|
|
发表于 2004-4-2 15:26:21
|
显示全部楼层
我贴下我作为内部的dns给你参考一下,snoopy.gov,b011306.com
named.conf
options {
directory "/var/named";
forwarders { 202.116.128.1; };
notify yes;
/*
* If there is a firewall between you and nameservers you want
* to talk to, you might need to uncomment the query-source
* directive below. Previous versions of BIND always asked
* questions using port 53, but BIND 8.1 uses an unprivileged
* port by default.
*/
// query-source address * port 53;
};
logging {
channel LAMER_log {
file "/var/log/dns/dns-lamer.log" versions 3 size 10m;
severity info;
print-severity yes; print-time yes;
};
channel SEC_log {
file "/var/log/dns/dns-sec.log" versions 3 size 10m;
severity info;
print-severity yes; print-time yes;
};
channel STAT_log {
file "/var/log/dns/dns-stat.log" versions 3 size 10m;
severity info;
print-severity yes; print-time yes;
};
category lame-servers { LAMER_log; };
category security { SEC_log; };
};
/* category cname { null; };
category statistics { STAT_log; };*/
controls {
inet 127.0.0.1 allow { localhost; } keys { rndckey; };
};
zone "." IN {
type hint;
file "named.ca";
};
zone "localhost" IN {
type master;
file "localhost.zone";
allow-update { none; };
};
zone "0.0.127.in-addr.arpa" IN {
type master;
file "named.local";
allow-update { none; };
};
zone "snoopy.gov" {
type master;
file "snoopy.gov";
allow-query { any; };
};
zone "b011306.com" {
type master;
file "b011306.com";
allow-query { any; };
allow-transfer {
192.168.206.0/24;
};
};
zone "206.168.192.in-addr.arpa" IN {
type master;
file "snoopy.ptr";
};
include "/etc/rndc.key";
b011306.com
$ttl 16097
@ IN SOA ns.b001306.com. root.localhost. (
2003088807;
28800;
14400;
3600000;
16097);
IN NS ns.b011306.com.
IN A 192.168.206.8
MX 10 mail.b011306.com.
ns IN A 192.168.206.8
mail IN A 192.168.206.8
www IN CNAME n
snoopy.gov
$ttl 16097
@ IN SOA snoopy.gov. root.localhost. (
2003088809;
28800;
14400;
3600000;
16097);
IN NS ns.snoopy.gov.
IN A 192.168.206.8
IN MX 10 ns.snoopy.gov.
ns IN A 192.168.206.8
www IN CNAME ns
mail IN CNAME ns |
|