我安装了 named-chroot 并将其配置为内部网络。一切正常,但没有转发任何内容。
这是我的配置:
options {
listen-on port 53 { 127.0.0.1; 192.168.0.15; };
#listen-on-v6 port 53 { ::1; };
directory "/var/named";
dump-file "/var/named/data/cache_dump.db";
statistics-file "/var/named/data/named_stats.txt";
memstatistics-file "/var/named/data/named_mem_stats.txt";
allow-query { clients; };
notify master-only;
transfers-in 30;
auth-nxdomain no;
empty-zones-enable yes;
allow-recursion { clients; };
allow-transfer { localhost; };
forwarders { 194.15.215.236; 194.15.215.237; 194.15.215.2; };
recursion yes;
dnssec-enable yes;
dnssec-validation yes;
dnssec-lookaside auto;
/* Path to ISC DLV key */
bindkeys-file "/etc/named.iscdlv.key";
managed-keys-directory "/var/named/dynamic";
pid-file "/run/named/named.pid";
session-keyfile "/run/named/session.key";
};
zone "." IN {
type hint;
file "named.ca";
};
#zone "localhost" {
# type master;
# file "standard/localhost";
# allow-transfer { localhost; };
#};
zone "127.in-addr.arpa" {
type master;
file "standard/loopback";
allow-transfer { localhost; };
};
#zone "1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ip6.arpa" {
# type master;
# file "standard/loopback6.arpa";
# allow-transfer { localhost; };
#};
include "/etc/named.rfc1912.zones";
include "/etc/named.root.key";
我也在 Google 上搜索了很多次,禁用了 DNSSEC 等,但我找不到解决方案。
答案1
我稍微缩短了配置。
问题是,禁用 DNS Sec 会在代理上持续存在。在保持 DNS Sec 关闭几分钟后,代理会识别它。
谢谢!