我正在尝试在我们的网络上运行一个水平分割 DNS 服务器。bind9 启动正常,但当我将 resolf.conf 指向其他服务器时,我收到这些访问被拒绝的消息。(出于安全原因,我已将我们的网站名称更改为 OURWEBSITE)
root@server:~# host zenoss
Host zenoss not found: 5(REFUSED)
root@server:~# host google.com
Host google.com.OURWEBSITE.com not found: 5(REFUSED)
这是我们的named.conf
include "/etc/bind/named.conf.options";
include "/etc/bind/named.conf.local";
// include "/etc/bind/named.conf.default-zones";
acl internal {
192.168.168.0/25;
localhost;
};
//
// Lan zone recursion is the default
//
view "internal-view" {
match-clients { internal; };
zone "." IN {
type hint;
file "/etc/bind/db.root";
};
zone "internal.OURWEBSITE.com " IN {
type master;
file "/etc/bind/zones/lan.master.OURWEBSITE.com";
allow-transfer { key TRANSFER; };
};
};
//
// external zone w/o recursion
//
view "external-view" {
match-clients { any; };
recursion no;
zone "OURWEBSITE.com " IN {
type master;
file "/etc/bind/zones/internet.master.OURWEBSITE.com";
allow-transfer { key TRANSFER; };
};
};
答案1
allow-recursion { internal; };
向您的内部视图添加一个,这{ localnets; localhost; };
是默认设置。
哦,还有其他配置吗named.conf.options
?也应该包括在内。