找不到服务器：SERVFAIL 和 Bind9 DNS 服务器设置

Question 1

更改你的文件命名的.conf.选项：

dnssec 验证否；

acl "trusted" {
        185.106.209.113;
};

options {
        directory "/var/cache/bind";

        // If your ISP provided one or more IP addresses for stable
        // nameservers, you probably want to use them as forwarders.

        forwarders {
                185.106.209.113;
        };

        dnssec-validation no;

        auth-nxdomain no;    # conform to RFC1035
        listen-on-v6 { any; };
};

Answer

更改你的文件命名的.conf.选项：

dnssec 验证否；

acl "trusted" {
        185.106.209.113;
};

options {
        directory "/var/cache/bind";

        // If your ISP provided one or more IP addresses for stable
        // nameservers, you probably want to use them as forwarders.

        forwarders {
                185.106.209.113;
        };

        dnssec-validation no;

        auth-nxdomain no;    # conform to RFC1035
        listen-on-v6 { any; };
};

Question 2

因此，按照这些步骤操作，它对我有用，并且我相信它对你也会有用。

1.将您的主机名设置为您的某个 ServerName，例如：

服务器.example.com

2.在 /etc/network/ 中配置接口，例如：

iface ens3 inet static
address 192.168.1.10
netmask 255.255.255.0

不要忘记重新启动“网络”。

现在让我们配置绑定。您不需要编辑所有数据库，只需按如下方式操作即可：

打开 /etc/bind/named.conf.local 并在文件末尾添加以下内容：

zone "example.com" IN {
type master;
file "/etc/bind/forward.example.com";
};

zone "1.168.192.in-addr.arpa" IN {
#1.168.192 is the reverse of 192.168.1 wit out the last part "10"
type master;
file "/etc/bind/reverse.example.com";
}

现在在 /etc/bind

cp db.local  forward.example.com

现在编辑 forward.example.com

;
; BIND data file for local loopback interface
;
$TTL    604800
@       IN      SOA     server.example.com. root.server.example.com. ( //Important dot(.) after domain names
                              2         ; Serial
                         604800         ; Refresh
                          86400         ; Retry
                        2419200         ; Expire
                         604800 )       ; Negative Cache TTL
;
@       IN      NS      server.example.com.
@       IN      A       xxx.xxx.xxx.xxx #your public static ip adress if you- 
server  IN      A       xxx.xxx.xxx.xxx #did you portforwards in NAT if you - 
host    IN      A       xxx.xxx.xxx.xxx #didn't import the static private ip-
client  IN      A       xxx.xxx.xxx.xxx #address.
www     IN      A       xxx.xxx.xxx.xxx

@       IN      NS      ns1.example.com.
@       IN      A       xxx.xxx.xxx.xxx
ns1     IN      A       xxx.xxx.xxx.xxx

@       IN      MX      10 admin.example.com.
@       IN      A       xxx.xxx.xxx.xxx
admin   IN      A       xxx.xxx.xxx.xxx

#this config contains email server configure too.

现在在同一个目录中cp forward.example.com reverse.example.com

现在编辑反向区域如下：

;
; BIND data file for local loopback interface
;
$TTL    604800
@       IN      SOA     server.example.com root.server.example.com. (
                              2         ; Serial
                         604800         ; Refresh
                          86400         ; Retry
                        2419200         ; Expire
                         604800 )       ; Negative Cache TTL
;
@       IN      NS      server.example.com.
@       IN      PTR     exapmle.com.
server  IN      A       xxx.xxx.xxx.xxx
host    IN      A       xxx.xxx.xxx.xxx
client  IN      A       xxx.xxx.xxx.xxx
www     IN      A       xxx.xxx.xxx.xxx
10      IN      PTR     server.exapmle.com.
11      IN      PTR     client.exapmle.com.

@       IN      NS      ns1.exapmle.com.
ns1     IN      A       xxx.xxx.xxx.xxx
10      IN      PTR     ns1.exapmle.com.

@       IN      MX      10 admin.exapmle.com.
admin   IN      A       xxx.xxx.xxx.xxx
10      IN      PTR     admin.exapmle.com.
#the ten in above of hashtag is the end number of your ip 192.168.1.(10)
or xxx.xxx.xxx.(xxx)

正向和反向区域现已配置完毕。接下来按照命令操作：

sudo named-checkconf -z /etc/bind/named.conf
sudo named-checkconf -z /etc/bind/named.conf.local
sudo named-checkzone forward /etc/bind/forward.example.com
sudo named-checkzone reverse /etc/bind/reverse.example.com

输出应显示区域已加载并且没有错误。

现在重新启动绑定。如果出现错误，只需使用journalctl-xe并且多次查看详细信息，这只是打字错误和类似的错误。

现在执行以下操作：

sudo chown -R bind:bind /etc/bind
sudo chmod -R 755 /etc/bind
sudo systemctl restart bind9
sudo systemctl enable bind9


ufw allow bind9
ufw allow 53
ufw allow 53/tcp
ufw allow 53/udp

再次转到 /etc/network/interfaces 在文件末尾添加以下内容：

dns-search example.com
dns-nameserver 192.168.1.10

之后重新启动网络sudo systemctl restart networking

现在修改这个文件：/etc/resolv.conf

在文件末尾添加这些：

nameserver 192.168.1.10
search example.com

重新启动网络重新启动 NetworkManager

现在 ping/nslookup/dig ns.example.com 或 server.example.com

现在它正在发挥作用

Answer