Bi thc hnh BIND - DNS Server trn CentOS Linux

Gii thiu BIND

- BIND (Berkeley Internet Name Domain) l phn mm min ph, ngun m s dng cho cc my ch lm DNS Server. - BIND c lp trnh bi 4 sinh vin i hc Berkeley, California nm 1980 v c pht hnh ln u tin trn h thng 4.3BSD. - BIND version 8 c pht hnh vo thng 5 nm 1997. Sau n thng 9 nm 2000 BIND version 9 ra i l phin bn mi nht hin nay vi nhiu tnh nng quan trng c ci thin v bo mt cao hn cc phin bn trc. - Th mc lm vic mc nh ca BIND: /var/named. - File cu hnh tng quan cho BIND: /etc/named.conf.

Cc file cu hnh chnh cho DNS Server

cu hnh DNS Server chng ta cn tt c 5 file cu hnh. Trong vi DNS Server kiuMaster, Slave hoc Caching-Only u yu cu 3 file cu hnh sau: - named.conf: cha trong thu mc /etc l file cu hnh tng th cho dch v named. - named.ca: cha trong th mc /var/named cha tn min v a ch IP ca cc root server. - named.local: cha trong th mc /var/named cung cp thng tin cho qu trnh phn gii a ch IP o cho localhost. V 2 file cu hnh s dng cho Master DNS Server : - zone: cha tn min v a ch IP ca cc my ch v thng tin v nh x gia tn min v a ch IP ny. - reverse zone: ngc li ca file zone cha thng tin v nh x gia a ch IP v tn min.

BI THC HNH CI T V CU HNH BIND TRN H THNG CENTOS Ni dung ca bi thc hnh
- Xy dng 1 my o Linux chy h iu hnh CentOS-5 ng vai tr l DNS Server v 1 my tht Windows ng vai tr l Client. - Ci t v cu hnh my DNS Server hot ng ch Caching-Only trong domainIPMAC.LAB.

M hnh bi thc hnh

M hnh logic ca DNS Server

a ch IP v tn min s dng trong bi thc hnh - ns-master.ipmac.lab : 192.168.1.1 - ns-slave.ipmac.lab : 192.168.1.254 - fileserver.ipmac.lab : 192.168.1.20 - ftp.ipmac.lab : 192.168.1.20 - mailserver1.ipmac.lab : 192.168.1.21 - www.ipmac.lab : 192.168.1.10 - web.ipmac.lab : 192.168.1.10 - application.ipmac.lab : 192.168.1.11 - mailserver2.ipmac.lab : 192.168.1.11 DNS l dch v c tnh bo mt khng cao nn trong bi thc hnh ny chng ta s cu hnh BIND chy trong nh t CHROOT. Bc 1 : t a ch IP trn my DNS Server v my Windows. Tt firewall trn my DNS Server . Ping kim tra kt ni gia my DNS Server v Windows
[root@DNS-SERVER ~]# ifconfig eth0 192.168.1.1 netmask 255.255.255.0 up [root@DNS-SERVER ~]# service iptables stop [root@DNS-SERVER ~]# ping 192.168.1.100

Bc 2 : Tin hnh ci t cc gi phn mm bind, bind-chroot, bindutils v system-config-bind qua rpm hoc yum. Sau kim tra 4 gi phn mm ny chc chn c ci t thnh cng trc khi tin hnh cc bc tip theo
[root@DNS-SERVER ~]# yum install bind bind-chroot bind-utils system-config-bind [root@DNS-SERVER ~]# rpm -q bind bind-chroot bind-utils system-config-bind

Bc 3 : To 2 file text c tn ipmac.lab.zone v 192.168.1.reverse.zone Desktop ca ngi dng vi ni dung nh di y

Bc 4 : Tm kim cc file mu c sn cho cu hnh BIND do gi phn

mm system-config-bind cung cp
[root@DNS-SERVER ~]# find / -name named* | grep system-config-bind /usr/share/system-config-bind/profiles/default/named.conf /usr/share/system-config-bind/profiles/default/named /usr/share/system-config-bind/profiles/default/named/named.broadcast /usr/share/system-config-bind/profiles/default/named/named.zero /usr/share/system-config-bind/profiles/default/named/named.ip6.local /usr/share/system-config-bind/profiles/default/named/named.local

Bc 5 : Kim tra xem 2 th mc c tn etc v var/named trong th mc /var/named/chroot c to hay cha. Nu cha tin hnh to 2 th mc ny
[root@DNS-SERVER [root@DNS-SERVER [root@DNS-SERVER [root@DNS-SERVER [root@DNS-SERVER ~]# ~]# ~]# ~]# ~]# cd /var/named/chroot mkdir etc mkdir var cd var mkdir named

Bc 6 : Copy cc file cu hnh mu cho BIND vo cc th mc tng ng trong th mc /var/named/chroot

[root@DNS-SERVER [root@DNS-SERVER [root@DNS-SERVER [root@DNS-SERVER ~]# ~]# ~]# ~]# cd /usr/share/system-config-bind/profiles/default/ ls cp ./named.conf /var/named/chroot/etc/ cp ./named/* /var/named/chroot/var/named/

Bc 7 : Download file named.root tiftp://ftp.rs.internic.net/domain/named.root v th mc /var/named/chroot/var/named

[root@DNS-SERVER ~]# cd /var/named/chroot/var/named/ [root@DNS-SERVER ~]# wget ftp://ftp.rs.internic.net/domain/named.root

Bc 8 : Khi ng dch v named v kim tra m bo dch v named ang c chy trong nh t chroot
[root@DNS-SERVER ~]# service named start [root@DNS-SERVER ~]# ps -ef | grep named

Bc 9 : Copy 2 file zone to bc 2 Desktop ca ngi dng vo trong th mc /var/named/chroot/var/named

[root@DNS-SERVER ~]# cd /home/nangthang/Desktop/ [root@DNS-SERVER ~]# cp *.zone /var/named/chroot/var/named/

Bc 10 : nh ngha 2 pht biu v zone trong file /var/named/chroot/etc/named.conf v zone ipmac.lab

Bc 11 : Khi ng li dch v named dch v named c cc file cu hnh mi c thay i

[root@DNS-SERVER ~]# service named reload

Bc 12 : Lc ny dch v named ang hot ng ch CachingOnly. Cu hnh trn my Client s dng DNS Server trong bi thc hnh

Bc 13 : Trn my Client th tin hnh phn gii cc tn min trong bi thc hnh thnh a ch IP v ngc li (s dng cng c nslookup)

CHC CC BN THNH CNG !!!