从源文件构件bind9域名服务器
nalan$2003-06-18
1.从http://www.isc.org/products/BIND/bind9.html下载bind9的源文件。目前版本为9 .22，源文件为bind-9.2.2.tar.gz。
2.将源文件bind-9.2.2.tar.gz置于/usr/local/src目录下。
3.解压缩源文件bind-9.2.2.tar.gz
# tar -xzvf bind-9.2.2.tar.gz
4.进入安装目录
# cd bind-9.2.2
5.配置、编译
# ./configure
# make
6.安装
# make install
7.生成的可执行文件位于/usr/local/sbin目录下。最重要的可执行文件为named和rndc。
8.创建链接
# ln -s /usr/local/sbin/rndc /usr/sbin/rndc
# ln -s /usr/local/sbin/named /usr/sbin/named
9.创建rndc.conf配置文件。
# /usr/local/sbin/rndc-confgen > /etc/rndc.conf
# cat /etc/rndc.conf
输出为：
# Start of rndc.conf
key "rndc-key" {
algorithm hmac-md5;
secret "y9xvvfQjdWv9f/Fo7wquBg==";
};
options {
default-key "rndc-key";
default-server 127.0.0.1;
default-port 953;
};
# End of rndc.conf
# Use with the following in named.conf, adjusting the allow list as needed:
# key "rndc-key" {
# algorithm hmac-md5;
# secret "y9xvvfQjdWv9f/Fo7wquBg==";
# };
#
# controls {
# inet 127.0.0.1 port 953
# allow { 127.0.0.1; } keys
{ "rndc-key"; };
# };
# End of named.conf
10.创建rndc.key文件。将rndc.conf文件中注释部分拷贝生成如下文件：
# vi /etc/rndc.key
key "rndc-key" {
algorithm hmac-md5;
secret "y9xvvfQjdWv9f/Fo7wquBg==";
};
controls {
inet 127.0.0.1 port 953
allow { 127.0.0.1; } keys { "rndc-key"; };
};
11.创建named.conf配置文件。
# vi /etc/named.conf
// generated by named-bootconf.pl &n
bsp;
options {
directory "/var/named";
/*
* If there is a firewall between you and nameservers you want
* to talk to, you might need to uncomment the query-source
* directive below. Previous versions of BIND always asked
* questions using port 53, but BIND 8.1 uses an unprivileged
* port by default.
*/
&n
bsp; // query-source address * port 53;
};
//
// a caching only nameserver config
//
zone "." IN {
type hint;
file "named.root"; &nb
sp;
};
zone "localhost" IN {
type master;
file "localhost.zone";
allow-update { none; };
};
zone "0.0.127.in-addr.arpa" IN {
type master;
file "named.local";
allow-update&nb
sp;{ none; };
};
zone "ycmail.net" IN {
type master;
file "ycmail.net.zone";
allow-update { none; };
};
zone "252.177.61.in-addr.arpa" IN {
type master;
file "named.61.177.252";
allow-update { none; };
};
include "/etc/rndc.key";
12.创建/var/named目录
# mkdir /var/named
# cd /var/named
13.匿名登录到ftp站点FTP.RS.INTERNIC.NET，获取/domain目录下的named.root文件，将该文件置于/var/named目录下。
14.创建localhost文件
# vi localhost
$TTL86400
;
$ORIGIN localhost.
@1D IN SOA@ root (
42; serial (d. adams)
3H; refresh
15M; retry
1W; expiry
1D ); minimum
1D IN NS@
1D IN A127.0.0.1
15.创建named.local文件
# vi named.local
$TTL86400
@ IN SOA localhost. root.localhost. ( &n
bsp;
1997022700 ; Serial
28800 ; Refresh
14400 ; Retry
3600000 ; Expire
86400 ) ; Minimum
IN NS localhost.
&nb
p; IN NS mail.ycmail.net.
mail IN A 61.177.252.34
www IN CNAME mail
17.创建named.61.177.252文件
# vi named.61.177.252
$TTL 86400
@ IN SOA mail.ycmail.net. postmaster.ycmail.net. (
2003061800 ; Serial
; 28800 ; Refresh
14400 ; Retry
3600000 ; Expire
86400 ) ; Minimum
IN NS mail.ycmail.net.
34 IN PTR mail.ycmail.net.
18.创建启动脚本
# vi /etc/rc.d/init.d/named
#!/bin/sh
# &nbs