Solaris10 BIND-9.3.2

Dell Dimension 8200

Solaris^TM 10 x86 1/06

BIND-9.3.2

戻る

※　事前に、

libtool-1.5

openssl

必要なソフトウェア：

ftp://ftp.isc.org/isc/bind9/9.3.2/

Domain 例：

Domain1 = domain1.com FQDN = ns1.domain1.com IP Address = 219.117.193.19 プライマリDNS = 自サーバ 219.117.193.19 セカンダリDNS = tegtan1.interlink.or.jp 203.141.128.33 バーチャルドメインとして、 Domain2 = domain2.tv FQDN = domain2.tv IP Address = 219.117.193.19 プライマリDNS = ns1.domain1.com 219.117.193.19 セカンダリDNS = tegtan2.interlink.or.jp 203.141.128.34 構　成：

準　備:

$ su password:

# groupadd named

# useradd -g named -s /bin/false named

$ exit

インストール：

gcc-3.3.6

こちら

$ mkdir /opt/src/bind-9.3.2

$ cd /opt/src/bind-9.3.2

$ cd bind-9.3.2

$ make #（結構時間がかかる）

$ su password:

# make install

キーの作成：

rndc.key

# /usr/local/sbin/rndc-confgen -a wrote key file "/etc/rndc.key"

domain1

AheAheAheAheAheAheAheAheAheAheAhe==

domain1

設定：

rndc.conf

# vi /etc/rndc.conf

options {
	default-server 127.0.0.1;
	default-key     "domain1";
};
server 127.0.0.1{
	key "domain1";
};
key "domain1" {
	algorithm hmac-md5;
	secret  "AheAheAheAheAheAheAheAheAheAheAhe==";
};

# chmod 600 /etc/rndc.conf /etc/rndc.key

# chown named:named /etc/rndc.conf /etc/rndc.key

named.conf

# vi /etc/named.conf

options {
	directory "/var/named";
	auth-nxdomain yes;
	pid-file "/var/named/named.pid";
	version "10.3.2";
};

controls {
	inet 127.0.0.1 allow { 127.0.0.1; } keys { domain1; };
};

key "domain1" {
	algorithm hmac-md5;
	secret "AheAheAheAheAheAheAheAheAheAheAhe==";
};

view "internal" {
	match-clients { 192.168.0.0/24; 127.0.0.0/8; };
	recursion yes;

	zone "." {
	type hint;
	file "root.cache";
};

zone "localhost" {
	type master;
	file "localhost.zone";
};

zone "0.0.127.in-addr.arpa" {
	type master;
	file "localhost.rev";
};

zone "domain1.com" {
	type master;
	file "domain1.com.internal.zone";
	allow-transfer {
		127.0.0.1;
		192.168.0.0/24;
	};
};

zone "domain2.tv" {
	type master;
	file "domain2.tv.internal.zone";
	allow-transfer {
		127.0.0.1;
		192.168.0.0/24;
	};
};


zone "0.168.192.in-addr.arpa" {
	type master;
	file "255.168.192.in-addr.arpa";
	allow-transfer {
		127.0.0.1;
		192.168.255.0/24;
	};
};

zone "134.141.203.in-addr.arpa" {
	type slave;
	file "134.141.203.in-addr.arpa";
	allow-transfer {
		127.0.0.1;
		192.168.0.0/24;
	};
	masters {
		203.141.128.34;
	};
};


view "external" {
	match-clients { any; };
	recursion no;

zone "domain1.com" {
	type master;
	file "domain1.com.external.zone";
	allow-transfer {
		203.141.128.33;
	};
};

zone "domain2.tv" {
	type master;
	file "domain2.tv.external.zone";
	allow-transfer {
		203.141.128.34;
	};
};

dig @dns1.domain.net CHAOS version.bind TXT

10.3.2

# chmod 600 /etc/named.conf

# chown named:named /etc/named.conf

# mkdir /var/named

# cd /var/named/

# vi /var/named/domain1.com.external.zone

; domain1.com For External
; GROUPE Domain1(domain1.com) host to IP address Infomation
;
$TTL 86400
@               IN      SOA     ns1.domain1.com. you.domain1.com. (
                2002050401      ;Serial
                10800           ;Refresh
                1800            ;Retry
                4320000         ;Expire
                86400           ;Minimum
                )
                IN      NS      ns1.domain1.com.
                IN      NS      tegtan1.interlink.or.jp.
                IN      NS      tegtan2.interlink.or.jp.
                IN      MX  10  mail.domain1.com.
; Host Infomation --------------------------------------------------------
ns1INA       203.141.134.78
nsINCNAMEns1.domain1.com.
mailINCNAMEns1.domain1.com.
popINCNAMEns1.domain1.com.
smtpINCNAMEns1.domain1.com.
wwwINCNAMEns1.domain1.com.
www2INCNAMEns1.domain1.com.
ftpINCNAMEns1.domain1.com.
;-------------------------------------------------------------------------

# vi /var/named/domain1.com.internal.zone

; domain1.com For Internal
; GROUPE Domain1(domain1.com) host to IP address Infomation
;
$TTL 86400
@               IN      SOA     ns1.domain1.com. you.domain1.com. (
                2002050401      ;Serial
                10800           ;Refresh
                1800            ;Retry
                4320000         ;Expire
                86400           ;Minimum
                )
                IN      NS      ns1.domain1.com.

                IN      MX  10  mail.domain1.com.
; Host Infomation --------------------------------------------------------
ns1INA       192.168.0.150
nsINCNAMEns1.domain1.com.
mailINCNAMEns1.domain1.com.
popINCNAMEns1.domain1.com.
smtpINCNAMEns1.domain1.com.
wwwINCNAMEns1.domain1.com.
www2INCNAMEns1.domain1.com.
ftpINCNAMEns1.domain1.com.
;-------------------------------------------------------------------------

# vi /var/named/domain2.tv.external.zone

; domain2.tv For External
; GROUPE Domain(domain2.tv) host to IP address Infomation
;
$TTL 86400
@               IN      SOA     ns1.domain1.com. you.domain1.com. (
                2002050401      ;Serial
                10800           ;Refresh
                1800            ;Retry
                4320000         ;Expire
                86400           ;Minimum
                )
                IN      NS      ns1.domain1.com.
                IN      NS      tegtan2.interlink.or.jp.
                IN      MX  10  mail.domain2.tv.
; Host Infomation --------------------------------------------------------
domain2.tv.INA       203.141.134.78
mailINCNAMEdomain2.tv.
wwwINCNAMEdomain2.tv.
ftpINCNAMEdomain2.tv.
;-------------------------------------------------------------------------

# vi /var/named/domain2.tv.internal.zone

; domain2.tv For Internal
; GROUPE Domain(domain2.tv) host to IP address Infomation
;
$TTL 86400
@               IN      SOA     ns1.domain1.com. you.domain1.com. (
                2002050401      ;Serial
                10800           ;Refresh
                1800            ;Retry
                4320000         ;Expire
                86400           ;Minimum
                )
                IN      NS      ns1.domain1.com.

                IN      MX  10  mail.domain2.tv.
; Host Infomation --------------------------------------------------------
domain2.tv.INA       192.168.0.150
mailINCNAMEdomain2.tv.
wwwINCNAMEdomain2.tv.
ftpINCNAMEdomain2.tv.
;-------------------------------------------------------------------------

# vi /var/named/localhost.zone

; localhost.zone
; Local loop back file of  host to IP address
$TTL 3600
@       IN      SOA     domain1.com. you.domain1.com.  (
                2002050401
                10800
                1800
                4320000
                86400 )

                        IN      NS      domain1.com.
	localhost.              IN      A       127.0.0.1

# vi /var/named/localhost.rev

; localhost.rev
; Local loop back file of IP address to host
$TTL 86400
@       IN      SOA     domain1.com. you.domain1.com.  (
                20020504011
                10800
                1800
                4320000
                86400 )

                IN      NS      domain1.com.
1               IN      PTR     localhost.

# vi /var/named/0.168.192.in-addr.arpa

; 0.168.192.in-addr.arpa
; LAN DNS rev file
$TTL 86400
@       IN      SOA     domain1.com. you.domain1.com.  (
                20020504011
                10800
                1800
                4320000
                86400 )

INNSdomain1.com.
;----------------------------------------------------------
1INPTRMN128-SOHO.domain1.com.
2INPTRclient1.domain1.com.
3INPTRclinet2.domain1.com.
150INPTRns1.domain1.com.

wget

# mv named.root /var/named/root.cache

# chmod 700 /var/named # chmod 600 /var/named/*

# chown -R named:named /var/named

起動設定

# vi /etc/init.d/named

#!/sbin/sh
#
LD_LIBRARY_PATH=/usr/local/lib:/opt/sfw/lib:/usr/lib:/lib:/etc/lib:/usr/local/pgsql/lib
export LD_LIBRARY_PATH

case "$1" in
'start')
	if [ -f /usr/local/sbin/named -a -f /etc/named.conf ]; then
	/usr/local/sbin/named -u named -d 5
	echo "    named                                                         [start]"
	PID=`ps -ef | grep "/usr/local/sbin/named" | grep -v grep | /usr/local/bin/gawk '{print $2}'`
	echo $PID > /var/run/named.pid
	fi
	;;

'stop')
	PID=`cat /var/run/named.pid`
	kill $PID
	rm -f /var/run/named.pid
	echo "    named                                                         [stop]"
	;;

'restart')
	$0 stop
	sleep 3
	$0 start

	;;

*)
	echo "Usage: $0 { start | stop }"
	exit 1
	;;
esac
exit 0

# chmod +x /etc/init.d/named

# cd /etc/rc2.d/

# ln -s ../init.d/named ./S72named

# /etc/rc2.d/S72named start