DNS 서버 구축
- OS : CentOS 7
- IP : 10.0.1.58
- Domain : seonmin.com
1. bind 패키지 설치
$ yum install bind*
2. named.conf 설정
$ vi /etc/named.conf
--------------------------------------------------------------
options {
listen-on port 53 { any; };
listen-on-v6 port 53 { ::1; };
directory "/var/named";
dump-file "/var/named/data/cache_dump.db";
statistics-file "/var/named/data/named_stats.txt";
memstatistics-file "/var/named/data/named_mem_stats.txt";
recursing-file "/var/named/data/named.resursing";
securoots-file "/var/named/data/named.secroots";
allow-query { any; };
masterfile-format text;
--------------------------------------------------------------
3. named.conf 오류 체크
$ named-checkconf /etc/named.conf (출력 내용 없으면 정상)
4. domain zone 추가
$ vi /etc/named.rfc1912.zones
--------------------------------------------------------------
zone "seonmin.com" IN {
type master;
file "seonmin.com.zone";
allow-update { any; };
};
--------------------------------------------------------------
5. zone 파일 생성 및 권한 변경
$ cp /var/named/named.localhost /var/named/seonmin.com.zone
$ chown root:named /var/named/seonmin.com.zone
6. zone 파일 레코드 수정하기
$ vi /var/named/seonmin.com.zone
--------------------------------------------------------------
$TTL 1D
@ IN SOA seonmin.com. root. (
0 ; serial
1D ; refresh
1H ; retry
1W ; expire
3H ) ; minimum
IN NS seonmin.com.
IN A 10.0.1.58
www IN A 10.0.1.58
--------------------------------------------------------------
7. Zone 설정 파일 확인 유효성 체크
$ named-checkconf /etc/named.rfc1912.zones (출력 내용 없으면 정상)
$ named-checkzone seonmin.com /var/named/seonmin.com.zone
--------------------------------------------------------------
zone seonmin.com/IN: loaded serial 0
OK
--------------------------------------------------------------
8. /etc/resolv.conf 등록
$ vi /etc/sysconfig/network-scripts/ifcfg-ens192
--------------------------------------------------------------
DNS1=127.0.0.1 (가장 상위에)
NM_CONTROLLED=no
--------------------------------------------------------------
// 다른 DNS1 설정이 있다면 지우기
$ vi /etc/resolv.conf
--------------------------------------------------------------
nameserver 127.0.0.1 (가장 상위에)
--------------------------------------------------------------
$ systemctl restart network
9. named 서비스 재기동
$ systemctl restart named
$ systemctl enable named
10. 도메인 및 IP 확인
$ nslookup
--------------------------------------------------------------
> seonmin.com
Server: 127.0.0.1
Address: 127.0.0.1#53
Name: seonmin.com
Address: 10.0.1.58
--------------------------------------------------------------