![bind9反向解析问题](https://linux22.com/image/122967/bind9%E5%8F%8D%E5%90%91%E8%A7%A3%E6%9E%90%E9%97%AE%E9%A2%98.png)
我使用绑定在我的局域网上进行简单的设置,只是外部域和 LAN 内部解析器的缓存,反向解析器输出错误的问题,应该只返回域名;似乎对于某些错误,服务器找不到正确回答的资源,但在日志中我没有发现任何错误;我将 nslookup 的配置和输出粘贴到下面:
输出 nslookup:
$ nslookup server1.example.com
Server: 192.168.1.131
Address: 192.168.1.131#53
Name: server1.example.com
Address: 192.168.1.130
$ nslookup 192.168.1.130
130.1.168.192.in-addr.arpa name = server1.example.com.1.168.192.in-addr.arpa.
绑定配置:
// This is the primary configuration file for the BIND DNS server named.
options {
directory "/opt/etc/bind";
pid-file "/opt/etc/bind/named.pid";
query-source address * port 53;
forwarders {
// OPENDNS dns
208.67.222.222;
208.67.220.220;
// GOOGLE dns
8.8.8.8;
8.8.4.4;
};
auth-nxdomain no; # conform to RFC1035
};
logging {
channel update_debug {
file "/var/log/bind_update_debug.log" versions 3 size 100k;
severity debug;
print-severity yes;
print-time yes;
};
channel security_info {
file "/var/log/bind_security_info.log" versions 1 size 100k;
severity info;
print-severity yes;
print-time yes;
};
channel bind_log {
file "/var/log/bind.log" versions 3 size 1m;
severity info;
print-category yes;
print-severity yes;
print-time yes;
};
channel query_log {
file "/var/log/bind_query.log" versions 3 size 1m;
severity debug 3;
print-category yes;
print-severity yes;
print-time yes;
};
category default { bind_log; };
category queries { query_log; };
category lame-servers { null; };
category update { update_debug; };
category update-security { update_debug; };
category security { security_info; };
};
// prime the server with knowledge of the root servers
zone "." {
type hint;
file "/etc/bind/db.root";
};
// be authoritative for the localhost forward and reverse zones, and for
// broadcast zones as per RFC 1912
zone "localhost" {
type master;
file "/etc/bind/db.local";
};
zone "127.in-addr.arpa" {
type master;
file "/etc/bind/db.127";
};
zone "0.in-addr.arpa" {
type master;
file "/etc/bind/db.0";
};
zone "255.in-addr.arpa" {
type master;
file "/etc/bind/db.255";
};
zone "example.com" {
type master;
file "/etc/bind/db.example.com";
notify no;
};
zone "1.168.192.in-addr.arpa" {
type master;
file "/etc/bind/db.192";
notify no;
};
db.example.com:
;
; BIND data file for local loopback interface
;
$TTL 604800
@ IN SOA example.com. admin.example.com. (
2 ; Serial
1D ; Refresh
1H ; Retry
1W ; Expire
3H ) ; Negative Cache TTL
; name server - NS records
IN NS ns.example.com.
; name server - A records
ns IN A 192.168.1.131
; 192.168.1.0/255 - A records
laptop IN A 192.168.1.102
server1 IN A 192.168.1.130
server2 IN A 192.168.1.131
router IN A 192.168.1.1
db.192:
;
; BIND reverse data file for empty rfc1918 zone
;
$TTL 604800
@ IN SOA example.com. admin.example.com. (
2 ; Serial
1D ; Refresh
1H ; Retry
1W ; Expire
3H ) ; Negative Cache TTL
; name server
IN NS ns.example.com.
; name server PTR record
131 IN PTR ns.example.com
; PTR Records
102 IN PTR laptop.example.com
130 IN PTR server1.example.com
131 IN PTR server2.example.com
1 IN PTR router.example.com
谁能指出错误在哪里?这是一个微不足道的配置错误吗?谢谢
答案1
在 NS ns.example.com 中。 131 IN PTR ns.example.com 102 IN PTRlaptop.example.com 130 IN PTR server1.example.com
您使用过一次完全限定域名,然后在任何其他情况下都没有使用它。你明明打算鉴于您提出的问题,在此处使用完全限定的域名。因此,请使所有这些名称都完全合格。
完全合格(人类可读形式)的域名以点结尾。