\u6848\u770b\u770b\uff01\u641c\u5c0b\u4e00\u4e0b domain \u9019\u500b\u95dc\u9375\u5b57\uff0c\u5c31\u53ef\u4ee5\u67e5\u5230 53 \u9019\u500b port \u5566\uff01<\/p>\n<p>\u4f46\u662f\u9019\u88e1\u9700\u8981\u8ddf\u5927\u5bb6\u5831\u544a\u7684\u662f\uff0c\u901a\u5e38 DNS \u67e5\u8a62\u7684\u6642\u5019\uff0c\u662f\u4ee5 udp \u9019\u500b\u8f03\u5feb\u901f\u7684\u8cc7\u6599\u50b3\u8f38\u5354\u5b9a\u4f86\u67e5\u8a62\u7684\uff0c \u4f46\u662f\u842c\u4e00\u6c92\u6709\u8fa6\u6cd5\u67e5\u8a62\u5230\u5b8c\u6574\u7684\u8cc7\u8a0a\u6642\uff0c\u5c31\u6703\u518d\u6b21\u7684\u4ee5 tcp \u9019\u500b\u5354\u5b9a\u4f86\u91cd\u65b0\u67e5\u8a62\u7684\uff01\u6240\u4ee5\u555f\u52d5 DNS \u7684 daemon (\u5c31\u662f named \u5566) \u6642\uff0c\u6703\u540c\u6642\u555f\u52d5 tcp \u53ca udp \u7684 port 53 \u5594\uff01\u6240\u4ee5\uff0c\u8a18\u5f97\u9632\u706b\u7246\u4e5f\u8981\u540c\u6642\u653e\u884c tcp, udp port 53 \u5462\uff01<\/p>\n<hr \/>\n<p><a name=\"DNS_register\"><\/a><img loading=\"lazy\" decoding=\"async\" src=\"http:\/\/linux.vbird.org\/images\/penguin-s.gif\" alt=\"\u5c0f\u6a19\u984c\u7684\u5716\u793a\" width=\"16\" height=\"23\" align=\"middle\" \/>19.1.3 \u5408\u6cd5 DNS \u7684\u95dc\u9375\uff1a\u7533\u8acb\u9818\u57df\u67e5\u8a62\u6388\u6b0a<\/p>\n<p>\u4ec0\u9ebc\uff1fDNS \u4f3a\u670d\u5668\u7684\u67b6\u8a2d\u9084\u6709\u300e\u5408\u6cd5\u300f\u8207\u300e\u4e0d\u5408\u6cd5\u300f\u4e4b\u5206\u5594\uff1f\u4e0d\u662f\u50cf\u5176\u4ed6\u7684\u4f3a\u670d\u5668\u4e00\u6a23\uff0c\u67b6\u8a2d\u597d\u4e4b\u5f8c\u4eba\u5bb6\u5c31\u67e5\u7684\u5230\u55ce\uff1f \u975e\u4e5f\u975e\u4e5f\uff01\u70ba\u4ec0\u9ebc\u5462\uff1f\u5e95\u4e0b\u6211\u5011\u5c31\u4f86\u8ac7\u4e00\u8ac7\u3002<\/p>\n<ul>\n<li>\n<hr \/>\n<p>\u5411\u4e0a\u5c64\u9818\u57df\u8a3b\u518a\u53d6\u5f97\u5408\u6cd5\u7684\u9818\u57df\u67e5\u8a62\u6388\u6b0a<\/li>\n<\/ul>\n<p>\u6211\u5011\u5728<a href=\"http:\/\/linux.vbird.org\/linux_server\/0270dynamic_dns.php\">\u7b2c\u5341\u7ae0<\/a>\u4e5f\u8b1b\u904e\uff0c\u7533\u8acb\u4e00\u500b\u5408\u6cd5\u7684\u4e3b\u6a5f\u540d\u7a31\u5c31\u662f\u9700\u8981\u8a3b\u518a\uff0c \u8a3b\u518a\u5c31\u662f\u9700\u8981\u82b1\u9322\u5566\uff01\u90a3\u9ebc\u8a3b\u518a\u53d6\u5f97\u7684\u8cc7\u6599\u6709\u5169\u7a2e\uff0c\u4e00\u7a2e\u662f\u7b2c\u5341\u7ae0\u8ac7\u5230\u7684 FQDN (\u4e3b\u6a5f\u540d\u7a31)\uff0c\u4e00\u7a2e\u5c31\u662f\u7533\u8acb\u9818\u57df\u67e5\u8a62\u6b0a\u3002\u6240\u8b02\u7684 FQDN \u5c31\u662f\u6211\u5011\u53ea\u9700\u8981\u4e3b\u6a5f\u540d\uff0c\u8a73\u7d30\u7684\u8a2d\u5b9a\u8cc7\u6599\u5c31\u7531 ISP \u5e6b\u6211\u5011\u641e\u5b9a\u3002\u4f8b\u5982<a href=\"http:\/\/linux.vbird.org\/linux_server\/0350dns.php#fig19.1-4\">\u5716 19.1-4<\/a> \u6240\u793a\uff0c \u90a3\u90e8 www.ksu.edu.tw \u7684\u8a73\u7d30\u4e3b\u6a5f\u540d\u7a31\u5c0d\u61c9 IP \u7684\u8cc7\u6599\u5c31\u662f\u8acb\u7ba1\u7406 .ksu.edu.tw \u90a3\u500b\u9818\u57df\u7684\u4f3a\u670d\u5668\u641e\u5b9a\u7684\u3002<\/p>\n<p>\u90a3\u4ec0\u9ebc\u662f\u9818\u57df\u67e5\u8a62\u6388\u6b0a\u5462\uff1f\u540c\u6a23\u7528<a href=\"http:\/\/linux.vbird.org\/linux_server\/0350dns.php#fig19.1-4\">\u5716 19.1-4<\/a> \u4f86\u89e3\u91cb\uff0c\u6211\u5011\u7684 .ksu.edu.tw \u5fc5\u9808\u8981\u5411 .edu.tw \u90a3\u90e8\u4e3b\u6a5f\u8a3b\u518a\u7533\u8acb\u9818\u57df\u6388\u6b0a\uff0c\u56e0\u6b64\uff0c\u672a\u4f86\u6709\u4efb\u4f55 .ksu.edu.tw \u7684\u8981\u6c42\u6642\uff0c .edu.tw \u90fd\u6703\u8aaa\uff1a\u300e\u6211\u4e0d\u77e5\u9053\uff01 \u8a73\u60c5\u8acb\u53bb\u627e .ksu.edu.tw \u5427\uff01\u300f\u6b64\u6642\uff0c\u6211\u5011\u5c31\u5f97\u8981\u67b6\u8a2d DNS \u4f3a\u670d\u5668\u4f86\u8a2d\u5b9a .ksu.edu.tw \u76f8\u95dc\u7684\u4e3b\u6a5f\u540d\u7a31\u5c0d\u61c9\u624d\u884c\u5594\uff01 \u662f\u5426\u5f88\u50cf\u4eba\u985e\u793e\u6703\u7684\u300e\u6388\u6b0a\u300f\u7684\u6982\u5ff5\uff1f<\/p>\n<p>\u4e5f\u5c31\u662f\u8aaa\uff0c\u7576\u4f60\u8001\u95c6\u5145\u5206\u7684\u300e\u6388\u6b0a\u300f\u7d66\u4f60\u67d0\u9805\u5de5\u4f5c\u7684\u6642\u5019\uff0c\u5f9e\u6b64\uff0c\u8981\u9032\u884c\u8a72\u9805\u5de5\u4f5c\u7684\u4efb\u4f55\u4eba\uff0c \u5f9e\u8001\u95c6\u90a3\u908a\u77e5\u9053\u4f60\u624d\u662f\u771f\u6b63\u300e\u6709\u6b0a\u300f\u7684\u4eba\u4e4b\u5f8c\uff0c\u90fd\u5fc5\u9808\u8981\u5411\u4f60\u8acb\u793a\u4e00\u6a23\uff01^_^\uff01\u6240\u4ee5\u56c9\uff0c\u5982\u679c\u4f60\u8981\u67b6\u8a2d DNS \uff0c\u800c\u4e14\u662f\u53ef\u4ee5\u9023\u4e0a Internet \u4e0a\u9762\u7684 DNS \u6642\uff0c\u4f60\u5c31\u5fc5\u9808\u8981\u900f\u904e\u300e\u4e0a\u5c64 DNS \u4f3a\u670d\u5668\u7684\u6388\u6b0a\u300f\u624d\u884c\uff01\u9019\u662f\u5f88\u91cd\u8981\u7684\u89c0\u5ff5\u5594\uff01<\/p>\n<p>\u8b93\u6211\u5011\u6b78\u7d0d\u4e00\u4e0b\uff0c\u8981\u8b93\u4f60\u7684\u4e3b\u6a5f\u540d\u7a31\u5c0d\u61c9 IP \u4e14\u8b93\u5176\u4ed6\u96fb\u8166\u90fd\u53ef\u4ee5\u67e5\u8a62\u7684\u5230\uff0c\u4f60\u6709\u5169\u7a2e\u65b9\u5f0f\uff1a<\/p>\n<ol>\n<li>\u4e0a\u5c64 DNS \u6388\u6b0a\u9818\u57df\u67e5\u8a62\u6b0a\uff0c\u8b93\u4f60\u81ea\u5df1\u8a2d\u5b9a DNS \u4f3a\u670d\u5668\uff0c\u6216\u8005\u662f\uff1b<\/li>\n<li>\u76f4\u63a5\u8acb\u4e0a\u5c64 DNS \u4f3a\u670d\u5668\u4f86\u5e6b\u4f60\u8a2d\u5b9a\u4e3b\u6a5f\u540d\u7a31\u5c0d\u61c9\uff01<\/li>\n<\/ol>\n<ul>\n<li>\n<hr \/>\n<p>\u64c1\u6709\u9818\u57df\u67e5\u8a62\u6b0a\u5f8c\uff0c\u6240\u6709\u7684\u4e3b\u6a5f\u540d\u8cc7\u8a0a\u90fd\u4ee5\u81ea\u5df1\u70ba\u6e96\uff0c\u8207\u4e0a\u5c64\u7121\u95dc<\/li>\n<\/ul>\n<p>\u5f88\u591a\u670b\u53cb\u53ef\u80fd\u90fd\u6709\u904e\u7533\u8acb DNS \u9818\u57df\u67e5\u8a62\u6388\u6b0a\u7684\u7d93\u9a57\uff0c\u5728\u7533\u8acb\u6642\uff0cISP \u5c31\u6703\u8981\u4f60\u586b\u5beb (1)\u4f60\u7684 DNS \u4f3a\u670d\u5668\u540d\u7a31\u4ee5\u53ca (2)\u8a72\u4f3a\u670d\u5668\u7684 IP\u3002\u65e2\u7136\u5df2\u7d93\u5728 ISP \u5c31\u586b\u5beb\u4e86\u4e3b\u6a5f\u540d\u7a31\u8207 IP \u7684\u5c0d\u61c9\uff0c\u6240\u4ee5\uff0c\u5373\u4f7f\u6211\u7684 DNS \u4f3a\u670d\u5668\u639b\u9ede\u4e86\uff0c\u5728 ISP \u4e0a\u9762\u7684\u4e3b\u6a5f\u540d\u7a31\u61c9\u8a72\u9084\u662f\u67e5\u5230\u7684 IP \u5427\uff1f\u7b54\u6848\u662f\uff1a\u300e\u932f\uff01\u300f\u67e5\u4e0d\u5230\u7684\uff01\u70ba\u4ec0\u9ebc\u5462\uff1f<\/p>\n<p>DNS \u7cfb\u7d71\u8a18\u9304\u7684\u8cc7\u8a0a\u975e\u5e38\u7684\u591a\uff0c\u4e0d\u904e\u91cd\u9ede\u5176\u5be6\u6709\u5169\u500b\uff0c\u4e00\u500b\u662f\u8a18\u9304\u4f3a\u670d\u5668\u6240\u5728\u7684 NS (NameServer) \u6a19\u8a8c\uff0c\u53e6\u4e00\u500b\u5247\u662f\u8a18\u9304\u4e3b\u6a5f\u540d\u7a31\u5c0d\u61c9\u7684 A (Address) \u6a19\u8a8c\u3002\u6211\u5011\u5728\u7db2\u8def\u4e0a\u9762\u67e5\u8a62\u5230\u7684\u6700\u7d42\u7d50\u679c\uff0c\u90fd\u662f\u67e5\u8a62 IP (IP Address) \u7684\uff0c\u56e0\u6b64\u6700\u7d42\u7684\u6a19\u8a8c\u8981\u627e\u7684\u662f A \u9019\u500b\u8a18\u9304\u624d\u5c0d\uff01\u6211\u5011\u4ee5\u9ce5\u54e5\u8a3b\u518a\u7684 .vbird.org \u4f86\u8aaa\u660e\u597d\u4e86\uff0c\u9ce5\u54e5\u53bb\u8a3b\u518a\u6642\uff0c \u8a18\u9304\u5728 ISP \u7684 DNS \u4f3a\u670d\u5668\u540d\u7a31\u70ba dns.vbird.org\uff0c\u8a72\u7b46\u8a18\u9304\u5176\u5be6\u5c31\u662f NS \uff0c\u4e26\u975e A \uff0c\u5982\u4e0b\u5716\u6240\u793a\uff1a<\/p>\n<p><img decoding=\"async\" title=\"\u8a18\u9304\u7684\u6388\u6b0a\u4e3b\u6a5f\u540d\u7a31\u8207\u5be6\u969b A \u8a18\u9304\u7684\u5dee\u7570\" src=\"http:\/\/linux.vbird.org\/linux_server\/0350dns\/\/database2.gif\" alt=\"\u8a18\u9304\u7684\u6388\u6b0a\u4e3b\u6a5f\u540d\u7a31\u8207\u5be6\u969b A \u8a18\u9304\u7684\u5dee\u7570\" border=\"0\" \/><br \/>\n\u5716 19.1-5\u3001\u8a18\u9304\u7684\u6388\u6b0a\u4e3b\u6a5f\u540d\u7a31\u8207\u5be6\u969b A \u8a18\u9304\u7684\u5dee\u7570<\/p>\n<p>\u4e0a\u5716\u4e2d\uff0c\u96d6\u7136\u5728 godaddy \u4f3a\u670d\u5668\u5167\u6709\u8a18\u9304\u4e00\u7b46\u300e\u8981\u67e5\u8a62 .vbird.org \u6642\uff0c\u8acb\u5230 dns.vbird.org (NS) \u53bb\u67e5\uff0c\u9019\u500b\u7ba1\u7406\u8005\u7684 IP \u662f 140.116&#8230;\u300f\uff0c\u4f46\u662f\u9019\u7b46\u8a18\u9304\u53ea\u662f\u544a\u8a34\u6211\u5011\u8981\u53bb\u4e0b\u4e00\u500b\u4f3a\u670d\u5668\u627e\uff0c\u4e26\u4e0d\u662f\u6700\u7d42\u7684 A (IP Address) \u7684\u7b54\u6848\uff0c\u6240\u4ee5\u9084\u5f97\u8981\u7e7c\u7e8c\u5f80\u4e0b\u627e (\u96a8\u6642\u8a18\u5f97<a href=\"http:\/\/linux.vbird.org\/linux_server\/0350dns.php#fig19.1-4\">\u5716 19.1-4<\/a> \u7684\u67e5\u8a62\u6d41\u7a0b)\u3002\u6b64\u6642\uff0c\u6709\u5e7e\u7a2e\u7d50\u679c\u6703\u5c0e\u81f4 dns.vbird.org \u7684 IP \u627e\u4e0d\u5230\uff0c\u6216\u8005\u662f\u6700\u7d42\u7684 IP \u8207 godaddy \u8a18\u9304\u7684\u4e0d\u540c\u7684\u7d50\u679c\u5594\uff01\u90a3\u5c31\u662f\uff1a<\/p>\n<ul>\n<li>dns.vbird.org \u4f3a\u670d\u5668\u639b\u9ede\u6642\uff1a \u5982\u679c dns.vbird.org \u9019\u90e8\u4e3b\u6a5f\u639b\u9ede\uff0c\u90a3\u9ebc\u5728\u4e0a\u5716\u986f\u793a\u300e\u67e5\u8a62\u300f\u7bad\u982d\u7684\u6b65\u9a5f\u6703\u88ab\u4e2d\u65b7\uff0c\u56e0\u6b64\u5c31\u6703\u51fa\u73fe\u300e\u9023\u7dda\u4e0d\u5230 dns.vbird.org \u7684 IP\u300f\u7684\u7d50\u679c\u3002\u56e0\u70ba\u7121\u8ad6\u5982\u4f55\uff0cDNS \u7cfb\u7d71\u90fd\u6703\u53bb\u627e\u5230\u6700\u5f8c\u4e00\u500b\u542b\u6709 A \u4f4d\u5740\u7684\u8a18\u9304\u554a\uff01<\/li>\n<li>dns.vbird.org \u4f3a\u670d\u5668\u5167\u7684\u8cc7\u6599\u5eab\u5fd8\u8a18\u88dc\u4e0a\u8cc7\u6599\u6642\uff1a \u5982\u679c\u9ce5\u54e5\u5728\u81ea\u5df1\u7684\u4f3a\u670d\u5668\u8cc7\u6599\u5eab\u4e2d\uff0c\u5fd8\u8a18\u52a0\u4e0a dns.vbird.org \u7684\u8a18\u9304\u6642\uff0c\u6700\u7d42\u7684\u7d50\u679c\u9084\u662f\u6703\u986f\u793a\u300e\u627e\u4e0d\u5230\u8a72\u4f3a\u670d\u5668\u7684 IP\u300f\uff1b<\/li>\n<li>dns.vbird.org \u4f3a\u670d\u5668\u5167\u7684\u8cc7\u6599\u5eab\u8cc7\u6599\u7de8\u5beb\u4e0d\u4e00\u81f4\u6642\uff1a \u5982\u679c\u662f\u5728\u9ce5\u54e5\u81ea\u5df1\u4f3a\u670d\u5668\u7684\u8cc7\u6599\u5eab\u5167\u7684 dns.vbird.org \u6240\u8a18\u9304\u7684 IP \u8207 godaddy \u7684\u4e0d\u540c\uff0c\u6700\u7d42\u7684\u7d50\u679c\u6703\u4ee5\u9ce5\u54e5\u8a18\u9304\u7684\u70ba\u6e96\u3002<\/li>\n<\/ul>\n<p>\u7e3d\u4e4b\uff0c\u4f60\u5728 ISP \u4e0a\u9762\u586b\u5beb\u7684\u4e3b\u6a5f\u540d\u7a31\u53ea\u662f\u4e00\u500b\u53c3\u8003\u7528\u7684\uff0c\u6700\u7d42\u9084\u662f\u8981\u5728\u4f60\u81ea\u5df1 DNS \u4f3a\u670d\u5668\u7576\u4e2d\u8a2d\u5b9a\u597d\u624d\u884c\uff01 \u96d6\u7136\u53ef\u4ee5\u81ea\u5df1\u60e1\u641e\u4e00\u4e0b\uff0c\u4e0d\u904e\uff0c\u901a\u5e38\u5927\u5bb6\u9084\u662f\u6703\u8b93 ISP \u4e0a\u9762\u7684 DNS \u4f3a\u670d\u5668\u4e3b\u6a5f\u540d\u8207\u81ea\u5df1\u7684\u8cc7\u6599\u5eab\u4e3b\u6a5f\u540d\u4e00\u81f4\uff0c \u4ea6\u5373\u4e0a\u5716\u4e2d\uff0c\u4e2d\u9593\u8207\u6700\u4e0b\u9762\u65b9\u6846\u5167\u7684 dns.vbird.org \u7684 NS \u53ca A \u90fd\u5c0d\u61c9\u5230\u540c\u4e00\u500b IP \u5c31\u662f\u4e86\u3002<\/p>\n<hr \/>\n<p><a name=\"DNS_settingorupper\"><\/a><img loading=\"lazy\" decoding=\"async\" src=\"http:\/\/linux.vbird.org\/images\/penguin-s.gif\" alt=\"\u5c0f\u6a19\u984c\u7684\u5716\u793a\" width=\"16\" height=\"23\" align=\"middle\" \/>19.1.4 \u4e3b\u6a5f\u540d\u4ea4\u7531 ISP \u4ee3\u7ba1\u9084\u662f\u81ea\u5df1\u8a2d\u5b9a DNS \u4f3a\u670d\u5668<\/p>\n<p>\u524d\u9762 19.1.3 \u5c0f\u7bc0\u4ee5\u53ca\u7b2c\u5341\u7ae0\u90fd\u8ac7\u904e\uff0c\u7533\u8acb\u4e3b\u6a5f\u540d\u7a31\u6216\u7db2\u57df\u540d\u7a31\u4e3b\u8981\u6709\u5169\u7a2e\u65b9\u5f0f\uff0c\u5c31\u662f\u525b\u525b\u4e0a\u982d\u63d0\u5230\u7684 DNS \u6388\u6b0a\uff0c\u6216\u8005\u662f\u76f4\u63a5\u4ea4\u7d66 ISP \u4f86\u7ba1\u7406\u3002\u4ea4\u7d66 ISP \u7ba1\u7406\u7684\uff0c\u5c31\u53ef\u4ee5\u7a31\u4f5c\u662f\u7db2\u57df\u540d\u7a31\u4ee3\u7ba1\u5566\uff01\u7576\u7136\u5566\uff0c\u5982\u679c\u4f60\u662f\u5b78\u6821\u55ae\u4f4d\u7684\u8a71\uff0c \u6216\u8005\u662f\u4f01\u696d\u5167\u90e8\u7684\u5c0f\u55ae\u4f4d\uff0c\u90a3\u9ebc\u5c31\u5f97\u8acb\u4f60\u5411\u4e0a\u5c64 DNS \u4e3b\u6a5f\u7684\u8ca0\u8cac\u4eba\u8981\u6c42\u56c9\uff01\u7121\u8ad6\u5982\u4f55\uff0c\u4f60\u53ea\u80fd\u6709\u5169\u500b\u9078\u64c7\u5c31\u662f\u4e86\uff0c\u8981\u4e0d\u5c31\u662f\u8acb\u4ed6\u5e6b\u5fd9\u4f60\u8a2d\u5b9a\u597d hostname \u5c0d\u61c9 IP \uff0c\u8981\u561b\u5c31\u662f\u8acb\u4ed6\u76f4\u63a5\u5c07\u67d0\u500b domain name \u6bb5\u6388\u6b0a\u7d66\u4f60\u505a\u70ba DNS \u7684\u4e3b\u8981\u7ba1\u7406\u7db2\u57df\u3002<\/p>\n<p>\u90a3\u9ebc\u6211\u600e\u9ebc\u77e5\u9053\u90a3\u500b\u65b9\u5f0f\u5c0d\u6211\u6bd4\u8f03\u597d\u5462\uff1f\u8acb\u6ce8\u610f\uff0c\u7531\u65bc DNS \u67b6\u8a2d\u4e4b\u5f8c\uff0c\u6703\u591a\u51fa\u4e00\u500b\u76e3\u807d\u7684 port \uff0c\u6240\u4ee5\u7406\u8ad6\u4e0a\uff0c\u662f\u6bd4\u8f03\u4e0d\u5b89\u5168\u7684\uff01\u800c\u4e14\uff0c\u7531\u65bc\u7db2\u969b\u7db2\u8def\u73fe\u5728\u90fd\u662f\u900f\u904e\u4e3b\u6a5f\u540d\u7a31\u5728\u9023\u7dda\uff0c\u5728\u77ad\u89e3\u4e0a\u9762\u8ac7\u5230\u7684\u4e3b\u6a5f\u540d\u7a31\u67e5\u8a62\u6d41\u7a0b\u5f8c\uff0c \u4f60\u6703\u767c\u73fe\uff0cDNS \u8a2d\u5b9a\u932f\u8aa4\u662f\u5f88\u8981\u547d\u7684\uff01\u56e0\u70ba\u4f60\u7684\u4e3b\u6a5f\u540d\u7a31\u518d\u4e5f\u627e\u4e0d\u5230\u4e86\u3002\u6240\u4ee5\uff0c\u9019\u88e1\u7684\u5efa\u8b70\u662f\uff1a<\/p>\n<ul>\n<li>\u9700\u8981\u67b6\u8a2d DNS \u7684\u6642\u6a5f\uff1a<\/li>\n<\/ul>\n<ul>\n<li>\u4f60\u6240\u8ca0\u8cac\u9700\u8981\u9023\u4e0a Internet \u7684\u4e3b\u6a5f\u6578\u91cf\u9f90\u5927\uff1a\u4f8b\u5982\u4f60\u4e00\u500b\u4eba\u8ca0\u8cac\u6574\u500b\u516c\u53f8\u5341\u5e7e\u90e8\u7684\u7db2\u8def Server\uff0c\u800c\u9019\u4e9b Server \u90fd\u662f\u639b\u8f09\u4f60\u7684\u516c\u53f8\u7db2\u57df\u4e4b\u4e0b\u7684\u3002\u9019\u500b\u6642\u5019\u60f3\u8981\u4e0d\u67b6\u8a2d DNS \u4e5f\u7c89\u96e3\u5566\uff01<\/li>\n<li>\u4f60\u53ef\u80fd\u9700\u8981\u6642\u5e38\u4fee\u6539\u4f60 Server \u7684\u540d\u5b57\uff0c\u6216\u8005\u662f\u4f60\u7684 Server \u6709\u96a8\u6642\u589e\u52a0\u7684\u53ef\u80fd\u6027\u8207\u8b8a\u52d5\u6027\uff1b<\/li>\n<\/ul>\n<ul>\n<li>\u4e0d\u9700\u8981\u67b6\u8a2d DNS \u7684\u6642\u6a5f\uff1a<\/li>\n<\/ul>\n<ul>\n<li>\u7db2\u8def\u4e3b\u6a5f\u6578\u91cf\u5f88\u5c11\uff1a\u4f8b\u5982\u5bb6\u88e1\u6216\u516c\u53f8\u53ea\u6709\u9700\u8981\u4e00\u90e8 mail server \u6642\uff1b<\/li>\n<li>\u4f60\u53ef\u4ee5\u76f4\u63a5\u8acb\u4e0a\u5c64 DNS \u4e3b\u6a5f\u7ba1\u7406\u54e1\u5e6b\u4f60\u8a2d\u5b9a\u597d Hostname \u7684\u5c0d\u61c9\u6642\uff1b<\/li>\n<li>\u4f60\u5c0d\u65bc DNS \u7684\u8a8d\u77e5\u4e0d\u8db3\u6642\uff0c\u5982\u679c\u67b6\u8a2d\u53cd\u800c\u5bb9\u6613\u9020\u6210\u7db2\u8def\u4e0d\u901a\u7684\u60c5\u6cc1\uff1b<\/li>\n<li>\u67b6\u8a2d DNS \u7684\u8cbb\u7528\u5f88\u9ad8\u6642\uff01<\/li>\n<\/ul>\n<hr \/>\n<p><a name=\"DNS_Zones\"><\/a><img loading=\"lazy\" decoding=\"async\" src=\"http:\/\/linux.vbird.org\/images\/penguin-s.gif\" alt=\"\u5c0f\u6a19\u984c\u7684\u5716\u793a\" width=\"16\" height=\"23\" align=\"middle\" \/>19.1.5 DNS \u8cc7\u6599\u5eab\u7684\u8a18\u9304\uff1a\u6b63\u89e3, \u53cd\u89e3, Zone \u7684\u610f\u7fa9<\/p>\n<p>\u5f9e\u524d\u9762\u7684<a href=\"http:\/\/linux.vbird.org\/linux_server\/0350dns.php#fig19.1-4\">\u5716 19.1-4<\/a> \u7684\u67e5\u8a62\u6d41\u7a0b\u4e2d\uff0c\u6211\u5011\u77e5\u9053\u6700\u91cd\u8981\u7684\u5c31\u662f .ksu.edu.tw \u90a3\u90e8 DNS \u4f3a\u670d\u5668\u5167\u7684\u8a18\u9304\u8cc7\u8a0a\u4e86\u3002\u9019\u4e9b\u8a18\u9304\u7684\u549a\u549a\u6211\u5011\u53ef\u4ee5\u7a31\u547c\u70ba\u8cc7\u6599\u5eab\uff0c\u800c\u5728\u8cc7\u6599\u5eab\u88e1\u9762\u91dd\u5c0d\u6bcf\u500b\u8981\u89e3\u6790\u7684\u9818\u57df (domain)\uff0c\u5c31\u7a31\u70ba\u4e00\u500b\u5340\u57df (zone)\u3002\u90a3\u9ebc\u5230\u5e95\u6709\u54ea\u4e9b\u8981\u89e3\u6790\u7684\u9818\u57df\u5462\uff1f\u57fa\u672c\u4e0a\uff0c\u6709\u5f9e\u4e3b\u6a5f\u540d\u7a31\u67e5\u5230 IP \u7684\u6d41\u7a0b\uff0c\u4e5f\u53ef\u4ee5\u5f9e IP \u53cd\u67e5\u5230\u4e3b\u6a5f\u540d\u7a31\u7684\u65b9\u5f0f\u3002 \u56e0\u70ba\u6700\u65e9\u524d DNS \u7684\u4efb\u52d9\u5c31\u662f\u8981\u5c07\u4e3b\u6a5f\u540d\u7a31\u89e3\u6790\u70ba IP\uff0c\u56e0\u6b64\uff1a<\/p>\n<ul>\n<li>\u5f9e\u4e3b\u6a5f\u540d\u7a31\u67e5\u8a62\u5230 IP \u7684\u6d41\u7a0b\u7a31\u70ba\uff1a\u6b63\u89e3<\/li>\n<li>\u5f9e IP \u53cd\u89e3\u6790\u5230\u4e3b\u6a5f\u540d\u7a31\u7684\u6d41\u7a0b\u7a31\u70ba\uff1a\u53cd\u89e3<\/li>\n<li>\u4e0d\u7ba1\u662f\u6b63\u89e3\u9084\u662f\u53cd\u89e3\uff0c\u6bcf\u500b\u9818\u57df\u7684\u8a18\u9304\u5c31\u662f\u4e00\u500b\u5340\u57df (zone)<\/li>\n<\/ul>\n<p>\u8209\u4f8b\u4f86\u8aaa\uff0c\u5d11\u5c71\u79d1\u5927 DNS \u4f3a\u670d\u5668\u7ba1\u7406\u7684\u5c31\u662f *.ksu.edu.tw \u9019\u500b\u9818\u57df\u7684\u67e5\u8a62\u6b0a\uff0c\u4efb\u4f55\u60f3\u8981\u77e5\u9053 *.ksu.edu.tw \u4e3b\u6a5f\u540d\u7684 IP \u90fd\u5f97\u5411\u5d11\u5c71\u79d1\u5927\u7684 DNS \u4f3a\u670d\u5668\u67e5\u8a62\uff0c\u6b64\u6642 .ksu.edu.tw \u5c31\u662f\u4e00\u500b\u300e\u6b63\u89e3\u7684\u9818\u57df\u300f\u3002\u800c\u5d11\u5c71\u79d1\u5927\u6709\u7533\u8acb\u5230\u5e7e\u500b class C \u7684\u5b50\u7db2\u57df\uff0c \u4f8b\u5982 120.114.140.0\/24\uff0c\u5982\u679c\u9019 254 \u500b\u53ef\u7528 IP \u90fd\u8981\u8a2d\u5b9a\u4e3b\u6a5f\u540d\u7a31\uff0c\u90a3\u9ebc\u9019\u500b 120.114.140.0\/24 \u5c31\u662f\u4e00\u500b\u300e\u53cd\u89e3\u7684\u9818\u57df\u300f\uff01 \u53e6\u5916\uff0c\u6bcf\u4e00\u90e8 DNS \u4f3a\u670d\u5668\u90fd\u53ef\u4ee5\u7ba1\u7406\u591a\u500b\u9818\u57df\uff0c\u4e0d\u7ba1\u662f\u6b63\u89e3\u9084\u662f\u53cd\u89e3\u3002<\/p>\n<ul>\n<li>\n<hr \/>\n<p>\u6b63\u89e3\u7684\u8a2d\u5b9a\u6b0a\u4ee5\u53ca DNS \u6b63\u89e3 zone \u8a18\u9304\u7684\u6a19\u8a8c<\/li>\n<\/ul>\n<p>\u90a3\u8ab0\u53ef\u4ee5\u7533\u8acb\u6b63\u89e3\u7684 DNS \u4f3a\u670d\u5668\u67b6\u8a2d\u6b0a\u5462\uff1f\u7b54\u6848\u662f\uff1a\u90fd\u53ef\u4ee5\uff01\u53ea\u8981\u8a72\u9818\u57df\u6c92\u6709\u4eba\u4f7f\u7528\uff0c \u90a3\u4f60\u5148\u6436\u5230\u4e86\uff0c\u5c31\u80fd\u5920\u4f7f\u7528\u4e86\u3002\u4e0d\u904e\uff0c\u56e0\u70ba\u570b\u969b INTERNIC \u5df2\u7d93\u5b9a\u7fa9\u51fa gTLD \u4ee5\u53ca ccTLD \u4e86\uff0c\u6240\u4ee5\u4f60\u4e0d\u80fd\u81ea\u8a02\u4f8b\u5982 centos.vbird \u9019\u7a2e\u7db2\u57df\u7684\uff01\u9084\u662f\u5f97\u8981\u7b26\u5408\u4e0a\u5c64 DNS \u6240\u7d66\u4e88\u7684\u9818\u57df\u7bc4\u570d\u624d\u884c\u3002\u8209\u4f8b\u4f86\u8aaa\uff0c\u53f0\u7063\u500b\u4eba\u7db2\u7ad9\u5c31\u5e38\u4f7f\u7528 *.idv.tw \u9019\u6a23\u7684\u9818\u57df\u540d\u7a31\u3002<\/p>\n<p>\u90a3\u6b63\u89e3\u6a94\u7684 zone \u88e1\u9762\u4e3b\u8981\u8a18\u9304\u4e86\u4ec0\u9ebc\u6771\u897f\u5462\uff1f\u56e0\u70ba\u6b63\u89e3\u7684\u91cd\u9ede\u5728\u7531\u4e3b\u6a5f\u540d\u7a31\u67e5\u8a62\u5230 IP\uff0c\u800c\u4e14\u6bcf\u90e8 DNS \u4f3a\u670d\u5668\u9084\u662f\u5f97\u8981\u5b9a\u7fa9\u6e05\u695a\uff0c\u540c\u6642\uff0c\u4f60\u53ef\u80fd\u9084\u9700\u8981\u67b6\u8a2d master\/slave \u67b6\u69cb\u7684 DNS \u74b0\u5883\uff0c\u56e0\u6b64\uff0c\u6b63\u89e3 zone \u901a\u5e38\u5177\u6709\u5e95\u4e0b\u5e7e\u7a2e\u6a19\u8a8c\uff1a<\/p>\n<ul>\n<li>SOA\uff1a\u5c31\u662f\u958b\u59cb\u9a57\u8b49 (Start of Authority) \u7684\u7e2e\u5beb\uff0c\u76f8\u95dc\u8cc7\u6599\u672c\u7ae0\u5f8c\u7e8c\u5c0f\u7bc0\u8aaa\u660e\uff1b<\/li>\n<li>NS\uff1a\u5c31\u662f\u540d\u7a31\u4f3a\u670d\u5668 (NameServer) \u7684\u7e2e\u5beb\uff0c\u5f8c\u9762\u8a18\u9304\u7684\u8cc7\u6599\u662f DNS \u4f3a\u670d\u5668\u7684\u610f\u601d\uff1b<\/li>\n<li>A\uff1a\u5c31\u662f\u4f4d\u5740 (Address) \u7684\u7e2e\u5beb\uff0c\u5f8c\u9762\u8a18\u9304\u7684\u662f IP \u7684\u5c0d\u61c9 (\u6700\u91cd\u8981)\uff1b<\/li>\n<\/ul>\n<ul>\n<li>\n<hr \/>\n<p>\u53cd\u89e3\u7684\u8a2d\u5b9a\u6b0a\u4ee5\u53ca DNS \u53cd\u89e3 zone \u8a18\u9304\u7684\u6a19\u8a8c<\/li>\n<\/ul>\n<p>\u6b63\u89e3\u7684\u9818\u57df\u540d\u7a31\u53ea\u8981\u7b26\u5408 INTERNIC \u53ca\u4f60\u7684 ISP \u898f\u7bc4\u5373\u53ef\uff0c\u53d6\u5f97\u6388\u6b0a\u8f03\u70ba\u7c21\u55ae (\u81ea\u5df1\u53d6\u540d\u5b57)\u3002\u90a3\u53cd\u89e3\u5462\uff1f\u53cd\u89e3\u4e3b\u8981\u662f\u7531 IP \u627e\u5230\u4e3b\u6a5f\u540d\u7a31\uff0c\u56e0\u6b64\u91cd\u9ede\u662f IP \u7684\u6240\u6709\u4eba\u662f\u8ab0\u5566\uff01\u56e0\u70ba IP \u90fd\u662f INTERNIC \u767c\u653e\u7d66\u5404\u5bb6 ISP \u7684\uff0c\u800c\u4e14\u6211\u5011\u4e5f\u77e5\u9053\uff0cIP \u53ef\u4e0d\u80fd\u4e82\u8a2d\u5b9a (\u8def\u7531\u554f\u984c)\uff01\u6240\u4ee5\u56c9\uff0c\u80fd\u5920\u8a2d\u5b9a\u53cd\u89e3\u7684\u5c31\u53ea\u6709 IP \u7684\u64c1\u6709\u4eba\uff0c\u4ea6\u5373\u4f60\u7684 ISP \u624d\u6709\u6b0a\u529b\u8a2d\u5b9a\u53cd\u89e3\u7684\u3002\u90a3\u4f60\u5411 ISP \u53d6\u5f97\u7684 IP \u80fd\u4e0d\u80fd\u81ea\u5df1\u8a2d\u5b9a\u53cd\u89e3\u5462\uff1f\u7b54\u6848\u662f\u4e0d\u884c\uff01\u9664\u975e\u4f60\u53d6\u5f97\u7684\u662f\u6574\u500b class C \u4ee5\u4e0a\u7b49\u7d1a\u7684 IP \u7db2\u6bb5\uff0c\u90a3\u4f60\u7684 ISP \u624d\u6709\u53ef\u80fd\u7d66\u4f60 IP \u53cd\u89e3\u6388\u6b0a\u3002\u5426\u5247\uff0c\u82e5\u6709\u53cd\u89e3\u7684\u9700\u6c42\uff0c\u5c31\u5f97\u8981\u5411\u4f60\u7684\u76f4\u5c6c\u4e0a\u5c64 ISP \u7533\u8acb\u624d\u884c\uff01<\/p>\n<p>\u90a3\u9ebc\u53cd\u89e3\u7684 zone \u4e3b\u8981\u8a18\u9304\u7684\u8cc7\u8a0a\u6709\u54ea\u4e9b\u5462\uff1f\u9664\u4e86\u4f3a\u670d\u5668\u5fc5\u5099\u7684 NS \u4ee5\u53ca SOA \u4e4b\u5916\uff0c\u6700\u91cd\u8981\u7684\u5c31\u662f\uff1a<\/p>\n<ul>\n<li>PTR\uff1a\u5c31\u662f\u6307\u5411 (PoinTeR) \u7684\u7e2e\u5beb\uff0c\u5f8c\u9762\u8a18\u9304\u7684\u8cc7\u6599\u5c31\u662f\u53cd\u89e3\u5230\u4e3b\u6a5f\u540d\u7a31\u56c9\uff01<\/li>\n<\/ul>\n<ul>\n<li>\n<hr \/>\n<p>\u6bcf\u90e8 DNS \u90fd\u9700\u8981\u7684\u6b63\u89e3 zone\uff1a hint<\/li>\n<\/ul>\n<p>\u73fe\u5728\u4f60\u77e5\u9053\u4e00\u500b\u6b63\u89e3\u6216\u4e00\u500b\u53cd\u89e3\u5c31\u53ef\u4ee5\u7a31\u70ba\u4e00\u500b zone \u4e86\uff01\u90a3\u9ebc\u6709\u6c92\u6709\u90a3\u500b zone \u662f\u7279\u5225\u91cd\u8981\u7684\u5462\uff1f\u6709\u7684\uff0c\u90a3\u5c31\u662f . \u554a\uff01 \u5f9e<a href=\"http:\/\/linux.vbird.org\/linux_server\/0350dns.php#fig19.1-4\">\u5716 19.1-4<\/a> \u88e1\u9762\u6211\u5011\u5c31\u77e5\u9053\uff0c\u7576 DNS \u4f3a\u670d\u5668\u5728\u81ea\u5df1\u7684\u8cc7\u6599\u5eab\u627e\u4e0d\u5230\u6240\u9700\u7684\u8cc7\u8a0a\u6642\uff0c \u4e00\u5b9a\u6703\u53bb\u627e . \uff0c\u90a3 . \u5728\u54ea\u88e1\u554a\uff1f\u6240\u4ee5\u5c31\u5f97\u8981\u6709\u8a18\u9304 . \u5728\u54ea\u88e1\u7684\u8a18\u9304 zone \u624d\u884c\u554a\uff01\u9019\u500b\u8a18\u9304 . \u7684 zone \u7684\u985e\u578b\uff0c\u5c31\u88ab\u6211\u5011\u7a31\u70ba hint \u985e\u578b\uff01\u9019\u5e7e\u4e4e\u662f\u6bcf\u500b DNS \u4f3a\u670d\u5668\u90fd\u5f97\u8981\u77e5\u9053\u7684 zone \u5594\uff01<\/p>\n<p>\u6240\u4ee5\u8aaa\uff0c\u4e00\u90e8\u7c21\u55ae\u7684\u6b63\u89e3 DNS \u4f3a\u670d\u5668\uff0c\u57fa\u672c\u4e0a\u5c31\u8981\u6709\u5169\u500b zone \u624d\u884c\uff0c\u4e00\u500b\u662f hint \uff0c\u4e00\u500b\u662f\u95dc\u65bc\u81ea\u5df1\u9818\u57df\u7684\u6b63\u89e3 zone\u3002\u8209\u9ce5\u54e5\u8a3b\u518a\u7684 vbird.org \u70ba\u4f8b\uff0c\u5728\u9ce5\u54e5\u7684 DNS \u4f3a\u670d\u5668\u5167\uff0c\u81f3\u5c11\u5c31\u8981\u6709\u9019\u5169\u500b zone\uff1a<\/p>\n<ul>\n<li>hint (root)\uff1a\u8a18\u9304 . \u7684 zone\uff1b<\/li>\n<li>vbird.org\uff1a\u8a18\u9304 .vbird.org \u9019\u500b\u6b63\u89e3\u7684 zone\u3002<\/li>\n<\/ul>\n<p>\u4f60\u6703\u767c\u73fe\u6211\u6c92\u6709 vbird.org \u9019\u500b domain \u6240\u5c6c IP \u7684\u53cd\u89e3 zone \uff0c\u70ba\u4ec0\u9ebc\u5462\uff1f\u8acb\u53c3\u8003\u4e0a\u9762\u7684\u8a73\u7d30\u8aaa\u660e\u5427\uff01 \u7c21\u55ae\u7684\u8aaa\uff0c\u5c31\u662f\u56e0\u70ba\u53cd\u89e3\u9700\u8981\u8981\u6c42 IP \u5354\u5b9a\u7684\u4e0a\u5c64\u4f86\u8a2d\u5b9a\u624d\u884c\uff01<\/p>\n<ul>\n<li>\n<hr \/>\n<p>\u6b63\u53cd\u89e3\u662f\u5426\u4e00\u5b9a\u8981\u6210\u5c0d\uff1f<\/li>\n<\/ul>\n<p>\u597d\u4e86\uff0c\u6b63\u53cd\u89e3\u9700\u4e0d\u9700\u8981\u6210\u5957\u7522\u751f\uff0c\u5728\u9019\u88e1\u4e0d\u7528\u591a\u8aaa\u660e\u4e86\u5427\uff1f^_^\uff01\u8acb\u6ce8\u610f\u5594\uff0c\u5728\u5f88\u591a\u7684\u60c5\u6cc1\u4e0b\uff0c \u5c24\u5176\u662f\u76ee\u524d\u597d\u591a\u83ab\u540d\u5176\u5999\u7684\u9818\u57df\u540d\u7a31\u7522\u751f\u51fa\u4f86\uff0c\u6240\u4ee5\uff0c\u5e38\u5e38\u6703\u53ea\u6709\u6b63\u89e3\u7684\u8a2d\u5b9a\u9700\u6c42\u800c\u5df2\u3002\u4e0d\u904e\u4e5f\u4e0d\u9700\u8981\u592a\u904e\u64d4\u5fc3\u5566\uff0c \u56e0\u70ba\u901a\u5e38\u5728\u53cd\u67e5\u7684\u60c5\u6cc1\u4e2d\uff0c\u5982\u679c\u4f60\u662f\u4f7f\u7528\u76ee\u524d\u53f0\u7063\u5730\u5340\u6700\u6d41\u884c\u7684 ADSL \u4e0a\u7db2\u7684\u8a71\uff0c\u90a3\u9ebc ISP \u65e9\u5c31\u5df2\u7d93\u5e6b\u4f60\u8a2d\u5b9a\u597d\u53cd\u89e3\u4e86\uff01\u4f8b\u5982\uff1a211.74.253.91 \u9019\u500b seednet \u7684\u6d6e\u52d5\u5f0f IP \u53cd\u67e5\u7684\u7d50\u679c\u6703\u5f97\u5230 211-74-253-91.adsl.dynamic.seed.net.tw. \u9019\u6a23\u7684\u4e3b\u6a5f\u540d\u7a31\uff01\u6240\u4ee5\u5728\u4e00\u822c\u6211\u5011\u81ea\u884c\u7533\u8acb\u9818\u57df\u540d\u7a31\u7684\u6642\u5019\uff0c\u4f60\u53ea\u8981\u64d4\u5fc3\u6b63\u89e3\u7684\u8a2d\u5b9a\u5373\u53ef\uff01 \u4e0d\u7136\u7684\u8a71\uff0c\u53cd\u6b63\u53cd\u89e3\u7684\u6388\u6b0a\u6839\u672c\u4e5f\u4e0d\u6703\u958b\u653e\u7d66\u4f60\uff0c\u4f60\u81ea\u5df1\u8a2d\u5b9a\u5f97\u5f88\u9ad8\u8208\u4e5f\u6c92\u6709\u7528\u5440\uff01 ^_^<\/p>\n<p>\u4e8b\u5be6\u4e0a\uff0c\u9700\u8981\u6b63\u53cd\u89e3\u6210\u5c0d\u9700\u6c42\u7684\u5927\u6982\u50c5\u6709 mail server \u624d\u9700\u8981\u5427\uff01\u7531\u65bc\u76ee\u524d\u7db2\u8def\u983b\u5bec\u8001\u662f\u88ab\u5783\u573e\u3001\u5ee3\u544a\u90f5\u4ef6\u4f54\u5149\uff0c \u6240\u4ee5 Internet \u7684\u793e\u6703\u5c0d\u65bc\u5408\u6cd5\u7684 mail server \u898f\u5b9a\u4e5f\u5c31\u8d8a\u4f86\u8d8a\u56b4\u683c\u3002\u5982\u679c\u4f60\u60f3\u8981\u67b6\u8a2d mail server \u6642\uff0c \u6700\u597d\u5177\u6709\u56fa\u5b9a IP \uff0c\u9019\u6a23\u624d\u80fd\u5411\u4f60\u7684 ISP \u8981\u6c42\u8a2d\u5b9a\u53cd\u89e3\u5594\uff01\u4ee5 hinet \u70ba\u4f8b\u7684\u53cd\u89e3\u7533\u8acb\uff1a<\/p>\n<ul>\n<li><a href=\"http:\/\/hidomain.hinet.net\/top1.html\">http:\/\/hidomain.hinet.net\/top1.html<\/a><\/li>\n<\/ul>\n<hr \/>\n<p><a name=\"master_slave\"><\/a><img loading=\"lazy\" decoding=\"async\" src=\"http:\/\/linux.vbird.org\/images\/penguin-s.gif\" alt=\"\u5c0f\u6a19\u984c\u7684\u5716\u793a\" width=\"16\" height=\"23\" align=\"middle\" \/>19.1.6 DNS \u8cc7\u6599\u5eab\u7684\u985e\u578b\uff1ahint, master\/slave \u67b6\u69cb<\/p>\n<p>\u4f60\u77e5\u9053\u7684\uff0cDNS \u8d8a\u4f86\u8d8a\u91cd\u8981\uff0c\u6240\u4ee5\uff0c\u5982\u679c\u4f60\u6709\u8a3b\u518a\u904e\u9818\u57df\u540d\u7a31\u7684\u8a71\uff0c\u5c31\u53ef\u4ee5\u767c\u73fe\uff0c\u73fe\u5728 ISP \u90fd\u8981\u4f60\u586b\u5beb\u5169\u90e8 DNS \u4f3a\u670d\u5668\u7684 IP \u54e9\uff01\u56e0\u70ba\u8981\u4f5c\u70ba\u5099\u63f4\u4e4b\u7528\u561b\uff01\u7e3d\u4e0d\u80fd\u4e00\u90e8 DNS \u639b\u9ede\u5f8c\uff0c\u5bb3\u4f60\u7684\u6240\u6709\u4e3b\u6a5f\u540d\u7a31\u90fd\u4e0d\u80fd\u88ab\u627e\u5230\uff5e\u90a3\u771f\u9ebb\u7169\uff5e<\/p>\n<p>\u4f46\u662f\uff0c\u5982\u679c\u6709\u5169\u90e8\u4ee5\u4e0a\u7684 DNS \u4f3a\u670d\u5668\uff0c\u90a3\u9ebc\u7db2\u8def\u4e0a\u6703\u641c\u5c0b\u5230\u54ea\u4e00\u90e8\u5462\uff1f\u7b54\u6848\u662f\uff0c\u4e0d\u77e5\u9053\uff01\u56e0\u70ba\u662f\u96a8\u6a5f\u7684\uff5e \u6240\u4ee5\uff0c\u5982\u679c\u4f60\u7684\u9818\u57df\u6709\u5169\u90e8 DNS \u4f3a\u670d\u5668\u7684\u8a71\uff0c\u90a3\u9019\u5169\u90e8 DNS \u4f3a\u670d\u5668\u7684\u5167\u5bb9\u5c31\u5f97\u5b8c\u5168\u4e00\u6a21\u4e00\u6a23\uff0c\u5426\u5247\uff0c\u7531\u65bc\u662f\u96a8\u6a5f\u627e\u5230 DNS \u4f86\u8a62\u554f\uff0c\u56e0\u6b64\u82e5\u8cc7\u6599\u4e0d\u540c\u6b65\uff0c\u5f88\u53ef\u80fd\u9020\u6210\u5176\u4ed6\u7528\u6236\u7121\u6cd5\u53d6\u5f97\u6b63\u78ba\u8cc7\u6599\u7684\u554f\u984c\u3002<\/p>\n<p>\u70ba\u4e86\u89e3\u6c7a\u9019\u500b\u554f\u984c\uff0c\u56e0\u6b64\u5728 . (root) \u9019\u500b hint \u985e\u578b\u7684\u8cc7\u6599\u5eab\u6a94\u6848\u5916\uff0c\u9084\u6709\u5169\u7a2e\u57fa\u672c\u985e\u578b\uff0c\u5206\u5225\u662f Master (\u4e3b\u4eba\u3001\u4e3b\u8981) \u8cc7\u6599\u5eab\u8207 Slave (\u5974\u96b8\u3001\u6b21\u8981) \u8cc7\u6599\u5eab\u985e\u578b\u3002\u9019\u500b Master\/Slave \u5c31\u662f\u8981\u7528\u4f86\u89e3\u6c7a\u4e0d\u540c DNS \u4f3a\u670d\u5668\u4e0a\u9762\u7684\u8cc7\u6599\u540c\u6b65\u554f\u984c\u7684\u3002 \u6240\u4ee5\u5e95\u4e0b\u8b93\u6211\u5011\u4f86\u804a\u804a Master\/Slave \u5427\uff01<\/p>\n<ul>\n<li>\n<hr \/>\n<p>Master\uff1a<\/li>\n<\/ul>\n<p>\u9019\u7a2e\u985e\u578b\u7684 DNS \u8cc7\u6599\u5eab\u4e2d\uff0c\u88e1\u9762\u6240\u6709\u7684\u4e3b\u6a5f\u540d\u7a31\u76f8\u95dc\u8cc7\u8a0a\u7b49\uff0c\u901a\u901a\u8981\u7ba1\u7406\u54e1\u81ea\u5df1\u624b\u52d5\u53bb\u4fee\u6539\u8207\u8a2d\u5b9a\uff0c \u8a2d\u5b9a\u5b8c\u7562\u9084\u5f97\u8981\u91cd\u65b0\u555f\u52d5 DNS \u670d\u52d9\u53bb\u8b80\u53d6\u6b63\u78ba\u7684\u8cc7\u6599\u5eab\u5167\u5bb9\uff0c\u624d\u7b97\u5b8c\u6210\u8cc7\u6599\u5eab\u66f4\u65b0\u3002\u4e00\u822c\u4f86\u8aaa\uff0c\u6211\u5011\u8aaa\u7684 DNS \u67b6\u8a2d\uff0c\u5c31\u662f\u6307\u8a2d\u5b9a\u9019\u7a2e\u8cc7\u6599\u5eab\u7684\u985e\u578b\u3002\u540c\u6642\uff0c\u9019\u7a2e\u985e\u578b\u7684\u8cc7\u6599\u5eab\uff0c\u9084\u80fd\u5920\u63d0\u4f9b\u8cc7\u6599\u5eab\u5167\u5bb9\u7d66 slave \u7684 DNS \u4f3a\u670d\u5668\u5594\uff01<\/p>\n<ul>\n<li>\n<hr \/>\n<p>Slave\uff1a<\/li>\n<\/ul>\n<p>\u5982\u524d\u6240\u8ff0\uff0c\u901a\u5e38\u4f60\u4e0d\u6703\u53ea\u6709\u4e00\u90e8 DNS \u4f3a\u670d\u5668\uff0c\u4f8b\u5982\u6211\u5011\u524d\u9762\u7684\u4f8b\u984c\u67e5\u8a62\u5230\u7684 .ksu.edu.tw \u5c31\u6709 3 \u90e8 DNS \u4f3a\u670d\u5668\u4f86\u7ba1\u7406\u81ea\u5df1\u7684\u9818\u57df\u3002\u90a3\u5982\u679c\u6bcf\u90e8 DNS \u6211\u5011\u90fd\u662f\u4f7f\u7528 Master \u8cc7\u6599\u5eab\u985e\u578b\uff0c\u7576\u6709\u7528\u6236\u5411\u6211\u8981\u6c42\u8981\u4fee\u6539\u6216\u8005\u65b0\u589e\u3001\u522a\u9664\u8cc7\u6599\u6642\uff0c \u4e00\u7b46\u8cc7\u6599\u6211\u5c31\u5f97\u8981\u505a\u4e09\u6b21\uff0c\u9084\u53ef\u80fd\u6703\u4e0d\u5c0f\u5fc3\u624b\u6ed1\u5c0e\u81f4\u67d0\u5e7e\u90e8\u51fa\u73fe\u932f\u8aa4\uff0c\u6b64\u6642\u53ef\u5c31\u50b7\u8166\u7b4b\u4e86\uff5e\u56e0\u6b64\uff0c\u9019\u6642\u4f7f\u7528 Slave \u985e\u578b\u7684\u8cc7\u6599\u5eab\u53d6\u5f97\u65b9\u5f0f\u5c31\u5f88\u6709\u7528\uff01<\/p>\n<p>Slave \u5fc5\u9808\u8981\u8207 Master \u76f8\u4e92\u642d\u914d\uff0c\u82e5\u4ee5 .ksu.edu.tw \u7684\u4f8b\u5b50\u4f86\u8aaa\uff0c\u5982\u679c\u6211\u5fc5\u9808\u8981\u6709\u4e09\u90e8\u4e3b\u6a5f\u63d0\u4f9b DNS \u670d\u52d9\uff0c\u4e14\u4e09\u90e8\u5167\u5bb9\u76f8\u540c\uff0c \u90a3\u9ebc\u6211\u53ea\u8981\u6307\u5b9a\u4e00\u90e8\u4f3a\u670d\u5668\u70ba Master \uff0c\u5176\u4ed6\u5169\u90e8\u70ba\u8a72 Master \u7684 Slave \u4f3a\u670d\u5668\uff0c\u90a3\u9ebc\u7576\u8981\u4fee\u6539\u4e00\u7b46\u540d\u7a31\u5c0d\u61c9\u6642\uff0c\u6211\u53ea\u8981\u624b\u52d5\u66f4\u6539 Master \u90a3\u90e8\u6a5f\u5668\u7684\u8a2d\u5b9a\u6a94\uff0c\u7136\u5f8c\uff0c\u91cd\u65b0\u555f\u52d5 BIND \u9019\u500b\u670d\u52d9\u5f8c\uff0c\u5475\u5475\uff01\u5176\u4ed6\u5169\u90e8 Slave \u5c31\u6703\u81ea\u52d5\u7684\u88ab\u901a\u77e5\u66f4\u65b0\u4e86\uff01\u9019\u6a23\u4e00\u4f86\uff0c\u5728\u7dad\u8b77\u4e0a\u9762\u53ef\u5c31\u8f15\u9b06\u5beb\u610f\u7684\u591a\u4e86\uff5e<\/p>\n<p><b>Tips:<\/b><br \/>\n\u5982\u679c\u4f60\u8a2d\u5b9a Master\/Slave \u67b6\u69cb\u6642\uff0c\u4f60\u7684 Master \u4e3b\u6a5f\u5fc5\u9808\u8981\u9650\u5236 \u53ea\u6709\u67d0\u4e9b\u7279\u5b9a IP \u7684\u4e3b\u6a5f\u80fd\u5920\u53d6\u5f97\u4f60 Master \u4e3b\u6a5f\u7684\u6b63\u53cd\u89e3\u8cc7\u6599\u5eab\u6b0a\u9650\u624d\u597d\uff01 \u6240\u4ee5\uff0c\u4e0a\u9762\u624d\u6703\u63d0\u5230 Master\/Slave \u5fc5\u9808\u8981\u4e92\u76f8\u642d\u914d\u624d\u884c\uff01<br \/>\n<img decoding=\"async\" title=\"\u9ce5\u54e5\u7684\u5716\u793a\" src=\"http:\/\/linux.vbird.org\/images\/vbird_face.gif\" alt=\"\u9ce5\u54e5\u7684\u5716\u793a\" \/><\/p>\n<ul>\n<li>\n<hr \/>\n<p>Master \/ Slave \u7684\u67e5\u8a62\u512a\u5148\u6b0a\uff1f<\/li>\n<\/ul>\n<p>\u53e6\u5916\uff0c\u65e2\u7136\u6211\u7684\u6240\u6709 DNS \u4f3a\u670d\u5668\u662f\u9700\u8981\u540c\u6642\u63d0\u4f9b internet \u4e0a\u9762\u7684\u9818\u57df\u540d\u7a31\u89e3\u6790\u7684\u670d\u52d9\uff0c \u6240\u4ee5\u4e0d\u8ad6\u662f Master \u9084\u662f Slave \u4f3a\u670d\u5668\uff0c\u4ed6\u90fd\u5fc5\u9808\u8981\u53ef\u4ee5\u540c\u6642\u63d0\u4f9b DNS \u7684\u670d\u52d9\u624d\u597d\uff01 \u56e0\u70ba\u5728 DNS \u7cfb\u7d71\u7576\u4e2d\uff0c\u9818\u57df\u540d\u7a31\u7684\u67e5\u8a62\u662f\u300e\u5148\u6436\u5148\u8d0f\u300f\u7684\u72c0\u614b\uff0c\u6211\u5011\u4e0d\u6703\u66c9\u5f97\u54ea\u4e00\u90e8\u4e3b\u6a5f\u7684\u8cc7\u6599\u6703\u5148\u88ab\u67e5\u8a62\u5230\u7684\uff01 \u70ba\u4e86\u63d0\u4f9b\u826f\u597d\u7684 DNS \u670d\u52d9\uff0c\u6bcf\u90e8 DNS \u4e3b\u6a5f\u90fd\u8981\u80fd\u6b63\u5e38\u5de5\u4f5c\u624d\u597d\u554a\uff01\u800c\u4e14\uff0c\u6bcf\u4e00\u90e8 DNS \u4f3a\u670d\u5668\u7684\u8cc7\u6599\u5eab\u5167\u5bb9\u9700\u8981\u5b8c\u5168\u4e00\u81f4\uff0c\u5426\u5247\u5c31\u6703\u9020\u6210\u7528\u6236\u7aef\u627e\u5230\u7684 IP \u662f\u932f\u8aa4\u7684\uff01<\/p>\n<ul>\n<li>\n<hr \/>\n<p>Master \/ Slave \u8cc7\u6599\u7684\u540c\u6b65\u5316\u904e\u7a0b<\/li>\n<\/ul>\n<p>\u90a3\u9ebc Master\/Slave \u7684\u8cc7\u6599\u66f4\u65b0\u5230\u5e95\u662f\u5982\u4f55\u52d5\u4f5c\u7684\u5462\uff1f\u8acb\u6ce8\u610f\uff0cSlave \u662f\u9700\u8981\u66f4\u65b0\u4f86\u81ea Master \u7684\u8cc7\u6599\u554a\uff01\u6240\u4ee5\u7576\u7136 Slave \u5728\u8a2d\u5b9a\u4e4b\u521d\u5c31\u9700\u8981\u5b58\u5728 Master \u624d\u884c\u5594\uff01\u57fa\u672c\u4e0a\uff0c\u4e0d\u8ad6 Master \u9084\u662f Slave \u7684\u8cc7\u6599\u5eab\uff0c\u90fd\u6703\u6709\u4e00\u500b\u4ee3\u8868\u8a72\u8cc7\u6599\u5eab\u65b0\u820a\u7684\u300e\u5e8f\u865f\u300f\uff0c\u9019\u500b\u5e8f\u865f\u6578\u503c\u7684\u5927\u5c0f\uff0c\u662f\u6703\u5f71\u97ff\u662f\u5426\u8981\u66f4\u65b0\u7684\u52d5\u4f5c\u5537\uff01 \u81f3\u65bc\u66f4\u65b0\u7684\u65b9\u5f0f\u4e3b\u8981\u6709\u5169\u7a2e\uff1a<\/p>\n<ul>\n<li>Master \u4e3b\u52d5\u544a\u77e5\uff1a\u4f8b\u5982\u5728 Master \u5728\u4fee\u6539\u4e86\u8cc7\u6599\u5eab\u5167\u5bb9\uff0c\u4e26\u4e14\u52a0\u5927\u8cc7\u6599\u5eab\u5e8f\u865f\u5f8c\uff0c \u91cd\u65b0\u555f\u52d5 DNS \u670d\u52d9\uff0c\u90a3 master \u6703\u4e3b\u52d5\u544a\u77e5 slave \u4f86\u66f4\u65b0\u8cc7\u6599\u5eab\uff0c\u6b64\u6642\u5c31\u80fd\u5920\u9054\u6210\u8cc7\u6599\u540c\u6b65\uff1b<\/li>\n<li>\u7531 Slave \u4e3b\u52d5\u63d0\u51fa\u8981\u6c42\uff1a\u57fa\u672c\u4e0a\uff0c Slave \u6703\u5b9a\u6642\u7684\u5411 Master \u5bdf\u770b\u8cc7\u6599\u5eab\u7684\u5e8f\u865f\uff0c \u7576\u767c\u73fe Master \u8cc7\u6599\u5eab\u7684\u5e8f\u865f\u6bd4 Slave \u81ea\u5df1\u7684\u5e8f\u865f\u9084\u8981\u5927 (\u4ee3\u8868\u6bd4\u8f03\u65b0)\uff0c\u90a3\u9ebc Slave \u5c31\u6703\u958b\u59cb\u66f4\u65b0\u3002\u5982\u679c\u5e8f\u865f\u4e0d\u8b8a\uff0c \u90a3\u9ebc\u5c31\u5224\u65b7\u8cc7\u6599\u5eab\u6c92\u6709\u66f4\u52d5\uff0c\u56e0\u6b64\u4e0d\u6703\u9032\u884c\u540c\u6b65\u66f4\u65b0\u3002<\/li>\n<\/ul>\n<p>\u7531\u4e0a\u9762\u7684\u8aaa\u660e\u4f86\u770b\uff0c\u5176\u5be6\u8a2d\u8a08\u8cc7\u6599\u5eab\u7684\u5e8f\u865f\u6700\u91cd\u8981\u7684\u76ee\u7684\u5c31\u662f\u8b93 master\/slave \u8cc7\u6599\u7684\u540c\u6b65\u5316\u3002\u90a3\u6211\u5011\u4e5f\u77e5\u9053 slave \u6703\u5411 master \u63d0\u51fa\u8cc7\u6599\u5eab\u66f4\u65b0\u7684\u9700\u6c42\uff0c\u554f\u984c\u662f\uff0c\u591a\u4e45\u63d0\u51fa\u4e00\u6b21\u66f4\u65b0\uff0c\u5982\u679c\u8a72\u6b21\u66f4\u65b0\u6642\u7531\u65bc\u7db2\u8def\u554f\u984c\uff0c\u6240\u4ee5\u6c92\u6709\u67e5\u8a62\u5230 master \u7684\u5e8f\u865f (\u4ea6\u5373\u66f4\u65b0\u5931\u6557)\uff0c\u90a3\u9694\u591a\u4e45\u6703\u91cd\u65b0\u66f4\u65b0\u4e00\u6b21\uff1f\u9019\u500b\u8207 SOA \u7684\u6a19\u8a8c\u6709\u95dc\uff0c\u5f8c\u7e8c\u8ac7\u5230\u6b63\u3001\u53cd\u89e3\u8cc7\u6599\u5eab\u5f8c\uff0c \u518d\u4f86\u8a73\u7d30\u8aaa\u660e\u5427\uff01<\/p>\n<p>\u5982\u679c\u4f60\u60f3\u8981\u67b6\u8a2d Master\/Slave \u7684 DNS \u67b6\u69cb\u6642\uff0c\u5169\u90e8\u4e3b\u6a5f (Master\/Slave) \u90fd\u9700\u8981\u4f60\u80fd\u5920\u638c\u63a7\u624d\u884c\uff01\u7db2\u8def\u4e0a\u5f88\u591a\u7684\u6587\u4ef6\u5728\u9019\u500b\u5730\u65b9\u90fd\u6709\u9ede\u300e\u9583\u5931\u300f\uff0c\u8acb\u7279\u5225\u7684\u7559\u610f\u554a\uff01\u56e0\u70ba\u9ce5\u54e5\u7684 DNS \u4f3a\u670d\u5668\u5e38\u5e38\u6703\u807d\u5230\u67d0\u4e9b\u5176\u4ed6 DNS \u7684\u8cc7\u6599\u5eab\u540c\u6b65\u5316\u9700\u6c42\uff0c\u771f\u89ba\u5f97\u7169\u5436\uff01<\/p>\n<hr \/>\n<p><a name=\"DNS_resolver\"><\/a><img loading=\"lazy\" decoding=\"async\" src=\"http:\/\/linux.vbird.org\/images\/penguin-m.gif\" alt=\"\u5927\u6a19\u984c\u7684\u5716\u793a\" width=\"25\" height=\"34\" align=\"middle\" \/>19.2 Client \u7aef\u7684\u8a2d\u5b9a<\/p>\n<p>\u7531\u65bc DNS \u662f\u6bcf\u90e8\u60f3\u8981\u9023\u4e0a\u7db2\u969b\u7db2\u8def\u7684\u4e3b\u6a5f\u90fd\u5f97\u8981\u8a2d\u5b9a\u7684\uff0c\u56e0\u6b64\u6211\u5011\u5c31\u5f9e\u7c21\u55ae\u7684\u7528\u6236\u7aef\u8a2d\u5b9a\u8ac7\u8d77\u3002\u56e0\u70ba\u672a\u4f86\u67b6\u8a2d\u597d DNS server \u5f8c\uff0c\u6211\u5011\u90fd\u6703\u76f4\u63a5\u9032\u884c\u6e2c\u8a66\uff0c\u6240\u4ee5\uff0c\u9019\u500b\u90e8\u5206\u5f97\u5148\u8655\u7406\u8655\u7406\u6bd4\u8f03\u59a5\u7576\u554a\uff01<\/p>\n<hr \/>\n<p><a name=\"DNS_resolver_file\"><\/a><img loading=\"lazy\" decoding=\"async\" src=\"http:\/\/linux.vbird.org\/images\/penguin-s.gif\" alt=\"\u5c0f\u6a19\u984c\u7684\u5716\u793a\" width=\"16\" height=\"23\" align=\"middle\" \/>19.2.1 \u76f8\u95dc\u8a2d\u5b9a\u6a94<\/p>\n<p>\u5f9e <a href=\"http:\/\/linux.vbird.org\/linux_server\/0350dns.php#Whatisdns\">19.1.1<\/a> \u7684\u8aaa\u660e\u7576\u4e2d\u6211\u5011\u66c9\u5f97\u4e3b\u6a5f\u540d\u7a31\u5c0d\u61c9\u5230 IP \u6709\u5169\u7a2e\u65b9\u6cd5\uff0c\u65e9\u671f\u7684\u65b9\u6cd5\u662f\u76f4\u63a5\u5beb\u5728\u6a94\u6848\u88e1\u9762\u4f86\u5c0d\u61c9\uff0c \u5f8c\u4f86\u6bd4\u8f03\u65b0\u7684\u65b9\u6cd5\u5247\u662f\u900f\u904e DNS \u67b6\u69cb\uff01\u90a3\u9ebc\u9019\u5169\u7a2e\u65b9\u6cd5\u5206\u5225\u4f7f\u7528\u4ec0\u9ebc\u8a2d\u5b9a\u6a94\uff1f\u53ef\u4e0d\u53ef\u4ee5\u540c\u6642\u5b58\u5728\uff1f \u82e5\u540c\u6642\u5b58\u5728\u6642\uff0c\u90a3\u500b\u65b9\u6cd5\u512a\u5148\uff1f\u55ef\uff01\u6211\u5011\u5148\u4f86\u8ac7\u4e00\u8ac7\u5e7e\u500b\u8a2d\u5b9a\u6a94\u5427\uff01<\/p>\n<ul>\n<li>\/etc\/hosts \uff1a\u9019\u500b\u662f\u6700\u65e9\u7684 hostname \u5c0d\u61c9 IP \u7684\u6a94\u6848\uff1b<\/li>\n<li>\/etc\/resolv.conf \uff1a\u9019\u500b\u91cd\u8981\uff01\u5c31\u662f ISP \u7684 DNS \u4f3a\u670d\u5668 IP \u8a18\u9304\u8655\uff1b<\/li>\n<li>\/etc\/nsswitch.conf\uff1a\u9019\u500b\u6a94\u6848\u5247\u662f\u5728\u300e\u6c7a\u5b9a\u300f\u5148\u8981\u4f7f\u7528 \/etc\/hosts \u9084\u662f \/etc\/resolv.conf \u7684\u8a2d\u5b9a\uff01<\/li>\n<\/ul>\n<p>\u4e00\u822c\u800c\u8a00\uff0c Linux \u7684\u9810\u8a2d\u4e3b\u6a5f\u540d\u7a31\u8207 IP \u7684\u5c0d\u61c9\u641c\u5c0b\u90fd\u4ee5 \/etc\/hosts \u70ba\u512a\u5148\uff0c\u70ba\u4ec0\u9ebc\u5462\uff1f\u4f60\u53ef\u4ee5\u67e5\u770b\u4e00\u4e0b \/etc\/nsswitch.conf \uff0c\u4e26\u627e\u5230 hosts \u7684\u9805\u76ee\uff1a<\/p>\n<pre>[root@www ~]# vim \/etc\/nsswitch.conf\r\nhosts:      files dns\r\n<\/pre>\n<p>\u4e0a\u9762\u90a3\u500b files \u5c31\u662f\u4f7f\u7528 \/etc\/hosts\uff0c\u800c\u6700\u5f8c\u7684 dns \u5247\u662f\u4f7f\u7528 \/etc\/resolv.conf \u7684 DNS \u4f3a\u670d\u5668\u4f86\u9032\u884c\u641c\u5c0b\u5566\uff01\u56e0\u6b64\uff0c\u4f60\u53ef\u4ee5\u5148\u4ee5 \/etc\/hosts \u4f86\u8a2d\u5b9a IP \u5c0d\u61c9\uff01\u7576\u7136\u5566\uff0c\u4f60\u4e5f\u53ef\u4ee5\u5c07\u4ed6\u8abf\u63db\u904e\u4f86\uff0c\u4e0d\u904e\uff0c\u7e3d\u662f \/etc\/hosts \u6bd4\u8f03\u7c21\u55ae\uff0c\u6240\u4ee5\u5c07\u4ed6\u64fa\u5728\u524d\u9762\u6bd4\u8f03\u597d\u5566\uff01<\/p>\n<p>\u597d\u5566\uff0c\u65e2\u7136\u6211\u5011\u662f\u8981\u9032\u884c DNS \u6e2c\u8a66\u7684\uff0c\u90a3\u9ebc\u5c31\u5f97\u8981\u77ad\u89e3\u4e00\u4e0b \/etc\/resolv.conf \u7684\u5167\u5bb9\uff0c\u5047\u8a2d\u4f60\u5728\u53f0\u7063\uff0c\u4f7f\u7528\u7684\u662f hinet \u7684 168.95.1.1 \u9019\u90e8 DNS \u4f3a\u670d\u5668\uff0c\u6240\u4ee5\u4f60\u61c9\u8a72\u9019\u6a23\u5beb\uff1a<\/p>\n<pre>[root@www ~]# vim \/etc\/resolv.conf\r\nnameserver 168.95.1.1\r\nnameserver 139.175.10.20\r\n<\/pre>\n<p>DNS \u4f3a\u670d\u5668\u7684 IP \u53ef\u4ee5\u8a2d\u5b9a\u591a\u500b\uff0c\u70ba\u4ec0\u9ebc\u8981\u8a2d\u5b9a\u591a\u500b\u5462\uff1f\u56e0\u70ba\u7576\u7b2c\u4e00\u90e8 (\u7167\u8a2d\u5b9a\u7684\u9806\u5e8f) DNS \u639b\u9ede\u6642\uff0c\u6211\u5011\u7528\u6236\u7aef\u53ef\u4ee5\u4f7f\u7528\u7b2c\u4e8c\u90e8 (\u4e0a\u8ff0\u662f 139.175.10.20) \u4f86\u9032\u884c\u67e5\u8a62\uff0c\u9019\u591a\u5c11\u6709\u9ede\u50cf DNS \u5099\u63f4\u529f\u80fd\u3002 \u901a\u5e38\u5efa\u8b70\u81f3\u5c11\u586b\u5beb\u5169\u90e8 DNS \u4f3a\u670d\u5668\u7684 IP\uff0c\u4e0d\u904e\u5728\u7db2\u8def\u6b63\u5e38\u4f7f\u7528\u7684\u60c5\u6cc1\u4e0b\uff0c\u6c38\u9060\u53ea\u6709\u7b2c\u4e00\u90e8 DNS \u4f3a\u670d\u5668\u6703\u88ab\u4f7f\u7528\u4f86\u67e5\u8a62\uff0c\u5176\u4ed6\u7684\u8a2d\u5b9a\u503c\u53ea\u662f\u5728\u7b2c\u4e00\u90e8\u51fa\u554f\u984c\u6642\u624d\u6703\u88ab\u4f7f\u7528\u3002<\/p>\n<p><b>Tips:<\/b><br \/>\n\u76e1\u91cf\u4e0d\u8981\u8a2d\u5b9a\u8d85\u904e 3 \u90e8\u4ee5\u4e0a\u7684 DNS IP \u5728 \/etc\/resolv.conf \u4e2d\uff0c\u56e0\u70ba\u5982\u679c\u662f\u4f60\u7684\u5340\u7db2\u51fa\u554f\u984c\uff0c\u5c0e\u81f4\u7121\u6cd5\u9023\u7dda\u5230 DNS \u4f3a\u670d\u5668\uff0c\u90a3\u9ebc\u4f60\u7684\u4e3b\u6a5f\u9084\u662f\u6703\u5411\u6bcf\u90e8 DNS \u4f3a\u670d\u5668\u767c\u51fa\u9023\u7dda\u8981\u6c42\uff0c\u6bcf\u6b21\u9023\u7dda\u90fd\u6709 timeout \u6642\u9593\u7684\u7b49\u5f85\uff0c\u6703\u5c0e\u81f4\u6d6a\u8cbb\u975e\u5e38\u591a\u7684\u6642\u9593\u5594\uff01<br \/>\n<img decoding=\"async\" title=\"\u9ce5\u54e5\u7684\u5716\u793a\" src=\"http:\/\/linux.vbird.org\/images\/vbird_face.gif\" alt=\"\u9ce5\u54e5\u7684\u5716\u793a\" \/><\/p>\n<p>\u4f8b\u984c\uff1a<\/p>\n<p>\u6211\u7684\u4e3b\u6a5f\u4f7f\u7528 DHCP \u53d6\u5f97 IP \uff0c\u5f88\u5947\u602a\u7684\uff0c\u7576\u6211\u4fee\u6539\u904e \/etc\/resolv.conf \u4e4b\u5f8c\uff0c\u9694\u4e0d\u591a\u4e45\u9019\u500b\u6a94\u6848\u53c8\u6703\u6062\u5fa9\u6210\u539f\u672c\u7684\u6a23\u5b50\uff0c\u9019\u662f\u4ec0\u9ebc\u539f\u56e0\uff1f \u8a72\u5982\u4f55\u8655\u7406\uff1f<\/p>\n<p>\u7b54\uff1a<\/p>\n<p>\u56e0\u70ba\u4f7f\u7528 DHCP \u6642\uff0c\u7cfb\u7d71\u6703\u4e3b\u52d5\u7684\u4f7f\u7528 DHCP \u4f3a\u670d\u5668\u50b3\u4f86\u7684\u8cc7\u6599\u9032\u884c\u7cfb\u7d71\u8a2d\u5b9a\u6a94\u7684\u4fee\u8a02\u3002\u56e0\u6b64\uff0c\u4f60\u5fc5\u9808\u544a\u77e5\u7cfb\u7d71\uff0c\u4e0d\u8981\u4f7f\u7528 DHCP \u50b3\u4f86\u7684\u4f3a\u670d\u5668\u8a2d\u5b9a\u503c\u3002 \u6b64\u6642\uff0c\u4f60\u5f97\u8981\u5728 \/etc\/sysconfig\/network-scripts\/ifcfg-eth0 \u7b49\u76f8\u95dc\u6a94\u6848\u5167\uff0c\u589e\u52a0\u4e00\u884c\uff1a\u300ePEERDNS=no\u300f\uff0c\u7136\u5f8c\u91cd\u65b0\u555f\u52d5\u7db2\u8def\u5373\u53ef\u3002<br \/>\n\u6b64\u5916\uff0c\u5982\u679c\u4f60\u6709\u555f\u52d5 CentOS 6.x \u7684 NetworkManager \u670d\u52d9\uff0c\u6709\u6642\u5019\u4e5f\u53ef\u80fd\u6703\u7522\u751f\u4e00\u4e9b\u5947\u7279\u7684\u73fe\u8c61\u54e9\uff01\u6240\u4ee5\u9ce5\u54e5\u662f\u5efa\u8b70\u95dc\u6389\u5b83\u7684\uff01^_^<\/p>\n<hr \/>\n<p><a name=\"DNS_resolver_cmd\"><\/a><img loading=\"lazy\" decoding=\"async\" src=\"http:\/\/linux.vbird.org\/images\/penguin-s.gif\" alt=\"\u5c0f\u6a19\u984c\u7684\u5716\u793a\" width=\"16\" height=\"23\" align=\"middle\" \/>19.2.2 DNS \u7684\u6b63\u3001\u53cd\u89e3\u67e5\u8a62\u6307\u4ee4\uff1a host, nslookup, dig<\/p>\n<p>\u6e2c\u8a66 DNS \u7684\u7a0b\u5f0f\u6709\u5f88\u591a\uff0c\u6211\u5011\u5148\u4f86\u4f7f\u7528\u6700\u7c21\u55ae\u7684 host \u5427\uff01\u7136\u5f8c\u9084\u6709 nslookup \u53ca dig \u54e9\uff01<\/p>\n<ul>\n<li><a name=\"host\"><\/a><br \/>\n<hr \/>\n<p>host<\/li>\n<\/ul>\n<pre>[root@www ~]# host [-a] FQDN [server]\r\n[root@www ~]# host -l domain [server]\r\n\u9078\u9805\u8207\u53c3\u6578\uff1a\r\n-a \uff1a\u4ee3\u8868\u5217\u51fa\u8a72\u4e3b\u6a5f\u6240\u6709\u7684\u76f8\u95dc\u8cc7\u8a0a\uff0c\u5305\u62ec IP\u3001TTL \u8207\u9664\u932f\u8a0a\u606f\u7b49\u7b49\r\n-l \uff1a\u82e5\u5f8c\u9762\u63a5\u7684\u90a3\u500b domain \u8a2d\u5b9a\u5141\u8a31 allow-transfer \u6642\uff0c\u5247\u5217\u51fa\u8a72 domain \r\n     \u6240\u7ba1\u7406\u7684\u6240\u6709\u4e3b\u6a5f\u540d\u7a31\u5c0d\u61c9\u8cc7\u6599\uff01\r\nserver\uff1a\u9019\u500b\u53c3\u6578\u53ef\u6709\u53ef\u7121\uff0c\u7576\u60f3\u8981\u5229\u7528\u975e \/etc\/resolv.conf \u5167\u7684 DNS \u4e3b\u6a5f\r\n        \u4f86\u67e5\u8a62\u4e3b\u6a5f\u540d\u7a31\u8207 IP \u7684\u5c0d\u61c9\u6642\uff0c\u5c31\u53ef\u4ee5\u5229\u7528\u9019\u500b\u53c3\u6578\u4e86\uff01\r\n\r\n# 1. \u4f7f\u7528\u9810\u8a2d\u503c\u4f86\u67e5\u51fa linux.vbird.org \u7684 IP \r\n[root@www ~]# host linux.vbird.org\r\nlinux.vbird.org has address 140.116.44.180             &lt;==\u9019\u662f IP\r\nlinux.vbird.org mail is handled by 10 linux.vbird.org. &lt;==\u9019\u662f MX (\u5f8c\u7e8c\u7ae0\u7bc0\u8aaa\u660e)\r\n\r\n# 2. \u67e5\u51fa linux.vbird.org \u7684\u6240\u6709\u91cd\u8981\u53c3\u6578\r\n[root@www ~]# host -a linux.vbird.org\r\nTrying \"linux.vbird.org\"\r\n;; -&gt;&gt;HEADER&lt;&lt;- opcode: QUERY, status: NOERROR, id: 56213\r\n;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 0\r\n\r\n;; QUESTION SECTION:\r\n<u>;linux.vbird.org.               IN      ANY<\/u>\r\n\r\n;; ANSWER SECTION:\r\n<u>linux.vbird.org.        145     IN      A       140.116.44.180<\/u>\r\n\r\n;; AUTHORITY SECTION:\r\nvbird.org.              145     IN      NS      dns.vbird.org.\r\nvbird.org.              145     IN      NS      dns2.vbird.org.\r\n\r\n<u>Received 86 bytes from 168.95.1.1#53 in 15 ms<\/u>  &lt;==\u679c\u7136\u662f\u5f9e 168.95.1.1 \u53d6\u5f97\u7684\u8cc7\u6599\r\n# \u770b\u6a23\u5b50\uff0c\u4e0d\u5c31\u662f dig \u7684\u8f38\u51fa\u7d50\u679c\uff1f\u6240\u4ee5\uff0c\u6211\u5011\u624d\u6703\u8aaa\uff0c\u4f7f\u7528 dig \u624d\u662f\u738b\u9053\uff01\r\n\r\n# 3. \u5f37\u5236\u4ee5 139.175.10.20 \u9019\u90e8 DNS \u4e3b\u6a5f\u4f86\u67e5\u8a62\r\n[root@www ~]# host linux.vbird.org 139.175.10.20\r\nUsing domain server:\r\nName: 139.175.10.20\r\nAddress: 139.175.10.20#53\r\nAliases:\r\n\r\nlinux.vbird.org has address 140.116.44.180\r\nlinux.vbird.org mail is handled by 10 linux.vbird.org.\r\n<\/pre>\n<p>\u770b\u5230\u6700\u5f8c\u4e00\u500b\u7bc4\u4f8b\uff0c\u6709\u6ce8\u610f\u5230\u4e0a\u9762\u8f38\u51fa\u7684\u7279\u6b8a\u5b57\u9ad4\u90e8\u5206\u55ce\uff1f\u5f88\u591a\u670b\u53cb\u5728\u6e2c\u8a66\u81ea\u5df1\u7684 DNS \u6642\uff0c\u5e38\u5e38\u6703\u300e\u6307\u5b9a\u5230\u932f\u8aa4\u7684 DNS \u67e5\u8a62\u4e3b\u6a5f\u300f\u4e86\uff5e\u56e0\u70ba\u4ed6\u5011\u7684 \/etc\/reslov.conf \u5fd8\u8a18\u6539\uff0c\u6240\u4ee5\u8001\u662f\u627e\u4e0d\u5230\u81ea\u5df1\u8a2d\u5b9a\u7684\u8cc7\u6599\u5eab IP \u8cc7\u6599\u3002\u6240\u4ee5\u4f60\u8981\u4ed4\u7d30\u770b\u554a\uff01<\/p>\n<pre># 4. \u627e\u51fa vbird.org \u9818\u57df\u7684\u6240\u6709\u4e3b\u6a5f\u5c0d\u61c9\r\n[root@www ~]# host -l vbird.org\r\n; Transfer failed.\r\nHost vbird.org not found: 9(NOTAUTH)\r\n; Transfer failed. &lt;==\u7adf\u7136\u5931\u6557\u4e86\uff01\u8acb\u770b\u5e95\u4e0b\u7684\u8aaa\u660e\uff01\r\n<\/pre>\n<p>\u600e\u9ebc\u6703\u7121\u6cd5\u56de\u61c9\u5462\uff1f\u9019\u6a23\u7684\u56de\u61c9\u662f\u56e0\u70ba\u7ba1\u7406 vbird.org \u9818\u57df\u7684 DNS \u4e26\u4e0d\u8a31\u6211\u5011\u7684\u9818\u57df\u67e5\u8a62\uff0c\u7562\u7adf\u6211\u5011\u4e0d\u662f vbird.org \u7684\u7cfb\u7d71\u7ba1\u7406\u54e1\uff0c\u7576\u7136\u6c92\u6709\u6b0a\u9650\u53ef\u4ee5\u8b80\u53d6\u6574\u500b vbird.org \u7684\u9818\u57df\u8a2d\u5b9a\u56c9\uff01\u9019\u500b\u300e host -l \u300f\u662f\u7528\u5728\u81ea\u5df1\u7684 DNS \u4f3a\u670d\u5668\u4e0a\uff0c\u672c\u7ae0\u7a0d\u5f8c\u8ac7\u5230\u4f3a\u670d\u5668\u8a2d\u5b9a\u5f8c\uff0c\u4f7f\u7528\u9019\u500b\u9078\u9805\u5c31\u80fd\u5920\u8b80\u53d6\u76f8\u95dc\u7684\u8cc7\u6599\u4e86\u3002<\/p>\n<ul>\n<li><a name=\"nslookup\"><\/a><br \/>\n<hr \/>\n<p>nslookup<\/li>\n<\/ul>\n<pre>[root@www ~]# nslookup [FQDN] [server]\r\n[root@www ~]# nslookup\r\n\u9078\u9805\u8207\u53c3\u6578\uff1a\r\n1. \u53ef\u4ee5\u76f4\u63a5\u5728 nslookup \u52a0\u4e0a\u5f85\u67e5\u8a62\u7684\u4e3b\u6a5f\u540d\u7a31\u6216\u8005\u662f IP \uff0c[server] \u53ef\u6709\u53ef\u7121\uff1b\r\n2. \u5982\u679c\u5728 nslookup \u5f8c\u9762\u6c92\u6709\u52a0\u4e0a\u4efb\u4f55\u4e3b\u6a5f\u540d\u7a31\u6216 IP \uff0c\u90a3\u5c07\u9032\u5165 nslookup \u7684\u67e5\u8a62\u529f\u80fd\r\n   \u5728 nslookup \u7684\u67e5\u8a62\u529f\u80fd\u7576\u4e2d\uff0c\u53ef\u4ee5\u8f38\u5165\u5176\u4ed6\u53c3\u6578\u4f86\u9032\u884c\u7279\u6b8a\u67e5\u8a62\uff0c\u4f8b\u5982\uff1a\r\n   set type=any \uff1a\u5217\u51fa\u6240\u6709\u7684\u8cc7\u8a0a\u300e\u6b63\u89e3\u65b9\u9762\u8a2d\u5b9a\u6a94\u300f\r\n   set type=mx  \uff1a\u5217\u51fa\u8207 mx \u76f8\u95dc\u7684\u8cc7\u8a0a\uff01\r\n\r\n# 1. \u76f4\u63a5\u641c\u5c0b mail.ksu.edu.tw \u7684 IP \u8cc7\u8a0a \r\n[root@www ~]# nslookup mail.ksu.edu.tw\r\nServer:         168.95.1.1\r\nAddress:        168.95.1.1#53  &lt;==\u9084\u662f\u8acb\u7279\u5225\u6ce8\u610f DNS \u7684 IP \u662f\u5426\u6b63\u78ba\uff01\r\n\r\nNon-authoritative answer:\r\nName:   mail.ksu.edu.tw\r\nAddress: 120.114.100.20        &lt;==\u56de\u5831 IP \u7d66\u4f60\u56c9\uff01\r\n<\/pre>\n<p>nslookup \u53ef\u55ae\u7d14\u7684\u5c07 hostname \u8207 IP \u5c0d\u61c9\u5217\u51fa\u800c\u5df2\uff0c\u4e0d\u904e\uff0c\u9084\u662f\u6703\u5c07\u67e5\u8a62\u7684 DNS \u4e3b\u6a5f\u7684 IP \u5217\u51fa\u4f86\u7684\uff01 \u5982\u679c\u60f3\u8981\u77e5\u9053\u66f4\u591a\u8a73\u7d30\u7684\u53c3\u6578\uff0c\u90a3\u53ef\u4ee5\u76f4\u63a5\u9032\u5165 nslookup \u9019\u500b\u8edf\u9ad4\u7684\u64cd\u4f5c\u756b\u9762\u4e2d\uff0c\u5982\u4e0b\u7bc4\u4f8b\uff1a<\/p>\n<pre>[root@www ~]# nslookup  &lt;==\u9032\u5165 nslookup \u67e5\u8a62\u756b\u9762\r\n&gt; 120.114.100.20         &lt;==\u57f7\u884c\u53cd\u89e3\u7684\u67e5\u8a62\r\n&gt; www.ksu.edu.tw         &lt;==\u57f7\u884c\u6b63\u89e3\u7684\u67e5\u8a62\r\n# \u4e0a\u9762\u9019\u5169\u500b\u50c5\u5217\u51fa\u6b63\u53cd\u89e3\u7684\u8cc7\u8a0a\uff0c\u6c92\u6709\u5565\u4e86\u4e0d\u8d77\u7684\u5730\u65b9\u5566\uff01\r\n&gt; set type=any           &lt;==\u8b8a\u66f4\u67e5\u8a62\uff0c\u4e0d\u662f\u50c5\u6709 A\uff0c\u5168\u90e8\u8cc7\u8a0a\u90fd\u5217\u51fa\u4f86\r\n&gt; www.ksu.edu.tw\r\nServer:         168.95.1.1\r\nAddress:        168.95.1.1#53\r\n\r\nNon-authoritative answer:\r\nName:   www.ksu.edu.tw\r\nAddress: 120.114.100.101  &lt;==\u9019\u662f\u7b54\u6848\r\n\r\nAuthoritative answers can be found from: &lt;==\u9019\u662f\u76f8\u95dc\u6388\u6b0a DNS \u8aaa\u660e\r\nksu.edu.tw      nameserver = dns2.ksu.edu.tw.\r\nksu.edu.tw      nameserver = dns1.ksu.edu.tw.\r\ndns1.ksu.edu.tw internet address = 120.114.50.1\r\ndns2.ksu.edu.tw internet address = 120.114.150.1\r\n&gt; exit &lt;==\u96e2\u958b\u5427\uff01\u76ae\u5361\u4e18\r\n<\/pre>\n<p>\u5728\u4e0a\u9762\u7684\u6848\u4f8b\u7576\u4e2d\uff0c\u8acb\u6ce8\u610f\uff0c\u5982\u679c\u4f60\u5728 nslookup \u7684\u67e5\u8a62\u756b\u9762\u7576\u4e2d\uff0c\u8f38\u5165 set type=any \u6216\u5176\u4ed6\u53c3\u6578\uff0c \u90a3\u9ebc\u5c31\u7121\u6cd5\u518d\u9032\u884c\u53cd\u89e3\u7684\u67e5\u8a62\u4e86\uff01\u9019\u662f\u56e0\u70ba any \u6216\u8005\u662f mx \u7b49\u7b49\u7684\u6a19\u8a8c\u90fd\u662f\u8a18\u9304\u5728\u6b63\u89e3 zone \u7576\u4e2d\u7684\u7de3\u6545\uff01<\/p>\n<ul>\n<li><a name=\"dig\"><\/a><br \/>\n<hr \/>\n<p>dig (\u672a\u4f86\u7684\u4e3b\u6d41\uff0c\u8acb\u611b\u7528\u4ed6\uff01)<\/li>\n<\/ul>\n<pre>[root@www ~]# dig [options] FQDN [@server]\r\n\u9078\u9805\u8207\u53c3\u6578\uff1a\r\n@server \uff1a\u5982\u679c\u4e0d\u4ee5 \/etc\/resolv.conf \u7684\u8a2d\u5b9a\u4f86\u4f5c\u70ba DNS \u67e5\u8a62\uff0c\u53ef\u5728\u6b64\u586b\u5165\u5176\u4ed6\u7684 IP\r\noptions\uff1a\u76f8\u95dc\u7684\u53c3\u6578\u5f88\u591a\uff0c\u4e3b\u8981\u6709 +trace, -t type \u4ee5\u53ca -x \u4e09\u8005\u6700\u5e38\u7528\r\n  +trace \uff1a\u5c31\u662f\u5f9e . \u958b\u59cb\u8ffd\u8e64\uff0c\u5728 19.1.2 \u88e1\u9762\u8ac7\u904e\u4e86\uff01\u56de\u982d\u77a7\u77a7\u53bb\uff01\r\n  -t type\uff1a\u67e5\u8a62\u7684\u8cc7\u6599\u4e3b\u8981\u6709 mx, ns, soa \u7b49\u985e\u578b\uff0c\u76f8\u95dc\u985e\u578b 19.4 \u4f86\u4ecb\u7d39\r\n  -x     \uff1a\u67e5\u8a62\u53cd\u89e3\u8cc7\u8a0a\uff0c\u975e\u5e38\u91cd\u8981\u7684\u9805\u76ee\uff01\r\n\r\n# 1. \u4f7f\u7528\u9810\u8a2d\u503c\u67e5\u8a62 linux.vbird.org \u5427\uff01\r\n[root@www ~]# dig linux.vbird.org\r\n; &lt;&lt;&gt;&gt; DiG 9.7.0-P2-RedHat-9.7.0-5.P2.el6_0.1 &lt;&lt;&gt;&gt; linux.vbird.org\r\n;; global options: +cmd\r\n;; Got answer:\r\n;; -&gt;&gt;HEADER&lt;&lt;- opcode: QUERY, status: NOERROR, id: 37415\r\n;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 0\r\n\r\n;; <u>QUESTION SECTION:<\/u>     &lt;==\u63d0\u51fa\u7684\u554f\u984c\u7684\u90e8\u5206\r\n;linux.vbird.org.               IN      A\r\n\r\n;; <u>ANSWER SECTION:<\/u>       &lt;==\u4e3b\u8981\u7684\u56de\u7b54\u968e\u6bb5\r\nlinux.vbird.org.        600     IN      A       140.116.44.180\r\n\r\n;; <u>AUTHORITY SECTION:<\/u>    &lt;==\u5176\u4ed6\u8207\u6b64\u6b21\u56de\u7b54\u6709\u95dc\u7684\u90e8\u5206\r\nvbird.org.              600     IN      NS      dns.vbird.org.\r\nvbird.org.              600     IN      NS      dns2.vbird.org.\r\n\r\n;; Query time: 9 msec\r\n;; <u>SERVER: 168.95.1.1#53(168.95.1.1)<\/u>\r\n;; WHEN: Thu Aug  4 14:12:26 2011\r\n;; MSG SIZE  rcvd: 86\r\n<\/pre>\n<p>\u5728\u9019\u500b\u7bc4\u4f8b\u7576\u4e2d\uff0c\u6211\u5011\u53ef\u4ee5\u770b\u5230\u6574\u500b\u986f\u793a\u51fa\u7684\u8a0a\u606f\u5305\u62ec\u6709\u5e7e\u500b\u90e8\u5206\uff1a<\/p>\n<ul>\n<li>QUESTION(\u554f\u984c)\uff1a\u986f\u793a\u6240\u8981\u67e5\u8a62\u7684\u5167\u5bb9\uff0c\u56e0\u70ba\u6211\u5011\u662f\u67e5\u8a62 linux.vbird.org \u7684 IP\uff0c\u6240\u4ee5\u9019\u88e1\u986f\u793a A (Address)\uff1b<\/li>\n<li>ANSWER(\u56de\u7b54)\uff1a\u4f9d\u64da\u525b\u525b\u7684 QUESTION \u53bb\u67e5\u8a62\u6240\u5f97\u5230\u7684\u7d50\u679c\uff0c\u7b54\u6848\u5c31\u662f\u56de\u7b54 IP \u554a\uff01<\/li>\n<li>AUTHORITY(\u9a57\u8b49)\uff1a\u7531\u9019\u88e1\u6211\u5011\u53ef\u4ee5\u77e5\u9053 linux.vbird.org \u662f\u7531\u54ea\u90e8 DNS \u4f3a\u670d\u5668\u6240\u63d0\u4f9b\u7684\u7b54\u6848\uff01 \u7d50\u679c\u662f dns.vbird.org \u53ca dns2.vbird.org \u9019\u5169\u90e8\u4e3b\u6a5f\u7ba1\u7406\u7684\u3002\u53e6\u5916\uff0c\u90a3\u500b 600 \u662f\u5565\u549a\u549a\uff1f<a href=\"http:\/\/linux.vbird.org\/linux_server\/0350dns.php#fig19.1-4\">\u5716 19.1-4<\/a> \u63d0\u5230\u904e\u7684\u6d41\u7a0b\uff0c\u5c31\u662f\u5141\u8a31\u67e5\u8a62\u8005\u80fd\u5920\u4fdd\u7559\u9019\u7b46\u8a18\u9304\u591a\u4e45\u7684\u610f\u601d (\u5feb\u53d6)\uff0c\u5728 linux.vbird.org \u7684\u8a2d\u5b9a\u4e2d\uff0c\u9810\u8a2d\u53ef\u4ee5\u4fdd\u7559 600 \u79d2\u3002<\/li>\n<\/ul>\n<pre># 2. \u67e5\u8a62 linux.vbird.org \u7684 SOA \u76f8\u95dc\u8cc7\u8a0a\u5427\uff01\r\n[root@www ~]# dig -t soa linux.vbird.org\r\n; &lt;&lt;&gt;&gt; DiG 9.7.0-P2-RedHat-9.7.0-5.P2.el6_0.1 &lt;&lt;&gt;&gt; -t soa linux.vbird.org\r\n;; global options: +cmd\r\n;; Got answer:\r\n;; -&gt;&gt;HEADER&lt;&lt;- opcode: QUERY, status: NOERROR, id: 57511\r\n;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0\r\n\r\n;; QUESTION SECTION:\r\n;<u>linux.vbird.org.               IN      SOA<\/u>\r\n\r\n;; AUTHORITY SECTION:\r\nvbird.org.              600     IN      SOA     <u>dns.vbird.org. root.dns.vbird.org.\r\n 2007091402 28800 7200 720000 86400<\/u>\r\n\r\n;; Query time: 17 msec\r\n;; SERVER: 168.95.1.1#53(168.95.1.1)\r\n;; WHEN: Thu Aug  4 14:15:57 2011\r\n;; MSG SIZE  rcvd: 78\r\n<\/pre>\n<p>\u7531\u65bc dig \u7684\u8f38\u51fa\u8cc7\u8a0a\u5be6\u5728\u662f\u592a\u8c50\u5bcc\u4e86\uff0c\u53c8\u5206\u6210\u591a\u500b\u90e8\u5206\u53bb\u9032\u884c\u56de\u5831\uff0c\u56e0\u6b64\u5f88\u9069\u5408\u4f5c\u70ba DNS \u8ffd\u8e64\u56de\u5831\u7684\u4e00\u500b\u6307\u4ee4\u5462\uff01 \u4f60\u53ef\u4ee5\u900f\u904e\u9019\u500b\u6307\u4ee4\u4f86\u77ad\u89e3\u4e00\u4e0b\u4f60\u6240\u8a2d\u5b9a\u7684 DNS \u8cc7\u6599\u5eab\u662f\u5426\u6b63\u78ba\uff0c\u4e26\u9032\u884c\u9664\u932f\u5594\uff01 ^_^\uff01\u6b64\u5916\uff0c\u4f60\u4e5f\u53ef\u4ee5\u900f\u904e\u300e -t type \u300f \u7684\u529f\u80fd\u53bb\u67e5\u8a62\u5176\u4ed6\u4f3a\u670d\u5668\u7684\u8a2d\u5b9a\u503c\uff0c\u53ef\u4ee5\u65b9\u4fbf\u4f60\u9032\u884c\u8a2d\u5b9a DNS \u4f3a\u670d\u5668\u6642\u7684\u53c3\u8003\u5594\uff01\u6b63\u89e3\u67e5\u8a62\u5b8c\u7562\uff0c\u63a5\u4e0b\u4f86\u73a9\u4e00\u73a9\u53cd\u89e3\u5427\uff01<\/p>\n<pre># 3. \u67e5\u8a62 120.114.100.20 \u7684\u53cd\u89e3\u8cc7\u8a0a\u7d50\u679c\r\n[root@www ~]# dig -x 120.114.100.20\r\n; &lt;&lt;&gt;&gt; DiG 9.7.0-P2-RedHat-9.7.0-5.P2.el6_0.1 &lt;&lt;&gt;&gt; -x 120.114.100.20\r\n;; global options: +cmd\r\n;; Got answer:\r\n;; -&gt;&gt;HEADER&lt;&lt;- opcode: QUERY, status: NOERROR, id: 60337\r\n;; flags: qr rd ra; QUERY: 1, ANSWER: 3, AUTHORITY: 3, ADDITIONAL: 3\r\n\r\n;; QUESTION SECTION:\r\n;20.100.114.120.in-addr.arpa.   IN      PTR\r\n\r\n;; ANSWER SECTION:\r\n20.100.114.120.in-addr.arpa. 3600 IN    PTR     mail-out-r2.ksu.edu.tw.\r\n20.100.114.120.in-addr.arpa. 3600 IN    PTR     mail-smtp-proxy.ksu.edu.tw.\r\n20.100.114.120.in-addr.arpa. 3600 IN    PTR     mail.ksu.edu.tw.\r\n\r\n;; AUTHORITY SECTION:\r\n100.114.120.in-addr.arpa. 3600  IN      NS      dns1.ksu.edu.tw.\r\n100.114.120.in-addr.arpa. 3600  IN      NS      dns3.twaren.net.\r\n100.114.120.in-addr.arpa. 3600  IN      NS      dns2.ksu.edu.tw.\r\n\r\n;; ADDITIONAL SECTION:\r\ndns1.ksu.edu.tw.        3036    IN      A       120.114.50.1\r\ndns2.ksu.edu.tw.        2658    IN      A       120.114.150.1\r\ndns3.twaren.net.        449     IN      A       211.79.61.47\r\n\r\n;; Query time: 29 msec\r\n;; SERVER: 168.95.1.1#53(168.95.1.1)\r\n;; WHEN: Thu Aug  4 14:17:58 2011\r\n;; MSG SIZE  rcvd: 245\r\n<\/pre>\n<p>\u53cd\u89e3\u76f8\u7576\u6709\u8da3\uff01\u5f9e\u4e0a\u9762\u7684\u8f38\u51fa\u7d50\u679c\u4f86\u770b\uff0c\u53cd\u89e3\u7684\u67e5\u8a62\u76ee\u6a19\u7adf\u7136\u5f9e 120.114.100.20 \u8b8a\u6210\u4e86 20.100.114.120.in-addr.arpa. \u9019\u500b\u6a21\u6a23\uff5e\u9019\u662f\u5565\u9b3c\u6771\u897f\uff1f\u4e0d\u8981\u6015\uff0c\u9019\u7b49\u6211\u5011\u8b1b\u5230\u53cd\u89e3\u6642\u518d\u8ddf\u5927\u5bb6\u9032\u4e00\u6b65\u89e3\u91cb\u3002 \u4f60\u73fe\u5728\u8981\u77e5\u9053\u7684\u662f\uff0c\u53cd\u89e3\u7684\u67e5\u8a62\u9818\u57df\u540d\uff0c\u8ddf\u6b63\u89e3\u4e0d\u592a\u4e00\u6a23\u5373\u53ef\uff0c\u5c24\u5176\u662f\u90a3\u500b\u602a\u7570\u7684 in-addr.arpa. \u7d50\u5c3e\u7684\u8cc7\u6599\uff0c\u53ef\u4ee5\u5148\u8a18\u4e0b\u4f86\u3002<\/p>\n<hr \/>\n<p><a name=\"DNS_resolver_whois\"><\/a><img loading=\"lazy\" decoding=\"async\" src=\"http:\/\/linux.vbird.org\/images\/penguin-s.gif\" alt=\"\u5c0f\u6a19\u984c\u7684\u5716\u793a\" width=\"16\" height=\"23\" align=\"middle\" \/>19.2.3 \u67e5\u8a62\u9818\u57df\u7ba1\u7406\u8005\u76f8\u95dc\u8cc7\u8a0a\uff1a whois<\/p>\n<p>\u4e0a\u500b\u5c0f\u7bc0\u8ac7\u5230\u7684\u662f\u4e3b\u6a5f\u540d\u7a31\u7684\u6b63\u53cd\u89e3\u67e5\u8a62\u6307\u4ee4\uff0c\u90a3\u5982\u679c\u4f60\u60f3\u8981\u77e5\u9053\u6574\u500b\u9818\u57df\u7684\u8a2d\u5b9a\uff0c\u4f7f\u7528\u7684\u662f\u300e host -l \u9818\u57df\u540d \u300f\u53bb\u67e5\uff0c \u90a3\u5982\u679c\u4f60\u60f3\u8981\u77e5\u9053\u7684\u662f\u300e\u9019\u500b\u9818\u57df\u662f\u8ab0\u7ba1\u7684\u300f\u7684\u8cc7\u8a0a\u5462\uff1f\u90a3\u5c31\u5f97\u8981\u4f7f\u7528 whois \u9019\u500b\u6307\u4ee4\u624d\u884c\u5594\uff01\u5728 CentOS 6.x \u7576\u4e2d\uff0c whois \u662f\u7531 jwhois \u9019\u500b\u8edf\u9ad4\u63d0\u4f9b\u7684\uff0c\u56e0\u6b64\uff0c\u5982\u679c\u627e\u4e0d\u5230 whois \u6642\uff0c\u8acb\u7528 yum \u53bb\u5b89\u88dd\u9019\u500b\u8edf\u9ad4\u5427\uff01<\/p>\n<ul>\n<li>\n<hr \/>\n<p>whois<\/li>\n<\/ul>\n<pre>[root@www ~]# whois [domainname]  &lt;==\u6ce8\u610f\u554a\uff01\u662f domain \u800c\u4e0d\u662f hostname\r\n[root@www ~]# whois centos.org\r\n[Querying whois.publicinterestregistry.net]\r\n[whois.publicinterestregistry.net]\r\n# \u9019\u4e2d\u9593\u662f\u4e00\u5806 whois \u4f3a\u670d\u5668\u63d0\u4f9b\u7684\u8a0a\u606f\u544a\u77e5\uff01\u5e95\u4e0b\u662f\u5be6\u969b\u8a3b\u518a\u7684\u8cc7\u6599\r\nDomain ID:D103409469-LROR\r\nDomain Name:CENTOS.ORG\r\nCreated On:04-Dec-2003 12:28:30 UTC\r\nLast Updated On:05-Dec-2010 01:23:25 UTC\r\nExpiration Date:04-Dec-2011 12:28:30 UTC  &lt;==\u8a18\u8f09\u4e86\u5efa\u7acb\u8207\u8207\u5931\u6548\u7684\u65e5\u671f\r\nSponsoring Registrar:Key-Systems GmbH (R51-LROR)\r\nStatus:CLIENT TRANSFER PROHIBITED\r\nRegistrant ID:P-8686062\r\nRegistrant Name:CentOS Domain Administrator\r\nRegistrant Organization:The CentOS Project\r\nRegistrant Street1:Mechelsesteenweg 170\r\n# \u5e95\u4e0b\u5247\u662f\u4e00\u5806\u806f\u7d61\u65b9\u5f0f\uff0c\u9ce5\u54e5\u5c07\u5b83\u53d6\u6d88\u4e86\uff0c\u514d\u5f97\u591a\u4f54\u7bc7\u5e45\uff5e\r\n<\/pre>\n<p>whois \u9019\u500b\u6307\u4ee4\u53ef\u4ee5\u67e5\u8a62\u5230\u7576\u521d\u8a3b\u518a\u9019\u500b domain \u7684\u4f7f\u7528\u8005\u7684\u76f8\u95dc\u8cc7\u8a0a\u3002\u4e0d\u904e\uff0c\u7531\u65bc\u8fd1\u5e74\u4f86\u5f88\u591a\u7db2\u8def\u8cc7\u8a0a\u5b89\u5168\u7684\u554f\u984c\uff0c\u9019\u500b whois \u6240\u63d0\u4f9b\u7684\u8cc7\u8a0a\u771f\u7684\u662f\u592a\u8a73\u7d30\u4e86\uff0c\u70ba\u4e86\u4fdd\u8b77\u4f7f\u7528\u8005\u7684\u96b1\u79c1\u6b0a\uff0c\u6240\u4ee5\uff0c\u76ee\u524d\u9019\u500b whois \u6240\u67e5\u8a62\u5230\u7684\u8cc7\u8a0a\u5df2\u7d93\u4e0d\u898b\u5f97\u662f\u5b8c\u5168\u6b63\u78ba\u7684\u4e86\uff5e\u800c\u4e14\uff0c\u5728\u986f\u793a\u51fa whois \u7684\u8cc7\u8a0a\u4e4b\u524d\uff0c\u9084\u6703\u6709\u4e00\u6bb5\u5ba3\u544a\u4e8b\u9805\u7684\u544a\u77e5\u5462\uff5e ^_^y<\/p>\n<p>\u5982\u679c\u4f7f\u7528 whois \u4f86\u6aa2\u67e5\u9ce5\u54e5\u6240\u8a3b\u518a\u7684\u5408\u6cd5 domain \u6703\u662f\u5982\u4f55\u5462\uff1f\u770b\u770b\uff1a<\/p>\n<pre>[root@www ~]# whois vbird.idv.tw\r\n[Querying whois.twnic.net]\r\n[whois.twnic.net]           &lt;==\u9019\u500b whois \u4f3a\u670d\u5668\u67e5\u5230\u7684\u8cc7\u6599\r\nDomain Name: vbird.idv.tw   &lt;==\u9019\u500b domain \u7684\u8cc7\u8a0a\r\n\r\n   Contact:                 &lt;==\u806f\u7d61\u8005\u7684\u806f\u7d61\u65b9\u5f0f\r\n      Der-Min Tsai\r\n      vbird@pc510.ev.ncku.edu.tw\r\n\r\n   <u>Record expires on 2018-09-17 (YYYY-MM-DD)<\/u>\r\n   Record created on 2002-09-13 (YYYY-MM-DD)\r\n\r\nRegistration Service Provider: HINET\r\n<\/pre>\n<p>\u5475\u5475\uff01\u9019\u500b domain \u6703\u5728 2018\/09\/17 \u5931\u6548\u7684\u610f\u601d\u5566\uff01\u5831\u544a\u5b8c\u7562\uff01\u7121\u8ad6\u5982\u4f55\uff0c\u6211\u5011\u90fd\u53ef\u4ee5\u900f\u904e nslookup, host, dig \u7b49\u7b49\u7684\u6307\u4ee4\u4f86\u67e5\u8a62\u4e3b\u6a5f\u540d\u7a31\u8207 IP \u7684\u5c0d\u61c9\uff0c\u9019\u4e9b\u6307\u4ee4\u7684\u7528\u6cd5\u53ef\u4ee5\u8acb\u4f60\u4ee5 man command \u4f86\u67e5\u8a62\u66f4\u591a\u7684\u7528\u6cd5\u5594\uff01<\/p>\n<hr \/>\n<p><a name=\"server_settings\"><\/a><img loading=\"lazy\" decoding=\"async\" src=\"http:\/\/linux.vbird.org\/images\/penguin-m.gif\" alt=\"\u5927\u6a19\u984c\u7684\u5716\u793a\" width=\"25\" height=\"34\" align=\"middle\" \/>19.3 DNS \u4f3a\u670d\u5668\u7684\u8edf\u9ad4\u3001\u7a2e\u985e\u8207 cache only DNS \u4f3a\u670d\u5668\u8a2d\u5b9a<\/p>\n<p>\u8ac7\u5b8c\u4e86\u4e00\u4e9b\u57fa\u790e\u6982\u5ff5\u5f8c\uff0c\u63a5\u4e0b\u4f86\u8b93\u6211\u5011\u4f86\u804a\u4e00\u804a\uff0c\u90a3\u5982\u4f55\u8a2d\u5b9a\u597d DNS \u4f3a\u670d\u5668\u554a\uff1f\u9019\u7576\u7136\u5c31\u5f97\u7531\u8edf\u9ad4\u5b89\u88dd\u8ac7\u8d77\u5566\uff01 \u5728\u9019\u500b\u5c0f\u7bc0\uff0c\u6211\u5011\u5148\u4e0d\u8981\u8ac7 DNS \u8a18\u9304\u7684\u6b63\u53cd\u89e3\u549a\u549a\uff0c\u53ea\u8b1b\u5230 hint \u9019\u500b . (root) \u7684 zone\uff0c\u8ac7\u4e00\u8ac7\u6700\u7c21\u55ae\u7684\u50c5\u6709\u5feb\u53d6\u7684 DNS \u4f3a\u670d\u5668 (Caching only DNS server) \u5427\uff01<\/p>\n<hr \/>\n<p><a name=\"what_software\"><\/a><img loading=\"lazy\" decoding=\"async\" src=\"http:\/\/linux.vbird.org\/images\/penguin-s.gif\" alt=\"\u5c0f\u6a19\u984c\u7684\u5716\u793a\" width=\"16\" height=\"23\" align=\"middle\" \/>19.3.1 \u67b6\u8a2d DNS \u6240\u9700\u8981\u7684\u8edf\u9ad4<\/p>\n<p>\u7d42\u65bc\u5ee2\u8a71\u90fd\u8aaa\u5b8c\u4e86\uff01\u76f8\u4fe1\u4f60\u5927\u6982\u4e5f\u6709\u9ede\u7d2f\u7684\u5427\uff1f\u9ce5\u54e5\u662f\u883b\u7d2f\u7684\u5566\uff0c\u56e0\u70ba\u624b\u81c2\u3001\u80a9\u9838\u9178\u75db\u7684\u6bdb\u75c5\u9817\u56b4\u91cd&#8230;.\u54a6\uff01\u8b1b\u9019\u500b\u5e79\u561b\uff1f @_@ \u597d\u5566\uff0c\u6211\u5011\u7d42\u65bc\u8981\u4f86\u5b89\u88dd DNS \u6240\u9700\u8981\u7684\u8edf\u9ad4\u4e86\uff01\u9084\u8a18\u5f97\u524d\u9762\u63d0\u904e\u7684\uff0c\u6211\u5011\u8981\u4f7f\u7528\u7684 DNS \u8edf\u9ad4\u5c31\u662f\u4f7f\u7528\u67cf\u514b\u840a\u5927\u5b78\u767c\u5c55\u51fa\u4f86\u7684 BIND (Berkeley Internet Name Domain, BIND) \u9019\u500b\u5566\uff01\u90a3\u9ebc\u600e\u9ebc\u77e5\u9053\u4f60\u5b89\u88dd\u4e86\u6c92\uff1f\u4e0d\u5c31\u662f rpm \u8207 yum \u55ce\uff1f\u81ea\u5df1\u67e5\u67e5\u770b\u3002<\/p>\n<pre>[root@www ~]# rpm -qa | grep '^bind'\r\nbind-libs-9.7.0-5.P2.el6_0.1.x86_64   &lt;==\u7d66 bind \u8207\u76f8\u95dc\u6307\u4ee4\u4f7f\u7528\u7684\u51fd\u5f0f\u5eab\r\nbind-utils-9.7.0-5.P2.el6_0.1.x86_64  &lt;==\u9019\u500b\u662f\u7528\u6236\u7aef\u641c\u5c0b\u4e3b\u6a5f\u540d\u7a31\u7684\u76f8\u95dc\u6307\u4ee4\r\nbind-9.7.0-5.P2.el6_0.1.x86_64        &lt;==\u5c31\u662f bind \u4e3b\u7a0b\u5f0f\u6240\u9700\u8edf\u9ad4\r\nbind-chroot-9.7.0-5.P2.el6_0.1.x86_64 &lt;==\u5c07 bind \u4e3b\u7a0b\u5f0f\u95dc\u5728\u5bb6\u88e1\u9762\uff01\r\n<\/pre>\n<p>\u4e0a\u9762\u6bd4\u8f03\u91cd\u8981\u7684\u662f\u90a3\u500b\u300e bind-chroot \u300f\u5566\uff01\u6240\u8b02\u7684 chroot \u4ee3\u8868\u7684\u662f\u300e change to root(\u6839\u76ee\u9304) \u300f\u7684\u610f\u601d\uff0croot \u4ee3\u8868\u7684\u662f\u6839\u76ee\u9304\u3002\u65e9\u671f\u7684 bind \u9810\u8a2d\u5c07\u7a0b\u5e8f\u555f\u52d5\u5728 \/var\/named \u7576\u4e2d\uff0c\u4f46\u662f\u8a72\u7a0b\u5e8f\u53ef\u4ee5\u5728\u6839\u76ee\u9304\u4e0b\u7684\u5176\u4ed6\u76ee\u9304\u5230\u8655\u8f49\u79fb\uff0c\u56e0\u6b64\u82e5 bind \u7684\u7a0b\u5f0f\u6709\u554f\u984c\u6642\uff0c\u5247\u8a72\u7a0b\u5e8f\u6703\u9020\u6210\u6574\u500b\u7cfb\u7d71\u7684\u5371\u5bb3\u3002\u70ba\u907f\u514d\u9019\u500b\u554f\u984c\uff0c \u6240\u4ee5\u6211\u5011\u5c07\u67d0\u500b\u76ee\u9304\u6307\u5b9a\u70ba bind \u7a0b\u5f0f\u7684\u6839\u76ee\u9304\uff0c\u7531\u65bc\u5df2\u7d93\u662f\u6839\u76ee\u9304\uff0c\u6240\u4ee5 bind \u4fbf\u4e0d\u80fd\u96e2\u958b\u8a72\u76ee\u9304\uff01\u6240\u4ee5\u82e5\u8a72\u7a0b\u5e8f\u88ab\u653b\u64ca\uff0c\u4e86\u4e0d\u8d77\u4e5f\u662f\u5728\u67d0\u500b\u7279\u5b9a\u76ee\u9304\u5e95\u4e0b\u641e\u7834\u58de\u800c\u5df2\u3002 CentOS 6.x \u9810\u8a2d\u5c07 bind \u9396\u5728 \/var\/named\/chroot \u76ee\u9304\u4e2d\u5594\uff01<\/p>\n<p>\u6211\u5011\u4e3b\u7a0b\u5f0f\u662f\u7531 bind, bind-chroot \u6240\u63d0\u4f9b\uff0c\u90a3\u524d\u4e00\u5c0f\u7bc0\u63d0\u5230\u7684\uff0c\u6bcf\u90e8 DNS \u4f3a\u670d\u5668\u90fd\u8981\u6709\u7684 . (root) \u9019\u500b zone file \u5728\u54ea\u88e1\uff1f\u5b83\u4e5f\u662f\u7531 bind \u6240\u63d0\u4f9b\u7684\u5594\uff01 (CentOS 4.x, 5.x \u6240\u63d0\u4f9b\u7684 caching-nameserver \u8edf\u9ad4\u4e26\u4e0d\u5b58\u5728 CentOS 6.x \u7576\u4e2d\u4e86\u5594\uff01\u5df2\u7d93\u88ab\u6db5\u84cb\u65bc bind \u8edf\u9ad4\u5167\uff01)<\/p>\n<hr \/>\n<p><a name=\"what_pathway\"><\/a><img loading=\"lazy\" decoding=\"async\" src=\"http:\/\/linux.vbird.org\/images\/penguin-s.gif\" alt=\"\u5c0f\u6a19\u984c\u7684\u5716\u793a\" width=\"16\" height=\"23\" align=\"middle\" \/>19.3.2 BIND \u7684\u9810\u8a2d\u8def\u5f91\u8a2d\u5b9a\u8207 chroot<\/p>\n<p>\u8981\u67b6\u8a2d\u597d BIND \u9700\u8981\u4ec0\u9ebc\u8a2d\u5b9a\u8cc7\u6599\u5462\uff1f\u57fa\u672c\u4e0a\u6709\u5169\u500b\u4e3b\u8981\u7684\u8cc7\u6599\u8981\u8655\u7406\uff1a<\/p>\n<ul>\n<li>BIND \u672c\u8eab\u7684\u8a2d\u5b9a\u6a94\uff1a\u4e3b\u8981\u898f\u7bc4\u4e3b\u6a5f\u7684\u8a2d\u5b9a\u3001zone file \u7684\u6240\u5728\u3001\u6b0a\u9650\u7684\u8a2d\u5b9a\u7b49\uff1b<\/li>\n<li>\u6b63\u53cd\u89e3\u8cc7\u6599\u5eab\u6a94\u6848 (zone file)\uff1a\u8a18\u9304\u4e3b\u6a5f\u540d\u7a31\u8207 IP \u5c0d\u61c9\u7684\u7b49\u3002<\/li>\n<\/ul>\n<p>BIND \u7684\u8a2d\u5b9a\u6a94\u70ba \/etc\/named.conf\uff0c\u5728\u9019\u500b\u6a94\u6848\u88e1\u9762\u53ef\u4ee5\u898f\u7bc4 zone file \u7684\u5b8c\u6574\u6a94\u540d\u5594\uff01 \u4e5f\u5c31\u662f\u8aaa\uff0c\u4f60\u7684 zone file \u5176\u5be6\u662f\u7531 \/etc\/named.conf \u6240\u6307\u5b9a\u7684\uff0c\u6240\u4ee5 zone file \u6a94\u540d\u53ef\u4ee5\u96a8\u4fbf\u53d6\u5566\uff01 \u53ea\u8981 \/etc\/named.conf \u5167\u898f\u7bc4\u70ba\u6b63\u78ba\u5373\u53ef\u3002\u4e00\u822c\u4f86\u8aaa\uff0c CentOS 6.x \u7684\u9810\u8a2d\u76ee\u9304\u662f\u9019\u6a23\u7684\uff1a<\/p>\n<ul>\n<li>\/etc\/named.conf \uff1a\u9019\u5c31\u662f\u6211\u5011\u7684\u4e3b\u8a2d\u5b9a\u6a94\u5566\uff01<\/li>\n<li>\/etc\/sysconfig\/named \uff1a\u662f\u5426\u555f\u52d5 chroot \u53ca\u984d\u5916\u7684\u53c3\u6578\uff0c\u5c31\u7531\u9019\u500b\u6a94\u6848\u63a7\u5236\uff1b<\/li>\n<li>\/var\/named\/ \uff1a\u8cc7\u6599\u5eab\u6a94\u6848\u9810\u8a2d\u653e\u7f6e\u5728\u9019\u500b\u76ee\u9304<\/li>\n<li>\/var\/run\/named \uff1anamed \u9019\u652f\u7a0b\u5f0f\u57f7\u884c\u6642\u9810\u8a2d\u653e\u7f6e pid-file \u5728\u6b64\u76ee\u9304\u5167\u3002<\/li>\n<\/ul>\n<p><a name=\"chroot\"><\/a><\/p>\n<ul>\n<li>\n<hr \/>\n<p>\/etc\/sysconfig\/named \u8207 chroot \u74b0\u5883<\/li>\n<\/ul>\n<p>\u4e0d\u904e\uff0c\u70ba\u4e86\u7cfb\u7d71\u7684\u5b89\u5168\u6027\u8003\u91cf\uff0c\u4e00\u822c\u4f86\u8aaa\u76ee\u524d\u5404\u4e3b\u8981 distributions \u90fd\u5df2\u7d93\u81ea\u52d5\u7684\u5c07\u4f60\u7684 bind \u76f8\u95dc\u7a0b\u5f0f\u7d66\u4ed6 chroot \u4e86\uff01 \u90a3\u4f60\u5982\u4f55\u77e5\u9053\u4f60 chroot \u6240\u6307\u5b9a\u7684\u76ee\u9304\u5728\u54ea\u88e1\u5462\uff1f\u5176\u5be6\u662f\u8a18\u9304\u5728 \/etc\/sysconfig\/named \u88e1\u9762\u5566\uff01\u4f60\u53ef\u4ee5\u5148\u67e5\u95b1\u4e00\u4e0b\uff1a<\/p>\n<pre>[root@www ~]# cat \/etc\/sysconfig\/named\r\nROOTDIR=\/var\/named\/chroot\r\n<\/pre>\n<p>\u4e8b\u5be6\u4e0a\u8a72\u6a94\u6848\u5167\u8f03\u6709\u610f\u7fa9\u7684\u5c31\u53ea\u6709\u4e0a\u9762\u9019\u4e00\u884c\uff0c\u610f\u601d\u662f\u8aaa\uff1a\u300e\u6211\u8981\u5c07 named \u7d66\u4ed6 chroot \uff0c\u4e26\u4e14\u8b8a\u66f4\u7684\u6839\u76ee\u9304\u70ba \/var\/named\/chroot \u300f\u5594\uff01\u7531\u65bc\u6839\u76ee\u9304\u5df2\u7d93\u88ab\u8b8a\u66f4\u5230 \/var\/named\/chroot \u4e86\uff0c\u4f46 bind \u7684\u76f8\u95dc\u7a0b\u5f0f\u662f\u9700\u8981 \/etc, \/var\/named, \/var\/run &#8230;\u7b49\u76ee\u9304\u7684\uff0c\u6240\u4ee5\u5be6\u969b\u4e0a\u54b1\u5011 bind \u7684\u76f8\u95dc\u7a0b\u5f0f\u6240\u9700\u8981\u7684\u6240\u6709\u8cc7\u6599\u6703\u662f\u5728\uff1a<\/p>\n<ul>\n<li><b>\/var\/named\/chroot<\/b>\/etc\/named.conf<\/li>\n<li><b>\/var\/named\/chroot<\/b>\/var\/named\/zone_file1<\/li>\n<li><b>\/var\/named\/chroot<\/b>\/var\/named\/zone_file&#8230;..<\/li>\n<li><b>\/var\/named\/chroot<\/b>\/var\/run\/named\/&#8230;<\/li>\n<\/ul>\n<p>\u54c7\uff01\u771f\u662f\u597d\u9ebb\u7169\uff5e\u4e0d\u904e\uff0c\u4e0d\u8981\u592a\u64d4\u5fc3\uff01\u56e0\u70ba\u65b0\u7248\u672c\u7684 CentOS 6.x \u5df2\u7d93\u5c07 chroot \u6240\u9700\u8981\u4f7f\u7528\u5230\u7684\u76ee\u9304\uff0c\u900f\u904e mount &#8211;bind \u7684\u529f\u80fd\u9032\u884c\u76ee\u9304\u9023\u7d50\u4e86 (\u53c3\u8003 \/etc\/init.d\/named \u5167\u5bb9)\uff0c\u8209\u4f8b\u4f86\u8aaa\uff0c\u6211\u5011\u9700\u8981\u7684 \/var\/named \u5728\u555f\u52d5\u8173\u672c\u4e2d\u900f\u904e mount &#8211;bind \/var\/named \/var\/named\/chroot\/var\/named \u9032\u884c\u76ee\u9304\u7d81\u5b9a\u56c9\uff01\u6240\u4ee5\u5728 CentOS 6.x \u7576\u4e2d\uff0c\u4f60\u6839\u672c\u7121\u9808\u5207\u63db\u81f3 \/var\/named\/chroot\/ \u4e86\uff01\u4f7f\u7528\u6b63\u898f\u7684\u76ee\u9304\u5373\u53ef\u5594\uff01\u5c31\u662f\u9019\u6a23\u7c21\u55ae\uff01^_^<\/p>\n<p><b>Tips:<\/b><br \/>\n\u4e8b\u5be6\u4e0a\uff0c \/etc\/sysconfig\/named \u662f\u7531 \/etc\/init.d\/named \u555f\u52d5\u6642\u6240\u8b80\u5165\u7684\uff0c\u6240\u4ee5\u4f60\u4e5f\u53ef\u4ee5\u76f4\u63a5\u4fee\u6539 \/etc\/init.d\/named \u9019\u500b script \u54e9\uff01<br \/>\n<img decoding=\"async\" title=\"\u9ce5\u54e5\u7684\u5716\u793a\" src=\"http:\/\/linux.vbird.org\/images\/vbird_face.gif\" alt=\"\u9ce5\u54e5\u7684\u5716\u793a\" \/><\/p>\n<p><a name=\"20070625\"><\/a><\/p>\n<hr \/>\n<p><a name=\"forwards\"><\/a><img loading=\"lazy\" decoding=\"async\" src=\"http:\/\/linux.vbird.org\/images\/penguin-s.gif\" alt=\"\u5c0f\u6a19\u984c\u7684\u5716\u793a\" width=\"16\" height=\"23\" align=\"middle\" \/>19.3.3 \u55ae\u7d14\u7684 cache-only DNS \u4f3a\u670d\u5668\u8207 forwarding \u529f\u80fd<\/p>\n<p>\u5728\u4e0b\u4e00\u5c0f\u7bc0\u958b\u59cb\u4ecb\u7d39\u6b63\u3001\u53cd\u89e3 zone \u7684\u8cc7\u6599\u8a2d\u5b9a\u4e4b\u524d\uff0c\u5728\u9019\u500b\u5c0f\u7bc0\u7576\u4e2d\uff0c\u6211\u5011\u5148\u4f86\u8ac7\u4e00\u500b\u55ae\u7d14\u4fee\u6539\u8a2d\u5b9a\u6a94\uff0c\u800c\u4e0d\u5fc5\u8a2d\u8a08 zone file \u7684\u74b0\u5883\uff0c\u90a3\u5c31\u662f\u4e0d\u5177\u6709\u81ea\u5df1\u6b63\u53cd\u89e3 zone \u7684\u50c5\u9032\u884c\u5feb\u53d6\u7684 DNS \u4f3a\u670d\u5668\u3002<\/p>\n<ul>\n<li>\n<hr \/>\n<p>\u4ec0\u9ebc\u662f cache-only \u8207 forwarding DNS \u4f3a\u670d\u5668\u5462\uff1f<\/li>\n<\/ul>\n<p>\u6709\u500b\u53ea\u9700\u8981 . \u9019\u500b zone file \u7684\u7c21\u55ae DNS \u4f3a\u670d\u5668\uff0c\u6211\u5011\u7a31\u9019\u7a2e\u6c92\u6709\u81ea\u5df1\u516c\u958b\u7684 DNS \u8cc7\u6599\u5eab\u7684\u4f3a\u670d\u5668\u70bacache-only (\u50c5\u5feb\u53d6) DNS server\uff01\u9867\u540d\u601d\u7fa9\uff0c\u9019\u500b DNS server \u53ea\u6709\u5feb\u53d6\u641c\u5c0b\u7d50\u679c\u7684\u529f\u80fd\uff0c\u4e5f\u5c31\u662f\u8aaa\uff0c\u4ed6\u672c\u8eab\u4e26\u6c92\u6709\u4e3b\u6a5f\u540d\u7a31\u8207 IP \u6b63\u53cd\u89e3\u7684\u8a2d\u5b9a\u6a94\uff0c\u5b8c\u5168\u662f\u7531\u5c0d\u5916\u7684\u67e5\u8a62\u4f86\u63d0\u4f9b\u4ed6\u7684\u8cc7\u6599\u4f86\u6e90\uff01<\/p>\n<p>\u90a3\u5982\u679c\u9023 . \u90fd\u4e0d\u60f3\u8981\u5462\uff1f\u90a3\u5c31\u5f97\u8981\u6307\u5b9a\u4e00\u500b\u4e0a\u5c64 DNS \u4f3a\u670d\u5668\u4f5c\u70ba\u4f60\u7684 forwarding (\u8f49\u905e) \u76ee\u6a19\uff0c\u5c07\u539f\u672c\u81ea\u5df1\u8981\u5f80 . \u67e5\u8a62\u7684\u4efb\u52d9\uff0c\u4e1f\u7d66\u4e0a\u5c64 DNS \u4f3a\u670d\u5668\u53bb\u7169\u60f1\u5373\u53ef\u3002 \u5982\u6b64\u4e00\u4f86\uff0c\u6211\u5011\u9019\u90e8\u5177\u6709 forwarding \u529f\u80fd\u7684 DNS \u4f3a\u670d\u5668\uff0c\u751a\u81f3\u9023 . \u90fd\u4e0d\u9700\u8981\u4e86\uff01\u56e0\u70ba . \u6709\u8a18\u9304\u5728\u4e0a\u5c64 DNS \u4e0a\u982d\u4e86\u561b\uff01<\/p>\n<p>\u5982\u540c\u525b\u525b\u63d0\u5230\u7684\uff0ccache only \u7684 DNS \u4e26\u4e0d\u5b58\u5728\u8cc7\u6599\u5eab (\u5176\u5be6\u9084\u662f\u5b58\u5728 . \u9019\u500b root \u9818\u57df\u7684 zone file)\uff0c \u56e0\u6b64\u4e0d\u8ad6\u662f\u8ab0\u4f86\u67e5\u8a62\u8cc7\u6599\uff0c\u9019\u90e8 DNS \u4e00\u5f8b\u958b\u59cb\u5f9e\u81ea\u5df1\u7684\u5feb\u53d6\u4ee5\u53ca . \u627e\u8d77\uff0c\u6574\u500b\u6d41\u7a0b\u8207<a href=\"http:\/\/linux.vbird.org\/linux_server\/0350dns.php#fig19.1-4\">\u5716 19.1-4<\/a> \u76f8\u540c\u3002\u90a3\u5982\u679c\u5177\u6709 forwarding \u529f\u80fd\u5462\uff1f\u679c\u771f\u5982\u6b64\uff0c\u90a3\u5373\u4f7f\u4f60\u7684 DNS \u5177\u6709 . \u9019\u500b zone file\uff0c\u9019\u90e8 DNS \u9084\u662f\u6703\u5c07\u67e5\u8a62\u6b0a\u300e\u59d4\u8acb\u300f\u4e0a\u5c64 DNS \u67e5\u8a62\u7684\uff0c\u9019\u90e8 DNS \u4f3a\u670d\u5668\u7576\u5834\u8b8a\u6210\u7528\u6236\u7aef\u5566\uff01\u67e5\u8a62\u6d41\u7a0b\u6703\u8b8a\u9019\u6a23\u5594\uff1a<\/p>\n<p><img decoding=\"async\" title=\"\u5177\u6709 forwarding \u529f\u80fd\u7684 DNS \u4f3a\u670d\u5668\u67e5\u8a62\u65b9\u5f0f\" src=\"http:\/\/linux.vbird.org\/linux_server\/0350dns\/\/dns_forwarding.gif\" alt=\"\u5177\u6709 forwarding \u529f\u80fd\u7684 DNS \u4f3a\u670d\u5668\u67e5\u8a62\u65b9\u5f0f\" border=\"0\" \/><br \/>\n\u5716 19.3-1\u3001\u5177\u6709 forwarding \u529f\u80fd\u7684 DNS \u4f3a\u670d\u5668\u67e5\u8a62\u65b9\u5f0f<\/p>\n<p>\u89c0\u5bdf\u4e0a\u5716\u7684\u67e5\u8a62\u65b9\u5411\uff0c\u4f60\u6703\u767c\u73fe\u5230\uff0c\u5177\u6709 forwarding \u6a5f\u5236\u6642\uff0c\u67e5\u8a62\u6b0a\u6703\u59d4\u8acb\u4e0a\u5c64 DNS \u4f3a\u670d\u5668\u4f86\u8655\u7406\uff0c\u6240\u4ee5\u6839\u672c\u4e5f\u4e0d\u9700\u8981 . \u9019\u500b\u4f4d\u7f6e\u6240\u5728\u7684 zone \u5566\u3002\u4e00\u822c\u4f86\u8aaa\uff0c\u5982\u679c\u4f60\u7684\u74b0\u5883\u9700\u8981\u67b6\u8a2d\u4e00\u500b cache-only \u7684 DNS \u4f3a\u670d\u5668\u6642\uff0c\u5176\u5be6\u53ef\u4ee5\u76f4\u63a5\u52a0\u4e0a forwarding \u7684\u6a5f\u5236\uff0c\u8b93\u67e5\u8a62\u6b0a\u6307\u5411\u4e0a\u5c64\u6216\u8005\u662f\u6d41\u91cf\u8f03\u5927\u7684\u4e0a\u5c64 DNS \u4f3a\u670d\u5668\u5373\u53ef\u3002\u90a3\u65e2\u7136 cache only \u7684\u4f3a\u670d\u5668\u4e26\u6c92\u6709\u8cc7\u6599\u5eab\uff0c forwarding \u6a5f\u5236\u751a\u81f3\u4e0d\u9700\u8981 . \u7684 zone \uff0c\u90a3\u5e79\u561b\u9084\u5f97\u8981\u67b6\u8a2d\u9019\u6a23\u7684 DNS \u5462\uff1f\u662f\u6709\u7406\u7531\u7684\u5566\uff01<\/p>\n<ul>\n<li>\n<hr \/>\n<p>\u4ec0\u9ebc\u6642\u5019\u6709\u67b6\u8a2d cache-only DNS \u7684\u9700\u6c42\uff1f<\/li>\n<\/ul>\n<p>\u5728\u67d0\u4e9b\u516c\u53f8\u884c\u865f\u88e1\u982d\uff0c\u70ba\u4e86\u9810\u9632\u54e1\u5de5\u5229\u7528\u516c\u53f8\u7684\u7db2\u8def\u8cc7\u6e90\u4f5c\u81ea\u5df1\u7684\u4e8b\u60c5\uff0c\u6240\u4ee5\u90fd\u6703\u91dd\u5c0d Internet \u7684\u9023\u7dda\u4f5c\u6bd4\u8f03\u56b4\u683c\u7684\u9650\u5236\u3002\u7576\u7136\u5566\uff0c\u9023 port 53 \u9019\u500b DNS \u6703\u7528\u5230\u7684 port \u4e5f\u53ef\u80fd\u6703\u88ab\u64cb\u5728\u9632\u706b\u7246\u4e4b\u5916\u7684\uff5e\u9019\u500b\u6642\u5019\uff0c \u4f60\u53ef\u4ee5\u5728\u300e\u9632\u706b\u7246\u7684\u90a3\u90e8\u6a5f\u5668\u4e0a\u9762\uff0c\u52a0\u88dd\u4e00\u500b cache-only \u7684 DNS \u670d\u52d9\uff01\u300f<\/p>\n<p>\u9019\u662f\u4ec0\u9ebc\u610f\u601d\u5462\uff1f\u5f88\u7c21\u55ae\u554a\uff01\u5c31\u662f\u4f60\u81ea\u5df1\u5229\u7528\u81ea\u5df1\u7684\u9632\u706b\u7246\u4e3b\u6a5f\u4e0a\u7684 DNS \u670d\u52d9\u53bb\u5e6b\u4f60\u7684 Client \u7aef\u89e3\u8b6f hostname &lt;&#8211;&gt; IP \u56c9\uff01\u56e0\u70ba\u9632\u706b\u7246\u4e3b\u6a5f\u53ef\u4ee5\u8a2d\u5b9a\u653e\u884c\u81ea\u5df1\u7684 DNS \u529f\u80fd\uff0c\u800c Client \u7aef\u5c31\u8a2d\u5b9a\u8a72\u9632\u706b\u7246 IP \u70ba DNS \u4f3a\u670d\u5668\u7684 IP \u5373\u53ef\uff01\u54c8\u54c8\uff01\u9019\u6a23\u5c31\u53ef\u4ee5\u53d6\u5f97\u4e3b\u6a5f\u540d\u7a31\u8207 IP \u7684\u8f49\u8b6f\u5566\uff01\u6240\u4ee5\uff0c\u901a\u5e38\u67b6\u8a2d cache only DNS \u4f3a\u670d\u5668\u5927\u90fd\u662f\u70ba\u4e86\u7cfb\u7d71\u5b89\u5168\u56c9\u3002<\/p>\n<ul>\n<li>\n<hr \/>\n<p>\u5be6\u969b\u8a2d\u5b9a cache-only DNS server<\/li>\n<\/ul>\n<p>\u90a3\u5982\u4f55\u5728\u4f60\u7684 Linux \u4e3b\u6a5f\u4e0a\u67b6\u8a2d\u4e00\u500b cache-only \u7684 DNS \u4f3a\u670d\u5668\u5462\uff1f\u5176\u5be6\u771f\u7684\u5f88\u7c21\u55ae\u7684\u5566\uff01\u56e0\u70ba\u4e0d\u9700\u8981\u8a2d\u5b9a\u6b63\u53cd\u89e3\u7684 zone (\u53ea\u9700\u8981 . \u7684 zone \u652f\u63f4\u5373\u53ef)\uff0c\u6240\u4ee5\u53ea\u8981\u8a2d\u5b9a\u4e00\u500b\u6a94\u6848 (\u5c31\u662f named.conf \u4e3b\u8a2d\u5b9a\u6a94) \u5373\u53ef\uff01\u771f\u662f\u5feb\u6a02\u5f97\u4e0d\u5f97\u4e86\u5436\uff01 \u53e6\u5916\uff0ccache-only \u53ea\u8981\u52a0\u4e0a\u500b forwarders \u7684\u8a2d\u5b9a\u5373\u53ef\u6307\u5b9a forwarding \u7684\u8cc7\u6599\uff0c\u6240\u4ee5\u5e95\u4e0b\u6211\u5011\u5c07\u8a2d\u5b9a\u5177\u6709 forwarding \u7684 cache-only DNS \u4f3a\u670d\u5668\u5427\uff01<\/p>\n<ol>\n<li>\n<hr \/>\n<p><a name=\"named.conf_1\"><\/a>\u7de8\u8f2f\u4e3b\u8981\u8a2d\u5b9a\u6a94\uff1a \/etc\/named.conf<br \/>\n\u96d6\u7136\u6211\u5011\u5177\u6709 chroot \u7684\u74b0\u5883\uff0c\u4e0d\u904e\u7531\u65bc CentOS 6.x \u5df2\u7d93\u900f\u904e\u555f\u52d5\u8173\u672c\u5e6b\u6211\u5011\u9032\u884c\u6a94\u6848\u8207\u76ee\u9304\u7684\u639b\u8f09\u9023\u7d50\uff0c\u6240\u4ee5\u8acb\u4f60\u76f4\u63a5\u4fee\u6539 \/etc\/named.conf \u5373\u53ef\u5466\uff01\u4e0d\u8981\u518d\u53bb \/var\/named\/chroot\/etc\/named.conf \u4fee\u6539\u5566\uff01 \u5728\u9019\u500b\u6a94\u6848\u4e2d\uff0c\u4e3b\u8981\u662f\u5b9a\u7fa9\u8ddf\u4f3a\u670d\u5668\u74b0\u5883\u6709\u95dc\u7684\u8a2d\u5b9a\uff0c\u4ee5\u53ca\u5404\u500b zone \u7684\u9818\u57df\u53ca\u8cc7\u6599\u5eab\u6240\u5728\u6a94\u540d\u3002 \u5728\u9ce5\u54e5\u7684\u9019\u500b\u6848\u4f8b\u7576\u4e2d\uff0c\u56e0\u70ba\u4f7f\u7528\u4e86 forwarding \u7684\u6a5f\u5236\uff0c\u6240\u4ee5\u9019\u500b cache-only DNS \u4f3a\u670d\u5668\u4e26\u6c92\u6709 zone (\u9023 . \u90fd\u6c92\u6709)\uff0c\u6240\u4ee5\u6211\u5011\u53ea\u8981\u8a2d\u5b9a\u597d\u8ddf\u4f3a\u670d\u5668\u6709\u95dc\u7684\u8a2d\u5b9a\u5373\u53ef\u3002\u8a2d\u5b9a\u9019\u500b\u6a94\u6848\u7684\u6642\u5019\u8acb\u6ce8\u610f\uff1a<\/li>\n<\/ol>\n<ul>\n<li>\u8a3b\u89e3\u8cc7\u6599\u662f\u653e\u7f6e\u5728\u5169\u689d\u659c\u7dda\u300e \/\/ \u300f\u5f8c\u9762\u63a5\u7684\u8cc7\u6599<\/li>\n<li>\u6bcf\u500b\u6bb5\u843d\u4e4b\u5f8c\u90fd\u9700\u8981\u4ee5\u5206\u865f\u300e ; \u300f\u4f86\u505a\u70ba\u7d50\u5c3e\uff01<\/li>\n<\/ul>\n<p>\u9ce5\u54e5\u5c07\u9019\u500b\u6a94\u6848\u518d\u7c21\u5316\u5982\u4e0b\u7684\u6a23\u5f0f\uff1a<\/p>\n<pre>[root@www ~]# cp \/etc\/named.conf \/etc\/named.conf.raw\r\n[root@www ~]# vim \/etc\/named.conf\r\n\/\/ \u5728\u9810\u8a2d\u7684\u60c5\u6cc1\u4e0b\uff0c\u9019\u500b\u6a94\u6848\u6703\u53bb\u8b80\u53d6 \/etc\/named.rfc1912.zones \u9019\u500b\u9818\u57df\u5b9a\u7fa9\u6a94\r\n\/\/ \u6240\u4ee5\u8acb\u8a18\u5f97\u8981\u4fee\u6539\u6210\u5e95\u4e0b\u7684\u6a23\u5f0f\u554a\uff01\r\noptions {\r\n        listen-on port 53  { any; };     \/\/\u53ef\u4e0d\u8a2d\u5b9a\uff0c\u4ee3\u8868\u5168\u90e8\u63a5\u53d7\r\n        directory          \"\/var\/named\"; \/\/\u8cc7\u6599\u5eab\u9810\u8a2d\u653e\u7f6e\u7684\u76ee\u9304\u6240\u5728\r\n        dump-file          \"\/var\/named\/data\/cache_dump.db\"; \/\/\u4e00\u4e9b\u7d71\u8a08\u8cc7\u8a0a\r\n        statistics-file    \"\/var\/named\/data\/named_stats.txt\";\r\n        memstatistics-file \"\/var\/named\/data\/named_mem_stats.txt\";\r\n        allow-query        { any; };     \/\/\u53ef\u4e0d\u8a2d\u5b9a\uff0c\u4ee3\u8868\u5168\u90e8\u63a5\u53d7\r\n        recursion yes;                   \/\/\u5c07\u81ea\u5df1\u8996\u70ba\u7528\u6236\u7aef\u7684\u4e00\u7a2e\u67e5\u8a62\u6a21\u5f0f\r\n        forward only;                    \/\/\u53ef\u66ab\u6642\u4e0d\u8a2d\u5b9a\r\n        forwarders {                     \/\/\u662f\u91cd\u9ede\uff01\r\n                168.95.1.1;              \/\/\u5148\u7528\u4e2d\u83ef\u96fb\u4fe1\u7684 DNS \u7576\u4e0a\u5c64\r\n                139.175.10.20;           \/\/\u518d\u7528 seednet \u7576\u4e0a\u5c64\r\n        };\r\n};  \/\/\u6700\u7d42\u8a18\u5f97\u8981\u7d50\u5c3e\u7b26\u865f\uff01\r\n<\/pre>\n<p>\u9ce5\u54e5\u5c07\u5927\u90e8\u5206\u7684\u8cc7\u6599\u90fd\u4e88\u4ee5\u522a\u9664\uff0c\u53ea\u5c07\u5c11\u90e8\u5206\u4fdd\u7559\u7684\u8cc7\u6599\u52a0\u4ee5\u5c0f\u90e8\u5206\u7684\u4fee\u8a02\u800c\u5df2\u3002\u5728 named.conf \u7684\u7d50\u69cb\u4e2d\uff0c\u8207\u4f3a\u670d\u5668\u74b0\u5883\u6709\u95dc\u7684\u662f\u7531 options \u9019\u500b\u9805\u76ee\u5167\u5bb9\u8a2d\u5b9a\u7684\uff0c\u56e0\u70ba options \u88e1\u9762\u9084\u6709\u5f88\u591a\u5b50\u53c3\u6578\uff0c \u6240\u4ee5\u5c31\u4ee5\u5927\u62ec\u865f { } \u5305\u8d77\u4f86\u56c9\u3002\u81f3\u65bc options \u5167\u7684\u5b50\u53c3\u6578\u5728\u4e0a\u9762\u63d0\u5230\u7684\u8f03\u91cd\u8981\u7684\u9805\u76ee\u7c21\u55ae\u6558\u8ff0\u5982\u4e0b\uff1a<\/p>\n<ul>\n<li>listen-on port 53 { any; };<br \/>\n\u76e3\u807d\u5728\u9019\u90e8\u4e3b\u6a5f\u7cfb\u7d71\u4e0a\u9762\u7684\u54ea\u500b\u7db2\u8def\u4ecb\u9762\u3002\u9810\u8a2d\u662f\u76e3\u807d\u5728 localhost\uff0c\u4ea6\u5373\u53ea\u6709\u672c\u6a5f\u53ef\u4ee5\u5c0d DNS \u670d\u52d9\u9032\u884c\u67e5\u8a62\uff0c\u90a3\u7576\u7136\u662f\u5f88\u4e0d\u5408\u7406\u554a\uff01 \u6240\u4ee5\u9019\u88e1\u8981\u5c07\u5927\u62ec\u865f\u5167\u7684\u8cc7\u6599\u6539\u5beb\u6210 any\u3002\u8a18\u5f97\uff0c\u56e0\u70ba\u53ef\u4ee5\u76e3\u807d\u591a\u500b\u4ecb\u9762\uff0c\u56e0\u6b64 any \u5f8c\u9762\u5f97\u8981\u52a0\u4e0a\u5206\u865f\u624d\u7b97\u7d50\u675f\u5594\uff01 \u53e6\u5916\uff0c\u9019\u500b\u9805\u76ee\u5982\u679c\u5fd8\u8a18\u5beb\u4e5f\u6c92\u6709\u95dc\u4fc2\uff0c\u56e0\u70ba\u9810\u8a2d\u662f\u5c0d\u6574\u500b\u4e3b\u6a5f\u7cfb\u7d71\u7684\u6240\u6709\u4ecb\u9762\u9032\u884c\u76e3\u807d\u7684\u3002<\/li>\n<li>directory &#8220;\/var\/named&#8221;;<br \/>\n\u610f\u601d\u662f\u8aaa\uff0c\u5982\u679c\u6b64\u6a94\u6848\u5e95\u4e0b\u6709\u898f\u7bc4\u5230\u6b63\u3001\u53cd\u89e3\u7684 zone file \u6a94\u540d\u6642\uff0c\u8a72\u6a94\u540d\u9810\u8a2d\u61c9\u8a72\u653e\u7f6e\u5728\u54ea\u500b\u76ee\u9304\u5e95\u4e0b\u7684\u610f\u601d\u3002\u9810\u8a2d\u653e\u7f6e\u5230 \/var\/named\/ \u5e95\u4e0b\u3002\u7531\u65bc chroot \u7684\u95dc\u4fc2\uff0c\u6700\u7d42\u9019\u4e9b\u8cc7\u6599\u5eab\u6a94\u6848\u6703\u88ab\u4e3b\u52d5\u9023\u7d50\u5230 \/var\/named\/chroot\/var\/named\/ \u9019\u500b\u76ee\u9304\u3002<\/li>\n<li>dump-file, statistics-file, memstatistics-file<br \/>\n\u8207 named \u9019\u500b\u670d\u52d9\u6709\u95dc\u7684\u8a31\u591a\u7d71\u8a08\u8cc7\u8a0a\uff0c\u5982\u679c\u60f3\u8981\u8f38\u51fa\u6210\u70ba\u6a94\u6848\u7684\u8a71\uff0c\u9810\u8a2d\u7684\u6a94\u540d\u5c31\u5982\u4e0a\u6240\u8ff0\u3002\u9ce5\u54e5\u81ea\u5df1\u5f88\u5c11\u770b\u9019\u4e9b\u7d71\u8a08\u8cc7\u6599\uff0c \u6240\u4ee5\uff0c\u9019\u4e09\u500b\u8a2d\u5b9a\u503c\u5beb\u4e0d\u5beb\u61c9\u8a72\u90fd\u662f\u6c92\u6709\u95dc\u4fc2\u7684\u3002<\/li>\n<li>allow-query { any; };<br \/>\n\u9019\u500b\u662f\u91dd\u5c0d\u7528\u6236\u7aef\u7684\u8a2d\u5b9a\uff0c\u5230\u5e95\u8ab0\u53ef\u4ee5\u5c0d\u6211\u7684 DNS \u670d\u52d9\u63d0\u51fa\u67e5\u8a62\u8acb\u6c42\u7684\u610f\u601d\u3002\u539f\u672c\u7684\u6a94\u6848\u5167\u5bb9\u9810\u8a2d\u662f\u91dd\u5c0d localhost \u958b\u653e\u800c\u5df2\uff0c \u6211\u5011\u9019\u88e1\u6539\u6210\u5c0d\u6240\u6709\u7684\u7528\u6236\u958b\u653e (\u7576\u7136\u5566\uff0c\u9632\u706b\u7246\u4e5f\u5f97\u653e\u884c\u624d\u884c)\u3002\u4e0d\u904e\uff0c\u9810\u8a2d DNS \u5c31\u662f\u5c0d\u6240\u6709\u7528\u6236\u653e\u884c\uff0c\u6240\u4ee5\u9019\u500b\u8a2d\u5b9a\u503c\u4e5f\u53ef\u4ee5\u4e0d\u7528\u5beb\u3002<\/li>\n<li>forward only ;<br \/>\n\u9019\u500b\u8a2d\u5b9a\u53ef\u4ee5\u8b93\u4f60\u7684 DNS \u4f3a\u670d\u5668\u50c5\u9032\u884c forward\uff0c\u5373\u4f7f\u6709 . \u9019\u500b zone file \u7684\u8a2d\u5b9a\uff0c\u4e5f\u4e0d\u6703\u4f7f\u7528 . \u7684\u8cc7\u6599\uff0c \u53ea\u6703\u5c07\u67e5\u8a62\u6b0a\u4ea4\u7d66\u4e0a\u5c64 DNS \u4f3a\u670d\u5668\u800c\u5df2\uff0c\u662f cache only DNS \u6700\u5e38\u898b\u7684\u8a2d\u5b9a\u4e86\uff01<\/li>\n<li>forwarders { 168.95.1.1; 139.175.10.20; } ;<br \/>\n\u65e2\u7136\u6709 forward only\uff0c\u90a3\u9ebc\u5230\u5e95\u8981\u5c0d\u54ea\u90e8\u4e0a\u5c64 DNS \u4f3a\u670d\u5668\u9032\u884c\u8f49\u905e\u5462\uff1f\u90a3\u5c31\u662f forwarders (\u4e0d\u8981\u5fd8\u8a18\u90a3\u500b s) \u8a2d\u5b9a\u503c\u7684\u91cd\u8981\u6027\u4e86\uff01\u7531\u65bc\u64d4\u5fc3\u4e0a\u5c64 DNS \u4f3a\u670d\u5668\u4e5f\u53ef\u80fd\u6703\u639b\u9ede\uff0c\u56e0\u6b64\u53ef\u4ee5\u8a2d\u5b9a\u591a\u90e8\u4e0a\u5c64 DNS \u4f3a\u670d\u5668\u5594\uff01\u6bcf\u4e00\u500b forwarder \u4f3a\u670d\u5668\u7684 IP \u90fd\u9700\u8981\u6709\u300e ; \u300f\u4f86\u505a\u70ba\u7d50\u5c3e\uff01<\/li>\n<\/ul>\n<p>\u5f88\u7c21\u55ae\u5427\uff01\u81f3\u65bc\u66f4\u591a\u7684\u53c3\u6578\u6211\u5011\u6703\u5728\u5f8c\u7e8c\u7bc7\u5e45\u7576\u4e2d\u6162\u6162\u4ecb\u7d39\u7684\u3002\u9019\u6a23\u5c31\u5df2\u7d93\u8a2d\u5b9a\u5b8c\u6210\u4e86\u6700\u7c21\u55ae\u7684 cache only DNS server \u4e86\uff01<\/p>\n<p>&nbsp;<\/p>\n<ul>\n<li>\n<hr \/>\n<p>\u555f\u52d5 named \u4e26\u89c0\u5bdf\u670d\u52d9\u7684\u57e0\u53e3<br \/>\n\u555f\u52d5\u7e3d\u4e0d\u6703\u5fd8\u8a18\u5427\uff1f\u8d95\u5feb\u53bb\u555f\u52d5\u4e00\u4e0b\u5427\uff01\u540c\u6642\u555f\u52d5\u5b8c\u7562\u4e4b\u5f8c\uff0c\u89c0\u5bdf\u4e00\u4e0b\u7531 named \u6240\u958b\u555f\u7684\u57e0\u53e3\uff0c\u770b\u770b\u5230\u5e95\u54ea\u4e9b\u57e0\u53e3\u6703\u88ab DNS \u7528\u5230\u7684\uff01<\/p>\n<pre># 1. \u555f\u52d5\u4e00\u4e0b DNS \u9019\u73a9\u610f\u5152\uff01\r\n[root@www ~]# \/etc\/init.d\/named start\r\nStarting named:                     [  OK  ]\r\n[root@www ~]# chkconfig named on\r\n\r\n# 2. \u5230\u5e95\u7528\u4e86\u591a\u5c11\u57e0\u53e3\u5462\uff1f\r\n[root@www ~]# netstat -utlnp | grep named\r\nProto Recv-Q Send-Q Local Address       Foreign Address  State  PID\/Program name\r\ntcp        0      0 192.168.100.254:53  0.0.0.0:*        LISTEN 3140\/named\r\ntcp        0      0 192.168.1.100:53    0.0.0.0:*        LISTEN 3140\/named\r\ntcp        0      0 127.0.0.1:53        0.0.0.0:*        LISTEN 3140\/named\r\n<u>tcp        0      0 127.0.0.1:953       0.0.0.0:*        LISTEN 3140\/named<\/u>\r\ntcp        0      0 ::1:953             :::*             LISTEN 3140\/named\r\nudp        0      0 192.168.100.254:53  0.0.0.0:*               3140\/named\r\nudp        0      0 192.168.1.100:53    0.0.0.0:*               3140\/named\r\nudp        0      0 127.0.0.1:53        0.0.0.0:*               3140\/named\r\n<\/pre>\n<p>\u6211\u5011\u77e5\u9053 DNS \u6703\u540c\u6642\u555f\u7528 UDP\/TCP \u7684 port 53\uff0c\u800c\u4e14\u662f\u91dd\u5c0d\u6240\u6709\u4ecb\u9762\uff0c\u56e0\u6b64\u4e0a\u9762\u7684\u8cc7\u6599\u4e26\u6c92\u6709\u4ec0\u9ebc\u7279\u7570\u7684\u90e8\u5206\u3002\u4e0d\u904e\uff0c\u600e\u9ebc\u6703\u6709 port 953 \u4e14\u50c5\u91dd\u5c0d\u672c\u6a5f\u4f86\u76e3\u807d\u5462\uff1f\u5176\u5be6\u90a3\u662f named \u7684\u9060\u7aef\u63a7\u5236\u529f\u80fd\uff0c\u7a31\u70ba\u9060\u7aef\u540d\u7a31\u89e3\u6790\u670d\u52d9\u63a7\u5236\u529f\u80fd (remote name daemon control, rndc)\u3002\u9810\u8a2d\u7684\u60c5\u6cc1\u4e0b\uff0c\u50c5\u6709\u672c\u6a5f\u53ef\u4ee5\u91dd\u5c0d rndc \u4f86\u63a7\u5236\u3002\u6211\u5011\u6703\u5728\u5f8c\u7e8c\u7684\u7ae0\u7bc0\u518d\u4f86\u63a2\u8a0e\u9019\u500b rndc \u5566\uff0c\u76ee\u524d\u6211\u5011\u53ea\u8981\u77e5\u9053 UDP\/TCP port 53 \u6709\u555f\u52d5\u5373\u53ef\u3002<\/li>\n<li>\n<hr \/>\n<p><a name=\"messages_1\"><\/a>\u6aa2\u67e5 \/var\/log\/messages \u7684\u5167\u5bb9\u8a0a\u606f (\u6975\u91cd\u8981\uff01)<br \/>\nnamed \u9019\u500b\u670d\u52d9\u7684\u8a18\u9304\u6a94\u5c31\u76f4\u63a5\u7d66\u4ed6\u653e\u7f6e\u5728 \/var\/log\/messages \u88e1\u9762\u5566\uff0c\u6240\u4ee5\u4f86\u770b\u770b\u88e1\u9762\u7684\u5e7e\u884c\u767b\u9304\u8cc7\u8a0a\u5427\uff01<\/p>\n<pre>[root@www ~]# tail -n 30 \/var\/log\/messages | grep named\r\nAug  4 14:57:09 www named[3140]: starting BIND 9.7.0-P2-RedHat-9.7.0-5.P2.el6_0.1 -u named\r\n -t \/var\/named\/chroot &lt;==\u8aaa\u660e\u7684\u662f chroot \u5728\u54ea\u500b\u76ee\u9304\u4e0b\uff01\r\nAug  4 14:57:09 www named[3140]: adjusted limit on open files from 1024 to 1048576\r\nAug  4 14:57:09 www named[3140]: found 1 CPU, using 1 worker thread\r\nAug  4 14:57:09 www named[3140]: using up to 4096 sockets\r\nAug  4 14:57:09 www named[3140]: loading configuration from '\/etc\/named.conf'\r\nAug  4 14:57:09 www named[3140]: using default UDP\/IPv4 port range: [1024, 65535]\r\nAug  4 14:57:09 www named[3140]: using default UDP\/IPv6 port range: [1024, 65535]\r\nAug  4 14:57:09 www named[3140]: listening on IPv4 interface lo, 127.0.0.1#53\r\nAug  4 14:57:09 www named[3140]: listening on IPv4 interface eth0, 192.168.1.100#53\r\nAug  4 14:57:09 www named[3140]: listening on IPv4 interface eth1, 192.168.100.254#53\r\nAug  4 14:57:09 www named[3140]: generating session key for dynamic DNS\r\nAug  4 14:57:09 www named[3140]: command channel listening on 127.0.0.1#953\r\nAug  4 14:57:09 www named[3140]: command channel listening on ::1#953\r\nAug  4 14:57:09 www named[3140]: the working directory is not writable\r\nAug  4 14:57:09 www named[3140]: running\r\n<\/pre>\n<p>\u4e0a\u9762\u6700\u91cd\u8981\u7684\u662f\u7b2c\u4e00\u884c\u51fa\u73fe\u7684\u300e-t &#8230;\u300f\u90a3\u500b\u9805\u76ee\u6307\u51fa\u4f60\u7684 chroot \u76ee\u9304\u56c9\u3002\u53e6\u5916\uff0c\u4e0a\u9762\u8868\u683c\u4e2d\u7279\u6b8a\u5b57\u9ad4\u7684\u90e8\u5206\uff0c\u6709\u5beb\u5230\u8b80\u53d6 \/etc\/named.conf\uff0c\u4ee3\u8868\u53ef\u4ee5\u9806\u5229\u7684\u8f09\u5165 \/var\/named\/etc\/named.conf \u7684\u610f\u601d\u3002\u5982\u679c\u4e0a\u9762\u6709\u51fa\u73fe\u5192\u865f\u5f8c\u9762\u63a5\u6578\u5b57 (:10)\uff0c \u90a3\u5c31\u4ee3\u8868\u67d0\u500b\u6a94\u6848\u5167\u7684\u7b2c\u5341\u884c\u6709\u554f\u984c\u7684\u610f\u601d\uff0c\u5c46\u6642\u518d\u9032\u5165\u8655\u7406\u5373\u53ef\u3002\u8981\u6ce8\u610f\u7684\u662f\uff0c\u5373\u4f7f port 53 \u6709\u555f\u52d5\uff0c\u4f46\u6709\u53ef\u80fd DNS \u670d\u52d9\u662f\u932f\u8aa4\u7684\uff0c\u6b64\u6642\u9019\u500b\u767b\u9304\u6a94\u5c31\u986f\u7684\u975e\u5e38\u91cd\u8981\uff01\u6bcf\u6b21\u91cd\u65b0\u555f\u52d5 DNS \u5f8c\uff0c\u8acb\u52d9\u5fc5\u67e5\u95b1\u4e00\u4e0b\u9019\u500b\u6a94\u6848\u7684\u5167\u5bb9\uff01\uff01<\/p>\n<p><b>Tips:<\/b><br \/>\n\u5982\u679c\u4f60\u5728 \/var\/log\/messages \u88e1\u9762\u4e00\u76f4\u770b\u5230\u9019\u6a23\u7684\u932f\u8aa4\u8cc7\u8a0a\uff1a<br \/>\ncouldn&#8217;t add command channel 127.0.0.1#953: not found<br \/>\n\u90a3\u8868\u793a\u4f60\u9084\u5fc5\u9700\u8981\u52a0\u5165 rndc key \uff0c\u8acb\u53c3\u8003\u672c\u7ae0\u5f8c\u9762\u7684 <a href=\"http:\/\/linux.vbird.org\/linux_server\/0350dns.php#rndckey\">\u5229\u7528 RNDC \u6307\u4ee4\u7ba1\u7406 DNS \u4f3a\u670d\u5668<\/a> \u7684\u4ecb\u7d39\uff0c\u5c07\u4ed6\u52a0\u5165\u4f60\u7684 named.conf \u4e2d\uff01<br \/>\n<img decoding=\"async\" title=\"\u9ce5\u54e5\u7684\u5716\u793a\" src=\"http:\/\/linux.vbird.org\/images\/vbird_face.gif\" alt=\"\u9ce5\u54e5\u7684\u5716\u793a\" \/><\/li>\n<li>\n<hr \/>\n<p>\u6e2c\u8a66\uff1a<br \/>\n\u5982\u679c\u4f60\u7684 DNS \u4f3a\u670d\u5668\u5177\u6709\u9023\u4e0a\u7db2\u969b\u7db2\u8def\u7684\u529f\u80fd\uff0c\u90a3\u9ebc\u900f\u904e\u300e dig www.google.com @127.0.0.1 \u300f\u9019\u500b\u57fa\u672c\u6307\u4ee4\u57f7\u884c\u770b\u770b\uff0c \u5982\u679c\u6709\u627e\u5230 google \u7684 IP \uff0c\u4e26\u4e14\u8f38\u51fa\u8cc7\u6599\u7684\u6700\u5e95\u4e0b\u986f\u793a\u300e SERVER: 127.0.0.1#53(127.0.0.1) \u300f\u7684\u5b57\u6a23\uff0c \u90a3\u5c31\u4ee3\u8868\u61c9\u8a72\u662f\u6210\u529f\u5566\uff01\u5176\u4ed6\u66f4\u8a73\u7d30\u7684\u6e2c\u8a66\u8acb\u53c3\u8003\uff1a<a href=\"http:\/\/linux.vbird.org\/linux_server\/0350dns.php#DNS_resolver\">19.2 \u5c0f\u7bc0\u7684\u5167\u5bb9<\/a><\/li>\n<li>\n<ul>\n<li>\n<hr \/>\n<p>\u7279\u5225\u8aaa\u660e\uff1aForwarders \u7684\u597d\u8655\u8207\u554f\u984c\u5206\u6790<\/li>\n<\/ul>\n<p>\u95dc\u65bc forwarder \u7684\u597d\u8655\u8207\u58de\u8655\uff0c\u5176\u5be6\u6709\u5f88\u591a\u7a2e\u7684\u610f\u898b\uff01\u5927\u81f4\u7684\u610f\u898b\u53ef\u5206\u70ba\u9019\u5169\u6d3e\uff1a<\/p>\n<ul>\n<li>\u5229\u7528 Forwarder \u7684\u529f\u80fd\u4f86\u589e\u9032\u6548\u80fd\u7684\u7406\u8ad6\uff1a<br \/>\n\u9019\u4e9b\u670b\u53cb\u5011\u8a8d\u70ba\uff0c\u7576\u5f88\u591a\u7684\u4e0b\u5c64 DNS \u4f3a\u670d\u5668\u90fd\u4f7f\u7528 forwarder \u6642\uff0c\u90a3\u9ebc\u90a3\u500b\u88ab\u8a2d\u5b9a\u70ba forwarder \u7684\u4e3b\u6a5f\uff0c\u7531\u65bc\u6703\u8a18\u9304\u5f88\u591a\u7684\u67e5\u8a62\u8cc7\u8a0a\u8a18\u9304 (\u8acb\u53c3\u8003<a href=\"http:\/\/linux.vbird.org\/linux_server\/0350dns.php#fig19.1-4\">\u5716 19.1-4<\/a> \u7684\u8aaa\u660e)\uff0c\u56e0\u6b64\uff0c\u5c0d\u65bc\u90a3\u4e9b\u4e0b\u5c64\u7684 DNS \u4f3a\u670d\u5668\u800c\u8a00\uff0c\u67e5\u8a62\u901f\u5ea6\u6703\u589e\u5feb\u5f88\u591a\uff0c\u4ea6\u5373\u6703\u7bc0\u7701\u5f88\u591a\u7684\u67e5\u8a62\u6642\u9593\uff01\u56e0\u70ba forwarder \u4f3a\u670d\u5668\u88e1\u9762\u6709\u8f03\u591a\u7684\u5feb\u53d6\u8a18\u9304\u4e86\uff0c \u6240\u4ee5\u5305\u62ec forwarder \u672c\u8eab\uff0c\u4ee5\u53ca\u6240\u6709\u5411\u9019\u90e8 forwarder \u8981\u6c42\u8cc7\u6599\u7684 DNS \u4f3a\u670d\u5668\uff0c\u90fd\u80fd\u5920\u6e1b\u5c11\u5f80 . \u67e5\u8a62\u7684\u6a5f\u6703\uff0c \u56e0\u6b64\u901f\u5ea6\u7576\u7136\u589e\u52a0\u3002<\/li>\n<li>\u5229\u7528 Forwarder \u53cd\u800c\u6703\u4f7f\u6574\u9ad4\u7684\u6548\u80fd\u964d\u4f4e\uff1a<br \/>\n\u4f46\u662f\u53e6\u5916\u4e00\u6d3e\u5247\u6301\u76f8\u53cd\u7684\u898b\u89e3\uff01\u9019\u662f\u56e0\u70ba\u7576\u4e3b DNS \u672c\u8eab\u7684\u300e\u696d\u52d9\u91cf\u300f\u5c31\u5f88\u7e41\u5fd9\u7684\u6642\u5019\uff0c\u90a3\u9ebc\u4f60\u7684 cache only DNS \u4f3a\u670d\u5668\u9084\u5411\u4ed6\u8981\u6c42\u8cc7\u6599\uff0c\u56e0\u70ba\u4ed6\u539f\u672c\u7684\u8cc7\u6599\u50b3\u8f38\u91cf\u5c31\u592a\u5927\u4e86\uff0c\u983b\u5bec\u65b9\u9762\u53ef\u80fd\u8ca0\u8377\u4e0d\u91cf\uff0c\u800c\u592a\u591a\u7684\u4e0b\u5c64 DNS \u9084\u5411\u4ed6\u8981\u6c42\u8cc7\u6599\uff0c\u6240\u4ee5\u4ed6\u7684\u67e5\u8a62\u901f\u5ea6\u6703\u8b8a\u6162\uff01\u56e0\u70ba\u67e5\u8a62\u901f\u5ea6\u8b8a\u6162\u4e86\uff0c\u800c\u4f60\u7684 cache only server \u53c8\u662f\u5411\u4ed6\u63d0\u51fa\u8981\u6c42\u7684\uff0c\u6240\u4ee5\u81ea\u7136\u5169\u908a\u7684\u67e5\u8a62\u901f\u5ea6\u5c31\u6703\u540c\u6b65\u4e0b\u964d\uff01<\/li>\n<\/ul>\n<p>\u5f88\u591a\u7a2e\u8aaa\u6cd5\u5566\uff01\u9ce5\u54e5\u672c\u4eba\u4e5f\u89ba\u5f97\u5f88\u6709\u8da3\u54e9\uff01\u53ea\u662f\u4e0d\u77e5\u9053\u54ea\u4e00\u6d3e\u8f03\u6b63\u78ba\u5c31\u662f\u4e86\uff0c\u4e0d\u904e\u53ef\u4ee5\u77e5\u9053\u7684\u662f\uff0c\u5982\u679c\u4e0a\u5c64\u7684 DNS \u901f\u5ea6\u5f88\u5feb\u7684\u8a71\uff0c\u90a3\u9ebc\u4ed6\u88ab\u8a2d\u5b9a\u70ba forwarder \u6642\uff0c\u6216\u8a31\u771f\u7684\u53ef\u4ee5\u589e\u52a0\u4e0d\u5c11\u6548\u80fd\u54e9\uff01<\/p>\n<hr \/>\n<p><a name=\"DNS_master\"><\/a><img loading=\"lazy\" decoding=\"async\" src=\"http:\/\/linux.vbird.org\/images\/penguin-m.gif\" alt=\"\u5927\u6a19\u984c\u7684\u5716\u793a\" width=\"25\" height=\"34\" align=\"middle\" \/>19.4 DNS \u4f3a\u670d\u5668\u7684\u8a73\u7d30\u8a2d\u5b9a<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<p>\u597d\u4e86\uff0c\u7d93\u904e\u4e0a\u9762\u7684\u8aaa\u660e\u5f8c\uff0c\u6211\u5011\u5927\u6982\u77e5\u9053 DNS \u7684\u5e7e\u500b\u5c0f\u7d30\u7bc0\u662f\u9019\u6a23\u7684\uff1a<\/p>\n<ol>\n<li>DNS \u4f3a\u670d\u5668\u7684\u67b6\u8a2d\u9700\u8981\u4e0a\u5c64 DNS \u7684\u6388\u6b0a\u624d\u53ef\u4ee5\u6210\u70ba\u5408\u6cd5\u7684 DNS \u4f3a\u670d\u5668 (\u5426\u5247\u53ea\u662f\u7df4\u529f)\uff1b<\/li>\n<li>\u8a2d\u5b9a\u6a94\u4f4d\u7f6e\uff1a\u76ee\u524d bind \u7a0b\u5f0f\u5df2\u9032\u884c chroot\uff0c\u76f8\u95dc\u76ee\u9304\u53ef\u53c3\u8003 \/etc\/sysconfig\/named\uff1b<\/li>\n<li>named \u4e3b\u8981\u8a2d\u5b9a\u6a94\u662f \/etc\/named.conf\uff1b<\/li>\n<li>\u6bcf\u500b\u6b63\u3001\u53cd\u89e3\u9818\u57df\u90fd\u9700\u8981\u4e00\u500b\u8cc7\u6599\u5eab\u6a94\u6848\uff0c\u800c\u6a94\u540d\u5247\u662f\u7531 \/etc\/named.conf \u6240\u8a2d\u5b9a\uff1b<\/li>\n<li>\u7576 DNS \u67e5\u8a62\u6642\uff0c\u82e5\u672c\u8eab\u6c92\u6709\u8cc7\u6599\u5eab\u6a94\u6848\uff0c\u5247\u524d\u5f80 root (.) \u6216 forwarders \u4f3a\u670d\u5668\u67e5\u8a62\uff1b<\/li>\n<li>named \u662f\u5426\u555f\u52d5\u6210\u529f\u52d9\u5fc5\u8981\u67e5\u95b1 \/var\/log\/messages \u5167\u7684\u8cc7\u8a0a\uff01<\/li>\n<\/ol>\n<p>\u5176\u4e2d\u7b2c\u4e00\u9ede\u5f88\u91cd\u8981\uff0c\u56e0\u70ba\u6211\u5011\u5c1a\u672a\u5411\u4e0a\u5c64 ISP \u8a3b\u518a\u5408\u6cd5\u7684\u9818\u57df\u540d\u7a31\uff0c\u6240\u4ee5\u6211\u5011\u7576\u7136\u5c31\u6c92\u6709\u6b0a\u5229\u67b6\u8a2d\u5408\u6cd5\u7684 DNS \u4f3a\u670d\u5668\u4e86\u3002 \u800c\u7531\u65bc\u64d4\u5fc3\u6211\u5011\u7684 DNS \u4f3a\u670d\u5668\u6703\u8207\u5916\u90e8\u7db2\u969b\u7db2\u8def\u74b0\u5883\u4e92\u76f8\u5e72\u64fe\uff0c\u6240\u4ee5\u5e95\u4e0b\u9ce5\u54e5\u5c07\u4e3b\u8981\u4ee5\u4e00\u500b centos.vbird \u7684\u9818\u57df\u540d\u7a31\u4f86\u67b6\u8a2d DNS \u4f3a\u670d\u5668\uff0c\u5982\u6b64\u4e00\u4f86\u54b1\u5011\u5c31\u53ef\u4ee5\u597d\u597d\u7684\u73a9\u4e00\u73a9\u81ea\u5df1\u5340\u57df\u7db2\u8def\u5167\u7684 DNS \u5566\uff01<\/p>\n<hr \/>\n<p><a name=\"DNS_master_rr\"><\/a><img loading=\"lazy\" decoding=\"async\" src=\"http:\/\/linux.vbird.org\/images\/penguin-s.gif\" alt=\"\u5c0f\u6a19\u984c\u7684\u5716\u793a\" width=\"16\" height=\"23\" align=\"middle\" \/>19.4.1 \u6b63\u89e3\u6a94\u8a18\u9304\u7684\u8cc7\u6599 (Resource Record, RR)<\/p>\n<p>\u65e2\u7136 DNS \u6700\u65e9\u4e4b\u524d\u7684\u76ee\u7684\u5c31\u662f\u8981\u5f9e\u4e3b\u6a5f\u540d\u7a31\u53bb\u627e\u5230 IP\uff0c\u6240\u4ee5\u5c31\u8b93\u6211\u5011\u5148\u5f9e\u6b63\u89e3 zone \u4f86\u8ac7\u8d77\u5427\u3002\u65e2\u7136\u8981\u8ac7\u6b63\u89e3\uff0c \u90a3\u9ebc\u5c31\u61c9\u8a72\u8981\u77ad\u89e3\u6b63\u89e3\u6a94\u6848\u8a18\u9304\u7684\u8cc7\u8a0a\u6709\u54ea\u4e9b\u5427\uff1f\u5728\u9019\u500b\u5c0f\u7bc0\u88e1\u9762\uff0c\u6211\u5011\u5c31\u5148\u4f86\u8ac7\u8ac7\u6b63\u89e3 zone \u5e38\u5e38\u8a18\u9304\u7684\u8cc7\u6599\u6709\u54ea\u4e9b\u5427\u3002<\/p>\n<ul>\n<li>\n<hr \/>\n<p>\u6b63\u89e3\u6a94\u8cc7\u6e90\u8a18\u9304 (resource record, RR) \u683c\u5f0f<\/li>\n<\/ul>\n<p>\u6211\u5011\u5f9e\u524d\u9762\u5e7e\u500b\u5c0f\u7bc0\u7684 dig \u6307\u4ee4\u8f38\u51fa\u7d50\u679c\u4e2d\uff0c\u53ef\u4ee5\u767c\u73fe\u5230\u4e00\u500b\u6709\u8da3\u7684\u549a\u549a\uff0c\u90a3\u5c31\u662f\u8f38\u51fa\u7684\u8cc7\u6599\u683c\u5f0f\u4f3c\u4e4e\u662f\u56fa\u5b9a\u7684\uff01 \u8209\u4f8b\u4f86\u8aaa\uff0c\u67e5\u8a62 www.ksu.edu.tw \u7684 IP \u6642\uff0c\u8f38\u51fa\u7684\u7d50\u679c\u70ba\uff1a<\/p>\n<pre>[root@www ~]# dig www.ksu.edu.tw\r\n....(\u524d\u9762\u7701\u7565)....\r\n;; ANSWER SECTION:\r\nwww.ksu.edu.tw.         2203    IN      A       120.114.100.101\r\n\r\n;; AUTHORITY SECTION:\r\nksu.edu.tw.             911     IN      NS      dns1.ksu.edu.tw.\r\n....(\u5f8c\u9762\u7701\u7565)....\r\n# \u4e0a\u9762\u7684\u8f38\u51fa\u8cc7\u6599\u5df2\u7d93\u88ab\u7c21\u5316\u904e\u4e86\uff0c\u91cd\u9ede\u662f\u8981\u5927\u5bb6\u77ad\u89e3 RR \u7684\u683c\u5f0f\r\n<\/pre>\n<p>\u5728\u7b54\u6848\u7684\u8f38\u51fa\u968e\u6bb5\uff0c\u4e3b\u8981\u67e5\u8a62\u5f97\u5230\u7684\u662f A \u7684\u6a19\u8a8c\uff0c\u5728\u8a8d\u8b49\u968e\u6bb5\uff0c\u5247\u662f\u63d0\u4f9b ksu.edu.tw \u7684 NS \u4f3a\u670d\u5668\u70ba\u54ea\u4e00\u90e8\u7684\u610f\u601d\u3002 \u683c\u5f0f\u975e\u5e38\u63a5\u8fd1\uff0c\u53ea\u662f A \u5f8c\u9762\u63a5 IP\uff0c\u800c NS \u5f8c\u9762\u63a5\u4e3b\u6a5f\u540d\u7a31\u800c\u5df2\u3002\u6211\u5011\u53ef\u4ee5\u5c07\u6574\u500b\u8f38\u51fa\u7684\u683c\u5f0f\u7c21\u5316\u6210\u70ba\u5982\u4e0b\u7684\u8aaa\u660e\uff1a<\/p>\n<pre>[domain]   [ttl]          IN [[RR type]  [RR data]]\r\n[\u5f85\u67e5\u8cc7\u6599] [\u66ab\u5b58\u6642\u9593(\u79d2)] IN [[\u8cc7\u6e90\u985e\u578b] [\u8cc7\u6e90\u5167\u5bb9]]\r\n<\/pre>\n<p>\u4e0a\u8868\u4e2d\uff0c\u95dc\u9375\u5b57 IN \u662f\u56fa\u5b9a\u7684\uff0c\u800c RR type \u8207 RR data \u5247\u662f\u4e92\u6709\u95dc\u9023\u6027\u7684\uff0c\u4f8b\u5982\u525b\u525b\u624d\u63d0\u904e\u7684 A \u5c31\u662f\u63a5 IP \u800c\u4e0d\u662f\u4e3b\u6a5f\u540d\u7a31\u554a\u3002\u6b64\u5916\uff0c\u5728 domain \u7684\u90e8\u5206\uff0c\u82e5\u53ef\u80fd\u7684\u8a71\uff0c\u8acb\u76e1\u91cf\u4f7f\u7528 FQDN\uff0c\u4ea6\u5373\u662f\u4e3b\u6a5f\u540d\u7a31\u7d50\u5c3e\u52a0\u4e0a\u4e00\u500b\u5c0f\u6578\u9ede\u7684 (.) \u5c31\u88ab\u7a31\u70ba FQDN \u4e86\uff01\u4f8b\u5982\u525b\u525b dig www.ksu.edu.tw \u7684\u8f38\u51fa\u7d50\u679c\u4e2d\uff0c\u5728\u7b54\u6848\u968e\u6bb5\u6642\uff0c\u641c\u5c0b\u7684\u4e3b\u6a5f\u540d\u7a31\u6703\u8b8a\u6210 www.ksu.edu.tw. \u5594\uff01\u6ce8\u610f\u770b\u6700\u5f8c\u9762\u6709\u500b\u5c0f\u6578\u9ede\u5594\uff01\u90a3\u500b\u5c0f\u6578\u9ede\u975e\u5e38\u91cd\u8981\uff01<\/p>\n<p>\u81f3\u65bc ttl \u5c31\u662f time to live \u7684\u7e2e\u5beb\uff0c\u610f\u601d\u5c31\u662f\u7576\u9019\u7b46\u8a18\u9304\u88ab\u5176\u4ed6 DNS \u4f3a\u670d\u5668\u67e5\u8a62\u5230\u5f8c\uff0c \u9019\u500b\u8a18\u9304\u6703\u4fdd\u6301\u5728\u5c0d\u65b9 DNS \u4f3a\u670d\u5668\u7684\u5feb\u53d6\u4e2d\uff0c\u4fdd\u6301\u591a\u5c11\u79d2\u9418\u7684\u610f\u601d\u3002\u6240\u4ee5\uff0c\u7576\u4f60\u53cd\u8986\u57f7\u884c dig www.ksu.edu.tw \u4e4b\u5f8c\uff0c\u5c31\u6703\u767c\u73fe\u9019\u500b\u6642\u9593\u6703\u6e1b\u5c11\uff01\u70ba\u4ec0\u9ebc\u5462\uff1f\u56e0\u70ba\u5728\u4f60\u7684 DNS \u5feb\u53d6\u4e2d\uff0c\u9019\u7b46\u8cc7\u6599\u80fd\u5920\u4fdd\u5b58\u7684\u6642\u9593\u6703\u958b\u59cb\u5012\u6578\uff0c \u7576\u9019\u500b\u6578\u5b57\u6b78\u96f6\u5f8c\uff0c\u4e0b\u6b21\u6709\u4eba\u518d\u91cd\u65b0\u641c\u5c0b\u9019\u7b46\u8a18\u9304\u6642\uff0c\u4f60\u7684 DNS \u5c31\u6703\u91cd\u65b0\u6cbf\u8457 . (root) \u958b\u59cb\u91cd\u4f86\u641c\u5c0b\u4e00\u904d\uff0c \u800c\u4e0d\u6703\u5f9e\u5feb\u53d6\u88e1\u9762\u6349\u53d6\u4e86 (\u56e0\u70ba\u5feb\u53d6\u5167\u7684\u8cc7\u6599\u6703\u88ab\u6368\u68c4)\u3002<\/p>\n<p>\u7531\u65bc ttl \u53ef\u7531\u7279\u5b9a\u7684\u53c3\u6578\u4f86\u7d71\u4e00\u63a7\u7ba1\uff0c\u56e0\u6b64\u5728 RR \u7684\u8a18\u9304\u683c\u5f0f\u4e2d\uff0c\u901a\u5e38\u9019\u500b ttl \u7684\u6b04\u4f4d\u662f\u53ef\u4ee5\u5ffd\u7565\u7684\u3002 \u90a3\u9ebc\u5e38\u898b\u7684 RR \u6709\u54ea\u4e9b\u5462\uff1f\u6211\u5011\u5c07\u6b63\u89e3\u6a94\u7684 RR \u8a18\u9304\u683c\u5f0f\u5f59\u6574\u5982\u4e0b\uff1a<\/p>\n<pre># \u5e38\u898b\u7684\u6b63\u89e3\u6a94 RR \u76f8\u95dc\u8cc7\u8a0a\r\n[domain]    IN  [[RR type]  [RR data]]\r\n\u4e3b\u6a5f\u540d\u7a31.   IN  A           IPv4 \u7684 IP \u4f4d\u5740\r\n\u4e3b\u6a5f\u540d\u7a31.   IN  AAAA        IPv6 \u7684 IP \u4f4d\u5740\r\n\u9818\u57df\u540d\u7a31.   IN  NS          \u7ba1\u7406\u9019\u500b\u9818\u57df\u540d\u7a31\u7684\u4f3a\u670d\u5668\u4e3b\u6a5f\u540d\u5b57.\r\n\u9818\u57df\u540d\u7a31.   IN  SOA         \u7ba1\u7406\u9019\u500b\u9818\u57df\u540d\u7a31\u7684\u4e03\u500b\u91cd\u8981\u53c3\u6578(\u5bb9\u5f8c\u8aaa\u660e)\r\n\u9818\u57df\u540d\u7a31.   IN  MX          \u9806\u5e8f\u6578\u5b57  \u63a5\u6536\u90f5\u4ef6\u7684\u4f3a\u670d\u5668\u4e3b\u6a5f\u540d\u5b57\r\n\u4e3b\u6a5f\u5225\u540d.   IN  CNAME       \u5be6\u969b\u4ee3\u8868\u9019\u500b\u4e3b\u6a5f\u5225\u540d\u7684\u4e3b\u6a5f\u540d\u5b57.\r\n<\/pre>\n<p>\u63a5\u4e0b\u4f86\u6211\u5011\u4ee5\u5d11\u5c71\u79d1\u5927\u7684 DNS \u8a2d\u5b9a\uff0c\u5305\u62ec ksu.edu.tw \u9019\u500b\u9818\u57df (domain, zone)\uff0c\u4ee5\u53ca www.ksu.edu.tw \u9019\u500b\u4e3b\u6a5f\u540d\u7a31 (FQDN) \u7684\u67e5\u8a62\u7d50\u679c\u4f86\u8ddf\u5927\u5bb6\u89e3\u91cb\u6bcf\u500b RR \u8a18\u9304\u7684\u8cc7\u8a0a\u70ba\u4f55\u5466\uff01<\/p>\n<p><a name=\"rr_a\"><\/a><\/p>\n<ul>\n<li>\n<hr \/>\n<p>A, AAAA \uff1a\u67e5\u8a62 IP \u7684\u8a18\u9304<\/li>\n<\/ul>\n<p>\u9019\u500b A \u7684 RR \u985e\u578b\u662f\u5728\u67e5\u8a62\u67d0\u500b\u4e3b\u6a5f\u540d\u7a31\u7684 IP\uff0c\u4e5f\u662f\u6700\u9577\u88ab\u67e5\u8a62\u7684\u4e00\u500b RR \u6a19\u8a8c\u5594\uff01\u8209\u4f8b\u4f86\u8aaa\uff0c\u8981\u627e\u5230 www.ksu.edu.tw \u7684 A \u7684\u8a71\uff0c\u5c31\u662f\u9019\u6a23\u67e5\uff1a<\/p>\n<pre>[root@www ~]# dig [-t a] www.ksu.edu.tw\r\n;; ANSWER SECTION:\r\nwww.ksu.edu.tw.         2987    IN      A       120.114.100.101\r\n# \u4e3b\u6a5fFQDN.             ttl                     \u9019\u90e8\u4e3b\u6a5f\u7684 IP \u5c31\u662f\u9019\u88e1\r\n# \u50c5\u5217\u51fa\u7b54\u6848\u968e\u6bb5\u7684\u8cc7\u6599\uff0c\u5f8c\u7e8c\u7684 RR \u76f8\u95dc\u6a19\u8a8c\u4e5f\u662f\u9019\u6a23\u986f\u793a\u7684\u5594\uff01\r\n# \u6307\u4ee4\u5217\u4e2d\u7684 [-t a] \u53ef\u4ee5\u4e0d\u52a0\uff0c\u800c\u6700\u5de6\u908a\u4e3b\u6a5f\u540d\u7a31\u7d50\u5c3e\u90fd\u6703\u6709\u5c0f\u6578\u9ede\u5594\uff01\r\n<\/pre>\n<p>\u5de6\u908a\u662f\u4e3b\u6a5f\u540d\u7a31\uff0c\u7576\u7136\uff0c\u4f60\u4e5f\u53ef\u4ee5\u8b93\u4f60\u7684 domain \u64c1\u6709\u4e00\u500b A \u7684\u6a19\u8a8c\uff0c\u4f8b\u5982\u300e dig google.com \u300f\u4e5f\u80fd\u627e\u5230 IP\u3002 \u4e0d\u904e\uff0c\u54b1\u5011\u5d11\u5c71\u79d1\u5927\u7684 ksu.edu.tw \u5247\u6c92\u6709\u8a2d\u5b9a IP \u5c31\u662f\u4e86\u3002\u8981\u518d\u6b21\u7279\u5225\u5f37\u8abf\u7684\uff0c\u4e3b\u6a5f\u540d\u7a31\u5982\u679c\u662f\u5168\u540d\uff0c \u7d50\u5c3e\u90e8\u5206\u8acb\u52d9\u5fc5\u52a0\u4e0a\u5c0f\u6578\u9ede\u3002\u5982\u679c\u4f60\u7684 IP \u8a2d\u5b9a\u7684\u662f IPv6 \u7684\u8a71\uff0c\u90a3\u9ebc\u67e5\u8a62\u5c31\u5f97\u8981\u4f7f\u7528 aaaa \u985e\u578b\u624d\u884c\u3002<\/p>\n<p><a name=\"rr_ns\"><\/a><\/p>\n<ul>\n<li>\n<hr \/>\n<p>NS \uff1a\u67e5\u8a62\u7ba1\u7406\u9818\u57df\u540d\u7a31 (zone) \u7684\u4f3a\u670d\u5668\u4e3b\u6a5f\u540d<\/li>\n<\/ul>\n<p>\u5982\u679c\u4f60\u60f3\u8981\u77e5\u9053 www.ksu.edu.tw \u7684\u9019\u7b46\u8a18\u9304\u662f\u7531\u54ea\u90e8 DNS \u4f3a\u670d\u5668\u63d0\u4f9b\u7684\uff0c\u90a3\u5c31\u5f97\u8981\u4f7f\u7528 NS (NameServer) \u7684 RR \u985e\u578b\u6a19\u8a8c\u4f86\u67e5\u8a62\u3002\u4e0d\u904e\uff0c\u7531\u65bc NS \u662f\u7ba1\u7406\u6574\u500b\u9818\u57df\u7684\uff0c\u56e0\u6b64\uff0c\u4f60\u5f97\u8981\u67e5\u8a62\u7684\u76ee\u6a19\u5c07\u5f97\u8f38\u5165 domain\uff0c\u4ea6\u5373 ksu.edu.tw \u624d\u884c\u5594\uff01\u8209\u4f8b\u5982\u4e0b\uff1a<\/p>\n<pre>[root@www ~]# dig -t ns ksu.edu.tw\r\n;; ANSWER SECTION:\r\nksu.edu.tw.             1596    IN      NS  dns1.ksu.edu.tw.\r\n\r\n;; ADDITIONAL SECTION:\r\ndns1.ksu.edu.tw.        577     IN      A   120.114.50.1\r\n# \u9664\u4e86\u5217\u51fa NS \u662f\u54ea\u90e8\u4f3a\u670d\u5668\u4e4b\u5916\uff0c\u8a72\u4f3a\u670d\u5668\u7684 IP \u4e5f\u6703\u984d\u5916\u63d0\u4f9b\uff01\r\n<\/pre>\n<p>\u524d\u9762\u63d0\u904e\uff0cDNS \u4f3a\u670d\u5668\u662f\u5f88\u91cd\u8981\u7684\uff0c\u56e0\u6b64\u81f3\u5c11\u90fd\u6703\u6709\u5169\u90e8\u4ee5\u4e0a\u3002\u5d11\u5c71\u79d1\u5927\u5171\u6709\u4e09\u90e8 DNS \u4f3a\u670d\u5668\uff0c\u9ce5\u54e5\u50c5\u5217\u51fa\u7b2c\u4e00\u90e8\u63d0\u4f9b\u53c3\u8003\u3002 NS \u5f8c\u9762\u6703\u52a0\u4f3a\u670d\u5668\u540d\u7a31\uff0c\u800c\u9019\u500b\u4f3a\u670d\u5668\u7684 IP \u4e5f\u6703\u984d\u5916\u63d0\u4f9b\u624d\u5c0d\uff01\u56e0\u6b64 NS \u7d93\u5e38\u4f34\u96a8 A \u7684\u6a19\u8a8c\u554a\uff01\u9019\u6a23\u4f60\u624d\u80fd\u5230 NS \u53bb\u67e5\u8a62\u8cc7\u6599\u561b\uff01\u9019\u6a23\u8aaa\u6709\u7406\u89e3\u5427\uff1f ^_^<\/p>\n<p><a name=\"rr_soa\"><\/a><\/p>\n<ul>\n<li>\n<hr \/>\n<p>SOA \uff1a\u67e5\u8a62\u7ba1\u7406\u9818\u57df\u540d\u7a31\u7684\u4f3a\u670d\u5668\u7ba1\u7406\u8cc7\u8a0a<\/li>\n<\/ul>\n<p>\u5982\u679c\u4f60\u6709\u591a\u90e8 DNS \u4f3a\u670d\u5668\u7ba1\u7406\u540c\u4e00\u500b\u9818\u57df\u540d\u7a31\u6642\uff0c\u90a3\u9ebc\u6700\u597d\u4f7f\u7528 master\/slave \u7684\u65b9\u5f0f\u4f86\u9032\u884c\u7ba1\u7406\u3002\u65e2\u7136\u8981\u9019\u6a23\u7ba1\u7406\uff0c \u90a3\u5c31\u5f97\u8981\u5ba3\u544a\u88ab\u7ba1\u7406\u7684 zone file \u662f\u5982\u4f55\u9032\u884c\u50b3\u8f38\u7684\uff0c\u6b64\u6642\u5c31\u5f97\u8981 SOA (Start Of Authority) \u7684\u6a19\u8a8c\u4e86\u3002\u5148\u4f86\u77a7\u77a7\u5d11\u5c71\u79d1\u5927\u7684\u8a2d\u5b9a\u662f\u600e\u6a23\uff1a<\/p>\n<pre>[root@www ~]# dig -t soa ksu.edu.tw\r\n;; ANSWER SECTION:\r\nksu.edu.tw.       3600   IN     SOA    dns1.ksu.edu.tw.   abuse.mail.ksu.edu.tw. \r\n  2010080369 1800 900 604800 86400\r\n# \u4e0a\u8ff0\u7684\u8f38\u51fa\u7d50\u679c\u662f\u540c\u4e00\u884c\u5594\uff01\r\n<\/pre>\n<p>SOA \u4e3b\u8981\u662f\u8207\u9818\u57df\u6709\u95dc\uff0c\u6240\u4ee5\u524d\u9762\u7576\u7136\u8981\u5beb ksu.edu.tw \u9019\u500b\u9818\u57df\u540d\u3002\u800c SOA \u5f8c\u9762\u5171\u6703\u63a5\u4e03\u500b\u53c3\u6578\uff0c\u9019\u4e03\u500b\u53c3\u6578\u7684\u610f\u7fa9\u4f9d\u5e8f\u662f\uff1a<\/p>\n<ol>\n<li>Master DNS \u4f3a\u670d\u5668\u4e3b\u6a5f\u540d\u7a31\uff1a\u9019\u500b\u9818\u57df\u4e3b\u8981\u662f\u54ea\u90e8 DNS \u4f5c\u70ba master \u7684\u610f\u601d\u3002\u5728\u672c\u4f8b\u4e2d\uff0c dns1.ksu.edu.tw \u70ba ksu.edu.tw \u9019\u500b\u9818\u57df\u7684\u4e3b\u8981 DNS \u4f3a\u670d\u5668\u56c9\uff1b<\/li>\n<li>\u7ba1\u7406\u54e1\u7684 email\uff1a\u90a3\u9ebc\u7ba1\u7406\u54e1\u7684 email \u70ba\u4f55\uff1f\u767c\u751f\u554f\u984c\u53ef\u4ee5\u806f\u7d61\u9019\u500b\u7ba1\u7406\u54e1\u3002\u8981\u6ce8\u610f\u7684\u662f\uff0c \u7531\u65bc @ \u5728\u8cc7\u6599\u5eab\u6a94\u6848\u4e2d\u662f\u6709\u7279\u5225\u610f\u7fa9\u7684\uff0c\u56e0\u6b64\u9019\u88e1\u5c31\u5c07 abuse@mail.ksu.edu.tw \u6539\u5beb\u6210 abuse.mail.ksu.edu.tw \uff0c\u9019\u6a23\u770b\u7684\u61c2\u4e86\u55ce\uff1f<\/li>\n<li>\u5e8f\u865f (Serial)\uff1a\u9019\u500b\u5e8f\u865f\u4ee3\u8868\u7684\u662f\u9019\u500b\u8cc7\u6599\u5eab\u6a94\u6848\u7684\u65b0\u820a\uff0c\u5e8f\u865f\u8d8a\u5927\u4ee3\u8868\u8d8a\u65b0\u3002 \u7576 slave \u8981\u5224\u65b7\u662f\u5426\u4e3b\u52d5\u4e0b\u8f09\u65b0\u7684\u8cc7\u6599\u5eab\u6642\uff0c\u5c31\u4ee5\u5e8f\u865f\u662f\u5426\u6bd4 slave \u4e0a\u7684\u9084\u8981\u65b0\u4f86\u5224\u65b7\uff0c\u82e5\u662f\u5247\u4e0b\u8f09\uff0c\u82e5\u4e0d\u662f\u5247\u4e0d\u4e0b\u8f09\u3002 \u6240\u4ee5\u7576\u4f60\u4fee\u8a02\u4e86\u8cc7\u6599\u5eab\u5167\u5bb9\u6642\uff0c\u8a18\u5f97\u8981\u5c07\u9019\u500b\u6578\u503c\u653e\u5927\u624d\u884c\uff01 \u70ba\u4e86\u65b9\u4fbf\u4f7f\u7528\u8005\u8a18\u61b6\uff0c\u901a\u5e38\u5e8f\u865f\u90fd\u6703\u4f7f\u7528\u65e5\u671f\u683c\u5f0f\u300eYYYYMMDDNU\u300f\u4f86\u8a18\u61b6\uff0c\u4f8b\u5982\u5d11\u5c71\u79d1\u5927\u7684 2010080369 \u5e8f\u865f\u4ee3\u8868 2010\/08\/03 \u7576\u5929\u7684\u7b2c 69 \u6b21\u66f4\u65b0\u7684\u611f\u89ba\u3002\u4e0d\u904e\uff0c\u5e8f\u865f\u4e0d\u53ef\u5927\u65bc 2 \u7684 32 \u6b21\u65b9\uff0c\u4ea6\u5373\u5fc5\u9808\u5c0f\u65bc 4294967296 \u624d\u884c\u5594\u3002<\/li>\n<li>\u66f4\u65b0\u983b\u7387 (Refresh)\uff1a\u90a3\u9ebc\u5565\u6642 slave \u6703\u53bb\u5411 master \u8981\u6c42\u8cc7\u6599\u66f4\u65b0\u7684\u5224\u65b7\uff1f \u5c31\u662f\u9019\u500b\u6578\u503c\u5b9a\u7fa9\u7684\u3002\u5d11\u5c71\u79d1\u5927\u7684 DNS \u8a2d\u5b9a\u6bcf 1800 \u79d2\u9032\u884c\u4e00\u6b21 slave \u5411 master \u8981\u6c42\u8cc7\u6599\u66f4\u65b0\u3002\u90a3\u6bcf\u6b21 slave \u53bb\u66f4\u65b0\u6642\uff0c \u5982\u679c\u767c\u73fe\u5e8f\u865f\u6c92\u6709\u6bd4\u8f03\u5927\uff0c\u90a3\u5c31\u4e0d\u6703\u4e0b\u8f09\u8cc7\u6599\u5eab\u6a94\u6848\u3002<\/li>\n<li>\u5931\u6557\u91cd\u65b0\u5617\u8a66\u6642\u9593 (Retry)\uff1a\u5982\u679c\u56e0\u70ba\u67d0\u4e9b\u56e0\u7d20\uff0c\u5c0e\u81f4 slave \u7121\u6cd5\u5c0d master \u9054\u6210\u9023\u7dda\uff0c \u90a3\u9ebc\u5728\u591a\u4e45\u7684\u6642\u9593\u5167\uff0cslave \u6703\u5617\u8a66\u91cd\u65b0\u9023\u7dda\u5230 master\u3002\u5728\u5d11\u5c71\u79d1\u5927\u7684\u8a2d\u5b9a\u4e2d\uff0c900 \u79d2\u6703\u91cd\u65b0\u5617\u8a66\u4e00\u6b21\u3002\u610f\u601d\u662f\u8aaa\uff0c\u6bcf 1800 \u79d2 slave \u6703\u4e3b\u52d5\u5411 master \u9023\u7dda\uff0c\u4f46\u5982\u679c\u8a72\u6b21\u9023\u7dda\u6c92\u6709\u6210\u529f\uff0c\u90a3\u63a5\u4e0b\u4f86\u5617\u8a66\u9023\u7dda\u7684\u6642\u9593\u6703\u8b8a\u6210 900 \u79d2\u3002\u82e5\u5f8c\u4f86\u6709\u6210\u529f\uff0c\u5247\u53c8\u6703\u6062\u5fa9\u5230 1800 \u79d2\u624d\u518d\u4e00\u6b21\u9023\u7dda\u3002<\/li>\n<li>\u5931\u6548\u6642\u9593 (Expire)\uff1a\u5982\u679c\u4e00\u76f4\u5931\u6557\u5617\u8a66\u6642\u9593\uff0c\u6301\u7e8c\u9023\u7dda\u5230\u9054\u9019\u500b\u8a2d\u5b9a\u503c\u6642\u9650\uff0c \u90a3\u9ebc slave \u5c07\u4e0d\u518d\u7e7c\u7e8c\u5617\u8a66\u9023\u7dda\uff0c\u4e26\u4e14\u5617\u8a66\u522a\u9664\u9019\u4efd\u4e0b\u8f09\u7684 zone file \u8cc7\u8a0a\u3002\u5d11\u5c71\u79d1\u5927\u8a2d\u5b9a\u70ba 604800 \u79d2\u3002\u610f\u601d\u662f\u8aaa\uff0c\u7576\u9023\u7dda\u4e00\u76f4\u5931\u6557\uff0c\u6bcf 900 \u79d2\u5617\u8a66\u5230\u9054 604800 \u79d2\u5f8c\uff0c\u5d11\u5c71\u79d1\u5927\u7684 slave \u5c07\u4e0d\u518d\u66f4\u65b0\uff0c\u53ea\u80fd\u7b49\u5f85\u7cfb\u7d71\u7ba1\u7406\u54e1\u7684\u8655\u7406\u3002<\/li>\n<li>\u5feb\u53d6\u6642\u9593 (Minumum TTL)\uff1a\u5982\u679c\u9019\u500b\u8cc7\u6599\u5eab zone file \u4e2d\uff0c\u6bcf\u7b46 RR \u8a18\u9304\u90fd\u6c92\u6709\u5beb\u5230 TTL \u5feb\u53d6\u6642\u9593\u7684\u8a71\uff0c\u90a3\u9ebc\u5c31\u4ee5\u9019\u500b SOA \u7684\u8a2d\u5b9a\u503c\u70ba\u4e3b\u3002<\/li>\n<\/ol>\n<p>\u9664\u4e86 Serial \u4e0d\u53ef\u4ee5\u8d85\u904e 2 \u7684 32 \u6b21\u65b9\u4e4b\u5916\uff0c\u6709\u6c92\u6709\u5176\u5b83\u7684\u9650\u5236\u554a\u91dd\u5c0d\u9019\u5e7e\u500b\u6578\u503c\uff1f\u662f\u6709\u7684\uff0c\u57fa\u672c\u4e0a\u5c31\u662f\u9019\u6a23\uff1a<\/p>\n<ul>\n<li>Refresh &gt;= Retry *2<\/li>\n<li>Refresh + Retry &lt; Expire<\/li>\n<li>Expire &gt;= Rrtry * 10<\/li>\n<li>Expire &gt;= 7Days<\/li>\n<\/ul>\n<p>\u4e00\u822c\u4f86\u8aaa\uff0c\u5982\u679c DNS RR \u8cc7\u6599\u8b8a\u66f4\u60c5\u6cc1\u983b\u7e41\u7684\uff0c\u90a3\u9ebc\u4e0a\u8ff0\u7684\u76f8\u95dc\u6578\u503c\u53ef\u4ee5\u8a02\u5b9a\u7684\u5c0f\u4e00\u4e9b\uff0c\u5982\u679c DNS RR \u662f\u5f88\u7a69\u5b9a\u7684\uff0c \u70ba\u4e86\u7bc0\u7701\u983b\u5bec\uff0c\u5247\u53ef\u4ee5\u5c07 Refresh \u8a2d\u5b9a\u7684\u8f03\u5927\u4e00\u4e9b\u3002<\/p>\n<p><a name=\"rr_cname\"><\/a><\/p>\n<ul>\n<li>\n<hr \/>\n<p>CNAME \uff1a\u8a2d\u5b9a\u67d0\u4e3b\u6a5f\u540d\u7a31\u7684\u5225\u540d (alias)<\/li>\n<\/ul>\n<p>\u6709\u6642\u5019\u4f60\u4e0d\u60f3\u8981\u91dd\u5c0d\u67d0\u500b\u4e3b\u6a5f\u540d\u7a31\u8a2d\u5b9a A \u7684\u6a19\u8a8c\uff0c\u800c\u662f\u60f3\u900f\u904e\u53e6\u5916\u4e00\u90e8\u4e3b\u6a5f\u540d\u7a31\u7684 A \u4f86\u898f\u7bc4\u9019\u500b\u65b0\u4e3b\u6a5f\u540d\u7a31\u6642\uff0c \u53ef\u4ee5\u4f7f\u7528\u5225\u540d (CNAME) \u7684\u8a2d\u5b9a\u5594\uff01\u8209\u4f8b\u4f86\u8aaa\uff0c\u8ffd\u8e64 www.google.com \u6642\uff0c\u4f60\u6703\u767c\u73fe\u9019\u6a23\uff1a<\/p>\n<pre>[root@www ~]# dig www.google.com\r\n;; ANSWER SECTION:\r\nwww.google.com.         557697  IN      CNAME   www.l.google.com.\r\nwww.l.google.com.       298     IN      A       72.14.203.99\r\n<\/pre>\n<p>\u610f\u601d\u662f\u8aaa\uff0c\u7576\u4f60\u8981\u8ffd\u67e5 www.google.com \u6642\uff0c\u8acb\u627e www.1.google.com \u90a3\u500b\u4e3b\u6a5f\uff0c\u800c\u90a3\u500b\u4e3b\u6a5f\u7684 A \u5c31\u4e0a\u9762\u7b2c\u4e8c\u884c\u7684\u986f\u793a\u4e86\u3002 \u9ce5\u54e5\u5e38\u5e38\u958b\u73a9\u7b11\u7684\u8aaa\uff0c\u4f60\u77e5\u9053\u9ce5\u54e5\u7684\u8eab\u4efd\u8b49\u5b57\u865f\u55ce\uff1f\u4f60\u5230\u6236\u653f\u4e8b\u52d9\u6240\u53bb\u67e5\u300e\u9ce5\u54e5\u300f\u6642\uff0c\u4ed6\u6703\u8aaa\uff1a\u300e\u6c92\u9019\u500b\u4eba\u554a\uff01\u56e0\u70ba\u6c92\u6709\u4eba\u59d3\u9ce5&#8230;\u300f\uff0c \u9019\u500b\u300e\u9ce5\u54e5\u300f\u5c31\u662f\u5225\u540d (CNAME) \uff0c\u800c\u5c0d\u61c9\u5230\u7684\u540d\u7a31\u5c31\u662f\u300e\u8521\u67d0\u67d0\u300f\uff0c\u9019\u500b\u8521\u67d0\u67d0\u624d\u771f\u7684\u6709\u8eab\u4efd\u5b57\u865f\u7684\u610f\u601d\uff5e \u4e00\u5c64\u4e00\u5c64\u53bb\u8ffd\u8e64\u56c9\uff5e<\/p>\n<p>\u9019\u500b CNAME \u6709\u5565\u597d\u8655\u5462\uff1f\u7528 A \u5c31\u597d\u4e86\u5427\uff1f\u5176\u5be6\u9084\u662f\u6709\u597d\u8655\u7684\uff0c\u8209\u4f8b\u4f86\u8aaa\uff0c\u5982\u679c\u4f60\u6709\u4e00\u500b IP\uff0c\u9019\u500b IP \u662f\u7d66\u5f88\u591a\u4e3b\u6a5f\u540d\u7a31\u4f7f\u7528\u7684\u3002 \u90a3\u9ebc\u7576\u4f60\u7684 IP \u66f4\u6539\u6642\uff0c\u6240\u6709\u7684\u8cc7\u6599\u5c31\u5f97\u901a\u901a\u66f4\u65b0 A \u6a19\u8a8c\u624d\u884c\u3002\u5982\u679c\u4f60\u53ea\u6709\u4e00\u500b\u4e3b\u8981\u4e3b\u6a5f\u540d\u7a31\u8a2d\u5b9a A\uff0c\u800c\u5176\u4ed6\u7684\u6a19\u8a8c\u4f7f\u7528 CNAME \u6642\uff0c\u90a3\u9ebc\u7576 IP \u66f4\u6539\uff0c\u90a3\u4f60\u53ea\u8981\u4fee\u8a02\u4e00\u500b A \u7684\u6a19\u8a8c\uff0c\u5176\u4ed6\u7684 CNAME \u5c31\u8ddf\u8457\u8b8a\u52d5\u4e86\uff01\u8655\u7406\u8d77\u4f86\u6bd4\u8f03\u5bb9\u6613\u554a\uff01<\/p>\n<p><a name=\"rr_mx\"><\/a><\/p>\n<ul>\n<li>\n<hr \/>\n<p>MX \uff1a\u67e5\u8a62\u67d0\u9818\u57df\u540d\u7a31\u7684\u90f5\u4ef6\u4f3a\u670d\u5668\u4e3b\u6a5f\u540d\u7a31<\/li>\n<\/ul>\n<p>MX \u662f Mail eXchanger (\u90f5\u4ef6\u4ea4\u63db) \u7684\u610f\u601d\uff0c\u901a\u5e38\u4f60\u7684\u6574\u500b\u9818\u57df\u6703\u8a2d\u5b9a\u4e00\u500b MX \uff0c\u4ee3\u8868\uff0c\u6240\u6709\u5bc4\u7d66\u9019\u500b\u9818\u57df\u7684 email \u61c9\u8a72\u8981\u9001\u5230\u5f8c\u982d\u7684 email server \u4e3b\u6a5f\u540d\u4e0a\u982d\u624d\u662f\u3002\u5148\u770b\u770b\u5d11\u5927\u7684\u8cc7\u6599\uff1a<\/p>\n<pre>[root@www ~]# dig -t mx ksu.edu.tw\r\n;; ANSWER SECTION:\r\nksu.edu.tw.             3600    IN      MX      8 mx01.ksu.edu.tw.\r\n\r\n;; ADDITIONAL SECTION:\r\nmx01.ksu.edu.tw.        3600    IN      A       120.114.100.28\r\n<\/pre>\n<p>\u4e0a\u982d\u7684\u610f\u601d\u662f\u8aaa\uff0c\u7576\u6709\u4fe1\u4ef6\u8981\u9001\u7d66 ksu.edu.tw \u9019\u500b\u9818\u57df\u6642\uff0c\u5247\u9810\u5148\u5c07\u4fe1\u4ef6\u50b3\u9001\u7d66 mx01.ksu.edu.tw \u9019\u90e8\u90f5\u4ef6\u4f3a\u670d\u5668\u7ba1\u7406\uff0c \u7576\u7136\u5566\uff0c\u9019\u90e8 mx01.ksu.edu.tw \u81ea\u7136\u5c31\u662f\u5d11\u5927\u81ea\u5df1\u7ba1\u7406\u7684\u90f5\u4ef6\u4f3a\u670d\u5668\u624d\u884c\uff01MX \u5f8c\u9762\u63a5\u7684\u4e3b\u6a5f\u540d\u7a31\u901a\u5e38\u5c31\u662f\u5408\u6cd5 mail server\uff0c \u800c\u60f3\u8981\u7576 MX \u4f3a\u670d\u5668\uff0c\u5c31\u5f97\u8981\u6709 A \u7684\u6a19\u8a8c\u624d\u884c\uff5e\u6240\u4ee5\u4e0a\u8868\u5f8c\u9762\u5c31\u6703\u51fa\u73fe mx01.ksu.edu.tw \u7684 A \u554a\uff01<\/p>\n<p>\u90a3\u9ebc\u5728 mx01 \u4e4b\u524d\u7684 8 \u662f\u4ec0\u9ebc\u610f\u601d\uff1f\u7531\u65bc\u64d4\u5fc3\u90f5\u4ef6\u6703\u907a\u5931\uff0c\u56e0\u6b64\u8f03\u5927\u578b\u7684\u4f01\u696d\u6703\u6709\u591a\u90e8\u9019\u6a23\u7684\u4e0a\u5c64\u90f5\u4ef6\u4f3a\u670d\u5668\u4f86\u9810\u5148\u6536\u53d7\u4fe1\u4ef6\u3002 \u90a3\u9ebc\u5230\u5e95\u54ea\u90e8\u90f5\u4ef6\u4e3b\u6a5f\u6703\u5148\u6536\u4e0b\u5462\uff1f\u5c31\u4ee5\u6578\u5b57\u8f03\u5c0f\u7684\u90a3\u90e8\u512a\u5148\u56c9\uff01\u8209\u4f8b\u4f86\u8aaa\uff0c\u5982\u679c\u4f60\u53bb\u67e5 google.com \u7684 MX \u6a19\u8a8c\uff0c \u5c31\u6703\u767c\u73fe\u4ed6\u6709 5 \u90e8\u9019\u6a23\u7684\u4f3a\u670d\u5668\u5462\uff01<\/p>\n<hr \/>\n<p><a name=\"DNS_master_rr_re\"><\/a><img loading=\"lazy\" decoding=\"async\" src=\"http:\/\/linux.vbird.org\/images\/penguin-s.gif\" alt=\"\u5c0f\u6a19\u984c\u7684\u5716\u793a\" width=\"16\" height=\"23\" align=\"middle\" \/>19.4.2 \u53cd\u89e3\u6a94\u8a18\u9304\u7684 RR \u8cc7\u6599<\/p>\n<p>\u8b1b\u5b8c\u4e86\u6b63\u89e3\u4f86\u8ac7\u8ac7\u53cd\u89e3\u5427\uff01\u5728\u8b1b\u53cd\u89e3\u4e4b\u524d\uff0c\u5148\u4f86\u8ac7\u8ac7\u6b63\u89e3\u4e3b\u6a5f\u540d\u7a31\u7684\u8ffd\u8e64\u65b9\u5f0f\u3002\u4ee5 www.ksu.edu.tw. \u4f86\u8aaa\uff0c\u6574\u500b\u7db2\u57df\u7684\u6982\u5ff5\u4f86\u770b\uff0c \u8d8a\u53f3\u908a\u51fa\u73fe\u7684\u540d\u7a31\u4ee3\u8868\u7db2\u57df\u8d8a\u5927\uff01\u8209\u4f8b\u4f86\u8aaa\uff0c.(root) &gt; tw &gt; edu \u4ee5\u6b64\u985e\u63a8\u3002\u56e0\u6b64\u8ffd\u8e64\u6642\uff0c\u662f\u7531\u5927\u7bc4\u570d\u627e\u5230\u5c0f\u7bc4\u570d\uff0c \u6700\u5f8c\uff0c\u6211\u5011\u5c31\u77e5\u9053\u8ffd\u8e64\u7684\u65b9\u5411\u5982<a href=\"http:\/\/linux.vbird.org\/linux_server\/0350dns.php#fig19.1-4\">\u5716 19.1-4<\/a> \u6240\u793a\u90a3\u6a23\u3002<\/p>\n<p>\u4f46\u662f IP \u5247\u4e0d\u4e00\u6a23\u554a\uff01\u4ee5\u5d11\u5927\u7684 120.114.100.101 \u4f86\u8aaa\u597d\u4e86\uff0c\u7576\u7136\u662f 120 &gt; 114 &gt; 100 &gt; 101 \uff0c\u5de6\u908a\u7684\u7db2\u57df\u6700\u5927\uff01 \u8207\u9810\u8a2d\u7684 DNS \u5f9e\u53f3\u908a\u5411\u5de6\u908a\u67e5\u8a62\u4e0d\u4e00\u6a23\u554a\uff01\u90a3\u600e\u8fa6\uff1f\u70ba\u4e86\u89e3\u6c7a\u9019\u500b\u554f\u984c\uff0c\u6240\u4ee5\u53cd\u89e3\u7684 zone \u5c31\u5fc5\u9808\u8981\u5c07 IP \u53cd\u904e\u4f86\u5beb\uff0c\u800c\u5728\u7d50\u5c3e\u6642\u52a0\u4e0a .in-addr.arpa. \u7684\u7d50\u5c3e\u5b57\u6a23\u5373\u53ef\u3002\u6240\u4ee5\uff0c\u7576\u4f60\u60f3\u8981\u8ffd\u8e64\u53cd\u89e3\u6642\uff0c\u90a3\u9ebc\u53cd\u89e3\u7684\u7d50\u679c\u5c31\u6703\u662f\uff1a<\/p>\n<pre>[root@www ~]# dig -x 120.114.100.101\r\n;; ANSWER SECTION:\r\n101.100.114.120.in-addr.arpa. 3600 IN   PTR     www.ksu.edu.tw.\r\n<\/pre>\n<p>\u4f8b\u5982\u4e0a\u8ff0\u7684\u7d50\u679c\u4e2d\uff0c\u6211\u5011\u8981\u67e5\u8a62\u7684\u4e3b\u6a5f\u540d\u7a31\u7adf\u7136\u8b8a\u6210\u4e86 IP \u53cd\u8f49\u7684\u6a21\u6a23\uff01\u6240\u4ee5\u624d\u7a31\u70ba\u53cd\u89e3\u561b\uff01\u800c\u53cd\u89e3\u7684\u6a19\u8a8c\u6700\u91cd\u8981\u7684\u5c31\u662f PTR \u4e86\uff01<\/p>\n<p><a name=\"rr_ptr\"><\/a><\/p>\n<ul>\n<li>\n<hr \/>\n<p>PTR \uff1a\u5c31\u662f\u53cd\u89e3\u554a\uff01\u6240\u4ee5\u662f\u67e5\u8a62 IP \u6240\u5c0d\u61c9\u7684\u4e3b\u6a5f\u540d\u7a31<\/li>\n<\/ul>\n<p>\u9032\u884c\u53cd\u89e3\u6642\uff0c\u8981\u6ce8\u610f\u7684\u5c31\u662f zone \u7684\u540d\u7a31\u4e86\uff01\u8981\u5c07 IP \u53cd\u8f49\u904e\u4f86\u5beb\uff0c\u4e26\u4e14\u7d50\u5c3e\u52a0\u4e0a .in-addr.arpa. \u624d\u884c\uff01 \u4f8b\u5982 120.114.100.0\/24 \u9019\u500b class C IP \u7db2\u6bb5\u7684\u53cd\u89e3\u8a2d\u5b9a\uff0c\u5c31\u5fc5\u9808\u8981\u5beb\u6210\uff1a 100.114.120.in-addr.arpa. \u9019\u6a23\u7684 zone \u540d\u7a31\u624d\u884c\u3002 \u800c PTR \u5f8c\u9762\u63a5\u7684\u81ea\u7136\u5c31\u662f\u4e3b\u6a5f\u540d\u7a31\u56c9\uff01<\/p>\n<p>\u5728\u53cd\u89e3\u6700\u91cd\u8981\u7684\u5730\u65b9\u5c31\u662f\uff1a\u5f8c\u9762\u7684\u4e3b\u6a5f\u540d\u7a31\u76e1\u91cf\u4f7f\u7528\u5b8c\u6574 FQDN\uff0c\u4ea6\u5373\u52a0\u4e0a\u5c0f\u6578\u9ede (.) \uff01\u70ba\u4ec0\u9ebc\u5462\uff1f\u8209 100.114.120.in-addr.arpa. \u70ba\u4f8b\uff0c\u5982\u679c\u4f60\u53ea\u662f\u586b\u5beb\u4e3b\u6a5f\u540d\u7a31\uff0c\u4e26\u6c92\u6709\u586b\u5beb\u9818\u57df\u540d\u7a31\uff0c \u90a3\u9ebc\u7576\u4eba\u5bb6\u8ffd\u8e64\u4f60\u7684\u4e3b\u6a5f\u540d\u7a31\u6642\uff0c\u4f60\u7684\u4e3b\u6a5f\u540d\u7a31\u6703\u8b8a\u6210\uff1a www.100.114.120.in-addr.arpa. \u7684\u602a\u6a21\u6a23\u3002 \u9019\u662f\u6bd4\u8f03\u9700\u8981\u6ce8\u610f\u7684\u5730\u65b9\u3002<\/p>\n<p><b>Tips:<\/b><br \/>\n\u8001\u5be6\u8aaa\uff0c\u9ce5\u5712\u8a0e\u8ad6\u5340\u7684\u4e00\u4e9b\u6709\u7d93\u9a57\u7684\u670b\u53cb\u4e00\u76f4\u5728\u8b1b\uff0c\u5982\u679c\u64d4\u5fc3\u6703\u6709\u8aa4\u89e3\uff0c\u4e3b\u6a5f\u540d\u7a31\u7684\u8a2d\u5b9a\u5247\u901a\u901a\u8a18\u5f97\u662f\u8981\u586b\u5beb FQDN \u5c31\u662f\u4e86\uff01 \u9019\u6a23\u7d55\u5c0d\u4e0d\u6703\u6709\u554f\u984c\uff01 ^_^<br \/>\n<img decoding=\"async\" title=\"\u9ce5\u54e5\u7684\u5716\u793a\" src=\"http:\/\/linux.vbird.org\/images\/vbird_face.gif\" alt=\"\u9ce5\u54e5\u7684\u5716\u793a\" \/><\/p>\n<hr \/>\n<p><a name=\"DNS_master_case\"><\/a><img loading=\"lazy\" decoding=\"async\" src=\"http:\/\/linux.vbird.org\/images\/penguin-s.gif\" alt=\"\u5c0f\u6a19\u984c\u7684\u5716\u793a\" width=\"16\" height=\"23\" align=\"middle\" \/>19.4.3 \u6b65\u9a5f\u4e00\uff1aDNS \u7684\u74b0\u5883\u898f\u5283\uff1a\u6b63\u89e3\u3001\u53cd\u89e3 zone \u7684\u9810\u5148\u5b9a\u7fa9\u6848\u4f8b\u8aaa\u660e<\/p>\n<p>\u73fe\u5728\u5047\u8a2d\u9ce5\u54e5\u7684\u5340\u7db2\u74b0\u5883\u4e2d\u60f3\u8981\u8a2d\u5b9a DNS \u4f3a\u670d\u5668\uff0c\u9ce5\u54e5\u7684\u5340\u7db2\u539f\u672c\u898f\u5283\u7684\u7db2\u57df\u540d\u7a31\u5c31\u662f centos.vbird\uff0c\u4e14\u642d\u914d\u7684 IP \u7db2\u6bb5\u70ba 192.168.100.0\/24 \u9019\u4e00\u6bb5\uff0c\u56e0\u6b64\u4e3b\u8981\u7684\u6b63\u89e3\u7db2\u57df\u70ba centos.vbird\uff0c\u800c\u53cd\u89e3\u7684\u7db2\u57df\u5247\u70ba 192.168.100.0\/24\uff0c \u9ce5\u54e5\u7684\u9019\u90e8 DNS \u4f3a\u670d\u5668\u60f3\u8981\u81ea\u5df1\u627e\u5c0b .(root) \u800c\u4e0d\u900f\u904e forwarders \u7684\u8f14\u52a9\uff0c\u56e0\u6b64\u9084\u5f97\u8981 . \u7684\u9818\u57df\u6b63\u89e3\u6a94\u3002 \u7d9c\u5408\u8d77\u4f86\u8aaa\uff0c\u9ce5\u54e5\u9700\u8981\u8a2d\u5b9a\u5230\u7684\u6a94\u6848\u5c31\u6709\u9019\u5e7e\u500b\uff1a<\/p>\n<ol>\n<li>named.conf (\u4e3b\u8981\u8a2d\u5b9a\u6a94)<\/li>\n<li>named.centos.vbird (\u4e3b\u8981\u7684 centos.vbird \u7684\u6b63\u89e3\u6a94)<\/li>\n<li>named.192.168.100 (\u4e3b\u8981\u7684 192.168.100.0\/24 \u7684\u53cd\u89e3\u6a94)<\/li>\n<li>named.ca (\u7531 bind \u8edf\u9ad4\u63d0\u4f9b\u7684 . \u6b63\u89e3\u6a94)<\/li>\n<\/ol>\n<p>\u5982\u679c\u6211\u9084\u60f3\u8981\u52a0\u5165\u5176\u4ed6\u7684\u9818\u57df\uff0c\u4f8b\u5982 niki.vbird \u53ef\u4e0d\u53ef\u4ee5\u554a\uff1f\u7576\u7136\u53ef\u4ee5\u554a\uff01\u5c31\u518d\u591a\u4e00\u500b\u8cc7\u6599\u5eab\u6b63\u89e3\u6a94\u6848\u5373\u53ef\uff01 \u9084\u6709\uff0c\u9ce5\u54e5\u4e0a\u982d\u9019\u500b\u8a2d\u5b9a\u8cc7\u6599\u70ba\u5167\u90e8\u79c1\u6709\u7684\uff0c\u6240\u4ee5\u4f60\u53ef\u4ee5\u5b8c\u5168\u7167\u8457\u73a9\uff01\u4e26\u4e0d\u6703\u5f71\u97ff\u5230\u5916\u90e8\u7684\u7db2\u969b\u7db2\u8def\u5566\uff01 \u53ea\u662f\uff0c\u7db2\u969b\u7db2\u8def\u4e5f\u67e5\u4e0d\u5230\u4f60\u7684 DNS \u8a2d\u5b9a\u5c31\u662f\u4e86\uff5e\u53cd\u6b63\u662f\u7df4\u529f\u561b\uff01^_^<\/p>\n<p>\u81f3\u65bc\u8cc7\u6599\u5eab\u7684\u6b63\u3001\u53cd\u89e3\u5c0d\u61c9\u4e0a\uff0c\u4f9d\u64da\u5be6\u969b\u7684\u6e2c\u8a66\u74b0\u5883\uff0c\u898f\u5283\u5982\u4e0b (\u4ea6\u8acb\u53c3\u8003\u7b2c\u4e09\u7ae0<a href=\"http:\/\/linux.vbird.org\/linux_server\/0120intranet.php#fig3.2-1\">\u5716 3.2-1<\/a>)\uff1a<\/p>\n<p>\u4f5c\u696d\u7cfb\u7d71\u8207IP<br \/>\n\u4e3b\u6a5f\u540d\u7a31\u8207 RR \u6a19\u8a8c<br \/>\n\u8aaa\u660e<\/p>\n<p>Linux (192.168.100.254)<br \/>\nmaster.centos.vbird (NS, A)<br \/>\nwww.centos.vbird (A)<br \/>\nlinux.centos.vbird (CNAME)<br \/>\nftp.centos.vbird (CNAME)<br \/>\nforum.centos.vbird (CNAME)<br \/>\nwww.centos.vbird (MX)<br \/>\nDNS \u8a2d\u7f6e\u662f\u4f7f\u7528 master.centos.vbird \u9019\u500b DNS \u4f3a\u670d\u5668\u540d\u7a31\u3002\u81f3\u65bc\u9019\u90e8\u4e3b\u6a5f\u7684\u53e6\u4e00\u500b\u4e3b\u8981\u540d\u7a31\u662f www.centos.vbird\uff0c\u5176\u4ed6\u7684\u90fd\u662f CNAME\uff0c\u9019\u6a23\u672a\u4f86\u6bd4\u8f03\u597d\u4fee\u6539\u3002\u540c\u6642\u7d66\u4e88\u4e00\u500b MX \u7684\u6a19\u8a8c\u7d66\u4e3b\u8981\u4e3b\u6a5f\u540d\u5594<\/p>\n<p>Linux (192.168.100.10)<br \/>\nslave.centos.vbird (NS, A)<br \/>\nclientlinux.centos.vbird(A)<br \/>\n\u672a\u4f86\u4f5c\u70ba slave DNS \u7684\u63a5\u73ed\u4eba\uff5e<\/p>\n<p>WinXP (192.168.1.101)<br \/>\nworkstation.centos.vbird (A)<br \/>\n\u4e00\u90e8\u7d93\u5e38\u7528\u4f86\u5de5\u4f5c\u7684\u5de5\u4f5c\u6a5f<\/p>\n<p>WinXP (192.168.100.20)<br \/>\nwinxp.centos.vbird (A)<br \/>\n\u4e00\u90e8\u7528\u4f86\u6e2c\u8a66\u7684 Windows XP<\/p>\n<p>Win7 (192.168.100.30)<br \/>\nwin7.centos.vbird (A)<br \/>\n\u4e00\u90e8\u7528\u4f86\u6e2c\u8a66\u7684 Windows 7<\/p>\n<p>\u8acb\u7279\u5225\u7559\u610f\u554a\uff0c\u4e00\u500b IP \u53ef\u4ee5\u5c0d\u61c9\u7d66\u591a\u500b\u4e3b\u6a5f\u540d\u7a31\uff0c\u540c\u6a23\u7684\uff0c\u4e00\u500b\u4e3b\u6a5f\u540d\u7a31\u53ef\u4ee5\u7d66\u4e88\u591a\u500b IP \u5594\uff01 \u4e3b\u8981\u662f\u56e0\u70ba\u90a3\u90e8 www.centos.vbird \u7684\u6a5f\u5668\u672a\u4f86\u7684\u7528\u9014\u76f8\u7576\u7684\u591a\uff0c\u9ce5\u54e5\u5e0c\u671b\u90a3\u4e00\u90e8\u4e3b\u6a5f\u6709\u591a\u500b\u540d\u7a31\uff0c\u4ee5\u65b9\u4fbf\u672a\u4f86\u984d\u5916\u7684\u898f\u5283\u554a\u3002 \u6240\u4ee5\u5c31\u5c0d\u8a72 IP \u5c0d\u61c9\u4e86\u56db\u500b\u4e3b\u6a5f\u540d\u7a31\u554a\uff01<\/p>\n<p><b>Tips:<\/b><br \/>\n\u5728\u81ea\u5bb6\u8a2d\u7684\u6c92\u6709\u7d93\u904e\u5408\u6cd5\u6388\u6b0a\u7684 DNS \u6700\u597d\u4e0d\u8981\u4ee5 Internet \u4e0a\u9762\u5df2\u7d93\u5b58\u5728\u7684\u9818\u57df\u540d\u7a31\u4f86\u7df4\u7fd2\u67b6\u8a2d\uff01 \u8209\u4f8b\u4f86\u8aaa\uff0c\u5047\u8a2d\u4eca\u5929\u4f60\u4ee5 192.168.100.254 \u90a3\u90e8\u6a5f\u5668\u4f86\u67b6\u8a2d *.yahoo.com \u7684\u9818\u57df\uff0c \u56e0\u70ba\u6211\u5c07 192.168.100.254 \u653e\u7f6e\u5728\u7b2c\u4e00\u4f4d\uff0c\u5c0e\u81f4\u6bcf\u6b21\u7684\u67e5\u8a62\u5176\u5be6 yahoo.com \u9019\u500b\u9818\u57df\u7684\u8cc7\u6599\u90fd\u662f\u76f4\u63a5\u7531 192.168.100.254 \u6240\u63d0\u4f9b\uff0c\u9019\u5f88\u4e0d\u597d\uff5e\u56e0\u70ba\u53ef\u80fd\u6703\u9020\u6210\u4f60\u7684\u7528\u6236\u7aef\u7684\u4e0d\u4fbf\uff5e<br \/>\n<img decoding=\"async\" title=\"\u9ce5\u54e5\u7684\u5716\u793a\" src=\"http:\/\/linux.vbird.org\/images\/vbird_face.gif\" alt=\"\u9ce5\u54e5\u7684\u5716\u793a\" \/><\/p>\n<hr \/>\n<p><a name=\"DNS_master_named.conf\"><\/a><img loading=\"lazy\" decoding=\"async\" src=\"http:\/\/linux.vbird.org\/images\/penguin-s.gif\" alt=\"\u5c0f\u6a19\u984c\u7684\u5716\u793a\" width=\"16\" height=\"23\" align=\"middle\" \/>19.4.4 \u6b65\u9a5f\u4e8c\uff1a\u4e3b\u8a2d\u5b9a\u6a94 \/etc\/named.conf \u7684\u8a2d\u7f6e<\/p>\n<p>\u9019\u500b\u8a2d\u5b9a\u6a94\u8f03\u591a\u7684 options \u53c3\u6578\u6211\u5011\u5df2\u7d93\u5728 <a href=\"http:\/\/linux.vbird.org\/linux_server\/0350dns.php#named.conf_1\">19.3.3<\/a> \u88e1\u9762\u8ac7\u904e\uff0c\u5728\u6211\u5011\u76ee\u524d\u7684\u6848\u4f8b\u4e2d\uff0c \u5247\u5fc5\u9808\u8981\u5c07 forwarders \u76f8\u95dc\u529f\u80fd\u53d6\u6d88\uff0c\u4e26\u52a0\u4e0a\u7981\u6b62\u50b3\u8f38 zone file \u7684\u53c3\u6578\u5373\u53ef\u3002\u81f3\u65bc zone \u7684\u8a2d\u5b9a\u4e0a\uff0c\u5fc5\u9808\u8981\u5305\u542b\u4e0a\u500b\u5c0f\u7bc0\u8ac7\u5230\u7684\u4e09\u500b\u4e3b\u8981\u7684 zone \u5594\uff01\u56e0\u6b64\u9019\u500b\u6a94\u6848\u7684\u4efb\u52d9\u662f\uff1a<\/p>\n<ul>\n<li>options\uff1a\u898f\u7bc4 DNS \u4f3a\u670d\u5668\u7684\u4f7f\u7528\u6b0a\u9650 (\u53ef\u5426\u67e5\u8a62\u3001forward \u8207\u5426\u7b49)\uff1b<\/li>\n<li>zone\uff1a\u8a2d\u5b9a\u51fa zone (domain name) \u4ee5\u53ca zone file \u7684\u6240\u5728 (\u5305\u542b master\/slave\/hint)\uff1b<\/li>\n<li>\u5176\u4ed6\uff1a\u8a2d\u5b9a DNS \u672c\u6a5f\u7ba1\u7406\u4ecb\u9762\u4ee5\u53ca\u5176\u76f8\u95dc\u7684\u91d1\u9470\u6a94\u6848 (key file)\u3002(\u672c\u7ae0\u7a0d\u5f8c\u9032\u968e\u61c9\u7528\u518d\u8ac7)<\/li>\n<\/ul>\n<p>\u90a3\u5c31\u76f4\u63a5\u770b\u4e00\u4e0b\u9ce5\u54e5\u7684\u7bc4\u672c\u5427\uff1a<\/p>\n<pre>[root@www ~]# vim \/etc\/named.conf\r\noptions {\r\n        directory       \"\/var\/named\";\r\n        dump-file       \"\/var\/named\/data\/cache_dump.db\";\r\n        statistics-file \"\/var\/named\/data\/named_stats.txt\";\r\n        memstatistics-file \"\/var\/named\/data\/named_mem_stats.txt\";\r\n        allow-query     { any; };\r\n        recursion yes;\r\n        allow-transfer  { none; };   \/\/ \u4e0d\u8a31\u5225\u4eba\u9032\u884c zone \u8f49\u79fb\r\n};\r\n\r\nzone \".\" IN {\r\n        type hint;\r\n        file \"named.ca\";\r\n};\r\nzone \"centos.vbird\" IN {            \/\/ \u9019\u500b zone \u7684\u540d\u7a31\r\n        type master;                \/\/ \u662f\u4ec0\u9ebc\u985e\u578b\r\n        file \"named.centos.vbird\";  \/\/ \u6a94\u6848\u653e\u5728\u54ea\u88e1\r\n};\r\nzone \"100.168.192.in-addr.arpa\" IN {\r\n        type master;\r\n        file \"named.192.168.100\";\r\n};\r\n<\/pre>\n<p>\u5728 options \u88e1\u9762\u50c5\u65b0\u589e\u4e00\u500b\u65b0\u7684\u53c3\u6578\uff0c\u5c31\u662f allow-transfer\uff0c\u610f\u7fa9\u70ba\uff1a<\/p>\n<ul>\n<li>allow-transfer ( none; };<br \/>\n\u662f\u5426\u5141\u8a31\u4f86\u81ea slave DNS \u5c0d\u6211\u7684\u6574\u500b\u9818\u57df\u8cc7\u6599\u9032\u884c\u50b3\u9001\uff1f\u9019\u500b\u8a2d\u5b9a\u503c\u8207 master\/slave DNS \u4f3a\u670d\u5668\u4e4b\u9593\u7684\u8cc7\u6599\u5eab\u50b3\u9001\u6709\u95dc\u3002\u9664\u975e\u4f60\u6709 slave DNS \u4f3a\u670d\u5668\uff0c\u5426\u5247\u9019\u88e1\u4e0d\u8981\u958b\u653e\u5594\uff01\u56e0\u6b64\u9019\u88e1\u6211\u5011\u5148\u8a2d\u5b9a\u70ba none\u3002<\/li>\n<\/ul>\n<p>\u81f3\u65bc\u5728 zone \u88e1\u9762\u7684\u8a2d\u5b9a\u503c\uff0c\u4e3b\u8981\u5247\u6709\u5e95\u4e0b\u5e7e\u500b\uff1a<\/p>\n<p>zone \u5167\u7684\u76f8\u95dc\u53c3\u6578\u8aaa\u660e<\/p>\n<p>\u8a2d\u5b9a\u503c<br \/>\n\u610f\u7fa9<\/p>\n<p>type<br \/>\n\u8a72 zone \u7684\u985e\u578b\uff0c\u4e3b\u8981\u7684\u985e\u578b\u6709\u91dd\u5c0d . \u7684 hint\uff0c\u4ee5\u53ca\u81ea\u5df1\u624b\u52d5\u4fee\u6539\u8cc7\u6599\u5eab\u6a94\u6848\u7684 master\uff0c\u8207\u53ef\u81ea\u52d5\u66f4\u65b0\u8cc7\u6599\u5eab\u7684 slave\u3002<\/p>\n<p>file<br \/>\n\u5c31\u662f zone file \u7684\u6a94\u540d\u554a\uff01(\u6ce8\u610f chroot \u8207\u5426\u5466\uff01)<\/p>\n<p>\u53cd\u89e3 zone<br \/>\n\u4e3b\u8981\u5c31\u662f in-addr.arpa \u9019\u500b\u73a9\u610f\u5152\uff01\u8acb\u53c3\u8003 <a href=\"http:\/\/linux.vbird.org\/linux_server\/0350dns.php#DNS_master_rr_re\">19.4.2<\/a> \u7684\u89e3\u91cb<\/p>\n<p>\u70ba\u4f55\u6a94\u540d\u90fd\u662f named \u958b\u982d\u5462\uff1f\u9019\u53ea\u662f\u500b\u7fd2\u6163\u800c\u5df2\uff0c\u4f60\u4e5f\u53ef\u4ee5\u4f9d\u64da\u81ea\u5df1\u7684\u7fd2\u6163\u4f86\u8a02\u5b9a\u6a94\u540d\u7684\u3002\u7d93\u904e\u4e0a\u9762\u7684\u8aaa\u660e\uff0c\u6240\u4ee5\u6211\u5011\u6703\u77e5\u9053\uff0czone file \u6a94\u540d\u90fd\u662f\u900f\u904e named.conf \u9019\u500b\u8a2d\u5b9a\u6a94\u4f86\u898f\u7bc4\u7684\u554a\uff01<\/p>\n<hr \/>\n<p><a name=\"DNS_master_root\"><\/a><img loading=\"lazy\" decoding=\"async\" src=\"http:\/\/linux.vbird.org\/images\/penguin-s.gif\" alt=\"\u5c0f\u6a19\u984c\u7684\u5716\u793a\" width=\"16\" height=\"23\" align=\"middle\" \/>19.4.5 \u6b65\u9a5f\u4e09\uff1a\u6700\u4e0a\u5c64 . (root) \u8cc7\u6599\u5eab\u6a94\u6848\u7684\u8a2d\u5b9a<\/p>\n<p>\u5f9e <a href=\"http:\/\/linux.vbird.org\/linux_server\/0350dns.php#fig19.1-4\">\u5716 19.1-4<\/a> \u53ef\u4ee5\u77e5\u9053 . \u7684\u91cd\u8981\u6027\uff01\u90a3\u9ebc\u9019\u500b . \u5728\u54ea\u88e1\u5462\uff1f\u4e8b\u5be6\u4e0a\uff0c\u5b83\u662f\u7531 INTERNIC \u6240\u7ba1\u7406\u7dad\u8b77\u7684\uff0c\u5168\u4e16\u754c\u5171\u6709 13 \u90e8\u7ba1\u7406 . \u7684 DNS \u4f3a\u670d\u5668\u5462\uff01\u76f8\u95dc\u7684\u6700\u65b0\u8a2d\u5b9a\u5728\uff1a<\/p>\n<ul>\n<li><a href=\"ftp:\/\/rs.internic.net\/domain\/named.root\">ftp:\/\/rs.internic.net\/domain\/named.root<\/a><\/li>\n<\/ul>\n<p>\u8981\u4e0d\u8981\u4e0b\u8f09\u6700\u65b0\u7684\u8cc7\u6599\u96a8\u4f60\u4fbf\uff0c\u56e0\u70ba\u6211\u5011\u7684 CentOS 6.x \u5167\u7684 bind \u8edf\u9ad4\u5df2\u7d93\u63d0\u4f9b\u4e86\u4e00\u500b\u540d\u70ba named.ca \u7684\u6a94\u6848\u4e86\uff0c\u9ce5\u54e5\u662f\u76f4\u63a5\u4f7f\u7528\u7cfb\u7d71\u63d0\u4f9b\u7684\u8cc7\u6599\u5566\u3002\u9019\u500b\u6a94\u6848\u7684\u5167\u5bb9\u6709\u9ede\u50cf\u9019\u6a23\uff1a<\/p>\n<pre>[root@www ~]# vim \/var\/named\/named.ca\r\n. &lt;==\u9019\u88e1\u6709\u500b\u5c0f\u6578\u9ede     518400  IN      NS      A.ROOT-SERVERS.NET.\r\nA.ROOT-SERVERS.NET.     3600000 IN      A       198.41.0.4\r\n# \u4e0a\u9762\u9019\u5169\u884c\u662f\u6210\u5c0d\u7684\uff01\u4ee3\u8868\u9ede\u7531 A.ROOT-SERVERS.NET. \u7ba1\u7406\uff0c\u4e26\u9644\u4e0a IP \u67e5\u8a62\r\n. &lt;==\u9019\u88e1\u6709\u500b\u5c0f\u6578\u9ede     518400  IN      NS      M.ROOT-SERVERS.NET.\r\nM.ROOT-SERVERS.NET.     3600000 IN      A       202.12.27.33\r\nM.ROOT-SERVERS.NET.     3600000 IN      AAAA    2001:dc3::35\r\n# \u4e0a\u9762\u9019\u4e09\u884c\u662f\u6210\u5c0d\u7684\uff0c\u4ee3\u8868 M \u958b\u982d\u7684\u4f3a\u670d\u5668\u6709 A \u8207 AAAA \u7684\u8a18\u9304\r\n<\/pre>\n<p>\u76f8\u95dc\u7684\u6b63\u89e3\u6a19\u8a8c NS, A, AAAA \u610f\u7fa9\uff0c\u8acb\u56de <a href=\"http:\/\/linux.vbird.org\/linux_server\/0350dns.php#DNS_master_rr\">19.4.1<\/a> \u53bb\u67e5\u8a62\uff0c\u9019\u88e1\u4e0d\u518d\u89e3\u91cb\u3002 \u6bd4\u8f03\u7279\u6b8a\u7684\u662f\uff0c\u7531\u65bc\u8003\u616e IPv6 \u672a\u4f86\u7684\u6d41\u884c\u6027\uff0c\u56e0\u6b64\u5f88\u591a\u90e8 . \u4f3a\u670d\u5668\u90fd\u52a0\u4e0a AAAA \u7684 IPv6 \u529f\u80fd\u56c9\u3002 \u9019\u500b\u6a94\u6848\u7684\u5167\u5bb9\u4f60\u4e0d\u8981\u4fee\u6539\u554a\uff5e\u56e0\u70ba\u9019\u500b\u5167\u5bb9\u662f Internet \u4e0a\u9762\u901a\u7528\u7684\u8cc7\u6599\uff0c\u4e00\u822c\u4f86\u8aaa\uff0c\u4e5f\u4e0d\u6703\u5e38\u5e38\u8b8a\u52d5\uff0c \u6240\u4ee5\u4e0d\u9700\u8981\u66f4\u52d5\u4ed6\uff0c\u5c07\u4ed6\u653e\u7f6e\u5230\u6b63\u78ba\u7684\u76ee\u9304\u4e26\u6539\u6210\u4f60\u6240\u6307\u5b9a\u7684\u6a94\u540d\u5373\u53ef\u554a\uff01\u63a5\u4e0b\u4f86\u53ef\u4ee5\u770b\u770b\u5176\u4ed6\u6b63\u89e3\u6a94\u6848\u5566\uff01<\/p>\n<hr \/>\n<p><a name=\"DNS_master_name\"><\/a><img loading=\"lazy\" decoding=\"async\" src=\"http:\/\/linux.vbird.org\/images\/penguin-s.gif\" alt=\"\u5c0f\u6a19\u984c\u7684\u5716\u793a\" width=\"16\" height=\"23\" align=\"middle\" \/>19.4.6 \u6b65\u9a5f\u56db\uff1a\u6b63\u89e3\u8cc7\u6599\u5eab\u6a94\u6848\u7684\u8a2d\u5b9a<\/p>\n<p>\u518d\u4f86\u958b\u59cb\u6b63\u89e3\u6a94\u7684\u8a2d\u5b9a\u5427\uff01\u6b63\u89e3\u6a94\u4e00\u5b9a\u8981\u6709\u7684 RR \u6a19\u8a8c\u6709\u5e95\u4e0b\u5e7e\u500b\u5594\uff1a<\/p>\n<ul>\n<li>\u95dc\u65bc\u672c\u9818\u57df\u7684\u57fa\u790e\u8a2d\u5b9a\u65b9\u9762\uff1a\u4f8b\u5982\u5feb\u53d6\u8a18\u61b6\u6642\u9593 (TTL)\u3001\u9818\u57df\u540d\u7a31 (ORIGIN) \u7b49\uff1b<\/li>\n<li>\u95dc\u65bc master\/slave \u7684\u8a8d\u8b49\u65b9\u9762 (SOA)\uff1b<\/li>\n<li>\u95dc\u65bc\u672c\u9818\u57df\u7684\u9818\u57df\u540d\u7a31\u4f3a\u670d\u5668\u6240\u5728\u4e3b\u6a5f\u540d\u7a31\u8207 IP \u5c0d\u61c9 (NS, A)\uff1b<\/li>\n<li>\u5176\u4ed6\u6b63\u53cd\u89e3\u76f8\u95dc\u7684\u8cc7\u6e90\u8a18\u9304 (A, MX, CNAME \u7b49)\u3002<\/li>\n<\/ul>\n<p>\u76f8\u95dc\u7684 RR \u610f\u7fa9\u8acb\u56de <a href=\"http:\/\/linux.vbird.org\/linux_server\/0350dns.php#DNS_master_rr\">19.4.1<\/a> \u53bb\u67e5\u8a62\u3002\u6b64\u5916\uff0c\u9019\u500b\u6a94\u6848\u7684\u7279\u6b8a\u7b26\u865f\u4e5f\u5f97\u8ddf\u5927\u5bb6\u5831\u544a\u4e00\u4e0b\uff1a<\/p>\n<p>\u5b57\u5143<br \/>\n\u610f\u7fa9<\/p>\n<p>\u4e00\u5b9a\u5f9e\u884c\u9996\u958b\u59cb<br \/>\n\u6240\u6709\u8a2d\u5b9a\u8cc7\u6599\u4e00\u5b9a\u8981\u5f9e\u884c\u9996\u958b\u59cb\uff0c\u524d\u9762\u4e0d\u53ef\u6709\u7a7a\u767d\u5b57\u5143\u3002\u82e5\u6709\u7a7a\u767d\u5b57\u5143\uff0c\u4ee3\u8868\u5ef6\u7e8c\u524d\u4e00\u500b domain \u7684\u610f\u601d\uff5e\u975e\u5e38\u91cd\u8981\uff5e<\/p>\n<p>@<br \/>\n\u9019\u500b\u7b26\u865f\u4ee3\u8868 zone \u7684\u610f\u601d\uff01\u4f8b\u5982\u5beb\u5728 named.centos.vbird \u4e2d\uff0c@ \u4ee3\u8868 centos.vbird.\uff0c\u5982\u679c\u5beb\u5728 named.192.168.100 \u6a94\u6848\u4e2d\uff0c\u5247 @ \u4ee3\u8868 100.168.192.in-addr.arpa. \u7684\u610f\u601d (\u53c3\u8003 named.conf \u5167\u7684 zone \u8a2d\u5b9a)<\/p>\n<p>.<br \/>\n\u9019\u500b\u9ede (.) \u5f88\u91cd\u8981\uff01\u56e0\u70ba\u4ed6\u4ee3\u8868\u4e00\u500b\u5b8c\u6574\u4e3b\u6a5f\u540d\u7a31 (FQDN) \u800c\u4e0d\u662f\u50c5\u6709 hostname \u800c\u5df2\u3002\u8209\u4f8b\u4f86\u8aaa\uff0c\u5728 named.centos.vbird \u7576\u4e2d\u5beb www.centos.vbird \u5247\u4ee3\u8868 FQDN \u70ba www.centos.vbird.@ ==&gt; www.centos.vbird.centos.vbird. \u5594\uff01\u56e0\u6b64\u7576\u7136\u8981\u5beb\u6210 www.centos.vbird. \u624d\u5c0d\uff01<\/p>\n<p>;<br \/>\n\u4ee3\u8868\u8a3b\u89e3\u7b26\u865f\uff5e\u4f3c\u4e4e # \u4e5f\u662f\u8a3b\u89e3\uff5e\u5169\u500b\u7b26\u865f\u90fd\u80fd\u4f7f\u7528<\/p>\n<p>\u9ce5\u54e5\u6253\u7b97\u6cbf\u7528\u7cfb\u7d71\u63d0\u4f9b\u7684\u4e00\u4e9b\u8a2d\u5b9a\u6a94\uff0c\u7136\u5f8c\u64da\u4ee5\u4fee\u6539\u6210\u70ba\u9ce5\u54e5\u81ea\u5df1\u9700\u8981\u7684\u74b0\u5883\u3002\u6574\u500b DNS \u662f\u7531 master.centos.vbird \u9019\u90e8\u4f3a\u670d\u5668\u7ba1\u7406\u7684\uff0c\u800c\u7ba1\u7406\u8005\u7684 email \u70ba vbird@www.centos.vbird \u9019\u500b\u3002\u6574\u500b\u6b63\u89e3\u6a94\u6700\u7d42\u6709\u9ede\u50cf\u9019\u6a23\uff1a<\/p>\n<pre>[root@www ~]# vim \/var\/named\/named.centos.vbird\r\n# \u8207\u6574\u500b\u9818\u57df\u76f8\u95dc\u6027\u8f03\u9ad8\u7684\u8a2d\u5b9a\u5305\u62ec NS, A, MX, SOA \u7b49\u6a19\u8a8c\u7684\u8a2d\u5b9a\u8655\uff01\r\n$TTL    600\r\n@                       IN <u>SOA   master.centos.vbird. vbird.www.centos.vbird. (<\/u>\r\n                                 <u>2011080401 3H 15M 1W 1D )<\/u> ; \u8207\u4e0a\u9762\u662f\u540c\u4e00\u884c\r\n@                       IN <u>NS    master.centos.vbird.<\/u>  ; DNS \u4f3a\u670d\u5668\u540d\u7a31\r\nmaster.centos.vbird.    IN <u>A     192.168.100.254<\/u>         ; DNS \u4f3a\u670d\u5668 IP\r\n@                       IN <u>MX 10 www.centos.vbird.<\/u>     ; \u9818\u57df\u540d\u7a31\u7684\u90f5\u4ef6\u4f3a\u670d\u5668\r\n\r\n# \u91dd\u5c0d 192.168.100.254 \u9019\u90e8\u4e3b\u6a5f\u7684\u6240\u6709\u76f8\u95dc\u6b63\u89e3\u8a2d\u5b9a\u3002\r\nwww.centos.vbird.       IN <u>A     192.168.100.254<\/u>\r\nlinux.centos.vbird.     IN CNAME www.centos.vbird.\r\nftp.centos.vbird.       IN CNAME www.centos.vbird.\r\nforum.centos.vbird.     IN CNAME www.centos.vbird.\r\n\r\n# \u5176\u4ed6\u5e7e\u90e8\u4e3b\u6a5f\u7684\u4e3b\u6a5f\u540d\u7a31\u6b63\u89e3\u8a2d\u5b9a\u3002\r\nslave.centos.vbird.       IN A    192.168.100.10\r\nclientlinux.centos.vbird. IN A    192.168.100.10\r\nworkstation.centos.vbird. IN A    192.168.1.101\r\nwinxp.centos.vbird.       IN A    192.168.100.20\r\n<u>win7                      IN A    192.168.100.30<\/u>  ; \u9019\u662f\u7c21\u5316\u7684\u5beb\u6cd5\uff01\r\n<\/pre>\n<p>\u518d\u6b21\u5f37\u8abf\uff0c\u4e00\u500b\u6b63\u89e3\u7684\u8cc7\u6599\u5eab\u8a2d\u5b9a\u4e2d\uff0c\u81f3\u5c11\u61c9\u8a72\u8981\u6709 $TTL, SOA, NS (\u8207\u9019\u90e8 NS \u4e3b\u6a5f\u540d\u7a31\u7684 A)\uff0c \u9ce5\u54e5\u5c07\u9019\u4e9b\u57fa\u672c\u8981\u7528\u5230\u7684\u6a19\u8a8c\u5beb\u5728\u4e0a\u8868\u7684\u7b2c\u4e00\u90e8\u4efd\u3002\u81f3\u65bc\u5176\u4ed6\u7684\uff0c\u5247\u662f\u76f8\u95dc\u7684\u4e3b\u6a5f\u540d\u7a31\u6b63\u89e3\u8a2d\u5b9a\u56c9\u3002 \u5982\u679c\u9019\u4e9b\u8a2d\u5b9a\u503c\u4f60\u770b\u4e0d\u61c2\uff0c\u90a3\u9ebc\uff0c\u53ef\u4ee5\u80af\u5b9a\u7684\u662f\uff0c\u8acb\u56de <a href=\"http:\/\/linux.vbird.org\/linux_server\/0350dns.php#DNS_master_rr\">19.4.1<\/a> \u53bb\u77a7\u77a7\u5427\uff01 \u5e95\u4e0b\u5f37\u8abf\u4e00\u4e0b\u4e4b\u524d\u6c92\u6709\u8b1b\u5230\u7684\u8a2d\u5b9a\u503c\u9805\u76ee\uff1a<\/p>\n<p>\u95dc\u65bc\u672c\u9818\u57df\u7684\u4e00\u4e9b\u8a2d\u5b9a\u503c<\/p>\n<p>\u8a2d\u5b9a\u503c<br \/>\n\u8aaa\u660e<\/p>\n<p>$TTL<br \/>\n\u70ba\u4e86\u7c21\u5316\u6bcf\u7b46 RR \u8a18\u9304\u7684\u8a2d\u5b9a\uff0c\u56e0\u6b64\u6211\u5011\u5c07 TTL \u632a\u5230\u6700\u524d\u9762\u7d71\u4e00\u8a2d\u5b9a\u3002\u56e0\u70ba\u9ce5\u54e5\u7684 DNS \u4f3a\u670d\u5668\u9084\u5728\u6e2c\u8a66\u4e2d\uff0c\u6240\u4ee5 TTL \u5beb\u4e86\u500b\u6bd4\u8f03\u5c0f\u7684\u6578\u503c\uff0c\u53ef\u4ee5\u5b58\u5728\u5c0d\u65b9 DNS \u4f3a\u670d\u5668\u7684\u5feb\u53d6 600 \u79d2\u800c\u5df2\u3002<\/p>\n<p>$ORIGIN<br \/>\n\u9019\u500b\u8a2d\u5b9a\u503c\u53ef\u4ee5\u91cd\u65b0\u6307\u5b9a zone \u7684\u5b9a\u7fa9\u3002\u5728\u9810\u8a2d\u7684\u60c5\u6cc1\u4e0b\uff0c\u9019\u500b\u6b63\u53cd\u89e3\u8cc7\u6599\u5eab\u6a94\u6848\u4e2d\u7684 zone \u662f\u7531 named.conf \u6240\u6307\u5b9a\u7684\uff0c\u5c31\u662f zone \u90a3\u500b\u53c3\u6578\u7684\u529f\u80fd\u3002 \u4e0d\u904e\uff0c\u9019\u500b zone \u662f\u53ef\u4ee5\u6539\u7684\uff0c\u5c31\u662f\u7528 $ORIGIN \u4f86\u4fee\u8a02\u5c31\u662f\u4e86\u3002\u901a\u5e38\u9019\u500b\u8a2d\u5b9a\u503c\u4e0d\u6703\u7528\u5230\u7684<\/p>\n<p>\u8001\u5be6\u8aaa\uff0c\u521d\u6b21\u8a2d\u5b9a DNS \u7684\u670b\u53cb\u5927\u6982\u90fd\u6703\u88ab\u90a3\u500b\u5c0f\u6578\u9ede (.) \u73a9\u6b7b\uff5e\u5176\u5be6\u4f60\u4e0d\u8981\u592a\u7dca\u5f35\uff0c\u53ea\u8981\u8a18\u4f4f\uff1a\u300e \u52a0\u4e0a\u4e86 . \u8868\u793a\u9019\u662f\u500b\u5b8c\u6574\u7684\u4e3b\u6a5f\u540d\u7a31 (FQDN)\uff0c\u4ea6\u5373\u662f &#8220;hostname + domain name&#8221; \u4e86\uff0c \u5982\u679c\u6c92\u6709\u52a0\u4e0a . \u7684\u8a71\uff0c\u8868\u793a\u8a72\u540d\u7a31\u50c5\u70ba &#8220;hostname&#8221; \u800c\u5df2\uff01\u56e0\u70ba\u6211\u5011\u9019\u500b\u8a2d\u5b9a\u6a94\u7684 zone \u662f centos.vbird\uff0c \u6240\u4ee5\u4e0a\u8868\u7684\u6700\u5f8c\u4e00\u884c\uff0c\u9ce5\u54e5\u53ea\u5beb\u51fa\u4e3b\u6a5f\u540d\u7a31 (win7) \uff0c\u56e0\u70ba\u6c92\u6709\u5c0f\u6578\u9ede\u7d50\u5c3e\uff0c\u56e0\u6b64\u5b8c\u6574\u7684 FQDN \u8981\u52a0\u4e0a zone\uff0c\u6240\u4ee5\u4e3b\u6a5f\u540d\u7a31 win7 \u4ee3\u8868\u7684\u662f\uff1a win7.centos.vbird. \u5594\uff01<\/p>\n<hr \/>\n<p><a name=\"DNS_master_ip\"><\/a><img loading=\"lazy\" decoding=\"async\" src=\"http:\/\/linux.vbird.org\/images\/penguin-s.gif\" alt=\"\u5c0f\u6a19\u984c\u7684\u5716\u793a\" width=\"16\" height=\"23\" align=\"middle\" \/>19.4.7 \u6b65\u9a5f\u4e94\uff1a\u53cd\u89e3\u8cc7\u6599\u5eab\u6a94\u6848\u7684\u8a2d\u5b9a<\/p>\n<p>\u53cd\u89e3\u8ddf\u6b63\u89e3\u4e00\u6a23\uff0c\u9084\u90fd\u9700\u8981 TTL, SOA, NS \u7b49\u7b49\u7684\uff0c\u4f46\u662f\u76f8\u5c0d\u65bc\u6b63\u89e3\u88e1\u9762\u6709 A\uff0c\u53cd\u89e3\u88e1\u9762\u5247\u50c5\u6709 PTR \u5594\uff01 \u53e6\u5916\uff0c\u7531\u65bc\u53cd\u89e3\u7684 zone \u540d\u7a31\u662f\u5f88\u602a zz.yy.xx.in-addr.arpa. \u7684\u6a21\u6a23\uff0c\u56e0\u6b64\u53ea\u8981\u5728\u53cd\u89e3\u88e1\u9762\u8981\u7528\u5230\u4e3b\u6a5f\u540d\u7a31\u6642\uff0c \u52d9\u5fc5\u4f7f\u7528 FQDN \u4f86\u8a2d\u5b9a\u554a\uff01\u66f4\u591a\u8207\u53cd\u89e3\u6709\u95dc\u7684\u8cc7\u6599\uff0c\u8acb\u5230 <a href=\"http:\/\/linux.vbird.org\/linux_server\/0350dns.php#DNS_master_rr_re\">19.4.2<\/a> \u53bb\u67e5\u95b1\u5594\uff01 \u81f3\u65bc 192.168.100.0\/24 \u9019\u500b\u7db2\u57df\u7684 DNS \u53cd\u89e3\u5247\u6210\u70ba\uff1a<\/p>\n<pre>[root@www ~]# vim \/var\/named\/named.192.168.100\r\n$TTL    600\r\n@       IN SOA  master.centos.vbird. vbird.www.centos.vbird. (\r\n                2011080401 3H 15M 1W 1D )\r\n@       IN NS   master.centos.vbird.\r\n254     IN PTR  master.centos.vbird.  ; \u5c07\u539f\u672c\u7684 A \u6539\u6210 PTR \u7684\u6a19\u8a8c\u800c\u5df2\r\n\r\n254     IN PTR  www.centos.vbird.     ; \u9019\u4e9b\u662f\u7279\u5b9a\u7684 IP \u5c0d\u61c9\r\n10      IN PTR  slave.centos.vbird.\r\n20      IN PTR  winxp.centos.vbird.\r\n30      IN PTR  win7.centos.vbird.\r\n\r\n101     IN PTR  dhcp101.centos.vbird.  ; \u53ef\u80fd\u91dd\u5c0d DHCP (\u7b2c\u5341\u4e8c\u7ae0) \u7684 IP \u8a2d\u5b9a\r\n102     IN PTR  dhcp102.centos.vbird.\r\n....(\u4e2d\u9593\u7701\u7565)....\r\n200     IN PTR  dhcp200.centos.vbird.\r\n<\/pre>\n<p>\u56e0\u70ba\u6211\u5011\u7684 zone \u662f 100.168.192.in-addr.arpa. \u9019\u4e00\u500b\uff0c\u56e0\u6b64 IP \u7684\u5168\u540d\u90e8\u5206\u5df2\u7d93\u542b\u6709 192.168.100 \u4e86\uff0c \u6240\u4ee5\u5728\u4e0a\u8868\u7576\u4e2d\u7684\u6700\u5de6\u908a\uff0c\u6578\u503c\u53ea\u9700\u8981\u5b58\u5728\u6700\u5f8c\u4e00\u500b IP \u5373\u53ef\u3002\u56e0\u6b64 254 \u5c31\u4ee3\u8868 192.168.100.254 \u56c9\uff01 \u6b64\u5916\uff0c\u70ba\u4e86\u64d4\u5fc3 DHCP \u81ea\u52d5\u5206\u914d\u7684 IP \u6c92\u6709\u5c0d\u61c9\u7684\u4e3b\u6a5f\u540d\u7a31\uff0c\u6240\u4ee5\u9019\u88e1\u4e5f\u9644\u639b\u4e86 192.168.100.{101~200} \u7684\u4e3b\u6a5f\u540d\u7a31\u5c0d\u61c9\u5594\uff01<\/p>\n<hr \/>\n<p><a name=\"DNS_master_start\"><\/a><img loading=\"lazy\" decoding=\"async\" src=\"http:\/\/linux.vbird.org\/images\/penguin-s.gif\" alt=\"\u5c0f\u6a19\u984c\u7684\u5716\u793a\" width=\"16\" height=\"23\" align=\"middle\" \/>19.4.8 \u6b65\u9a5f\u516d\uff1aDNS \u7684\u555f\u52d5\u3001\u89c0\u5bdf\u8207\u9632\u706b\u7246<\/p>\n<p>DNS \u7684\u555f\u52d5\u4e5f\u592a\u7c21\u55ae\u4e86\u5427\uff1f\u5c31\u76f4\u63a5\u5229\u7528\u7cfb\u7d71\u63d0\u4f9b\u7684\u555f\u52d5 script \u5373\u53ef\uff01<\/p>\n<pre>[root@www ~]# \/etc\/init.d\/named start  &lt;==\u4e5f\u53ef\u80fd\u662f\u9700\u8981 restart \u5594\r\n[root@www ~]# chkconfig named on\r\n<\/pre>\n<p>\u4f46\u5373\u4f7f\u756b\u9762\u4e0a\u51fa\u73fe\u7684\u662f\u300e\u78ba\u5b9a\u300f\u6216\u300eOK\u300f\uff0c\u90fd\u4e0d\u898b\u5f97\u4f60\u7684 DNS \u670d\u52d9\u662f\u6b63\u5e38\u7684\u3002\u6240\u4ee5\uff0c\u8acb\u4f60\u300e\u52d9\u5fc5\u300f\u67e5\u95b1 \/var\/log\/messages \u7684\u5167\u5bb9\u624d\u884c\uff01\u57fa\u672c\u4e0a\uff0c\u5167\u5bb9\u6703\u6709\u9ede\u50cf\u9019\u6a23\uff1a<\/p>\n<pre>[root@www ~]# tail -n 30 \/var\/log\/messages | grep named\r\nnamed[3511]: starting BIND 9.7.0-P2-RedHat-9.7.0-5.P2.el6_0.1 <u>-u named -t \r\n\/var\/named\/chroot<\/u>\r\nnamed[3511]: adjusted limit on open files from 1024 to 1048576\r\nnamed[3511]: found 1 CPU, using 1 worker thread\r\nnamed[3511]: using up to 4096 sockets\r\nnamed[3511]: <u>loading configuration from '\/etc\/named.conf'<\/u>\r\nnamed[3511]: using default UDP\/IPv4 port range: [1024, 65535]\r\nnamed[3511]: using default UDP\/IPv6 port range: [1024, 65535]\r\nnamed[3511]: listening on IPv4 interface lo, 127.0.0.1#53\r\nnamed[3511]: listening on IPv4 interface eth0, 192.168.1.100#53\r\nnamed[3511]: listening on IPv4 interface eth1, 192.168.100.254#53\r\nnamed[3511]: command channel listening on 127.0.0.1#953\r\nnamed[3511]: command channel listening on ::1#953\r\nnamed[3511]: the working directory is not writable\r\nnamed[3511]: <u>zone 100.168.192.in-addr.arpa\/IN: loaded serial 2011080401<\/u>\r\nnamed[3511]: <u>zone centos.vbird\/IN: loaded serial 2011080401<\/u>\r\nnamed[3511]: running\r\n<\/pre>\n<p>\u4e0a\u9762\u7684\u8f38\u51fa\u8a0a\u606f\u4e2d\uff0c\u4f60\u5f97\u8981\u7279\u5225\u6ce8\u610f\u6709\u756b\u5e95\u7dda\u7684\u90e8\u5206\u3002\u5305\u62ec -t chroot_dir \u662f\u8a2d\u5b9a chroot \u76ee\u9304\u7684\u4f4d\u7f6e\uff0c \u800c\u8a2d\u5b9a\u6a94 (configuration) \u5247\u662f \/etc\/named.conf\uff0c\u6700\u91cd\u8981\u7684\u662f\u4f60\u7684\u6240\u6709\u7684 zone (hint \u985e\u578b\u7684 . \u9664\u5916) \u7684\u5e8f\u865f (serial) \u865f\u78bc\u8981\u8ddf\u4f60\u7684\u8cc7\u6599\u5eab\u5167\u5bb9\u4e00\u81f4\u624d\u884c\uff01\u800c\u4e14\u4e0d\u80fd\u5920\u6709\u51fa\u73fe\u300e\u8a2d\u5b9a\u7684\u6a94\u540d:\u6578\u5b57\u300f\u7684\u5167\u5bb9\uff0c \u5426\u5247\u80af\u5b9a\u5c31\u662f\u8a2d\u5b9a\u6a94\u6709\u554f\u984c\uff5e\u4e0a\u9762\u7684\u8a0a\u606f\u770b\u8d77\u4f86\u9084\u7b97 OK \u5566\uff01<\/p>\n<p>\u5728\u4e0a\u8ff0\u7684\u8f38\u51fa\u8cc7\u6599\u7576\u4e2d\u56e0\u70ba\u8cc7\u8a0a\u592a\u9577\u4e86\uff0c\u6240\u4ee5\u9ce5\u54e5\u5c07\u767b\u9304\u7684\u6642\u9593\u8207\u4e3b\u6a5f\u7684\u6b04\u4f4d\u62ff\u6389\u4e86\uff01\u4e0a\u9762\u662f\u9806\u5229\u555f\u52d5\u6642\u7684\u72c0\u6cc1\uff0c \u5982\u679c\u51fa\u73fe\u554f\u984c\u600e\u8fa6\uff1f\u901a\u5e38\u51fa\u73fe\u554f\u984c\u7684\u539f\u56e0\u662f\u56e0\u70ba\uff1a<\/p>\n<ul>\n<li>\u8a9e\u6cd5\u8a2d\u5b9a\u932f\u8aa4\uff1a<br \/>\n\u9019\u500b\u554f\u984c\u597d\u89e3\u6c7a\uff0c\u56e0\u70ba\u5728 \/var\/log\/messages \u88e1\u9762\u6709\u8a73\u7d30\u7684\u8aaa\u660e\uff0c\u6309\u7167\u5167\u5bb9\u53bb\u4fee\u8a02\u5373\u53ef\uff1b<\/li>\n<li>\u908f\u8f2f\u8a2d\u5b9a\u932f\u8aa4\uff1a<br \/>\n\u9019\u500b\u5c31\u6bd4\u8f03\u56f0\u64fe\u4e86\uff01\u70ba\u4ec0\u9ebc\u5462\uff1f\u56e0\u70ba\u4ed6\u4e3b\u8981\u767c\u751f\u5728\u4f60\u8a2d\u5b9a DNS \u4e3b\u6a5f\u7684\u6642\u5019\uff0c\u8003\u616e\u4e0d\u9031\u6240\u7522\u751f\u7684\u554f\u984c\uff01\u4f8b\u5982\u5fd8\u8a18\u52a0\u4e0a (.)\uff0c \u7cfb\u7d71\u4e0d\u6703\u986f\u793a\u932f\u8aa4\u8a0a\u606f\uff0c\u4f46\u662f\u537b\u6703\u9020\u6210\u67e5\u8a62\u7684\u8aa4\u5224\uff0c\u800c MX \u8a2d\u5b9a\u7684\u4e3b\u6a5f\u540d\u7a31\u932f\u8aa4\uff0c\u4e5f\u4e0d\u6703\u51fa\u73fe\u6709\u554f\u984c\u7684\u8a0a\u606f\uff0c\u4f46\u662f mail server \u5c31\u662f\u6703\u6536\u4e0d\u5230\u4fe1\u7b49\u7b49\uff5e\u9019\u4e9b\u932f\u8aa4\u90fd\u9700\u8981\u5f88\u8a73\u7d30\u7684 DNS client \u7684\u6e2c\u8a66\u624d\u80fd\u77e5\u9053\u554f\u984c\u7684\u6240\u5728\u3002<\/li>\n<\/ul>\n<p>\u6211\u5011\u9019\u88e1\u5148\u5c31\u8a9e\u6cd5\u8a2d\u5b9a\u932f\u8aa4\u65b9\u9762\u9032\u884c\u4ecb\u7d39\uff0c\u81f3\u65bc\u908f\u8f2f\u8a2d\u5b9a\u7684\u554f\u984c\uff0c\u90a3\u500b\u5c31\u9700\u8981\u591a\u591a\u7684\u9032\u884c\u6e2c\u8a66\u624d\u80fd\u77e5\u9053\u4e86\uff5e \u5e95\u4e0b\u7684\u932f\u8aa4\u8a0a\u606f\u90fd\u6703\u8a18\u9304\u5728 \/var\/log\/messages \u88e1\u9762\u5594\uff01<\/p>\n<pre>named: \/etc\/named.conf:8: missing ';' before '}'\r\n# \u6ce8\u610f\u5230\u4e0a\u9762\u63d0\u5230\u7684\u6a94\u540d\u8207\u6578\u5b57\u55ce\uff1f\u8aaa\u660e\u7684\u662f \/etc\/named.conf \u7684\u7b2c 8 \u884c\uff0c\r\n# \u81f3\u65bc\u932f\u8aa4\u662f\u56e0\u70ba\u7f3a\u5c11\u5206\u865f (;) \u6240\u81f4\uff01\u53bb\u4fee\u6b63\u4e00\u4e0b\u5373\u53ef\u3002\r\n\r\ndns_rdata_fromtext: named.centos.vbird:4: near eol: unexpected end of input\r\nzone centos.vbird\/IN: loading master file named.centos.vbird: unexpected end of input\r\n_default\/centos.vbird\/IN: unexpected end of input\r\n# \u6307\u7684\u662f named.centos.vbird \u7684\u7b2c 4 \u884c\u6709\u554f\u984c\uff0c\u5bdf\u770b\u6a94\u6848\u5167\u5bb9\u7b2c 4 \u884c\u662f SOA \u7684\u9805\u76ee\uff0c\r\n# \u901a\u5e38\u662f SOA \u90a3\u4e94\u500b\u6578\u5b57\u6c92\u6709\u5b8c\u5168\uff01\u8d95\u7dca\u53bb\u4fee\u8a02\u4e00\u4e0b\u5373\u53ef\u554a\uff01\r\n\r\ndns_rdata_fromtext: named.centos.vbird:7: near 'www.centos.vbird.': \r\nnot a valid number\r\n# \u8aaa\u660e\u7b2c 7 \u884c\u5728 www.centos.vbird \u9644\u8fd1\u9700\u8981\u6709\u4e00\u500b\u5408\u6cd5\u7684\u6578\u5b57\uff01\u525b\u597d\u662f MX \uff0c\r\n# \u6240\u4ee5\uff0c\u8d95\u7dca\u52a0\u4e0a\u4e00\u500b\u5408\u6cd5\u7684\u6578\u5b57\uff0c\u53bb\u77a7\u77a7\u6539\u6539\u5373\u53ef\uff01\r\n<\/pre>\n<p>\u901a\u5e38\u6700\u5927\u7684\u554f\u984c\u662f&#8230;\u6253\u932f\u5b57\uff01\u6240\u4ee5\uff0c\u52d9\u5fc5\u8981\u6162\u6162\u6253\u5b57\uff0c\u6162\u6162\u5bdf\u770b\u6e05\u695a\uff0c\u5c24\u5176\u662f\u767b\u9304\u6a94\u5167\u7684\u8cc7\u8a0a\u5594\uff01\u90fd\u8655\u7406\u5b8c\u7562\u4e4b\u5f8c\uff0c \u4e5f\u80fd\u5920\u900f\u904e netstat \u53bb\u67e5\u5230 port 53 \u6709\u5728\u76e3\u807d\uff0c\u518d\u4f86\u5c31\u662f\u8981\u653e\u884c\u4eba\u5bb6\u7684\u67e5\u8a62\u4e86\uff01\u6240\u4ee5\uff0c\u53c8\u5f97\u8981\u4fee\u6539\u9632\u706b\u7246\u56c9\uff01 \u5047\u8a2d\u4f60\u9084\u662f\u5b89\u88dd\u9ce5\u54e5\u7684\u9632\u706b\u7246\u8173\u672c\uff0c\u90a3\u9ebc\u63a5\u4e0b\u4f86\u5c31\u662f\uff1a<\/p>\n<pre>[root@www ~]# vim \/usr\/local\/virus\/iptables\/iptables.rule\r\n# \u627e\u5230\u5982\u4e0b\u5169\u884c\uff0c\u5c07\u8a3b\u89e3\u62ff\u6389\u5373\u53ef\uff01\r\niptables -A INPUT -p UDP -i $EXTIF --dport  53  --sport 1024:65534 -j ACCEPT\r\niptables -A INPUT -p TCP -i $EXTIF --dport  53  --sport 1024:65534 -j ACCEPT\r\n\r\n[root@www ~]# \/usr\/local\/virus\/iptables\/iptables.rule\r\n<\/pre>\n<hr \/>\n<p><a name=\"DNS_master_update\"><\/a><img loading=\"lazy\" decoding=\"async\" src=\"http:\/\/linux.vbird.org\/images\/penguin-s.gif\" alt=\"\u5c0f\u6a19\u984c\u7684\u5716\u793a\" width=\"16\" height=\"23\" align=\"middle\" \/>19.4.9 \u6b65\u9a5f\u4e03\uff1a\u6e2c\u8a66\u8207\u8cc7\u6599\u5eab\u66f4\u65b0<\/p>\n<p>\u5728\u4e0a\u9762\u7684\u8a2d\u5b9a\u90fd\u641e\u5b9a\uff0c\u4e26\u4e14\u555f\u52d5\u4e4b\u5f8c\uff0c\u4f60\u7684 DNS \u4f3a\u670d\u5668\u61c9\u8a72\u662f\u5df2\u7d93\u59a5\u7576\u7684\u5728\u904b\u4f5c\u4e86\u3002 \u90a3\u4f60\u600e\u9ebc\u77e5\u9053\u4f60\u7684\u8a2d\u5b9a\u662f\u5426\u5408\u7406\uff1f\u7576\u7136\u8981\u4f5c\u6e2c\u8a66\u5594\uff01\u6e2c\u8a66\u6709\u5169\u7a2e\u65b9\u5f0f\uff0c\u4e00\u7a2e\u662f\u85c9\u7531 client \u7aef\u7684\u67e5\u8a62\u529f\u80fd\uff0c \u76ee\u7684\u662f\u6aa2\u9a57\u4f60\u7684\u8cc7\u6599\u5eab\u8a2d\u5b9a\u6709\u7121\u932f\u8aa4\uff1b\u53e6\u5916\u4f60\u4e5f\u53ef\u4ee5\u9023\u4e0a\u5e95\u4e0b\u9019\u500b\u7db2\u7ad9\uff1a<\/p>\n<ul>\n<li><a href=\"http:\/\/thednsreport.com\/\">http:\/\/thednsreport.com\/<\/a><\/li>\n<\/ul>\n<p>\u9019\u500b\u7db2\u7ad9\u53ef\u4ee5\u5e6b\u4f60\u6aa2\u9a57\u4f60\u7684 DNS \u4f3a\u670d\u5668\u7684\u4e3b\u8981\u8a2d\u5b9a\u662f\u5426\u6709\u554f\u984c\uff01\u4e0d\u904e\uff0c\u9019\u500b\u7db2\u7ad9\u7684\u6aa2\u9a57\u4e3b\u8981\u662f\u4ee5\u5408\u6cd5\u6388\u6b0a\u7684 zone \u70ba\u4e3b\uff0c\u6211\u5011\u81ea\u5df1\u4e82\u641e\u7684 DNS \u662f\u6c92\u6709\u8fa6\u6cd5\u6aa2\u67e5\u7684\u5566\uff01\u771f\u662f\u53ef\u60dc\uff5e\u597d\u4e86\uff0c\u5c31\u8b93\u6211\u5011\u4f86\u6e2c\u8a66\u6e2c\u8a66\u7d50\u679c\u5427\uff01\u9996\u5148\uff0c \u5f97\u5c07 DNS \u4f3a\u670d\u5668\u81ea\u5df1\u7684 \/etc\/resolv.conf \u6539\u6210\u5982\u4e0b\u6a21\u6a23\u8f03\u4f73\uff1a<\/p>\n<pre>[root@www ~]# vim \/etc\/resolv.conf\r\nnameserver 192.168.100.254   &lt;==\u81ea\u5df1\u7684 IP \u4e00\u5b9a\u8981\u6700\u65e9\u51fa\u73fe\uff01\r\nnameserver 168.95.1.1\r\n<\/pre>\n<p>\u63a5\u4e0b\u4f86\uff0c\u5c31\u8b93\u6211\u5011\u91dd\u5c0d\u4e0a\u9762\u8f03\u91cd\u8981\u7684\u6b63\u3001\u53cd\u89e3\u8cc7\u8a0a\u9032\u884c\u6aa2\u6e2c\u5427\uff01\u540c\u6a23\u7684\uff0c\u9ce5\u54e5\u4e5f\u50c5\u5217\u51fa\u7b54\u6848\u7684\u90e8\u5206\u800c\u5df2\uff01<\/p>\n<pre># 1. \u6aa2\u67e5 master.centos.vbird \u4ee5\u53ca www.centos.vbird \u7684 A \u6a19\u8a8c\r\n[root@www ~]# dig master.centos.vbird\r\n;; ANSWER SECTION:\r\nmaster.centos.vbird.    600     IN      <u>A       192.168.100.254<\/u>\r\n[root@www ~]# dig www.centos.vbird\r\n;; ANSWER SECTION:\r\nwww.centos.vbird.       600     IN      <u>A       192.168.100.254<\/u>\r\n\r\n# 2. \u6aa2\u67e5 ftp.centos.vbird \u8207 winxp \u7b49\u7b49\u7684 A \u6a19\u8a8c\r\n[root@www ~]# dig ftp.centos.vbird\r\n;; ANSWER SECTION:\r\nftp.centos.vbird.       600     IN      <u>CNAME   www.centos.vbird.<\/u>\r\nwww.centos.vbird.       600     IN      <u>A       192.168.100.254<\/u>\r\n[root@www ~]# dig winxp.centos.vbird\r\n;; ANSWER SECTION:\r\nwinxp.centos.vbird.     600     IN      <u>A       192.168.100.20<\/u>\r\n\r\n# 3. \u6aa2\u67e5 centos.vbird \u9019\u500b zone \u7684 MX\r\n[root@www ~]# dig -t mx centos.vbird\r\n;; ANSWER SECTION:\r\ncentos.vbird.           600     IN      <u>MX      10 www.centos.vbird.<\/u>\r\n\r\n# 4. \u6aa2\u67e5 192.168.100.254 \u53ca 192.168.100.10 \u7684\u53cd\u89e3\r\n[root@www ~]# dig -x 192.168.100.254\r\n;; ANSWER SECTION:\r\n254.100.168.192.in-addr.arpa. 600 IN    PTR     www.centos.vbird.\r\n<u>254.100.168.192.in-addr.arpa. 600 IN    PTR     master.centos.vbird.<\/u>\r\n[root@www ~]# dig -x 192.168.100.10\r\n;; ANSWER SECTION:\r\n10.100.168.192.in-addr.arpa. 600 IN     <u>PTR     slave.centos.vbird.<\/u>\r\n<\/pre>\n<p>\u6e2c\u8a66\u8981\u6210\u529f\u624d\u884c\u5466\uff01\u4ec0\u9ebc\u662f\u6210\u529f\u5462\uff1f\u9664\u4e86\u8981\u771f\u7684\u6709\u8cc7\u6599\u986f\u793a\u4e4b\u5916\uff0c\u8a72\u8cc7\u6599\u662f\u5426\u6b63\u662f\u4f60\u8981\u7684\u6a21\u6a23\uff1f\u90a3\u624d\u662f\u9806\u5229\u6210\u529f\u3002 \u5982\u679c\u6709\u51fa\u73fe\u932f\u8aa4\u7684\u8cc7\u8a0a\uff0c\u4f8b\u5982\u627e\u4e0d\u5230 www.centos.vbird \u4e4b\u985e\u7684\uff0c\u90a3\u5c31\u5931\u6557\u4e86\uff0c\u5f97\u8981\u627e\u51fa\u554f\u984c\u624d\u884c\u3002<\/p>\n<p>\u53e6\u5916\uff0c\u5982\u679c\u4f60\u7684\u8cc7\u6599\u5eab\u9700\u8981\u66f4\u65b0\u6642\uff0c\u61c9\u8a72\u505a\u54ea\u4e9b\u8209\u52d5\u554a\uff1f\u8209\u4f8b\u4f86\u8aaa\uff0c\u4f60\u7684\u67d0\u500b\u4e3b\u6a5f IP \u6216\u8005\u4e3b\u6a5f\u540d\u7a31\u8981\u8b8a\u66f4\uff0c\u4e5f\u53ef\u80fd\u662f\u65b0\u589e\u67d0\u500b\u4e3b\u6a5f\u540d\u7a31\u8207 IP \u7684\u5c0d\u61c9\u5462\uff01\u5f88\u7c21\u55ae\u5566\uff0c\u901a\u5e38\u9019\u6a23\u505a\u5c31\u597d\u4e86\uff1a<\/p>\n<ol>\n<li>\u5148\u91dd\u5c0d\u8981\u66f4\u6539\u7684\u90a3\u500b zone \u7684\u8cc7\u6599\u5eab\u6a94\u6848\u53bb\u505a\u66f4\u65b0\uff0c\u5c31\u662f\u52a0\u5165 RR \u7684\u6a19\u8a8c\u5373\u662f\uff01<\/li>\n<li>\u66f4\u6539\u8a72 zone file \u7684\u5e8f\u865f (Serial) \uff0c\u5c31\u662f\u90a3\u500b SOA \u7684\u7b2c\u4e09\u500b\u53c3\u6578 (\u7b2c\u4e00\u500b\u6578\u5b57)\uff0c\u56e0\u70ba\u9019\u500b\u6578\u5b57\u6703\u5f71\u97ff\u5230 master\/slave \u7684\u5224\u5b9a\u66f4\u65b0\u8207\u5426\u5594\uff01<\/li>\n<li>\u91cd\u65b0\u555f\u52d5 named \uff0c\u6216\u8005\u662f\u8b93 named \u91cd\u65b0\u8b80\u53d6\u8a2d\u5b9a\u6a94\u5373\u53ef\u3002<\/li>\n<\/ol>\n<p>\u5c31\u9019\u9ebc\u7c21\u55ae\u554a\uff01\u4e0d\u904e\u5927\u5bb6\u5e38\u5e38\u6703\u5fd8\u8a18\u7b2c\u4e8c\u500b\u6b65\u9a5f\u5566\uff01\u5c31\u662f\u5c07\u5e8f\u865f\u8b8a\u5927\u554a\uff01\u5982\u679c\u5e8f\u865f\u6c92\u6709\u8b8a\u5927\uff0c\u90a3 master\/slave \u7684\u8cc7\u6599\u5eab\u53ef\u80fd\u4e0d\u6703\u4e3b\u52d5\u7684\u66f4\u65b0\uff0c\u6703\u9020\u6210\u4e00\u4e9b\u56f0\u64fe\u5594\uff01<\/p>\n<hr \/>\n<p><a name=\"DNS_slave\"><\/a><img loading=\"lazy\" decoding=\"async\" src=\"http:\/\/linux.vbird.org\/images\/penguin-m.gif\" alt=\"\u5927\u6a19\u984c\u7684\u5716\u793a\" width=\"25\" height=\"34\" align=\"middle\" \/>19.5 \u5354\u540c\u5de5\u4f5c\u7684 DNS\uff1a Slave DNS \u53ca\u5b50\u7db2\u57df\u6388\u6b0a\u8a2d\u5b9a<\/p>\n<p>\u6211\u5011\u5728\u672c\u7ae0\u4e00\u958b\u59cb\u5c31\u66fe\u8ac7\u904e\uff0cDNS \u5927\u6982\u662f\u672a\u4f86\u6700\u91cd\u8981\u7684\u7db2\u8def\u670d\u52d9\u4e4b\u4e00\uff0c\u56e0\u70ba\u6240\u6709\u7684\u4e3b\u6a5f\u540d\u7a31\u9700\u6c42\u90fd\u5f97\u8981 DNS \u63d0\u4f9b\u624d\u884c\u3002 \u56e0\u6b64\uff0cISP \u5728\u63d0\u4f9b domain name \u8a3b\u518a\u6642\uff0c\u5c31\u5f37\u8abf\u5f97\u8981\u6709\u5169\u90e8\u4ee5\u4e0a\u7684 DNS \u4f3a\u670d\u5668\u624d\u884c\u3002\u800c\u70ba\u4e86\u7c21\u5316 DNS \u7ba1\u7406\u4eba\u54e1\u7684\u8ca0\u64d4\uff0c \u4f7f\u7528 Master\/Slave DNS \u67b6\u69cb\u7684\u60c5\u6cc1\u6703\u6bd4\u8f03\u597d\uff01\u70ba\u4ec0\u9ebc\u5462\uff1f\u8b93\u6211\u5011\u518d\u56de\u61b6\u4e00\u4e0b Slave DNS \u7684\u7279\u8272\uff1a<\/p>\n<ul>\n<li>\u70ba\u4e86\u4e0d\u9593\u65b7\u7684\u63d0\u4f9b DNS \u670d\u52d9\uff0c\u4f60\u7684\u9818\u57df\u81f3\u5c11\u9700\u8981\u6709\u5169\u90e8 DNS \u4f3a\u670d\u5668\u4f86\u63d0\u4f9b\u67e5\u8a62\u7684\u529f\u80fd\uff1b<\/li>\n<li>\u627f\u4e0a\uff0c\u9019\u5e7e\u90e8 DNS \u4f3a\u670d\u5668\u61c9\u8a72\u8981\u5206\u6563\u5728\u5169\u500b\u4ee5\u4e0a\u7684\u4e0d\u540c IP \u7db2\u57df\u624d\u597d\uff1b<\/li>\n<li>\u70ba\u65b9\u4fbf\u7ba1\u7406\uff0c\u901a\u5e38\u9664\u4e86\u4e00\u90e8\u4e3b\u8981 Master DNS \u4e4b\u5916\uff0c\u5176\u4ed6\u7684 DNS \u6703\u4f7f\u7528 slave \u7684\u6a21\u5f0f\uff1b<\/li>\n<li>slave DNS \u4f3a\u670d\u5668\u672c\u8eab\u4e26\u6c92\u6709\u8cc7\u6599\u5eab\uff0c\u4ed6\u7684\u8cc7\u6599\u5eab\u662f\u7531 master DNS \u6240\u63d0\u4f9b\u7684\uff1b<\/li>\n<li>master\/slave DNS \u5fc5\u9700\u8981\u53ef\u4ee5\u76f8\u4e92\u50b3\u8f38 zone file \u7684\u76f8\u95dc\u8cc7\u8a0a\u624d\u884c\uff0c\u9019\u90e8\u4efd\u9700\u8981 \/etc\/named.conf \u4e4b\u8a2d\u5b9a\u8f14\u52a9\u3002<\/li>\n<\/ul>\n<p>\u9664\u6b64\u4e4b\u5916\uff0c\u5982\u679c\u4f60\u6709\u670b\u53cb\u6216\u8005\u662f\u5b78\u751f\u60f3\u8981\u8ddf\u4f60\u8981\u4e00\u500b\u5b50\u7db2\u57df\uff0c\u90a3\u53c8\u8a72\u5982\u4f55\u8a2d\u5b9a\u53e6\u4e00\u90e8 DNS \u4f3a\u670d\u5668\u5462\uff1f\u5c31\u8b93\u6211\u5011\u4f9d\u5e8f\u4f86\u8ac7\u8ac7\u56c9\uff5e<\/p>\n<hr \/>\n<p><a name=\"DNS_slave_master\"><\/a><img loading=\"lazy\" decoding=\"async\" src=\"http:\/\/linux.vbird.org\/images\/penguin-s.gif\" alt=\"\u5c0f\u6a19\u984c\u7684\u5716\u793a\" width=\"16\" height=\"23\" align=\"middle\" \/>19.5.1 master DNS \u6b0a\u9650\u7684\u958b\u653e<\/p>\n<p>\u6211\u5011\u4f7f\u7528 <a href=\"http:\/\/linux.vbird.org\/linux_server\/0350dns.php#DNS_master_case\">19.4.3<\/a> \u7684\u6848\u4f8b\uff0c\u7e7c\u7e8c\u4f86\u67b6\u8a2d\u4e00\u90e8\u652f\u63f4\u8a72\u6848\u4f8b\u7684 slave DNS \u5427\uff01\u57fa\u672c\u7684\u5047\u8a2d\u70ba\uff1a<\/p>\n<ul>\n<li>\u63d0\u4f9b slave DNS \u4f3a\u670d\u5668\u9032\u884c zone transfer \u7684\u4f3a\u670d\u5668\u70ba master.centos.vbird<\/li>\n<li>centos.vbird \u53ca 100.168.192.in-addr.arpa \u5169\u500b zone \u90fd\u63d0\u4f9b\u7d66 slave DNS \u4f7f\u7528<\/li>\n<li>master.centos.vbird \u7684 named \u50c5\u63d0\u4f9b\u7d66 slave.centos.vbird \u9019\u90e8\u4e3b\u6a5f\u9032\u884c zone transfer<\/li>\n<li>Slave DNS server \u67b6\u8a2d\u5728 192.168.100.10 \u9019\u90e8\u4f3a\u670d\u5668\u4e0a\u9762 (\u6240\u4ee5 zone file \u8981\u4fee\u8a02)<\/li>\n<\/ul>\n<p>\u5982\u4e0a\u6240\u793a\uff0c\u6211\u5011\u7684 master.centos.vbird \u9019\u90e8\u4f3a\u670d\u5668\u9664\u4e86 named.conf \u9700\u8981\u8abf\u6574\u4e4b\u5916\uff0c\u5169\u500b zone file \u4e5f\u90fd\u9700\u8981\u8abf\u6574\uff01 \u5728 named.conf \u7576\u4e2d\uff0c\u9700\u8981\u8a2d\u5b9a\u54ea\u500b IP \u53ef\u4ee5\u5c0d\u6211\u7684 zone \u9032\u884c\u50b3\u8f38 (allow-transfer)\uff0c\u800c\u5728 zone file \u7576\u4e2d\uff0c\u5c31\u662f\u5404\u52a0\u5165\u4e00\u7b46 NS \u7684\u8a18\u9304\u5373\u53ef\uff01\u589e\u52a0\u7684\u90e8\u5206\u5982\u4e0b\u6240\u793a\uff1a<\/p>\n<pre># 1. \u4fee\u8a02 named.conf\uff0c\u4e3b\u8981\u4fee\u6539 zone \u53c3\u6578\u5167\u7684 allow-transfer \u9805\u76ee\r\n[root@www ~]# vim \/etc\/named.conf\r\n....\u524d\u9762\u7701\u7565....\r\nzone \"centos.vbird\" IN {\r\n        type master;\r\n        file \"named.centos.vbird\";\r\n        allow-transfer { 192.168.100.10; };  \/\/ \u5728\u9019\u88e1\u65b0\u589e slave \u7684 IP\r\n};\r\nzone \"100.168.192.in-addr.arpa\" IN {\r\n        type master;\r\n        file \"named.192.168.100\";\r\n        allow-transfer { 192.168.100.10; };  \/\/ \u5728\u9019\u88e1\u65b0\u589e slave \u7684 IP\r\n};\r\n<\/pre>\n<p>\u5728\u4e0a\u982d\u6240\u5217\u793a\u7684\u90a3\u5169\u500b\u8cc7\u6599\u5eab\u6a94\u6848\u7576\u4e2d\uff0c\u4f60\u5fc5\u9808\u8981\u65b0\u589e\u6240\u9700\u8981\u7684 NS \u6a19\u8a8c\u624d\u884c\uff01NS \u5c0d\u61c9\u7684\u4e3b\u6a5f\u540d\u7a31\u70ba slave.centos.vbird\uff0c IP \u5247\u662f 192.168.100.10 \u5466\uff01\u7d50\u679c\u5982\u4e0b\uff1a<\/p>\n<pre># 2. \u5728 zone file \u88e1\u9762\u65b0\u589e NS \u6a19\u8a8c\uff0c\u8981\u6ce8\u610f\u9700\u8981\u6709 A(\u6b63\u89e3) \u53ca PTR(\u53cd\u89e3) \u7684\u8a2d\u5b9a\r\n[root@www ~]# vim \/var\/named\/named.centos.vbird\r\n$TTL    600\r\n@                       IN SOA   master.centos.vbird. vbird.www.centos.vbird. (\r\n                                 2011080402 3H 15M 1W 1D )\r\n@                       IN NS    master.centos.vbird.\r\n@                       IN NS    slave.centos.vbird.\r\nmaster.centos.vbird.    IN A     192.168.100.254\r\nslave.centos.vbird.     IN A     192.168.100.10\r\n@                       IN MX 10 www.centos.vbird.\r\n....(\u5e95\u4e0b\u7701\u7565)....\r\n\r\n[root@www ~]# vim \/var\/named\/named.192.168.100\r\n$TTL    600\r\n@       IN SOA  master.centos.vbird. vbird.www.centos.vbird. (\r\n                2011080402 3H 15M 1W 1D )\r\n@       IN NS   master.centos.vbird.\r\n@       IN NS   slave.centos.vbird.\r\n254     IN PTR  master.centos.vbird.\r\n10      IN PTR  slave.centos.vbird.\r\n....(\u5e95\u4e0b\u7701\u7565)....\r\n# \u8981\u7279\u5225\u6ce8\u610f\u4e00\u4ef6\u4e8b\uff0c\u90a3\u5c31\u662f\uff0c\u4f60\u7684 zone file \u5167\u7684\u5e8f\u865f\u8981\u589e\u52a0\uff01\u9ce5\u54e5\u6e2c\u8a66\u65e5\u671f\u662f 8\/4\uff0c\r\n# \u7b2c 2 \u6b21\u9032\u884c\uff0c\u6240\u4ee5\u5e8f\u865f\u5c31\u4ee5\u8a72\u5929\u7684\u65e5\u671f\u70ba\u6e96\u4f86\u8a2d\u8a08\u7684\uff01\u6700\u5f8c\u8a18\u5f97 restart \u4e00\u4e0b\u5566\uff01\r\n\r\n[root@www ~]# \/etc\/init.d\/named restart\r\n[root@www ~]# tail -n 30 \/var\/log\/messages | grep named\r\nstarting BIND 9.7.0-P2-RedHat-9.7.0-5.P2.el6_0.1 -u named -t \/var\/named\/chroot\r\n....(\u4e2d\u9593\u7701\u7565)....\r\nzone 100.168.192.in-addr.arpa\/IN: loaded serial 2011080402\r\nzone centos.vbird\/IN: loaded serial 2011080402\r\nzone 100.168.192.in-addr.arpa\/IN: <u>sending notifies (serial 2011080402)<\/u>\r\nzone centos.vbird\/IN: <u>sending notifies (serial 2011080402)<\/u>\r\n<\/pre>\n<p>\u53cd\u6b63\u91cd\u65b0\u555f\u52d5\u904e named \u5f8c\uff0c\u76f4\u89ba\u8a18\u5f97\u5c31\u662f\u8981\u67e5\u95b1 messages \u767b\u9304\u8cc7\u8a0a\u5c31\u5c0d\u4e86\u3002\u5f9e\u4e0a\u8868\u7684\u8f38\u51fa\u4f86\u770b\uff0c\u6703\u591a\u4e00\u500b sending notifies (\u50b3\u9001\u6ce8\u610f\u4e8b\u9805) \u95dc\u9375\u5b57\u7684\u8cc7\u6599\uff0c\u90a3\u5c31\u662f\u63d0\u9192 slave DNS \u4f86\u6bd4\u5c0d\u5e8f\u865f\u5927\u5c0f\u4e86\uff01\u6240\u4ee5\uff0c\u4f60\u8aaa\uff0c\u5e8f\u865f\u6709\u6c92\u6709\u5f88\u91cd\u8981\u5462\uff1f\u7576\u7136\u5f88\u91cd\u8981\u554a\uff01 \u9023\u767b\u9304\u8a0a\u606f\u90fd\u6703\u544a\u77e5\u5e8f\u865f\u7684\u5927\u5c0f\u54e9\uff01\u9019\u6a23 master DNS \u5c31\u8a2d\u5b9a\u59a5\u7576\u56c9\uff01\u63a5\u4e0b\u4f86\u73a9\u73a9 Slave \u7684\u8a2d\u5b9a\u5427\uff01<\/p>\n<hr \/>\n<p><a name=\"DNS_slave_slave\"><\/a><img loading=\"lazy\" decoding=\"async\" src=\"http:\/\/linux.vbird.org\/images\/penguin-s.gif\" alt=\"\u5c0f\u6a19\u984c\u7684\u5716\u793a\" width=\"16\" height=\"23\" align=\"middle\" \/>19.5.2 Slave DNS \u7684\u8a2d\u5b9a\u8207\u8cc7\u6599\u5eab\u6b0a\u9650\u554f\u984c<\/p>\n<p>\u65e2\u7136 Slave DNS \u4e5f\u662f DNS \u4f3a\u670d\u5668\u561b\uff01\u6240\u4ee5\uff0c\u7576\u7136\u4e5f\u662f\u9700\u8981\u5b89\u88dd bind, bind-chroot \u7b49\u7b49\u7684\u8edf\u9ad4\uff01 \u9019\u90e8\u4efd\u56de\u53bb <a href=\"http:\/\/linux.vbird.org\/linux_server\/0350dns.php#what_software\">19.3.1<\/a> \u88e1\u9762\u77a7\u77a7\u5373\u53ef\uff0c\u53cd\u6b63\u8a18\u5f97\u4f7f\u7528 yum \u5b89\u88dd\u5c31\u5c0d\u4e86\u3002 \u63a5\u4e0b\u4f86\u5f97\u8981\u8a2d\u5b9a named.conf \u5427\uff1f\u800c\u65e2\u7136 Master\/Slave \u7684\u8cc7\u6599\u5eab\u662f\u76f8\u540c\u7684\uff0c\u6240\u4ee5\uff0c\u7406\u8ad6\u4e0a\uff0c named.conf \u5167\u5bb9\u5c31\u662f\u5927\u540c\u5c0f\u7570\u56c9\uff5e \u552f\u4e00\u8981\u6ce8\u610f\u7684\u5c31\u662f zone type \u985e\u578b\u7684\u5dee\u7570\uff0c\u4ee5\u53ca\u5ba3\u544a master \u5728\u54ea\u88e1\u5c31\u662f\u4e86\u3002 \u81f3\u65bc zone filename \u90e8\u5206\uff0c\u7531\u65bc zone file \u90fd\u662f\u5f9e master \u53d6\u5f97\u7684\uff0c\u900f\u904e named \u9019\u500b\u7a0b\u5f0f\u4f86\u4e3b\u52d5\u5efa\u7acb\u8d77\u9700\u8981\u7684 zone file\uff0c\u56e0\u6b64\u9019\u500b zone file \u653e\u7f6e\u7684\u76ee\u9304\u6b0a\u9650\u5c31\u5f88\u91cd\u8981\uff01\u8b93\u6211\u5011\u76f4\u63a5\u4f86\u8655\u7406\u770b\u770b\uff1a<\/p>\n<pre># 1. \u6e96\u5099 named.conf \u7684\u5167\u5bb9\uff1a\r\n[root@clientlinux ~]# vim \/etc\/named.conf\r\n....(\u524d\u9762\u7684\u90e8\u5206\u5b8c\u5168\u8207 master.centos.vbird \u76f8\u540c\uff0c\u6545\u7701\u7565)....\r\nzone \"centos.vbird\" IN {\r\n        type slave;\r\n        file \"slaves\/named.centos.vbird\";\r\n        masters { 192.168.100.254; };\r\n};\r\nzone \"100.168.192.in-addr.arpa\" IN {\r\n        type slave;\r\n        file \"slaves\/named.192.168.100\";\r\n        masters { 192.168.100.254; };\r\n};\r\n\r\n# 2. \u6aa2\u67e5 zone file \u9810\u8a08\u5efa\u7acb\u7684\u76ee\u9304\u6b0a\u9650\u662f\u5426\u6b63\u78ba\uff01\u5e95\u4e0b\u76ee\u9304\u70ba\u7cfb\u7d71\u9810\u8a2d\u503c\uff1a\r\n[root@clientlinux ~]# ll -d \/var\/named\/slaves\r\ndrwxrwx---. 2 named named 4096 2011-06-25 11:48 \/var\/named\/slaves\r\n# \u6ce8\u610f\u6b0a\u9650\u3001\u4f7f\u7528\u8005\u4ee5\u53ca\u7fa4\u7d44\u4e09\u500b\u6b04\u4f4d\u7684\u8cc7\u6599\uff01\u9700\u8981\u8207 named \u9019\u500b\u7528\u6236\u53ca\u7fa4\u7d44\u6709\u95dc\uff01\r\n\r\n[root@clientlinux ~]# ll -dZ \/var\/named\/slaves\r\ndrwxrwx---. named named system_u:object_r:named_cache_t:s0 \/var\/named\/slaves\r\n# \u4e5f\u4e0d\u8981\u5fd8\u8a18\u8207 SELinux \u6709\u95dc\u7684\u4e8b\u60c5\uff01\r\n<\/pre>\n<p>\u70ba\u4e86\u65b9\u4fbf\u4f7f\u7528\u8005\u8a2d\u5b9a\uff0cCentOS \u9810\u8a2d\u5728 \/var\/named\/slaves\/ \u8655\u7406\u597d\u4e86\u76f8\u95dc\u6b0a\u9650\uff5e\u6240\u4ee5\u4f60\u53ef\u4ee5\u8f15\u9b06\u7684\u8655\u7406\u6b0a\u9650\u554f\u984c\uff5e \u6211\u5011\u5c31\u5efa\u8b70\u4f60\u7684 slave zone file \u653e\u7f6e\u5728\u8a72\u76ee\u9304\u4e0b\uff01\u6240\u4ee5\u4e0a\u8868\u7576\u4e2d\u7684 file \u53c3\u6578\u624d\u6703\u9019\u9ebc\u5beb\uff5e\u6b64\u5916\uff0c\u90a3\u500b masters \u7d50\u5c3e\u6709\u500b s \u5594\uff01\u9019\u88e1\u6700\u5bb9\u6613\u5beb\u932f\uff5e\u90a3\u9ebc\u8981\u4e0d\u8981\u8655\u7406 zone file \u5462\uff1f\u9664\u4e86 named.ca \u9019\u500b . \u9700\u8981\u4e3b\u52d5\u5b58\u5728\u4e4b\u5916\uff0c \u53e6\u5916\u5169\u500b type slave \u7684\u8cc7\u6599\u5eab\u6a94\u6848\uff0c\u7576\u7136\u4e0d\u5fc5\u5b58\u5728\u554a\uff01\u56e0\u70ba\u6703\u5f9e master \u8655\u53d6\u5f97\u561b\uff01\u63a5\u4e0b\u4f86\uff0c\u5c31\u8b93\u6211\u5011\u4f86\u555f\u52d5 named \u4e26\u9032\u884c\u89c0\u5bdf\u5427\uff01<\/p>\n<pre>[root@clientlinux ~]# \/etc\/init.d\/named start\r\n[root@clientlinux ~]# chkconfig named on\r\n[root@clientlinux ~]# tail -n 30 \/var\/log\/messages | grep named\r\nstarting BIND 9.7.0-P2-RedHat-9.7.0-5.P2.el6_0.1 -u named -t \/var\/named\/chroot\r\nloading configuration from '\/etc\/named.conf'\r\n....(\u4e2d\u9593\u7701\u7565)....\r\nrunning\r\nzone <u>100.168.192.in-addr.arpa<\/u>\/IN: <u>Transfer started<\/u>.\r\nzone <u>100.168.192.in-addr.arpa<\/u>\/IN: <u>transferred serial 2011080402<\/u>\r\nzone <u>centos.vbird<\/u>\/IN: <u>Transfer started.<\/u>\r\nzone <u>centos.vbird<\/u>\/IN: <u>transferred serial 2011080402<\/u>  &lt;==\u6ce8\u610f\u5e8f\u865f\u6b63\u78ba\u5426\r\n# \u4f60\u6703\u770b\u5230\u5982\u4e0a\u7684\u8a0a\u606f\uff0c\u91cd\u9ede\u662f\u9084\u6709\u544a\u77e5\u5e8f\u865f\u5594\uff01\u975e\u5e38\u91cd\u8981\uff01\r\n\r\n[root@clientlinux ~]# ll \/var\/named\/slaves\r\n-rw-r--r--. 1 named named 3707 2011-08-05 14:12 named.192.168.100\r\n-rw-r--r--. 1 named named  605 2011-08-05 14:12 named.centos.vbird\r\n# \u9019\u5169\u500b zone file \u6703\u4e3b\u52d5\u88ab\u5efa\u7acb\u8d77\u4f86\u5462\uff01\r\n\r\n[root@clientlinux ~]# dig master.centos.vbird @127.0.0.1\r\n[root@clientlinux ~]# dig -x 192.168.100.254 @127.0.0.1\r\n# \u4e0a\u8ff0\u5169\u500b\u6aa2\u6e2c\u7684\u6307\u4ee4\u5982\u679c\u662f\u6b63\u78ba\u7684\u986f\u793a\u51fa A \u8207 PTR \u7684\u8a71\uff0c\u90a3\u5c31\u5b8c\u6210\u4e86\uff01\r\n<\/pre>\n<p>\u4f60\u77a7\uff01\u5982\u6b64\u4e00\u4f86\u4f60\u7684 zone file \u5c31\u6703\u4e3b\u52d5\u7684\u88ab\u5efa\u7acb\u8d77\u4f86\u5594\uff01\u672a\u4f86\u5982\u679c\u4f60\u7684 master DNS \u8981\u66f4\u65b0\u8cc7\u6599\u5eab\u6642\uff0c \u53ea\u8981\u4fee\u6539\u904e\u5e8f\u865f\uff0c\u4e26\u91cd\u65b0\u555f\u52d5 named \u5f8c\uff0c\u9019\u90e8 slave DNS \u5c31\u6703\u8ddf\u8457\u66f4\u65b0\u5566\uff01\u554a\uff01\u771f\u662f\u300e\u798f\u6c23\u5566\uff01\u300f\uff01\uff01 \u4e0d\u904e\uff0c\u5982\u679c\u4f60\u767c\u73fe\u5230\u555f\u52d5 slave DNS \u6642\uff0c\u4f60\u7684\u767b\u9304\u8cc7\u8a0a\u7adf\u7136\u662f\u9019\u6a23\uff1a<\/p>\n<pre>zone <u>centos.vbird<\/u>\/IN: Transfer started.\r\ntransfer of 'centos.vbird\/IN' from 192.168.100.254#53: connected using \r\n192.168.100.10#58187\r\ndumping master file: tmp-a1bYfCd3i3: <u>open: permission denied<\/u>\r\ntransfer of 'centos.vbird\/IN' from 192.168.100.254#53: failed while receiving \r\nresponses: <u>permission denied<\/u>\r\ntransfer of 'centos.vbird\/IN' from 192.168.100.254#53: end of transfer\r\n<\/pre>\n<p>\u5982\u679c\u51fa\u73fe\u985e\u4f3c\u9019\u6a23\u7684\u8a0a\u606f\u6642\uff0c\u4e0d\u5fc5\u61f7\u7591\u5566\uff01\u80af\u5b9a\u662f\u6b0a\u9650\u932f\u8aa4\u5566\uff01\u8acb\u518d\u6b21\u6aa2\u67e5\u4f60\u7684\u8cc7\u6599\u5eab\u6a94\u6848\u6240\u653e\u7f6e\u7684\u76ee\u9304\u6b0a\u9650\u662f\u5426\u53ef\u4ee5\u8b93 named \u5beb\u5165\u554a\uff01\u8655\u7406\u8655\u7406\u5c31\u597d\u4e86\uff01\u73fe\u5728\uff0c\u4f60\u7684 DNS \u6703\u8b8a\u7684\u66f4\u52a0\u5f37\u58ef\u56c9\uff01\u56e0\u70ba\u6709\u985e\u4f3c\u7684\u5099\u63f4\u7cfb\u7d71\u56c9\uff5e\u4e0d\u904e\u4ecd\u7136\u8981\u6ce8\u610f\u7684\u662f\uff0c \u7db2\u8def\u67e5\u8a62 centos.vbird \u6642\uff0cmaster \u8207 slave \u7684\u5730\u4f4d\u662f\u76f8\u540c\u7684\uff0c\u4e26\u4e0d\u662f master \u639b\u9ede\u624d\u4f7f\u7528 slave \u4f86\u67e5\u8a62\u5594\uff01\u6240\u4ee5\uff0c\u9019\u5169\u90e8\u4f3a\u670d\u5668\u7684\u76f8\u540c domain \u7684\u8cc7\u6599\u5eab\u5167\u5bb9\u8981\u5b8c\u5168\u4e00\u81f4\u624d\u884c\uff01<\/p>\n<hr \/>\n<p><a name=\"sub_net\"><\/a><img loading=\"lazy\" decoding=\"async\" src=\"http:\/\/linux.vbird.org\/images\/penguin-s.gif\" alt=\"\u5c0f\u6a19\u984c\u7684\u5716\u793a\" width=\"16\" height=\"23\" align=\"middle\" \/>19.5.3 \u5efa\u7f6e\u5b50\u7db2\u57df DNS \u4f3a\u670d\u5668\uff1a\u5b50\u7db2\u57df\u6388\u6b0a\u8ab2\u984c<\/p>\n<p>\u9664\u4e86 Master\/Slave \u9700\u8981\u5354\u540c DNS \u4f3a\u670d\u5668\u5171\u540c\u63d0\u4f9b\u670d\u52d9\u4e4b\u5916\uff0cDNS \u4e4b\u9593\u5982\u679c\u6709\u4e0a\u5c64\u3001\u4e0b\u5c6c\u7684\u95dc\u4fc2\u6642\uff0c\u8a72\u5982\u4f55\u8a2d\u5b9a\uff1f \u4ea6\u5373\uff0c\u5047\u8a2d\u6211\u7684\u7db2\u57df\u5f88\u5927\uff0c\u6211\u53ea\u60f3\u8981\u8ca0\u8cac\u4e0a\u5c64\u7684 DNS \u800c\u5df2\uff0c\u4e0b\u5c64\u5e0c\u671b\u76f4\u63a5\u4ea4\u7d66\u5404\u55ae\u4f4d\u7684\u8ca0\u8cac\u4eba\u4f86\u8ca0\u8cac\uff0c\u8981\u600e\u9ebc\u8a2d\u5b9a\u5462\uff1f \u8209\u500b\u4f8b\u5b50\u4f86\u8aaa\uff0c\u4ee5\u6210\u5927\u70ba\u4f8b\uff0c\u6210\u5927\u8a08\u4e2d\u50c5\u7ba1\u7406\u5404\u500b\u7cfb\u6240\u7684 DNS \u4f3a\u670d\u5668 IP \u800c\u5df2\uff0c\u7531\u65bc\u5404\u500b\u7cfb\u6240\u7684\u4e3b\u6a5f\u6578\u91cf\u53ef\u80fd\u5f88\u5927\uff0c \u5982\u679c\u6bcf\u500b\u4eba\u90fd\u8981\u8acb\u8a08\u4e2d\u4f86\u8a2d\u5b9a\uff0c\u90a3\u9ebc\u7ba1\u7406\u54e1\u53ef\u80fd\u6703\u760b\u6389\uff0c\u800c\u4e14\u5728\u5be6\u969b\u8a2d\u8a08\u4e0a\u4e5f\u4e0d\u592a\u4eba\u6027\u5316\u3002<\/p>\n<p>\u6240\u4ee5\u56c9\uff0c\u8a08\u4e2d\u5c31\u5c07\u5404\u500b subdomain (\u5b50\u7db2\u57df) \u7684\u7ba1\u7406\u6b0a\u4ea4\u7d66\u5404\u500b\u7cfb\u6240\u7684\u4e3b\u6a5f\u7ba1\u7406\u54e1\u53bb\u7ba1\u7406\uff0c\u5982\u6b64\u4e00\u4f86\uff0c \u5404\u7cfb\u6240\u7684\u8a2d\u5b9a\u4e0a\u9762\u6703\u6bd4\u8f03\u9748\u6d3b\uff0c\u4e14\u4e0a\u5c64 DNS \u4f3a\u670d\u5668\u7ba1\u7406\u54e1\u4e5f\u4e0d\u7528\u592a\u9ebb\u7169\u5436\uff01<\/p>\n<p>\u597d\u4e86\uff0c\u90a3\u9ebc\u5982\u4f55\u958b\u653e\u5b50\u7db2\u57df\u6388\u6b0a\u5462\uff1f\u6211\u5011\u4ee5\u525b\u525b\u5728 master \u4e0a\u9762\u5efa\u7acb\u7684 centos.vbird \u9019\u500b zone \u70ba\u4f8b\uff0c \u5047\u8a2d\u4eca\u5929\u4f60\u662f\u500b ISP \uff0c\u6709\u500b\u4eba\u60f3\u8981\u8ddf\u59b3\u7533\u8acb domain name \uff0c\u4ed6\u8981\u7684 domain \u662f\u300e niki.centos.vbird \u300f\uff0c \u90a3\u4f60\u8a72\u5982\u4f55\u8655\u7406\uff1f<\/p>\n<ul>\n<li>\u4e0a\u5c64 DNS \u4f3a\u670d\u5668\uff1a\u4ea6\u5373\u662f master.centos.vbird \u9019\u4e00\u90e8\uff0c\u53ea\u8981\u5728 centos.vbird \u90a3\u500b zone file \u5167\uff0c\u589e\u52a0\u6307\u5b9a NS \u4e26\u6307\u5411\u4e0b\u5c64 DNS \u7684\u4e3b\u6a5f\u540d\u7a31\u8207 IP (A) \u5373\u53ef\uff0c\u800c zone file \u7684\u5e8f\u865f\u4e5f\u8981\u589e\u52a0\u624d\u884c\uff1b<\/li>\n<li>\u4e0b\u5c64 DNS \u4f3a\u670d\u5668\uff1a\u7533\u8acb\u7684\u9818\u57df\u540d\u7a31\u5fc5\u9808\u662f\u4e0a\u5c64 DNS \u6240\u53ef\u4ee5\u63d0\u4f9b\u7684\u540d\u7a31\uff0c\u4e26\u544a\u77e5\u4e0a\u5c64 DNS \u7ba1\u7406\u54e1\uff0c\u6211\u5011\u9019\u500b zone \u6240\u9700\u6307\u5b9a\u7684 DNS \u4e3b\u6a5f\u540d\u7a31\u8207\u5c0d\u61c9\u7684 IP \u5373\u53ef\u3002\u7136\u5f8c\u5c31\u958b\u59cb\u8a2d\u5b9a\u81ea\u5df1\u7684 zone \u8207 zone file \u76f8\u95dc\u8cc7\u6599\u3002<\/li>\n<\/ul>\n<p>\u5047\u8a2d\u6211\u5011\u7ba1\u7406 niki.centos.vbird \u7684\u4f3a\u670d\u5668\u4e3b\u6a5f\u540d\u7a31\u70ba dns.niki.centos.vbird \uff0c\u800c\u9019\u90e8\u4e3b\u6a5f\u7684 IP \u70ba 192.168.100.200\uff0c \u90a3\u63a5\u4e0b\u4f86\u5c31\u8b93\u6211\u5011\u5be6\u969b\u4f86\u8a2d\u5b9a\u5427\uff01<\/p>\n<ul>\n<li>\n<hr \/>\n<p>\u4e0a\u5c64 DNS \u4f3a\u670d\u5668\uff1a\u53ea\u9700\u65b0\u589e zone file \u7684 NS \u8207 A \u5373\u53ef<\/li>\n<\/ul>\n<p>\u4e0a\u5c64 DNS \u7684\u8655\u7406\u771f\u662f\u7c21\u55ae\u5230\u7206\u70b8\uff01\u6211\u5011\u53ea\u8981\u4fee\u6539 master DNS (www.centos.vbird \u90a3\u4e00\u90e8) \u88e1\u9762\u7684 named.centos.vbird \u9019\u500b\u6b63\u89e3\u6a94\u6848\u5373\u53ef\u3002slave DNS \u4e0d\u7528\u4fee\u6539\uff0c\u662f\u56e0\u70ba\u4ed6\u6703\u81ea\u52d5\u66f4\u65b0\u561b\uff01\u65b0\u589e\u5982\u4e0b\u7684\u8cc7\u6599\u5373\u53ef\uff1a<\/p>\n<pre>[root@www ~]# vim \/var\/named\/named.centos.vbird\r\n@                       IN SOA   master.centos.vbird. vbird.www.centos.vbird. (\r\n                                 2011080501 3H 15M 1W 1D )\r\n# \u4e0a\u9762\u7684 SOA \u90e8\u5206\u5e8f\u865f\u52a0\u5927\uff0c\u5e95\u4e0b\u65b0\u589e\u9019\u5169\u884c\u5373\u53ef (\u539f\u672c\u7684\u8cc7\u6599\u90fd\u4fdd\u7559\u4e0d\u52d5)\uff01\r\nniki.centos.vbird.      IN NS    dns.niki.centos.vbird.\r\ndns.niki.centos.vbird.  IN A     192.168.100.200\r\n\r\n[root@www ~]# \/etc\/init.d\/named restart\r\n[root@www ~]# tail -n 30 \/var\/log\/messages | grep named\r\nAug  5 14:22:36 www named[9564]: zone centos.vbird\/IN: loaded serial <u>2011080501<\/u>\r\n# \u767b\u9304\u6a94\u7684\u95dc\u9375\u662f\u4e0a\u9762\u7684\u5e8f\u865f\u90e8\u5206\uff5e\u5fc5\u9808\u662f\u6211\u5011\u586b\u5beb\u7684\u65b0\u7684\u5e8f\u865f\u624d\u5c0d\uff01\r\n\r\n[root@www ~]# dig dns.niki.centos.vbird @127.0.0.1\r\n# \u4f60\u6703\u767c\u73fe\u662f\u932f\u8aa4\u7684\uff01\u627e\u4e0d\u5230 A \u5594\uff01\r\n<\/pre>\n<p>\u4e0a\u5c64 DNS \u7684\u8a2d\u5b9a\u975e\u5e38\u7c21\u55ae\uff01\u53ea\u8981\u4fee\u6539 zone file \u5373\u53ef\uff5e\u4e0d\u904e\uff0c\u7531\u65bc zone file \u6307\u5b9a\u7684\u662f NS \u7684\u67e5\u8a62\u6b0a\u529f\u80fd\uff0c \u56e0\u6b64\uff0c\u6700\u5f8c\u90a3\u500b\u6307\u4ee4\u5728 dig dns.niki.centos.vbird \u6642\uff0c\u537b\u6703\u627e\u4e0d\u5230 A \u5594\uff01\u90a3\u662f\u6b63\u5e38\u7684\uff5e\u56e0\u70ba 192.168.100.200 \u5c1a\u672a\u8a2d\u5b9a\u597d niki.centos.vbird \u9019\u500b\u9818\u57df\u561b\uff01\u6240\u4ee5\u8ffd\u8e64\u7684\u7d50\u679c\u4e26\u6c92\u6709\u767c\u73fe\u5728 192.168.100.200 \u6709 niki.centos.vbird \u7684 zone \u554a\uff01 \u6240\u4ee5\u7576\u7136\u627e\u4e0d\u5230\u3002\u6b64\u6642\u8cc7\u6599\u5eab\u7684\u7ba1\u7406\u6b0a\u5728 192.168.100.200 \u4e0a\u5566\uff01\u9019\u6a23\u53ef\u4ee5\u7406\u89e3\u55ce\uff1f\u518d\u4f86\u8655\u7406\u4e0b\u5c64 DNS \u5427\uff01<\/p>\n<ul>\n<li>\n<hr \/>\n<p>\u4e0b\u5c64 DNS \u4f3a\u670d\u5668\uff1a\u9700\u8981\u6709\u5b8c\u6574\u7684 zone \u76f8\u95dc\u8a2d\u5b9a<\/li>\n<\/ul>\n<p>\u4e0b\u5c64\u7684 DNS \u8a2d\u5b9a\u5c31\u8207 <a href=\"http:\/\/linux.vbird.org\/linux_server\/0350dns.php#DNS_master\">19.4<\/a> \u7684\u8a73\u7d30\u5167\u5bb9\u4e00\u6a23\u4e86\uff01\u6240\u4ee5\u5728\u9019\u88e1\u6211\u5011\u50c5\u5217\u51fa\u91cd\u8981\u7684\u9805\u76ee\uff1a<\/p>\n<pre># 1. \u4fee\u6539 named.conf \uff0c\u589e\u52a0 zone \u7684\u53c3\u6578\uff0c\u5047\u8a2d\u6a94\u540d\u70ba named.niki.centos.vbird\r\n[root@niki ~]# vim \/etc\/named.conf\r\n....(\u524d\u9762\u7701\u7565)....\r\nzone \"niki.centos.vbird\" IN {\r\n        type master;\r\n        file \"named.niki.centos.vbird\";\r\n};\r\n\r\n# 2. \u5efa\u7acb named.niki.centos.vbird\r\n[root@niki ~]# vim \/var\/named\/named.niki.centos.vbird\r\n$TTL   600\r\n@      IN SOA   dns.niki.centos.vbird. root.niki.centos.vbird. (\r\n                2011080501 3H 15M 1W 1D )\r\n@      IN NS    dns.niki.centos.vbird.\r\ndns    IN A     192.168.100.200\r\nwww    IN A     192.168.100.200\r\n@      IN MX 10 www.niki.centos.vbird.\r\n@      IN A     192.168.100.200\r\n# \u70ba\u4e86\u7c21\u5316\u6574\u500b\u7248\u9762\uff0c\u6240\u4ee5\u9ce5\u54e5\u90fd\u4f7f\u7528 hostname \u800c\u975e FQDN\uff01\u8acb\u898b\u8ad2\uff01\r\n\r\n# 3. \u555f\u52d5\u4e26\u89c0\u5bdf\u76f8\u95dc\u767b\u9304\u8cc7\u8a0a\r\n[root@niki ~]# \/etc\/init.d\/named restart\r\n[root@niki ~]# tail -n 30 \/var\/log\/messages | grep named\r\n....(\u524d\u9762\u7701\u7565)....\r\nzone <u>niki.centos.vbird<\/u>\/IN: loaded serial <u>2011080501<\/u>\r\n....(\u5e95\u4e0b\u7701\u7565)....\r\n# \u540c\u6642\uff0c<u>\u8a18\u5f97\u8655\u7406\u4e00\u4e0b\u9632\u706b\u7246\u7684\u653e\u884c\u554f\u984c<\/u>\uff01\u5426\u5247\u6e2c\u8a66\u6703\u5931\u6557\uff01\uff01\r\n\r\n[root@niki ~]# dig www.niki.centos.vbird @192.168.100.254\r\n# \u4e0a\u8ff0\u7684\u52d5\u4f5c\u5fc5\u9808\u8981\u6709\u56de\u61c9\u624d\u884c\uff01\u5426\u5247\u5c31\u6703\u51fa\u554f\u984c\uff5e\r\n<\/pre>\n<hr \/>\n<p><a name=\"view\"><\/a><img loading=\"lazy\" decoding=\"async\" src=\"http:\/\/linux.vbird.org\/images\/penguin-s.gif\" alt=\"\u5c0f\u6a19\u984c\u7684\u5716\u793a\" width=\"16\" height=\"23\" align=\"middle\" \/>19.5.4 \u4f9d\u4e0d\u540c\u4ecb\u9762\u7d66\u4e88\u4e0d\u540c\u7684 DNS \u4e3b\u6a5f\u540d\u7a31\uff1a view \u529f\u80fd\u7684\u61c9\u7528<\/p>\n<p>\u60f3\u50cf\u4e00\u500b\u74b0\u5883\uff0c\u4ee5\u6211\u5011\u76ee\u524d\u7684\u5340\u57df\u7db2\u8def\u4f3a\u670d\u5668\u4f86\u8aaa\uff0c\u6211\u7684 master.centos.vbird \u6709\u5169\u500b\u4ecb\u9762\uff0c\u5206\u5225\u662f 192.168.100.254\/24 (\u5c0d\u5167) \u53ca 192.168.1.100\/24 (\u5c0d\u5916)\uff0c\u90a3\u7576\u6211\u5916\u908a\u7684\u7528\u6236\u60f3\u8981\u77ad\u89e3\u5230 master.centos.vbird \u9019\u90e8\u4f3a\u670d\u5668\u7684 IP \u6642\uff0c\u53d6\u5f97\u7684\u7adf\u7136\u662f 192.168.100.254\uff0c\u56e0\u6b64\u9084\u5f97\u8981\u900f\u904e NAT \u624d\u80fd\u9023\u7dda\u5230\u8a72\u4ecb\u9762\uff0c\u4f46\u660e\u660e 192.168.100.254 \u8207\u5916\u90e8\u7684 192.168.1.100 \u662f\u540c\u4e00\u53f0\u4f3a\u670d\u5668\u4e3b\u6a5f\u561b\uff01\u5e79\u561b\u9084\u5f97\u8981\u7d93\u904e NAT \u8f49\u5230\u5167\u90e8\u4ecb\u9762\u5462\uff1f\u6709\u6c92\u6709\u8fa6\u6cd5\u8b93\u5916\u90e8\u7684\u67e5\u8a62\u627e\u5230 master.centos.vbird \u662f 192.168.1.100 \u800c\u5167\u90e8\u7684\u627e\u5230\u5247\u56de\u61c9 192.168.100.254 \u5462\uff1f\u53ef\u4ee5\u7684\uff01\u90a3\u5c31\u900f\u904e view \u7684\u529f\u80fd\uff01<\/p>\n<p>\u90a3\u9ebc view \u8981\u600e\u9ebc\u8655\u7406\u5462\uff1f\u5176\u5be6\u5c31\u662f\u8b93\u4e0d\u540c\u4f86\u6e90\u7684\u7528\u6236\uff0c\u80fd\u5920\u53d6\u5f97\u4ed6\u5011\u81ea\u5df1\u7684 zone \u56de\u61c9\u5c31\u662f\u4e86\u3002\u8209\u4f8b\u4f86\u8aaa\uff0c\u7576\u7528\u6236\u4f86\u81ea 10.0.0.1 \u6642\uff0c\u9019\u500b\u4f86\u6e90\u4e0d\u53ef\u80fd\u662f\u5167\u90e8 (192.168.100.0\/24) \uff0c\u56e0\u6b64\u9019\u500b\u4f86\u6e90\u5c31\u6703\u4f7f\u7528\u5916\u90e8\u7684 zone file \u5167\u5bb9\u4f86\u56de\u61c9\u3002 \u56e0\u6b64\uff0c\u6211\u5011\u5c31\u5f97\u8981\u6e96\u5099\u540c\u4e00\u500b zone \u9700\u8981\u5169\u500b\u4e0d\u540c\u7684\u8a2d\u5b9a\uff0c\u518d\u5c07\u500b\u5225\u7684\u8a2d\u5b9a\u5e36\u5165\u81ea\u5df1\u7684\u7528\u6236\u7aef\u67e5\u8a62\u7576\u4e2d\u3002<\/p>\n<p>\u73fe\u5728\u6211\u5011\u91dd\u5c0d\u9019\u500b\u6982\u5ff5\uff0c\u5c0d\u65bc\u9ce5\u54e5\u7684\u5340\u7db2\u8a2d\u5b9a view \u7684\u539f\u5247\u662f\u9019\u6a23\u7684\uff1a<\/p>\n<ul>\n<li>\u5efa\u7acb\u4e00\u500b\u540d\u70ba intranet \u7684\u540d\u5b57\uff0c\u9019\u500b\u540d\u5b57\u4ee3\u8868\u7528\u6236\u7aef\u70ba 192.168.100.0\/24 \u7684\u4f86\u6e90\uff1b<\/li>\n<li>\u5efa\u7acb\u4e00\u500b\u540d\u70ba internet \u7684\u540d\u5b57\uff0c\u9019\u500b\u540d\u5b57\u4ee3\u8868\u7528\u6236\u7aef\u70ba\u975e 192.168.100.0\/24 \u7684\u5176\u4ed6\u4f86\u6e90<\/li>\n<li>intranet \u4f7f\u7528\u7684 zone file \u70ba\u672c\u7ae0\u524d\u9762\u5404\u5c0f\u7bc0\u6240\u5efa\u7acb\u7684 zone filename\uff0cinternet \u4f7f\u7528\u7684 zone filename \u5247\u5728\u539f\u672c\u7684\u6a94\u540d\u5f8c\u9762\u7d2f\u52a0 inter \u7684\u526f\u6a94\u540d\uff0c\u4e26\u4fee\u8a02\u5404\u6a19\u8a8c\u7684\u7d50\u679c\u3002<\/li>\n<\/ul>\n<p>\u518d\u6b21\u5f37\u8abf\uff0c\u6700\u7d42\u7684\u7d50\u679c\u7576\u4e2d\uff0c\u5f9e\u5167\u7db2\u67e5\u5230\u7684 www.centos.vbird IP \u61c9\u8a72\u662f 192.168.100.254\uff0c\u800c\u53ea\u8981\u4e0d\u662f\u9ce5\u54e5\u5167\u7db2\u4f86\u6e90\u7684\u7528\u6236\u7aef\uff0c \u67e5\u5230\u7684 www.centos.vbird IP \u61c9\u8a72\u662f 192.168.1.100 \u624d\u5c0d\uff01\u90a3\u5c31\u8b93\u6211\u5011\u4f86\u5be6\u969b\u8a2d\u5b9a\u6b64\u4e00\u9805\u76ee\u5427\uff01<\/p>\n<pre>[root@www ~]# vim \/etc\/named.conf\r\noptions {\r\n        directory       \"\/var\/named\";\r\n        dump-file       \"\/var\/named\/data\/cache_dump.db\";\r\n        statistics-file \"\/var\/named\/data\/named_stats.txt\";\r\n        memstatistics-file \"\/var\/named\/data\/named_mem_stats.txt\";\r\n        allow-query     { any; };\r\n        recursion yes;\r\n        allow-transfer  { none; };\r\n};\r\n\r\nacl intranet { 192.168.100.0\/24; };        &lt;==\u91dd\u5c0d intranet \u7d66\u4e88\u7684\u4f86\u6e90 IP \u6307\u5b9a\r\nacl internet { ! 192.168.100.0\/24; any; }; &lt;==\u52a0\u4e0a\u9a5a\u5606\u865f (!) \u4ee3\u8868\u53cd\u5411\u9078\u64c7\u7684\u610f\u601d\r\n\r\nview \"lan\" {                            &lt;==\u53ea\u662f\u4e00\u500b\u540d\u5b57\uff0c\u4ee3\u8868\u7684\u662f\u5167\u7db2\r\n        match-clients { \"intranet\"; };  &lt;==\u543b\u5408\u9019\u500b\u4f86\u6e90\u7684\u624d\u4f7f\u7528\u5e95\u4e0b\u7684 zone\r\n        zone \".\" IN {\r\n                type hint;\r\n                file \"named.ca\";\r\n        };\r\n        zone \"centos.vbird\" IN {\r\n                type master;\r\n                file \"named.centos.vbird\";\r\n                allow-transfer { 192.168.100.10; };\r\n        };\r\n        zone \"100.168.192.in-addr.arpa\" IN {\r\n                type master;\r\n                file \"named.192.168.100\";\r\n                allow-transfer { 192.168.100.10; };\r\n        };\r\n};\r\n\r\nview \"wan\" {                           &lt;==\u540c\u6a23\uff0c\u53ea\u662f\u500b\u540d\u5b57\u800c\u5df2\uff01\r\n        match-clients { \"internet\"; }; &lt;==\u4ee3\u8868\u7684\u5247\u662f\u5916\u7db2\u7684 internet \u4f86\u6e90\r\n        zone \".\" IN {\r\n                type hint;\r\n                file \"named.ca\";\r\n        };\r\n        zone \"centos.vbird\" IN {\r\n                type master;\r\n                file \"named.centos.vbird.inter\"; &lt;==\u6a94\u540d\u5fc5\u9808\u8207\u539f\u6709\u7684\u4e0d\u540c\uff01\r\n        };\r\n        \/\/ \u5916\u7db2\u56e0\u70ba\u6c92\u6709\u4f7f\u7528\u5230\u5167\u7db2\u7684 IP\uff0c\u6240\u4ee5 IP \u53cd\u89e3\u90e8\u5206\u53ef\u4ee5\u4e0d\u5beb\u65bc\u6b64\r\n};\r\n<\/pre>\n<p>\u4e0a\u8868\u4e2d\uff0c\u6709\u4e9b\u8cc7\u6599\u662f\u91cd\u8907\u7684\uff0c\u6709\u4e9b\u5247\u9700\u8981\u7d93\u904e\u4fee\u6539\u3002\u73fe\u5728\uff0c\u8b93\u6211\u5011\u4f86\u6539\u6539 named.centos.vbird.inter \u5427\uff01<\/p>\n<pre>[root@www ~]# cd \/var\/named\r\n[root@www named]# cp -a named.centos.vbird named.centos.vbird.inter\r\n[root@www named]# vim named.centos.vbird.inter\r\n$TTL    600\r\n@                       IN SOA   master.centos.vbird. vbird.www.centos.vbird. (\r\n                                 2011080503 3H 15M 1W 1D )\r\n@                       IN NS    master.centos.vbird.\r\nmaster.centos.vbird.    IN A     192.168.1.100\r\n@                       IN MX 10 www.centos.vbird.\r\n\r\nwww.centos.vbird.       IN A     192.168.1.100\r\nlinux.centos.vbird.     IN CNAME www.centos.vbird.\r\nftp.centos.vbird.       IN CNAME www.centos.vbird.\r\nforum.centos.vbird.     IN CNAME www.centos.vbird.\r\nworkstation.centos.vbird. IN A    192.168.1.101\r\n\r\n[root@www named]# \/etc\/init.d\/named restart\r\n[root@www named]# tail -n 30 \/var\/log\/messages\r\n[root@www named]# dig www.centos.vbird @192.168.100.254\r\nwww.centos.vbird.       600     IN      A       <u>192.168.100.254<\/u>\r\n# \u8981\u5f97\u5230\u4e0a\u9762\u7684 IP \u624d\u662f\u5c0d\u7684\u5594\uff01\u56e0\u70ba\u4ecb\u9762\u4f86\u81ea\u65bc 192.168.100.0\/24 \u7db2\u6bb5\r\n\r\n[root@wwww named]# dig www.centos.vbird @192.168.1.100\r\nwww.centos.vbird.       600     IN      A       <u>192.168.1.100<\/u>\r\n# \u8981\u5f97\u5230\u4e0a\u9762\u7684 IP \u624d\u662f\u5c0d\u7684\u5594\uff01\u56e0\u70ba\u4ecb\u9762\u4f86\u81ea\u975e 192.168.100.0\/24 \u7db2\u6bb5\r\n<\/pre>\n<p>\u6709\u6c92\u6709\u5f88\u7c21\u55ae\uff01\u9019\u6a23\u5c31\u80fd\u8b93\u4f60\u7684 DNS \u4f9d\u64da\u4e0d\u540c\u7684\u7528\u6236\u4f86\u6e90\uff0c\u5206\u5225\u7d66\u4e88\u540c\u4e00\u500b\u4e3b\u6a5f\u540d\u7a31\u7684\u4e0d\u540c\u89e3\u6790\u5462\uff01<\/p>\n<p>\u4f8b\u984c\uff1a<\/p>\n<p>\u4f60\u7684\u7db2\u7ad9\u8b80\u8005\u975e\u5e38\u7684\u591a\uff0c\u4f46\u662f\u5206\u4f48\u5728\u4e16\u754c\u5404\u5730\u3002\u4f60\u60f3\u8b93\u4e9e\u6d32\u5340\u7684\u8b80\u8005\u9023\u7dda\u5230\u53f0\u7063\u7684\u7ad9\u53f0\uff0c\u800c\u5176\u4ed6\u570b\u5bb6\u7684\u9023\u7dda\u5247\u9023\u5230\u7f8e\u570b\u7684\u7ad9\u53f0\uff0c \u4f46\u53c8\u4e0d\u60f3\u8981\u8b93\u4f7f\u7528\u8005\u81ea\u5df1\u6311\u9078\u4e0d\u540c\u7684\u4e3b\u6a5f\u540d\u7a31\uff0c\u60f3\u4f7f\u7528\u540c\u4e00\u7d44\u4e3b\u6a5f\u540d\u7a31\uff0c\u6b64\u6642\u8a72\u5982\u4f55\u662f\u597d\uff1f<\/p>\n<p>\u7b54\uff1a<\/p>\n<p>\u9ce5\u54e5\u53ef\u4ee5\u60f3\u5230\u7684\u6700\u7c21\u55ae\u7684\u65b9\u6848\uff0c\u5c31\u662f\u900f\u904e DNS \u4f86\u8a2d\u5b9a\u76f8\u540c\u4e3b\u6a5f\u540d\u7a31\u7684\u4e0d\u540c IP \u76ee\u6a19\uff0c\u4ea6\u5373\u662f\u900f\u904e view \u4f86\u898f\u7bc4\u5373\u53ef\u3002 \u4e0d\u904e\uff0c\u8207\u4e0a\u8ff0\u9ce5\u54e5\u7684\u5340\u7db2\u7c21\u55ae\u7bc4\u4f8b\u4e0d\u540c\uff0c\u6211\u5011\u5f97\u8981\u6536\u96c6\u4e9e\u6d32\u5340\u7684 IP \u624d\u884c\uff0c\u9019\u4e9b\u5340\u6bb5\u53ef\u80fd\u53ef\u4ee5\u900f\u904e\u5e95\u4e0b\u7684\u7db2\u7ad9\u4f86\u53d6\u5f97\uff1a<\/p>\n<ul>\n<li>\u4e94\u5927\u6d32\u7684 IP \u7ba1\u7406\u6240\u5c6c\u4eba\uff1a<a href=\"http:\/\/www.iana.org\/numbers\/\">http:\/\/www.iana.org\/numbers\/<\/a><\/li>\n<li>\u6bcf\u500b\u55ae\u4f4d\u7684 IP \u5206\u4f48\uff1a<br \/>\n<a href=\"http:\/\/www.iana.org\/assignments\/ipv4-address-space\/ipv4-address-space.xml\">http:\/\/www.iana.org\/assignments\/ipv4-address-space\/ipv4-address-space.xml<\/a><\/li>\n<li>\u53f0\u7063\u5730\u5340 IP \u5206\u4f48\uff1a<br \/>\n<a href=\"http:\/\/rms.twnic.net.tw\/twnic\/User\/Member\/Search\/main7.jsp?Order=inet_aton%28Startip%29\">http:\/\/rms.twnic.net.tw\/twnic\/User\/Member\/Search\/main7.jsp?Order=inet_aton%28Startip%29<\/a><\/li>\n<\/ul>\n<p>\u7136\u5f8c\u518d\u900f\u904e acl \u4ee5\u53ca view \u4f86\u898f\u7bc4\u5373\u53ef\u3002\u9ce5\u54e5\u7684\u6536\u96c6\u8cc7\u6599\u5982\u4e0b\uff0c\u5982\u679c\u6709\u8aa4\uff0c\u9084\u8acb\u544a\u77e5\uff01<\/p>\n<pre>acl asia { 1.0.0.0\/8;  14.0.0.0\/8;  27.0.0.0\/8;  36.0.0.0\/8;  39.0.0.0\/8;\r\n          42.0.0.0\/0;  49.0.0.0\/8;  58.0.0.0\/8;  59.0.0.0\/8;  60.0.0.0\/8;\r\n          61.0.0.0\/8; 101.0.0.0\/8; 103.0.0.0\/8; 106.0.0.0\/8; 110.0.0.0\/8;\r\n         111.0.0.0\/8; 112.0.0.0\/8; 113.0.0.0\/8; 114.0.0.0\/8; 115.0.0.0\/8;\r\n         116.0.0.0\/8; 117.0.0.0\/8; 118.0.0.0\/8; 119.0.0.0\/8; 120.0.0.0\/8;\r\n         121.0.0.0\/8; 122.0.0.0\/8; 123.0.0.0\/8; 124.0.0.0\/8; 125.0.0.0\/8;\r\n         126.0.0.0\/8; 175.0.0.0\/8; 180.0.0.0\/8; 182.0.0.0\/8; 183.0.0.0\/8;\r\n         202.0.0.0\/8; 203.0.0.0\/8; 210.0.0.0\/8; 211.0.0.0\/8; 218.0.0.0\/8;\r\n         219.0.0.0\/8; 220.0.0.0\/8; 221.0.0.0\/8; 222.0.0.0\/8; 223.0.0.0\/8;\r\n         139.175.0.0\/16; 140.0.0.0\/8;150.116.0.0\/16;150.117.0.0\/16;\r\n         163.0.0.0\/8; 168.95.0.0\/16;192.0.0.0\/8; \r\n};\r\nacl nonasia { ! \"asia\"; any; };\r\n<\/pre>\n<p>\u5982\u4e0a\u6240\u793a\uff0c\u52a0\u5165 asia \u8207 nonasia \u7684\u76f8\u95dc\u8a2d\u5b9a\uff0c\u518d\u4f7f\u7528 view \u4f86\u8655\u7406\u76f8\u95dc\u7684 zone \uff0c\u4e26\u4fee\u6539 zone file \u5167\u5bb9\uff0c \u5c31\u80fd\u5920\u8655\u7406\u597d\u9019\u500b\u6848\u4f8b\u7684\u9700\u6c42\u56c9\uff01<\/p>\n<hr \/>\n<p><a name=\"upgrade\"><\/a><img loading=\"lazy\" decoding=\"async\" src=\"http:\/\/linux.vbird.org\/images\/penguin-m.gif\" alt=\"\u5927\u6a19\u984c\u7684\u5716\u793a\" width=\"25\" height=\"34\" align=\"middle\" \/>19.6 DNS \u4f3a\u670d\u5668\u7684\u9032\u968e\u8a2d\u5b9a<\/p>\n<p>\u5176\u5be6\uff0c DNS \u4f3a\u670d\u5668\u7684\u904b\u4f5c\u539f\u7406\u8207\u67b6\u8a2d\u65b9\u5f0f\u7684\u8b8a\u5316\uff0c\u771f\u7684\u5f88\u9ad8\u6df1\u83ab\u6e2c\u7684\uff01\u5728\u9019\u88e1\uff0c\u6211\u5011\u984d\u5916\u7684\u63d0\u51fa\u4e00\u4e9b\u6bd4\u8f03\u9032\u968e\u7684\u5167\u5bb9\u7d66\u5927\u5bb6\u53c3\u8003\u53c3\u8003\uff0c \u4f8b\u5982\u67b6\u8a2d\u4e00\u500b\u5408\u6cd5\u6388\u6b0a\u7684 DNS \u4f3a\u670d\u5668\u4ee5\u53ca\u5229\u7528 rndc \u63a7\u7ba1 DNS \u7cfb\u7d71\u5594\uff01<\/p>\n<hr \/>\n<p><a name=\"OK_DNS\"><\/a><img loading=\"lazy\" decoding=\"async\" src=\"http:\/\/linux.vbird.org\/images\/penguin-s.gif\" alt=\"\u5c0f\u6a19\u984c\u7684\u5716\u793a\" width=\"16\" height=\"23\" align=\"middle\" \/>19.6.1 \u67b6\u8a2d\u4e00\u500b\u5408\u6cd5\u6388\u6b0a\u7684 DNS \u4f3a\u670d\u5668<\/p>\n<p>\u597d\u5566\uff01\u73fe\u5728\u4f60\u61c9\u8a72\u77e5\u9053\u4ec0\u9ebc\u662f\u300e\u7d93\u4e0a\u6e38\u6388\u6b0a\u7684\u5408\u6cd5 DNS \u4f3a\u670d\u5668\u300f\u4e86\u5427\uff1f \u6c92\u932f\uff01\u5c31\u662f\u4e0a\u6e38\u7684 DNS \u4f3a\u670d\u5668\u5c07\u5b50\u7db2\u57df\u7684\u67e5\u6838\u6b0a\u958b\u653e\u7d66\u4f60\u4f86\u8a2d\u5b9a\u5c31\u5c0d\u5566\uff01\u55ef\uff01\u96d6\u7136\u77e5\u9053\u539f\u7406\uff0c\u4f46\u662f\u90a3\u9ebc\u6211\u8981\u5982\u4f55\u4f86\u67b6\u8a2d\u4e00\u500b\u5408\u6cd5\u7684 DNS \u4f3a\u670d\u5668\u5462\uff1f\u597d\u8b93\u6211\u81ea\u5df1\u7ba1\u7406\u81ea\u5df1\u7684 domain\uff01\u8209\u4f8b\u4f86\u8aaa\uff0c\u9ce5\u54e5\u7684 vbird.idv.tw \u5c31\u662f\u9ce5\u54e5\u81ea\u5df1\u7ba1\u7406\u7684\u54e9\uff5e\u5e95\u4e0b\u6211\u5011\u5c31\u4f86\u8ac7\u4e00\u8ac7\uff0c\u5982\u4f55\u5411 ISP \u7533\u8acb\u4e00\u500b\u5408\u6cd5\u6388\u6b0a\u7684 DNS \u4f3a\u670d\u5668\uff0c\u6216\u8005\u662f\u5408\u6cd5\u7684\u4e3b\u6a5f\u540d\u7a31\u554a\uff01<\/p>\n<ul>\n<li>\n<hr \/>\n<p>1. \u7533\u8acb\u4e00\u500b\u5408\u6cd5\u7684 domain name &#8230;\u5c31\u662f\u8981\u82b1\u9322\uff01<\/li>\n<\/ul>\n<p>\u65e2\u7136\u662f\u8981\u5efa\u7acb\u4e00\u500b\u5408\u6cd5\u7684 DNS server\uff0c\u81ea\u7136\u5c31\u8981\u5411\u5408\u6cd5\u7684 ISP \u7533\u8acb\u6388\u6b0a\u56c9\uff01\u76ee\u524d\u4f60\u53ef\u4ee5\u5230\u5e95\u4e0b\u7684\u5730\u65b9\u53bb\u7533\u8acb\u5594\uff01<\/p>\n<ul>\n<li><a href=\"http:\/\/www.twnic.net\/index3.php\">http:\/\/www.twnic.net\/index3.php<\/a><\/li>\n<\/ul>\n<p>\u5176\u5be6 TWNIC \u5df2\u7d93\u5c07\u53f0\u7063\u5730\u5340\u7684\u4e00\u4e9b domain \u6388\u6b0a\u7d66\u5404\u5927 ISP \u7ba1\u7406\u4e86\uff0c\u6240\u4ee5\u4f60\u9023\u63a5\u4e0a\u8ff0\u7684\u7db2\u7ad9\u4e4b\u5f8c\uff0c\u53ef\u4ee5\u9ede\u9078\u88e1\u982d\u76f8\u95dc\u7684\u9023\u7d50\u5230\u5404\u5927 ISP \u53bb\u8a3b\u518a\uff01\u4f8b\u5982\u9ce5\u54e5\u5c31\u5728 Hinet \u8a3b\u518a\u4e86 vbird.idv.tw \u9019\u500b\u7db2\u57df\uff01\u73fe\u5728\u9ce5\u54e5\u5c31\u4ee5 Hinet \u7684\u8a3b\u518a\u505a\u70ba\u8aaa\u660e\u5427\uff1a<\/p>\n<ol>\n<li>\u9032\u5165\u4e3b\u756b\u9762\uff1a<br \/>\n\u76f4\u63a5\u9023\u7d50\u5230\u5e95\u4e0b\u7684\u7db2\u9801\u53bb\uff1a <a href=\"http:\/\/domain.hinet.net\/\">http:\/\/domain.hinet.net<\/a><\/li>\n<li>\u9078\u64c7\u9700\u8981\u7684\u7db2\u57df\u540d\u7a31\uff0c\u4e26\u67e5\u8a62\u8a72\u7db2\u57df\u662f\u5426\u5df2\u5b58\u5728\uff1a<br \/>\n\u56e0\u70ba\u7db2\u57df\u5fc5\u9700\u662f\u7368\u4e00\u7121\u4e8c\u7684\uff0c\u6240\u4ee5\u4f60\u5fc5\u9700\u4f7f\u7528\u8a72\u7db2\u9801\u7576\u4e2d\u63d0\u4f9b\u7684\u67e5\u8a62\u529f\u80fd\uff0c \u53bb\u67e5\u8a62\u4e00\u4e0b\u4f60\u60f3\u8981\u7684\u7db2\u57df\u662f\u5426\u5df2\u7d93\u88ab\u8a3b\u518a\u4e86\u5462\uff1f\u4e00\u5b9a\u8981\u6c92\u6709\u88ab\u8a3b\u518a\u7684\u7db2\u57df\u624d\u53ef\u4ee5\u5594\uff01<\/li>\n<li>\u9010\u6b65\u9032\u884c\u8a3b\u518a\uff1a<br \/>\n\u4f60\u53ef\u4ee5\u9078\u64c7\u5f88\u591a\u7a2e\u985e\u7684\u9818\u57df\u4f86\u8a3b\u518a\uff0c\u5982\u679c\u60f3\u8981\u8a3b\u518a\u500b\u4eba\u7db2\u7ad9\uff0c\u8acb\u6309\u4e0b\u5716\u6240\u6307\u7684 (1) \u8655\uff0c\u5982\u679c\u60f3\u8981\u8a3b\u518a\u985e\u4f3c vbird.tw \u9019\u7a2e\u7db2\u57df\u7684\u8a71\uff0c\u5247\u53ef\u4ee5\u9078\u64c7 (2) \u6240\u6307\u7684\u90a3\u500b\u9805\u76ee\u3002\u7136\u5f8c\u4ee5\u8a72\u7db2\u7ad9\u63d0\u4f9b\u7684\u529f\u80fd\u4e00\u6b65\u4e00\u6b65\u7684\u5f80\u4e0b\u53bb\u9032\u884c\uff0c \u4f8b\u5982\u4ee5\u9ce5\u54e5\u7684\u300e\u500b\u4eba\u7db2\u5740\u300f\u4e4b\u8a3b\u518a\u70ba\u4f8b\uff0c\u6309\u4e0b\u500b\u4eba\u7db2\u5740\u4e4b\u5f8c\uff0c\u6703\u51fa\u73fe\u6d41\u7a0b\u6b65\u9a5f\u70ba\uff1a<img decoding=\"async\" title=\"\u4ee5 Hinet \u7db2\u7ad9\u70ba\u4f9d\u64da\u4ecb\u7d39\u8a3b\u518a domain \u7684\u65b9\u6cd5\" src=\"http:\/\/linux.vbird.org\/linux_server\/0350dns\/\/hinet_reg_01.gif\" alt=\"\u4ee5 Hinet \u7db2\u7ad9\u70ba\u4f9d\u64da\u4ecb\u7d39\u8a3b\u518a domain \u7684\u65b9\u6cd5\" border=\"1\" \/><br \/>\n\u5716 19.6-1\u3001\u4ee5 Hinet \u7db2\u7ad9\u70ba\u4f9d\u64da\u4ecb\u7d39\u8a3b\u518a domain \u7684\u65b9\u6cd5\u8acb\u4f9d\u5e8f\u4e00\u6b65\u4e00\u6b65\u7684\u5c07\u4ed6\u5b8c\u6210\uff0c\u6700\u5f8c\u4f60\u6703\u5f97\u5230\u4e00\u7d44\u5e33\u865f\u5bc6\u78bc\uff0c\u5c31\u80fd\u5920\u4fee\u6539\u81ea\u5df1\u7684\u9818\u57df\u5566\uff01<\/li>\n<li>\u9078\u64c7\u7db2\u7ad9\u4ee3\u7ba1\u6216\u67b6\u8a2d DNS \u6a21\u5f0f\uff1a<br \/>\n\u6211\u5011\u53ef\u4ee5\u76f4\u63a5\u8acb ISP \u5e6b\u6211\u5011\u8a2d\u5b9a\u597d host \u5c0d\u61c9 IP \u5c31\u597d(\u6700\u591a\u4e09\u90e8)\uff0c\u7576\u7136\u4e5f\u53ef\u4ee5\u81ea\u884c\u8a2d\u5b9a\u4e00\u4e0b\u6211\u5011\u6240\u9700\u8981\u7684 DNS \u4f3a\u670d\u5668\u5566\uff01\u5982\u679c\u672a\u4f86\u4f60\u53ef\u80fd\u6703\u67b6\u8a2d mail server \uff0c\u6240\u4ee5\u9084\u662f\u81ea\u884c\u8a2d\u5b9a DNS \u4e3b\u6a5f\u597d\u4e86\uff01\u4f60\u53ef\u4ee5\u9078\u64c7\u5716 19.6-1 \u5728 (3) \u6240\u6307\u7684\u300eDNS\u7570\u52d5\u8207\u67e5\u8a62\u300f\u9805\u76ee\uff0c\u6703\u51fa\u73fe\u4e0b\u9762\u5716\u793a\u3002\u8a18\u5f97\u9078\u64c7\u300eDNS\u300f\u53ca\u586b\u5beb\u4f60\u7684 hostname \u8207\u6b63\u78ba\u7684 IP \u5373\u53ef\u5594\uff01\u6ce8\u610f\uff1a \u8981\u586b\u9078\u9019\u500b\u9805\u76ee\uff0c\u6700\u597d\u4f60\u7684 IP \u662f\u56fa\u5b9a\u5236\u7684\uff0c\u6d6e\u52d5\u5236\u7684 IP \u4e0d\u5efa\u8b70\u7528\u9019\u500b\u9078\u9805\uff01<img decoding=\"async\" title=\"\u4ee5 Hinet \u7db2\u7ad9\u70ba\u4f9d\u64da\u4ecb\u7d39\u8a3b\u518a domain \u7684\u65b9\u6cd5\" src=\"http:\/\/linux.vbird.org\/linux_server\/0350dns\/\/hinet_reg_02.gif\" alt=\"\u4ee5 Hinet \u7db2\u7ad9\u70ba\u4f9d\u64da\u4ecb\u7d39\u8a3b\u518a domain \u7684\u65b9\u6cd5\" border=\"1\" \/><br \/>\n\u5716 19.6-2\u3001\u4ee5 Hinet \u7db2\u7ad9\u70ba\u4f9d\u64da\u4ecb\u7d39\u8a3b\u518a domain \u7684\u65b9\u6cd5<\/li>\n<\/ol>\n<ul>\n<li>\n<hr \/>\n<p>2. \u4ee5 <a href=\"http:\/\/linux.vbird.org\/linux_server\/0350dns.php#DNS_master\">DNS \u4f3a\u670d\u5668\u7684\u8a73\u7d30\u8a2d\u5b9a (19.4)<\/a> \u4e4b\u8a2d\u5b9a\u5167\u5bb9\u4f86\u8a2d\u5b9a\u4f60\u7684\u4e3b\u6a5f\uff1a<\/li>\n<\/ul>\n<p>\u5982\u679c\u4f60\u5df2\u7d93\u4ee5 DNS \u4f3a\u670d\u5668\u7684\u65b9\u5f0f\u7533\u8acb\u4e86\u4e00\u500b domain name \uff0c\u90a3\u9ebc\u4f60\u5c31\u5fc5\u9808\u8981\u8a2d\u5b9a\u4f60\u7684 DNS \u4e3b\u6a5f\u4e86\uff01 \u8acb\u6ce8\u610f\uff0c\u9019\u500b\u60c5\u6cc1\u4e4b\u4e0b\uff0c\u4f60\u53ea\u8981\u8a2d\u5b9a\u4f60\u7684\u8a3b\u518a\u7684\u7db2\u57df\u7684\u6b63\u89e3\u5373\u53ef\uff01 \u53cd\u89e3\u90e8\u5206\u5247\u5148\u4e0d\u8981\u7406\u6703\uff0c\u7576\u7136\uff0c\u5982\u679c\u4f60\u6709\u8fa6\u6cd5\u7684\u8a71\uff0c\u6700\u597d\u9084\u662f\u8acb\u4e0a\u5c64\u7684 ISP \u5e6b\u4f60\u8a2d\u5b9a\u56c9\uff01<\/p>\n<ul>\n<li>\n<hr \/>\n<p>3. \u6e2c\u8a66\uff1a<\/li>\n<\/ul>\n<p>\u8a2d\u5b9a\u4e00\u90e8\u5408\u6cd5\u7684 DNS \u5b8c\u7562\u5f8c\uff0c\u5efa\u8b70\u4f60\u53ef\u4ee5\u5230\u9019\u500b\u7db2\u7ad9\u53bb\u67e5\u8a62\u4e00\u4e0b\u4f60\u7684\u8a2d\u5b9a\u662f\u5426\u59a5\u7576\uff1a<\/p>\n<ul>\n<li><a href=\"http:\/\/thednsreport.com\/\">http:\/\/thednsreport.com\/<\/a><\/li>\n<\/ul>\n<p>\u5982\u6b64\u4e00\u4f86\uff0c\u4f60\u7684 DNS \u4e3b\u6a5f\u4e0a\u9762\u8a2d\u5b9a\u7684\u4efb\u4f55\u8cc7\u8a0a\uff0c\u90fd\u53ef\u4ee5\u900f\u904e Internet \u4e0a\u9762\u7684\u4efb\u4f55\u4e00\u90e8\u4e3b\u6a5f\u4f86\u67e5\u8a62\u5230\u5594\uff01\u5920\u68d2\u5427\uff01\u5fc3\u52d5\u4e86\u55ce\uff1f\u8d95\u5feb\u53bb\u8a66\u770b\u770b\u5427\uff01 ^_^<\/p>\n<hr \/>\n<p><a name=\"Lame_server\"><\/a><img loading=\"lazy\" decoding=\"async\" src=\"http:\/\/linux.vbird.org\/images\/penguin-s.gif\" alt=\"\u5c0f\u6a19\u984c\u7684\u5716\u793a\" width=\"16\" height=\"23\" align=\"middle\" \/>19.6.2 LAME Server \u7684\u554f\u984c<\/p>\n<p>\u6216\u8a31\u4f60\u66fe\u7d93\u5728 \/var\/log\/messages \u88e1\u9762\u770b\u5230\u985e\u4f3c\u9019\u6a23\u7684\u8a0a\u606f\uff1a<\/p>\n<pre>[root@www ~]# more \/var\/log\/messages\r\n1 Oct  5 05:02:30 test named[432]: lame server resolving '68.206.244.205.\r\n  in-addr.arpa' (in '206.244.205.in-addr.arpa'?): 205.244.200.3#53\r\n2 Oct  5 05:02:31 test named[432]: lame server resolving '68.206.244.205.\r\n  in-addr.arpa' (in '206.244.205.in-addr.arpa'?): 206.105.201.35#53\r\n3 Oct  5 05:02:41 test named[432]: lame server resolving '68.206.244.205.\r\n  in-addr.arpa' (in '206.244.205.in-addr.arpa'?): 205.244.112.20#53\r\n<\/pre>\n<p>\u9019\u662f\u4ec0\u9ebc\u6771\u897f\u5436\uff1f\u6839\u64da\u5b98\u65b9\u63d0\u4f9b\u7684\u6587\u4ef6\u8cc7\u6599\u4f86\u770b ( \u5728\u4f60\u7684 CentOS 6.x \u7684\u7cfb\u7d71\u4e0b\uff0c\u8acb\u5bdf\u770b\u9019\u500b\u6a94\u6848\u300e \/usr\/share\/doc\/bind-9.7.0\/arm\/Bv9ARM.ch06.html \u300f )\uff0c\u7576\u6211\u5011\u7684 DNS \u4f3a\u670d\u5668\u5728\u5411\u5916\u9762\u7684 DNS \u7cfb\u7d71\u67e5\u8a62\u67d0\u4e9b\u6b63\u53cd\u89e3\u6642\uff0c\u53ef\u80fd\u7531\u65bc \u300e\u5c0d\u65b9\u300f DNS \u4e3b\u6a5f\u7684\u8a2d\u5b9a\u932f\u8aa4\uff0c\u5c0e\u81f4\u7121\u6cd5\u89e3\u6790\u5230\u9810\u671f\u7684\u6b63\u53cd\u89e3\u7d50\u679c\uff0c\u9019\u500b\u6642\u5019\u5c31\u6703\u767c\u751f\u6240\u8b02\u7684 lame server \u7684\u932f\u8aa4\uff01<\/p>\n<p>\u90a3\u9ebc\u9019\u500b\u932f\u8aa4\u6703\u8b93\u6211\u5011\u7684 DNS \u4f3a\u670d\u5668\u767c\u751f\u4ec0\u9ebc\u56b4\u91cd\u7684\u5f8c\u679c\u55ce\uff1f\u65e2\u7136\u50c5\u662f\u5c0d\u65b9\u7684\u8a2d\u5b9a\u932f\u8aa4\uff0c\u6240\u4ee5\u81ea\u7136\u5c31\u4e0d\u6703\u5f71\u97ff\u6211\u5011\u7684 DNS \u4f3a\u670d\u5668\u7684\u6b63\u5e38\u4f5c\u696d\u4e86\u3002 \u53ea\u662f\u6211\u5011\u7684 DNS \u4e3b\u6a5f\u5728\u67e5\u8a62\u6642\uff0c\u6703\u767c\u751f\u7121\u6cd5\u6b63\u78ba\u89e3\u6790\u7684\u8b66\u544a\u8a0a\u606f\u800c\u5df2\uff0c \u9019\u500b\u8a0a\u606f\u96d6\u7136\u4e0d\u6703\u5c0d\u6211\u5011\u7684 Linux \u4e3b\u6a5f\u767c\u751f\u4ec0\u9ebc\u56f0\u64fe\uff0c\u4e0d\u904e\uff0c\u5c0d\u65bc\u7cfb\u7d71\u7ba1\u7406\u54e1\u4f86\u8aaa\uff0c \u8981\u5929\u5929\u67e5\u8a62\u7684 \/var\/log\/messages \u6a94\u6848\u7adf\u7136\u6709\u9019\u9ebc\u591a\u7684\u767b\u9304\u8cc7\u8a0a\uff0c\u9019\u662f\u5f88\u8a0e\u53ad\u7684\u4e00\u4ef6\u4e8b\uff01<\/p>\n<p>\u597d\u4e86\uff0c\u6211\u5011\u77e5\u9053 lame server \u662f\u5c0d\u65b9\u4e3b\u6a5f\u7684\u554f\u984c\uff0c\u5c0d\u6211\u5011\u4e3b\u6a5f\u6c92\u6709\u5f71\u97ff\uff0c\u4f46\u662f\u537b\u53c8\u4e0d\u60f3\u8981\u8b93\u8a72\u8a0a\u606f\u51fa\u73fe\u5728\u6211\u5011\u7684\u767b\u9304\u6a94 \/var\/log\/messages \u7576\u4e2d\uff0c\u600e\u9ebc\u9054\u5230\u9019\u6a23\u7684\u529f\u80fd\u5462\uff1f\u5475\u5475\uff01\u5c31\u76f4\u63a5\u5229\u7528 BIND \u9019\u500b\u8edf\u9ad4\u6240\u63d0\u4f9b\u7684\u767b\u9304\u6a94\u53c3\u6578\u554a\uff01 \u52d5\u4f5c\u5f88\u7c21\u55ae\uff0c\u5728\u4f60\u7684 \/etc\/named.conf \u6a94\u6848\u7576\u4e2d\u7684\u6700\u5e95\u4e0b\uff0c\u52a0\u5165\u9019\u500b\u53c3\u6578\u5373\u53ef\uff1a<\/p>\n<pre># 1. \u4fee\u6539 \/etc\/named.conf\r\n[root@www ~]# vim \/etc\/named.conf\r\n\/\/ \u52a0\u5165\u5e95\u4e0b\u9019\u500b\u53c3\u6578\uff1a\r\nlogging {\r\n        category lame-servers { null; };\r\n};\r\n\r\n# 2. \u91cd\u65b0\u555f\u52d5 bind\r\n[root@www ~]# \/etc\/init.d\/named restart\r\n<\/pre>\n<p>\u57fa\u672c\u4e0a\uff0c\u90a3\u500b logging \u662f\u4e3b\u6a5f\u7684\u767b\u9304\u6a94\u8a18\u9304\u7684\u4e00\u500b\u8a2d\u5b9a\u9805\u76ee\uff0c\u56e0\u70ba\u6211\u5011\u4e0d\u8981 lame server \u7684\u8cc7\u8a0a\uff0c \u6240\u4ee5\u624d\u5c07\u4ed6\u8a2d\u5b9a\u70ba\u7121 (null) \uff0c\u9019\u6a23\u5c31\u6539\u5b8c\u4e86\uff01\u8a18\u5f97\u91cd\u65b0\u555f\u52d5 named \u4e4b\u5f8c\uff0c\u9084\u662f\u8981\u5bdf\u770b\u4e00\u4e0b \/var\/log\/messages \u5594\uff01 \u4ee5\u78ba\u5b9a named \u7684\u6b63\u78ba\u555f\u52d5\u8207\u5426\uff01\u7136\u5f8c\uff0c\u563f\u563f\uff0c\u4ee5\u5f8c\u5c31\u4e0d\u6703\u770b\u5230 lame server \u54af\uff01<\/p>\n<hr \/>\n<p><a name=\"rndckey\"><\/a><img loading=\"lazy\" decoding=\"async\" src=\"http:\/\/linux.vbird.org\/images\/penguin-s.gif\" alt=\"\u5c0f\u6a19\u984c\u7684\u5716\u793a\" width=\"16\" height=\"23\" align=\"middle\" \/>19.6.3 \u5229\u7528 RNDC \u6307\u4ee4\u7ba1\u7406 DNS \u4f3a\u670d\u5668<\/p>\n<p>\u4e0d\u77e5\u9053\u4f60\u6703\u4e0d\u6703\u89ba\u5f97\u5f88\u5947\u602a\uff0c\u90a3\u5c31\u662f\u70ba\u5565\u555f\u52d5 DNS \u5f8c\uff0c\u5728 \/var\/log\/messages \u8001\u662f\u770b\u5230\u9019\u4e00\u53e5\u8a71\uff1a<\/p>\n<pre>command channel listening on 127.0.0.1#953\r\n<\/pre>\n<p>\u800c\u4e14\u5728\u672c\u6a5f\u7aef\u7684 port 953 \u9084\u591a\u4e86\u500b named \u6240\u555f\u52d5\u7684\u670d\u52d9\uff0c\u90a3\u662f\u5565\uff1f\u90a3\u5c31\u662f\u6240\u8b02\u7684 rndc \u4e86\u3002\u9019\u500b rndc \u662f BIND version 9 \u4ee5\u5f8c\u6240\u63d0\u4f9b\u7684\u529f\u80fd\u5566\uff0c\u4ed6\u53ef\u4ee5\u8b93\u4f60\u5f88\u8f15\u9b06\u7684\u7ba1\u7406\u4f60\u81ea\u5df1\u7684 DNS \u4f3a\u670d\u5668\u5594\uff01 \u5305\u62ec\u53ef\u4ee5\u6aa2\u67e5\u5df2\u7d93\u5b58\u5728 DNS \u5feb\u53d6\u7576\u4e2d\u7684\u8cc7\u6599\u3001\u91cd\u65b0\u66f4\u65b0\u67d0\u500b zone \u800c\u4e0d\u9700\u8981\u91cd\u65b0\u555f\u52d5\u6574\u500b DNS \uff0c \u4ee5\u53ca\u6aa2\u67e5 DNS \u7684\u72c0\u614b\u8207\u7d71\u8a08\u8cc7\u6599\u7b49\u7b49\u7684\uff0c\u633a\u6709\u8da3\u7684\uff01<\/p>\n<p>\u4e0d\u904e\uff0c\u56e0\u70ba rndc \u53ef\u4ee5\u5f88\u6df1\u5165\u7684\u7ba1\u7406\u4f60\u7684 DNS \u4f3a\u670d\u5668\uff0c\u6240\u4ee5\u7576\u7136\u8981\u9032\u884c\u4e00\u4e9b\u63a7\u7ba1\u5566\uff01 \u63a7\u7ba1\u7684\u65b9\u5f0f\u662f\u7d93\u904e rndc \u7684\u8a2d\u5b9a\u4f86\u5efa\u7acb\u4e00\u652f\u91d1\u9470 (rndc key)\uff0c\u4e26\u5c07\u9019\u652f\u91d1\u9470\u76f8\u95dc\u7684\u8cc7\u8a0a\u5beb\u5165\u4f60\u7684 named.conf \u8a2d\u5b9a\u6a94\u7576\u4e2d\uff0c\u91cd\u65b0\u555f\u52d5 DNS \u5f8c\uff0c\u4f60\u7684 DNS \u5c31\u80fd\u5920\u85c9\u7531 rndc \u9019\u500b\u6307\u4ee4\u4f86\u7ba1\u7406\u56c9\uff01 \u4e8b\u5be6\u4e0a\uff0c\u65b0\u7248\u7684 distributions \u901a\u5e38\u5df2\u7d93\u5e6b\u4f60\u4e3b\u52d5\u7684\u5efa\u7acb\u597d rndc key \u4e86\uff0c\u6240\u4ee5\u4f60\u4e0d\u9700\u8981\u5fd9\u788c\uff5e \u4e0d\u904e\uff0c\u5982\u679c\u4f60\u9084\u662f\u5728\u767b\u9304\u6a94\u7576\u4e2d\u767c\u73fe\u4e00\u4e9b\u932f\u8aa4\uff0c\u4f8b\u5982\uff1a<\/p>\n<pre>couldn't add command channel 127.0.0.1#953: not found\r\n<\/pre>\n<p>\u90a3\u5c31\u8868\u793a\u4f60 DNS \u7684 rndc key \u6c92\u6709\u8a2d\u5b9a\u597d\u5566\uff01\u90a3\u8981\u5982\u4f55\u8a2d\u5b9a\u597d\uff1f\u5f88\u7c21\u55ae\uff5e\u53ea\u8981\u5148\u5efa\u7acb\u4e00\u628a rndc key \uff0c\u7136\u5f8c\u52a0\u5230 named.conf \u7576\u4e2d\u53bb\u5373\u53ef\uff01\u4f60\u53ef\u4ee5\u4f7f\u7528 bind \u63d0\u4f9b\u7684\u6307\u4ee4\u4f86\u9032\u884c\u9019\u6a23\u7684\u5de5\u4f5c\u5594\uff01<\/p>\n<pre># 1. \u5148\u5efa\u7acb rndc key \u7684\u76f8\u95dc\u8cc7\u6599\u5427\uff01\r\n[root@www ~]# rndc-confgen\r\n# Start of rndc.conf &lt;==\u5e95\u4e0b\u6c92\u6709 # \u7684\u7b2c\u4e00\u90e8\u4efd\u8acb\u8907\u88fd\u5230 \/etc\/rndc.conf \u4e2d\r\nkey \"rndc-key\" {\r\n        algorithm hmac-md5;\r\n        secret \"UUqxyIwui+22CobCYFj5kg==\";\r\n};\r\n\r\noptions {\r\n        default-key \"rndc-key\";\r\n        default-server 127.0.0.1;\r\n        default-port 953;\r\n};\r\n# End of rndc.conf\r\n\r\n# \u81f3\u65bc\u5e95\u4e0b\u7684 key \u8207 controls \u90e8\u5206\uff0c\u5247\u8acb\u8907\u88fd\u5230 named.conf \u4e14\u89e3\u958b # \u5594\uff01\r\n# Use with the following in named.conf, adjusting the allow list as needed:\r\n# key \"rndc-key\" {\r\n#       algorithm hmac-md5;\r\n#       secret \"UUqxyIwui+22CobCYFj5kg==\";\r\n# };\r\n#\r\n# controls {\r\n#       inet 127.0.0.1 port 953\r\n#               allow { 127.0.0.1; } keys { \"rndc-key\"; };\r\n# };\r\n# End of named.conf\r\n# \u8acb\u6ce8\u610f\uff0c\u9019\u500b rndc-confgen \u662f\u5229\u7528\u4e82\u6578\u8a08\u7b97\u51fa\u52a0\u5bc6\u7684\u90a3\u628a key \uff0c\r\n# \u6240\u4ee5\u6bcf\u6b21\u57f7\u884c\u7684\u7d50\u679c\u90fd\u4e0d\u4e00\u6a23\u3002\u6240\u4ee5\u4e0a\u8ff0\u7684\u8cc7\u6599\u8207\u4f60\u7684\u87a2\u5e55\u6703\u6709\u9ede\u4e0d\u540c\u3002\r\n\r\n# 2. \u5efa\u7acb rndc.key \u6a94\u6848\r\n[root@www ~]# vim \/etc\/rndc.key\r\n# \u5728\u9019\u500b\u6a94\u6848\u7576\u4e2d\u5c07\u539f\u672c\u7684\u8cc7\u6599\u5168\u90e8\u522a\u9664\uff0c\u4e26\u5c07\u525b\u525b\u5f97\u5230\u7684\u7d50\u679c\u7d66\u4ed6\u8cbc\u4e0a\u53bb\r\nkey \"rndc-key\" {\r\n        algorithm hmac-md5;\r\n        secret \"UUqxyIwui+22CobCYFj5kg==\";\r\n};\r\n\r\n# 3. \u4fee\u6539 named.conf\r\n[root@www ~]# vim \/etc\/named.conf\r\n# \u5728\u67d0\u500b\u4e0d\u88ab\u5f71\u97ff\u7684\u89d2\u843d\u5efa\u7f6e\u5982\u4e0b\u7684\u5167\u5bb9\uff1a\r\nkey \"rndc-key\" {\r\n       algorithm hmac-md5;\r\n       secret \"UUqxyIwui+22CobCYFj5kg==\";\r\n};\r\ncontrols {\r\n       inet 127.0.0.1 port 953\r\n               allow { 127.0.0.1; } keys { \"rndc-key\"; };\r\n};\r\n\r\n[root@www ~]# \/etc\/init.d\/named restart\r\n<\/pre>\n<p>\u5efa\u7acb\u4e86rndc key \u4e26\u4e14\u555f\u52d5 DNS \uff0c\u540c\u6642\u4f60\u7684\u7cfb\u7d71\u4e5f\u5df2\u7d93\u6709 port 953 \u4e4b\u5f8c\uff0c\u6211\u5011\u5c31\u53ef\u4ee5\u5728\u672c\u6a5f\u57f7\u884c rndc \u9019\u500b\u6307\u4ee4\u4e86\u3002\u9019\u500b\u6307\u4ee4\u7684\u7528\u6cd5\u8acb\u76f4\u63a5\u8f38\u5165 rndc \u4f86\u67e5\u8a62\u5373\u53ef\uff1a<\/p>\n<pre>[root@www ~]# rndc\r\nUsage: rndc [-c config] [-s server] [-p port]\r\n        [-k key-file ] [-y key] [-V] command\r\n\r\ncommand is one of the following:\r\n\r\n  reload        Reload configuration file and zones.\r\n  stats         Write server statistics to the statistics file.\r\n  dumpdb        Dump cache(s) to the dump file (named_dump.db).\r\n  flush         Flushes all of the server's caches.\r\n  status        Display status of the server.\r\n# \u5176\u4ed6\u5c31\u7d66\u4ed6\u7701\u7565\u5566\uff01\u8acb\u81ea\u884c\u8f38\u5165\u9019\u500b\u6307\u4ee4\u4f86\u53c3\u8003\u56c9\uff01\r\n<\/pre>\n<p>\u90a3\u5982\u4f55\u4f7f\u7528\u5462\uff1f\u6211\u5011\u8209\u5e7e\u500b\u5c0f\u4f8b\u5b50\u4f86\u8aaa\u660e\u5427\uff01<\/p>\n<pre># \u7bc4\u4f8b\u4e00\uff1a\u5c07\u76ee\u524d DNS \u4f3a\u670d\u5668\u7684\u72c0\u614b\u986f\u793a\u51fa\u4f86\r\n[root@www ~]# rndc status\r\nversion: 9.7.0-P2-RedHat-9.7.0-5.P2.el6_0.1\r\nCPUs found: 1\r\nworker threads: 1\r\nnumber of zones: 27         &lt;==\u9019\u90e8 DNS \u7ba1\u7406\u7684 zone \u6578\u91cf\r\ndebug level: 0              &lt;==\u662f\u5426\u5177\u6709 debug \u53ca debug \u7684\u7b49\u7d1a\r\nxfers running: 0\r\nxfers deferred: 0\r\nsoa queries in progress: 0\r\nquery logging is OFF        &lt;==\u662f\u5426\u5177\u6709 debug \u53ca debug \u7684\u7b49\u7d1a\r\nrecursive clients: 0\/0\/1000\r\ntcp clients: 0\/100\r\nserver is up and running    &lt;==\u662f\u5426\u5177\u6709 debug \u53ca debug \u7684\u7b49\u7d1a\r\n\r\n# \u7bc4\u4f8b\u4e8c\uff1a\u5c07\u76ee\u524d\u7cfb\u7d71\u7684 DNS \u7d71\u8a08\u8cc7\u6599\u8a18\u9304\u4e0b\u4f86\r\n[root@www ~]# rndc stats\r\n# \u6b64\u6642\uff0c\u9810\u8a2d\u6703\u5728 \/var\/named\/data \u5167\u7522\u751f\u65b0\u6a94\u6848\uff0c\u4f60\u53ef\u4ee5\u53bb\u67e5\u95b1\uff1a\r\n[root@www ~]# cat \/var\/named\/data\/named_stats.txt\r\n+++ Statistics Dump +++ (1312528012)\r\n....(\u4e2d\u9593\u7701\u7565)....\r\n++ Zone Maintenance Statistics ++\r\n                   2 IPv4 notifies sent\r\n++ Resolver Statistics ++\r\n....(\u4e2d\u9593\u7701\u7565)....\r\n++ Cache DB RRsets ++\r\n[View: lan (Cache: lan)]\r\n[View: wan (Cache: wan)]\r\n[View: _bind (Cache: _bind)]\r\n[View: _meta (Cache: _meta)]\r\n++ Socket I\/O Statistics ++\r\n                   5 UDP\/IPv4 sockets opened\r\n                   4 TCP\/IPv4 sockets opened\r\n                   2 UDP\/IPv4 sockets closed\r\n                   1 TCP\/IPv4 sockets closed\r\n                   2 TCP\/IPv4 connections accepted\r\n++ Per Zone Query Statistics ++\r\n--- Statistics Dump --- (1312528012)\r\n\r\n# \u7bc4\u4f8b\u4e09\uff1a\u5c07\u76ee\u524d\u5feb\u53d6\u8a18\u61b6\u9ad4\u7576\u4e2d\u7684\u8cc7\u6599\u8a18\u9304\u4e0b\u4f86\r\n[root@www ~]# rndc dumpdb\r\n# \u8207 stats \u985e\u4f3c\uff0c\u6703\u5c07 cache \u7684\u8cc7\u6599\u653e\u7f6e\u6210\u70ba\u4e00\u500b\u6a94\u6848\uff0c\u4f60\u53ef\u4ee5\u53bb\u67e5\u95b1\uff1a\r\n# \/var\/named\/data\/cache_dump.db\r\n<\/pre>\n<p>\u5982\u679c\u4f60\u5728\u57f7\u884c rndc \u6307\u4ee4\u6642\u8001\u662f\u51fa\u73fe\u5982\u4e0b\u932f\u8aa4\uff1a<\/p>\n<pre>rndc: connection to remote host closed\r\nThis may indicate that the remote server is using an older version of\r\nthe command protocol, this host is not authorized to connect,\r\nor the key is invalid.\r\n<\/pre>\n<p>\u9019\u8868\u793a\u4f60\u7684 \/etc\/rndc.key \u8207 \/etc\/rndc.conf \u5167\u91d1\u9470\u7684\u7de8\u78bc\u4e0d\u540c\u6240\u81f4\u3002 \u8acb\u4f60\u81ea\u884c\u4ee5\u4e0a\u8ff0\u7684 rndc-confgen \u7684\u65b9\u5f0f\u81ea\u884c\u8655\u7406\u4f60\u7684 rndc key \uff0c\u4e26\u91cd\u65b0\u555f\u52d5 named \u5373\u53ef\u554a\uff01 \u7528\u9019\u6771\u897f\u7ba1\u7406\uff0c\u4f60\u5c31\u4e0d\u9700\u8981\u6bcf\u6b21\u90fd\u91cd\u65b0\u555f\u52d5 named \u56c9\uff01 ^_^<\/p>\n<hr \/>\n<p><a name=\"ddns\"><\/a><img loading=\"lazy\" decoding=\"async\" src=\"http:\/\/linux.vbird.org\/images\/penguin-s.gif\" alt=\"\u5c0f\u6a19\u984c\u7684\u5716\u793a\" width=\"16\" height=\"23\" align=\"middle\" \/>19.6.4 \u67b6\u8a2d\u52d5\u614b DNS \u4f3a\u670d\u5668\uff1a \u8b93\u4f60\u6210\u70ba ISP \u5566\uff01<\/p>\n<p>\u4ec0\u9ebc\u662f\u52d5\u614b DNS (Dynamic DNS, DDNS) \u4e3b\u6a5f\u5462\uff1f\u9084\u8a18\u5f97\u6211\u5011\u5728<a href=\"http:\/\/linux.vbird.org\/linux_server\/0270dynamic_dns.php\">\u7b2c\u5341\u7ae0<\/a>\u88e1\u9762\u63d0\u5230\uff0c \u5982\u679c\u6211\u5011\u672c\u8eab\u662f\u4ee5\u64a5\u63a5\u5236\u7684 ADSL \u9023\u4e0a Internet \u6642\uff0c\u6211\u5011\u7684 IP \u901a\u5e38\u662f ISP \u96a8\u6a5f\u63d0\u4f9b\u7684\uff0c\u56e0\u6b64\u6bcf\u6b21\u4e0a\u7db2\u7684 IP \u90fd\u4e0d\u56fa\u5b9a\uff0c\u6240\u4ee5\uff0c \u6211\u5011\u6c92\u6709\u8fa6\u6cd5\u4ee5\u4e0a\u9762\u7684 DNS \u8a2d\u5b9a\u4f86\u7d66\u4e88\u9019\u7a2e\u9023\u4e0a Internet \u7684\u65b9\u6cd5\u4e00\u500b\u9069\u7576\u7684\u4e3b\u6a5f\u540d\u7a31\u3002<\/p>\n<p>\u4e5f\u56e0\u6b64\uff0c\u5982\u679c\u6211\u5011\u60f3\u8981\u5229\u7528\u9019\u7a2e\u6c92\u6709\u56fa\u5b9a IP \u7684\u9023\u7dda\u65b9\u6cd5\u67b6\u8a2d\u7db2\u7ad9\u6642\uff0c\u5c31\u5f97\u8981\u6709\u7279\u6b8a\u7684\u7ba1\u9053\u4e86\uff5e \u5176\u4e2d\u4e4b\u4e00\u7684\u65b9\u6cd5\u5c31\u662f\u5229\u7528 Internet \u4e0a\u9762\u5df2\u7d93\u63d0\u4f9b\u7684\u514d\u8cbb\u52d5\u614b IP \u5c0d\u61c9\u4e3b\u6a5f\u540d\u7a31\u7684\u670d\u52d9\uff01 \u4f8b\u5982\uff1a <a href=\"http:\/\/www.no-ip.org\/\">http:\/\/www.no-ip.org<\/a> \u3002<\/p>\n<p>\u63d0\u4f9b\u9019\u6a23\u7684\u670d\u52d9\u5229\u7528\u7684\u662f\u4ec0\u9ebc\u539f\u7406\u5462\uff1f\u57fa\u672c\u4e0a\uff0c DNS \u4e3b\u6a5f\u9084\u662f\u5f97\u8981\u63d0\u4f9b Internet \u76f8\u95dc\u7684 zone \u7684\u4e3b\u6a5f\u540d\u7a31\u8207 IP \u7684\u5c0d\u61c9\u8cc7\u6599\u624d\u884c\uff0c\u6240\u4ee5\uff0cDDNS \u4e3b\u6a5f \u5c31\u5fc5\u9808\u8981\u63d0\u4f9b\u4e00\u500b\u6a5f\u5236\uff0c\u8b93\u7528\u6236\u7aef\u53ef\u4ee5\u900f\u904e\u9019\u500b\u6a5f\u5236\u4f86\u4fee\u6539\u4ed6\u5011\u5728 DDNS \u4e3b\u6a5f\u4e0a\u9762\u7684 zone file \u5167\u7684\u8cc7\u6599\u624d\u884c\u3002<\/p>\n<p>\u90a3\u6703\u4e0d\u6703\u5f88\u96e3\u554a\uff1f\u4e0d\u6703\u554a\uff01\u6211\u5011\u7684 BIND 9 \u5c31\u6709\u63d0\u4f9b\u985e\u4f3c\u7684\u6a5f\u5236\u5566\uff01\u90a3\u5c31\u662f\u5229\u7528 update-policy \u9019\u500b\u9078\u9805\uff0c\u914d\u5408\u8a8d\u8b49\u7528\u7684 key \u4f86\u9032\u884c\u8cc7\u6599\u6a94\u6848\u7684\u66f4\u65b0\u3002\u7c21\u55ae\u7684\u8aaa\uff0c 1) \u6211\u5011\u7684 DDNS \u4e3b\u6a5f\u5148\u63d0\u4f9b Client \u4e00\u628a Key (\u5c31\u662f\u8a8d\u8b49\u7528\u7684\u8cc7\u6599\uff0c \u4f60\u53ef\u4ee5\u5c07\u4ed6\u60f3\u6210\u662f\u5e33\u865f\u8207\u5bc6\u78bc\u7684\u6982\u5ff5)\uff0c 2) Client \u7aef\u5229\u7528\u9019\u628a Key \uff0c\u4e26\u914d\u5408 BIND 9 \u7684 nsupdate \u6307\u4ee4\uff0c \u5c31\u53ef\u4ee5\u9023\u4e0a DDNS \u4e3b\u6a5f\uff0c\u4e26\u4e14\u4fee\u6539\u4e3b\u6a5f\u4e0a\u9762\u7684 Zone file \u5167\u7684\u5c0d\u61c9\u8868\u4e86\u3002\u611f\u89ba\u4e0a\u5f88\u50cf\u5f88\u7c21\u55ae\u5594\uff01 \u6c92\u932f\u554a\uff01\u67b6\u8a2d\u4e0a\u771f\u7684\u5f88\u7c21\u55ae\u7684\uff5e\u5e95\u4e0b\u6211\u5011\u5c31\u4f86\u5617\u8a66\u8a2d\u5b9a\u4e00\u4e0b\u5594\uff1a<\/p>\n<ul>\n<li>\n<hr \/>\n<p>1. DDNS Server \u7aef\u7684\u8a2d\u5b9a\uff1a<\/li>\n<\/ul>\n<p>\u5047\u8a2d\u6211\u6709\u4e00\u500b\u670b\u53cb\uff0c\u4ed6\u4f7f\u7528\u7684 Linux \u4e3b\u6a5f\u7684 IP \u662f\u6703\u96a8\u6642\u8b8a\u52d5\u7684\uff0c\u4f46\u662f\u4ed6\u60f3\u8981\u67b6\u8a2d Web \u7db2\u7ad9\uff0c \u6240\u4ee5\u4ed6\u5411\u6211\u7533\u8acb\u4e86\u4e00\u500b\u9818\u57df\u540d\u7a31\uff0c\u90a3\u5c31\u662f web.centos.vbird \uff0c\u6b64\u6642\u6211\u5fc5\u9700\u8981\u7d66\u4ed6\u4e00\u628a\u91d1\u9470\uff0c \u4e26\u4e14\u8a2d\u5b9a\u6211\u7684 named.conf \u8b93 centos.vbird \u9019\u500b zone \u80fd\u5920\u63a5\u53d7\u4f86\u81ea\u7528\u6236\u7aef\u7684\u8cc7\u6599\u66f4\u65b0\u624d\u884c\uff01\u9996\u5148\u4f86\u5efa\u7acb\u9019\u628a\u91d1\u9470\u5427\uff01<\/p>\n<pre>[root@www ~]# dnssec-keygen -a [\u6f14\u7b97\u6cd5] -b [\u5bc6\u78bc\u9577\u5ea6] -n [\u985e\u578b] \u540d\u7a31\r\n\u9078\u9805\u8207\u53c3\u6578\uff1a\r\n-a \uff1a\u5f8c\u9762\u63a5\u7684 [type] \u70ba\u6f14\u7b97\u65b9\u5f0f\u7684\u610f\u601d\uff0c\u4e3b\u8981\u6709 RSAMD5, RSA, DSA, DH\r\n     \u8207 HMAC-MD5 \u7b49\u3002\u5efa\u8b70\u4f60\u53ef\u4ee5\u4f7f\u7528\u5e38\u898b\u7684 HMAC-MD5 \u4f86\u6f14\u7b97\u5bc6\u78bc\uff1b\r\n-b \uff1a\u4f60\u7684\u5bc6\u78bc\u9577\u5ea6\u70ba\u591a\u5c11\uff1f\u901a\u5e38\u7d66\u4e88 512 \u4f4d\u5143\u7684 HMAC-MD5\uff1b\r\n-n \uff1a\u5f8c\u9762\u63a5\u7684\u5247\u662f\u7528\u6236\u7aef\u80fd\u5920\u66f4\u65b0\u7684\u985e\u578b\uff0c\u4e3b\u8981\u6709\u5e95\u4e0b\u5169\u7a2e\uff0c\u5efa\u8b70\u7d66 HOST \u5373\u53ef\uff1a\r\n     ZONE\uff1a\u7528\u6236\u7aef\u53ef\u4ee5\u66f4\u65b0\u4efb\u4f55\u6a19\u8a8c\u53ca\u6574\u500b ZONE\uff1b\r\n     HOST\uff1a\u7528\u6236\u7aef\u50c5\u53ef\u4ee5\u91dd\u5c0d\u4ed6\u7684\u4e3b\u6a5f\u540d\u7a31\u4f86\u66f4\u65b0\u3002\r\n\r\n[root@www ~]# cd \/etc\/named\r\n[root@www named]# dnssec-keygen -a HMAC-MD5 -b 512 -n HOST web\r\nKweb.+157+36124\r\n[root@www named]# ls -l \r\n-rw-------. 1 root root 112 Aug  5 15:22 Kweb.+157+36124.key\r\n-rw-------. 1 root root 229 Aug  5 15:22 Kweb.+157+36124.private\r\n# \u4e0a\u9762\u90a3\u628a\u662f\u516c\u9470\uff0c\u4e0b\u9762\u90a3\u628a\u5247\u662f\u79c1\u9470\u6a94\u6848\uff01\r\n\r\n[root@www named]# cat Kweb.+157+36124.key  &lt;==\u770b\u4e00\u4e0b\u516c\u9470\uff01\r\nweb. IN KEY 512 3 157 <u>xZmUo8ozG8f2OSg\/cqH8Bqxk59Ho8....3s9IjUxpFB4Q==<\/u>\r\n# \u6ce8\u610f\u5230\u6700\u53f3\u908a\u7684\u90a3\u500b\u5bc6\u78bc\u9577\u5ea6\uff0c\u7b49\u4e00\u4e0b\u6211\u5011\u8981\u8907\u88fd\u7684\u50c5\u6709\u90a3\u500b\u5730\u65b9\uff01\r\n<\/pre>\n<p>\u63a5\u4e0b\u4f86\u4f60\u5fc5\u9700\u8981\uff1a\u5c07\u516c\u9470\u7684\u5bc6\u78bc\u8907\u88fd\u5230 \/etc\/named.conf \u7576\u4e2d\uff0c\u5c07\u79c1\u9470\u50b3\u7d66\u4f60\u7684 web.centos.vbird \u90a3\u90e8\u4e3b\u6a5f\u4e0a\uff01\u597d\u4e86\uff0c\u90a3\u5c31\u958b\u59cb\u4f86\u4fee\u6539 named.conf \u5167\u7684\u76f8\u95dc\u8a2d\u5b9a\u5427\uff01<\/p>\n<pre>[root@www ~]# vim \/etc\/named.conf\r\n\/\/ \u5148\u5728\u4efb\u610f\u5730\u65b9\u52a0\u5165\u9019\u500b Key \u7684\u76f8\u95dc\u5bc6\u78bc\u8cc7\u8a0a\uff01\r\nkey \"web\" {\r\n        algorithm hmac-md5;\r\n        secret \"xZmUo8ozG8f2OSg\/cqH8Bqxk59Ho8....3s9IjUxpFB4Q==\";\r\n};\r\n\r\n\/\/ \u7136\u5f8c\u5c07\u4f60\u539f\u672c\u7684 zone \u52a0\u5165\u5e95\u4e0b\u9019\u4e00\u6bb5\u5ba3\u793a\r\n        zone \"centos.vbird\" IN {\r\n                type master;\r\n                file \"named.centos.vbird\";\r\n                allow-transfer { 192.168.100.10; };\r\n                update-policy {\r\n                        grant web name web.centos.vbird. A;\r\n                };\r\n        };\r\n\r\n[root@www ~]# chmod g+w \/var\/named\r\n[root@www ~]# chown named \/var\/named\/named.centos.vbird\r\n[root@www ~]# \/etc\/init.d\/named restart\r\n[root@www ~]# setsebool -P named_write_master_zones=1\r\n<\/pre>\n<p>\u6ce8\u610f\u5230\u4e0a\u982d\u7684 grant web name web.centos.vbird. A; \u90a3\u4e00\u884c\uff0c grant \u5f8c\u9762\u63a5\u7684\u5c31\u662f key \u7684\u540d\u7a31\uff0c\u4e5f\u5c31\u662f\u8aaa\uff0c\u6211\u9019\u628a web \u7684 key \u5728\u9019\u500b zone (centos.vbird) \u88e1\u9762\u53ef\u4ee5\u4fee\u6539\u4e3b\u6a5f\u540d\u7a31 web.centos.vbird \u7684 A \u7684\u6a19\u8a8c\uff0c\u4ea6\u5373\u662f\u4fee\u6539\u4e3b\u6a5f\u7684 IP \u5c0d\u61c9\u5566\uff01\u8a9e\u6cd5\u4e5f\u5c31\u662f\uff1a grant [key_name] name [hostname] \u6a19\u7c64 \u4e5f\u5c31\u662f\u8aaa\uff0c\u6211\u7684\u4e00\u628a key \u5176\u5be6\u53ef\u4ee5\u7d66\u4e88\u591a\u7a2e\u6b0a\u9650\u5594\uff01\u5c31\u770b\u4f60\u5982\u4f55\u898f\u7bc4\u4e86\u3002<\/p>\n<p>\u8a2d\u5b9a\u597d\u4e4b\u5f8c\uff0c\u7531\u65bc\u672a\u4f86\u7528\u6236\u7aef\u50b3\u4f86\u7684\u8cc7\u8a0a\u662f\u7531\u6211\u5011\u4e3b\u6a5f\u7684 named \u6240\u5beb\u5165\uff0c \u5beb\u5165\u7684\u76ee\u9304\u5728 \/var\/named\/ \u7576\u4e2d\uff0c\u6240\u4ee5\u4f60\u5fc5\u9700\u8981\u4fee\u6539\u4e00\u4e0b\u6b0a\u9650\u5594\uff01 \u7d66\u4ed6\u91cd\u65b0\u555f\u52d5 DNS\uff0c\u7136\u5f8c\u89c0\u5bdf\u4e00\u4e0b \/var\/log\/messages \u88e1\u9762\u6709\u6c92\u6709\u932f\u8aa4\u5373\u53ef\uff01 \u5982\u6b64\u4e00\u4f86\uff0cDDNS \u4e3b\u6a5f\u7aef\u5c31\u8a2d\u5b9a\u59a5\u7576\u56c9\uff01<\/p>\n<ul>\n<li>\n<hr \/>\n<p>2. Client \u7aef\u7684\u66f4\u65b0\uff1a<\/li>\n<\/ul>\n<p>\u63a5\u4e0b\u4f86\u5247\u662f DDNS Client \u7aef\u7684\u66f4\u65b0\u4e86\u3002\u9996\u5148\uff0c\u4f60\u5fc5\u9808\u8981\u7531 Server \u7aef\u53d6\u5f97\u525b\u525b\u5efa\u7acb\u7684\u90a3\u5169\u500b\u6a94\u6848\uff0c \u8acb\u5c07\u525b\u525b\u5efa\u7acb\u7684 Kweb.+157+36124.key \u53ca Kweb.+157+36124.private \u5229\u7528 SSH \u7684 sftp \u50b3\u9001\u5230\u7528\u6236\u7aef\uff0c \u4ea6\u5373\u662f\u90a3\u90e8 web.centos.vbird \u4e3b\u6a5f\u4e0a\u982d\uff0c \u5047\u8a2d\u4f60\u5df2\u7d93\u5c07\u9019\u5169\u500b\u6a94\u6848\u653e\u7f6e\u5230 \/usr\/local\/ddns \u88e1\u9762\u53bb\uff0c\u7136\u5f8c\u6e2c\u8a66\u770b\u770b\uff1a<\/p>\n<pre>[root@web ~]# cd \/usr\/local\/ddns\r\n[root@web ddns]# nsupdate -k Kweb.+157+36124.key\r\n&gt; server 192.168.100.254\r\n&gt; update delete web.centos.vbird                    &lt;==\u522a\u9664\u539f\u6709\u7684\r\n&gt; update add web.centos.vbird 600 A 192.168.100.200 &lt;==\u66f4\u65b0\u5230\u6700\u65b0\u7684\r\n&gt; send\r\n&gt; \u6700\u5f8c\u5728\u6b64\u6309\u4e0b [ctrl]+D \u5373\u53ef\r\n<\/pre>\n<p>\u8acb\u6ce8\u610f\u5230\u300e update add web.centos.vbird 600 A 192.168.100.200 \u300f\u9019\u884c\uff0c \u4ed6\u7684\u610f\u7fa9\u8aaa\u7684\u662f\uff0c\u65b0\u589e\u4e00\u7b46\u8cc7\u6599\uff0c ttl \u662f 600 \uff0c\u7d66\u4e88 A \u7684\u6a19\u7c64\uff0c\u5c0d\u61c9\u5230 192.168.100.200 \u7684\u610f\u601d\uff5e \u81f3\u65bc nsupdate -k \u5f8c\u9762\u52a0\u7684\u5247\u662f\u6211\u5011\u5728 Server \u7aef\u7522\u751f\u7684\u90a3\u500b key \u6a94\u6848\uff01<\/p>\n<p>\u7136\u5f8c\u4f60\u5c31\u6703\u767c\u73fe\u5230\u5728 DNS \u4f3a\u670d\u5668\u7aef\u7684 \/var\/named\/ \u88e1\u9762\u591a\u51fa\u4e00\u500b\u66ab\u5b58\u6a94\uff0c\u90a3\u5c31\u662f named.centos.vbird.jnl \u7576\u7136\uff0c\/var\/named\/named.centos.vbird \u5c31\u6703\u96a8\u8457\u7528\u6236\u7aef\u7684\u8981\u6c42\u800c\u66f4\u65b0\u8cc7\u6599\u5594\uff01<\/p>\n<p>\u7531\u65bc\u624b\u52d5\u66f4\u65b0\u597d\u50cf\u633a\u9ebb\u7169\u7684\uff0c\u6211\u5011\u5c31\u8b93 Client \u81ea\u52d5\u66f4\u65b0\u5427\uff01\u5229\u7528\u5e95\u4e0b\u9019\u500b script \u5373\u53ef\uff01<\/p>\n<pre>[root@web ~]# vim \/usr\/local\/ddns\/ddns_update.sh\r\n#!\/bin\/bash\r\nPATH=\/sbin:\/bin:\/usr\/sbin:\/usr\/bin\r\nexport PATH\r\n\r\n# 0. keyin your parameters\r\nbasedir=\"\/usr\/local\/ddns\"                  # \u57fa\u672c\u5de5\u4f5c\u76ee\u9304\r\nkeyfile=\"$basedir\"\/\"Kweb.+157+36124.key\"   # \u5c07\u6a94\u540d\u586b\u9032\u53bb\u5427\uff01\r\nttl=600                                    # \u4f60\u53ef\u4ee5\u6307\u5b9a ttl \u7684\u6642\u9593\u5594\uff01\r\noutif=\"eth0\"                               # \u5c0d\u5916\u7684\u9023\u7dda\u4ecb\u9762\uff01\r\nhostname=\"web.centos.vbird\"                # \u4f60\u5411 ISP \u53d6\u5f97\u7684\u90a3\u500b\u4e3b\u6a5f\u540d\u7a31\u5566\uff01\r\nservername=\"192.168.100.254\"               # \u5c31\u662f\u4f60\u7684 ISP \u554a\uff01\r\n\r\n# Get your new IP\r\nnewip=`ifconfig \"$outif\" | grep 'inet addr' | \\\r\n        awk '{print $2}' | sed -e \"s\/addr\\:\/\/\"`\r\ncheckip=`echo $newip | grep \"^[0-9]\"`\r\nif [ \"$checkip\" == \"\" ]; then\r\n        echo \"$0: The interface can't connect internet....\"\r\n        exit 1\r\nfi\r\n\r\n# create the temporal file\r\ntmpfile=$basedir\/tmp.txt\r\ncd $basedir\r\necho \"server $servername\"                       &gt;  $tmpfile\r\necho \"update delete $hostname A \"               &gt;&gt; $tmpfile\r\necho \"update add    $hostname $ttl A $newip\"    &gt;&gt; $tmpfile\r\necho \"send\"                                     &gt;&gt; $tmpfile\r\n\r\n# send your IP to server\r\nnsupdate -k $keyfile -v $tmpfile\r\n<\/pre>\n<p>\u4f60\u53ea\u8981\u5c07\u4e0a\u8ff0\u7684\u7a0b\u5f0f\u88e1\u9762\uff0c\u7279\u6b8a\u5b57\u9ad4\u7684\u90e8\u5206\u7d66\u4ed6\u4fee\u6539\u4e00\u4e0b\uff0c\u5c31\u80fd\u5920\u4ee5 \/etc\/crontab \u7684\u65b9\u5f0f\u5728\u4f60\u7684\u7cfb\u7d71\u5167\u81ea\u52d5\u57f7\u884c\u4e86\uff01\u9019\u652f\u7a0b\u5f0f\u4f60\u4e5f\u53ef\u4ee5\u5728\u5e95\u4e0b\u7684\u9023\u7d50\u4e0b\u8f09\uff1a<\/p>\n<ul>\n<li><a href=\"http:\/\/linux.vbird.org\/linux_server\/0350dns\/ddns_update.sh\">http:\/\/linux.vbird.org\/linux_server\/0350dns\/ddns_update.sh<\/a><\/li>\n<\/ul>\n<p>\u5229\u7528 BIND 9 \u6240\u63d0\u4f9b\u7684\u9019\u500b\u670d\u52d9\uff0c\u6211\u5011\u53ea\u8981\u5177\u6709\u4e00\u7d44\u56fa\u5b9a\u7684 IP \uff0c\u4e26\u5411 ISP \u7533\u8acb\u4e00\u500b\u5408\u6cd5\u6388\u6b0a\u7684 domain name\uff0c \u5c31\u53ef\u4ee5\u63d0\u4f9b\u4e0d\u8ad6\u662f\u56fa\u5b9a\u6216\u8005\u662f\u975e\u56fa\u5b9a\u7684 IP \u4f7f\u7528\u8005\uff0c\u4e00\u500b\u5408\u6cd5\u7684\u4e3b\u6a5f\u540d\u7a31\u4e86\uff01 \u4e26\u4e14\uff0c\u4f7f\u7528\u8005\u4e5f\u53ef\u4ee5\u81ea\u884c\u900f\u904e nsupdate \u4f86\u4fee\u6539\u81ea\u5df1\u7684 IP \u5c0d\u61c9\uff01\u4ee5\u8b93\u81ea\u5df1\u7684\u4e3b\u6a5f IP \u6c38\u9060\u8207\u4e3b\u6a5f\u540d\u7a31\u4fdd\u6301\u6b63\u78ba\u7684\u5c0d\u61c9\uff01\u9019\u5c0d\u53ea\u6709\u64a5\u63a5\u5236\u4e0a\u7db2\u7684\u7528\u6236\u4f86\u8aaa\uff0c\u771f\u662f\u65b9\u4fbf\u554a\uff01<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[5],"tags":[92],"class_list":["post-4355","post","type-post","status-publish","format-standard","hentry","category-5","tag-dns","category-5-id","post-seq-1","post-parity-odd","meta-position-corners","fix"],"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/www.hmouse.cn\/index.php?rest_route=\/wp\/v2\/posts\/4355","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.hmouse.cn\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.hmouse.cn\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.hmouse.cn\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.hmouse.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=4355"}],"version-history":[{"count":4,"href":"https:\/\/www.hmouse.cn\/index.php?rest_route=\/wp\/v2\/posts\/4355\/revisions"}],"predecessor-version":[{"id":4375,"href":"https:\/\/www.hmouse.cn\/index.php?rest_route=\/wp\/v2\/posts\/4355\/revisions\/4375"}],"wp:attachment":[{"href":"https:\/\/www.hmouse.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=4355"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.hmouse.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=4355"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.hmouse.cn\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=4355"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}