☰

反向区域不适用于 BIND9

tag-icon • tag-icon linux bind linux-networking reverse-dns dns-zone
反向区域不适用于 BIND9

我正在尝试使用 BIND9 服务在 UBUNTU 12.04 中配置 DNS 服务器。我能够成功配置该服务器，并且当我执行 nslookup 命令时它运行良好。但是，host 命令似乎不起作用，它将执行反向地址区域。

主机命令错误：

root@necacdnsone:/etc/bind/zones# host 10.222.190.54 主机 54.190.222.10.in-addr.arpa。未找到：3（NXDOMAIN）

成功的 NSLOOKUP 命令输出：

nslookup necone.com
Server:         10.222.190.54
Address:        10.222.190.54#53

Name:   necone.com
Address: 10.222.190.54

配置文件具有如下所示的条目。请指导我修复反向地址区域问题。（主机命令）

命名的.conf.本地

//
// Do any local configuration here
//

// Consider adding the 1918 zones here, if they are not used in your
// organization
//include "/etc/bind/zones.rfc1918";
zone "necone.com" {
 type master;
 file "/etc/bind/zones/db.necone.com";
};
zone "190.222.10.in-addr.arpa" {
  type master;
  file "/etc/bind/zones/db.10";
};

db.10 文件

;
; BIND reverse data file for local loopback interface
;
$TTL    604800
@       IN      SOA     necacdnsone.necone.com. root.necone.com. (
                              1         ; Serial
                         604800         ; Refresh
                          86400         ; Retry
                        2419200         ; Expire
                         604800 )       ; Negative Cache TTL
;
        IN  NS  necacdnsone.
   1    IN  PTR gateway.necone.com.
   54   IN  PTR necacdnsone.necone.com.
   52   IN  PTR dhcpserver.necone.com.

db.necone.com

;
; BIND data file for local loopback interface
;
$TTL    604800
@       IN      SOA     necacdnsone.necone.com. root.necone.com. (
                              2         ; Serial
                         604800         ; Refresh
                          86400         ; Retry
                        2419200         ; Expire
                         604800 )       ; Negative Cache TTL
;
necone.com.      IN  NS  necacdnsone.necone.com.
necone.com.      IN  A   10.222.190.54
   ;@               IN  A   127.0.0.1
   ;@               IN  AAAA    ::1
necacdnsone       IN  A   10.222.190.54
gateway           IN  A   10.222.190.1
dhcpserver        IN  A   10.222.190.52
www       IN  CNAME   necone.com.

我认为我在 named.conf.local 文件的某个地方犯了一个错误。

系统日志

tail -f /var/log/syslog
Apr  7 19:38:50 necacdnsone named[4507]: error (network unreachable) resolving '62.191.222.10.in-addr.arpa/PTR/IN': 2001:dc3::35#53
Apr  7 19:38:50 necacdnsone named[4507]: error (network unreachable) resolving '62.191.222.10.in-addr.arpa/PTR/IN': 2001:7fd::1#53
Apr  7 20:08:32 necacdnsone named[4507]: error (connection refused) resolving './DNSKEY/IN': 10.222.190.1#53
Apr  7 20:08:35 necacdnsone named[4507]: error (network unreachable) resolving './DNSKEY/IN': 2001:7fe::53#53
Apr  7 20:08:42 necacdnsone named[4507]: error (network unreachable) resolving './DNSKEY/IN': 2001:500:3::42#53
Apr  7 20:08:42 necacdnsone named[4507]: error (network unreachable) resolving './DNSKEY/IN': 2001:503:ba3e::2:30#53
Apr  7 20:08:42 necacdnsone named[4507]: error (network unreachable) resolving './DNSKEY/IN': 2001:500:2f::f#53
Apr  7 20:08:42 necacdnsone named[4507]: error (network unreachable) resolving './DNSKEY/IN': 2001:500:1::803f:235#53
Apr  7 20:08:42 necacdnsone named[4507]: managed-keys-zone ./IN: Unable to fetch DNSKEY set '.': timed out

答案1

导致错误的直接原因是文件中的前导空格db.10。正确的方法是：

;
; BIND reverse data file for local loopback interface
;
$TTL    604800
@       IN      SOA     necacdnsone.necone.com. root.necone.com. (
                              1         ; Serial
                         604800         ; Refresh
                          86400         ; Retry
                        2419200         ; Expire
                         604800 )       ; Negative Cache TTL
;
        IN  NS  necacdnsone.
1    IN  PTR gateway.necone.com.
54   IN  PTR necacdnsone.necone.com.
52   IN  PTR dhcpserver.necone.com.

错误：

;
        IN  NS  necacdnsone.
   1    IN  PTR gateway.necone.com.
   54   IN  PTR necacdnsone.necone.com.
   52   IN  PTR dhcpserver.necone.com.
^^^ spaces are the problem

请记住增加 SOA Serial，然后重新加载命名。

在不相关的事情上，你应该指定IN NS necacdnsone.necone.com.与你错误选择的指南所建议的相反的内容。

相关内容