Skip to main content
Version: arkhangelsk

named

Настройка DNS сервера в Сentos 7, РЕДОС 7.3​

Разворачиваем на госпитальной платформе bind server:

sudo yum -y install bind
sudo systemctl enable --now named
sudo firewall-cmd --permanent --zone=public --add-service=dns
sudo firewall-cmd --reload

Меняем DNS на внешнем интерфейсе на 127.0.0.1:

systemctl restart network

Добавляем зоны:

# /etc/named/mvsservice.ru.zone
$TTL 86400
@       IN  SOA     ns1.mvsservice.ru. admin.mvsservice.ru. (
        1      ;Serial
        3600    ;Refresh
        1800    ;Retry
        604800  ;Expire
        86400   ;Minimum TTL
)
@       IN      NS      ns1.mvsservice.ru.
ns1     IN      A       192.168.x.x

;  - A records
mvs.<DOMAIN_NAME>.ru.        IN      A      192.168.x.x
admin.<DOMAIN_NAME>.ru.      IN      A      192.168.x.x
esc1.<DOMAIN_NAME>.ru.       IN      A      192.168.x.x
/etc/named/mvsservice.ru.zone.rev
$TTL 86400
@       IN  SOA     ns1.mvsservice.ru. admin.mvsservice.ru. (
        1      ;Serial
        3600    ;Refresh
        1800    ;Retry
        604800  ;Expire
        86400   ;Minimum TTL
)
@       IN      NS      ns1.mvsservice.ru.
52       IN      PTR     mvsservice.ru

Редактируем /etc/named.conf

options {
	listen-on port 53 { 127.0.0.1; 192.168.2.52; };
	#listen-on-v6 port 53 { ::1; };
	directory 	"/var/named";
	dump-file 	"/var/named/data/cache_dump.db";
	statistics-file "/var/named/data/named_stats.txt";
	memstatistics-file "/var/named/data/named_mem_stats.txt";
	recursing-file  "/var/named/data/named.recursing";
	secroots-file   "/var/named/data/named.secroots";
       forwarders { 8.8.8.8; 1.1.1.1;};
	allow-query     {
		localhost;
		192.168.66.0/24;
		192.168.67.0/24; };
	querylog yes;
	recursion yes;
	dnssec-enable no;
	dnssec-validation no;
	bindkeys-file "/etc/named.root.key";
	managed-keys-directory "/var/named/dynamic";
	pid-file "/run/named/named.pid";
	session-keyfile "/run/named/session.key";
};

logging {
        channel default_debug {
                file "/var/named/data/named.run";
                severity dynamic;
		print-time yes;
        };

};

include "/etc/named.rfc1912.zones";
include "/etc/named.root.key";

zone "mvsservice.ru" IN {
                type master;
                file "/etc/named/mvsservice.ru.zone";
                allow-update { none; };
        };

zone "2.168.192.in-addr.arpa" IN {
                type master;
                file "/etc/named/mvsservice.ru.zone.rev";
                allow-update { none; };
        };

Перезагрузка: sudo systemctl restart named или sudo rndc reload