http://w.atwiki.jp/dnsserver/ DNSサーバー実験室 @ ウィキ ja 2012-03-12T01:10:43+09:00 1331482243 https://w.atwiki.jp/dnsserver/pages/23.html CentOS5で[[BIND]]9.9をコンパイルする。 *configure #region [root@localhost bind-9.9.0]# env CFLAGS='-DDIG_SIGCHASE=1' ./configure --with-openssl --with-libtool --enable-ipv6 checking build system type... i686-pc-linux-gnu checking host system type... i686-pc-linux-gnu checking whether make sets $(MAKE)... yes checking for gcc... gcc checking whether the C compiler works... yes checking for C compiler default output file name... a.out checking for suffix of executables... checking whether we are cross compiling... no checking for suffix of object files... o checking whether we are using the GNU C compiler... yes checking whether gcc accepts -g... yes checking for gcc option to accept ISO C89... none needed checking for a sed that does not truncate output... /bin/sed checking for grep that handles long lines and -e... /bin/grep checking for egrep... /bin/grep -E checking for ld used by gcc... /usr/bin/ld checking if the linker (/usr/bin/ld) is GNU ld... yes 2012-03-12T01:10:43+09:00 1331482243 https://w.atwiki.jp/dnsserver/pages/22.html /etc/pdns-recursor/recursor.conf インストール直後 #region [root@localhost ~]# cat recursor.conf setuid=pdns-recursor setgid=pdns-recursor # Autogenerated configuration file template ################################# # aaaa-additional-processing turn on to do AAAA additional processing (slow) # # aaaa-additional-processing=off ################################# # allow-from If set, only allow these comma separated netmasks to recurse # # allow-from=127.0.0.0/8, 10.0.0.0/8, 192.168.0.0/16, 172.16.0.0/12, ::1/128, fe80::/10 ################################# # allow-from-file If set, load allowed netmasks from this file # # allow-from-file= ################################# # auth-can-lower-ttl If we follow RFC 2181 to the letter, an authoritative server can lower the TTL of NS records # # auth-can-lower-ttl=off ################################# # auth-zones Zones for which we have authoritative data, comma separated domain=file pairs # 2012-02-24T07:17:46+09:00 1330035466 https://w.atwiki.jp/dnsserver/pages/21.html CentOS に yum install する yum info #region [root@localhost ~]# yum info pdns-recursor Loaded plugins: fastestmirror Loading mirror speeds from cached hostfile * base: rsync.atworks.co.jp * extras: rsync.atworks.co.jp * updates: rsync.atworks.co.jp Available Packages Name : pdns-recursor Arch : x86_64 Version : 3.1.5 Release : 1.el5.centos Size : 458 k Repo : extras Summary : Modern, advanced and high performance recursing/non authoritative : nameserver URL : http://powerdns.com License : GPLv2 Description: PowerDNS Recursor is a non authoritative/recursing DNS server. Use : this package if you need a dns cache for your network. #endregion install #region [root@localhost ~]# yum -y install pdns-recursor Loaded plugins: fastestmirror Loading mirror speeds from cached hostfile * base: rsync.atworks.co.jp * extras: rsync.atworks.co.jp * updates: rsync.atworks.co.j 2012-02-23T11:51:51+09:00 1329965511 https://w.atwiki.jp/dnsserver/pages/20.html *[[PowerDNSのrecursorをインストールする]] *[[PowerDNSのrecursorを設定する]] 2012-02-24T07:14:12+09:00 1330035252 https://w.atwiki.jp/dnsserver/pages/19.html CentOS に yum install したときのスタートアップスクリプト /etc/rc.d/init.d/named ---- #region #!/bin/bash # # named This shell script takes care of starting and stopping # named (BIND DNS server). # # chkconfig: - 13 87 # description: named (BIND) is a Domain Name Server (DNS) \ # that is used to resolve host names to IP addresses. # probe: true ### BEGIN INIT INFO # Provides: $named # Required-Start: $local_fs $network $syslog # Required-Stop: $local_fs $network $syslog # Default-Start: # Default-Stop: 0 1 2 3 4 5 6 # Short-Description: start|stop|status|restart|try-restart|reload|force-reload DNS server # Description: control ISC BIND implementation of DNS server ### END INIT INFO # Source function library. . /etc/rc.d/init.d/functions [ -r /etc/sysconfig/named ] && . /etc/sysconfig/named RETVAL=0 export KRB5_KTNAME=${KEYTAB_FILE:-/etc/named.keytab} named='named' if [ -x /usr/sbin/named-sdb ]; then named='n 2012-02-23T10:04:59+09:00 1329959099 https://w.atwiki.jp/dnsserver/pages/18.html TCP/UDP port 53 が使われる。 RFC 1034/1035 2012-02-23T09:55:22+09:00 1329958522 https://w.atwiki.jp/dnsserver/pages/17.html named.conf に zone ステートメントを書く。 2012-02-23T09:53:49+09:00 1329958429 https://w.atwiki.jp/dnsserver/pages/16.html CentOS に yum でインストールされた [[BIND]] をキャッシュDNSサーバーとして設定する。 *caching-nameserver yum info #region [root@localhost ~]# yum info caching-nameserver Loaded plugins: fastestmirror Loading mirror speeds from cached hostfile * base: rsync.atworks.co.jp * extras: rsync.atworks.co.jp * updates: rsync.atworks.co.jp Available Packages Name : caching-nameserver Arch : x86_64 Epoch : 30 Version : 9.3.6 Release : 16.P1.el5_7.1 Size : 62 k Repo : updates Summary : Default BIND configuration files for a caching nameserver URL : http://www.isc.org/products/BIND/ License : BSD-like Description: The caching-nameserver package includes the configuration files which will make : the ISC BIND named DNS name server act as a simple caching nameserver. : A caching nameserver is a DNS Resolver, as defined in RFC 1035, section 7. : ISC BIND named(8) provides a very efficient, flexible and r 2012-02-23T04:27:06+09:00 1329938826 https://w.atwiki.jp/dnsserver/pages/15.html *CentOS に yum で BIND をインストールする **リポジトリ内のBIND関連パッケージ #region [root@localhost ~]# yum search bind | grep ^bind bind.x86_64 : The Berkeley Internet Name Domain (BIND) DNS (Domain Name System) bind-chroot.x86_64 : A chroot runtime environment for the ISC BIND DNS server, bind-devel.i386 : Header files and libraries needed for BIND DNS development. bind-devel.x86_64 : Header files and libraries needed for BIND DNS development. bind-libbind-devel.i386 : Include files and library needed to use the BIND bind-libbind-devel.x86_64 : Include files and library needed to use the BIND bind-libs.i386 : Libraries used by the BIND DNS packages bind-libs.x86_64 : Libraries used by the BIND DNS packages bind-sdb.x86_64 : The Berkeley Internet Name Domain (BIND) DNS (Domain Name bind-utils.x86_64 : Utilities for querying DNS name servers. bind97.x86_64 : The Berkeley Internet Name Domain (BIND) DNS (Domain Name bind97-chroot.x86_64 : A chroot runtime environment for the ISC BIN 2012-02-23T02:47:38+09:00 1329932858 https://w.atwiki.jp/dnsserver/pages/14.html * [[BINDのインストール]] * [[BINDのコンパイル]] * [[BINDをキャッシュDNSサーバーとして設定する]] * [[BINDを権威DNSサーバーとして設定する]] * [[スタートアップスクリプト]] * リリース情報 ** [[BIND 9.9.0>http://www.isc.org/software/bind/990]] [[BIND 9.9.0 Release Notes>https://kb.isc.org/article/AA-00631]] 2012-03-12T01:06:20+09:00 1331481980