Ubuntu中文论坛

代码： 全选

## named.conf - configuration for bind(named.in)
#
# Generated automatically by redhat-config-bind, alchemist et al.
# Any changes not supported by redhat-config-bind should be put 
# in /etc/named.custom
#
include "/etc/named.custom";

include "/etc/rndc.key";

options { 
	directory "/var/named_in/";	
	datasize 2098;
        ......
	};
};

#Log Files
logging {
	category queries {
		default_syslog;
	};
};

#DataBase Files
zone  "0.0.127.in-addr.arpa" { 
	type master; 
	file  "0.0.127.in-addr.arpa.zone"; 
};
zone  "10.in-addr.arpa" { 
	type master; 
	file  "10.in-addr.arpa.zone"; 
};


zone  "localhost" { 
	type master; 
	file  "localhost.zone"; 
};
zone  "xxu.edu.cn" { 
	type master; 
	file  "xxu.edu.cn.zone"; 
};

代码： 全选

## named.conf - configuration for bind(named.out)
#
# Generated automatically by redhat-config-bind, alchemist et al.
# Any changes not supported by redhat-config-bind should be put 
# in /etc/named.custom
#
include "/etc/named.custom";

include "/etc/rndc.key";

options { 
	directory "/var/named_out/";
	datasize 2098;
        ... ...
	};
        # 注意这里监听的端口不一样了
	listen-on port 8053 {
		# 本机IP地址
                10.xx.xx.xx;
	}; 
};

#Log Files
logging {
	category queries {
		default_syslog;
	};
};

#DataBase Files
zone  "0.0.127.in-addr.arpa" { 
	type master; 
	file  "0.0.127.in-addr.arpa.zone"; 
};
zone  "xx.xx.210.in-addr.arpa" { 
	type master; 
	file  "xx.xx.210.in-addr.arpa.zone"; 
};


zone  "localhost" { 
	type master; 
	file  "localhost.zone"; 
};
zone  "xxu.edu.cn" { 
	type master; 
	file  "xxu.edu.cn.zone"; 
};

代码： 全选

-A PREROUTING -s ! 10.0.0.0/255.0.0.0 -i eth0 -p udp -m udp --dport 53 -j REDIRECT --to-ports 8053

-A POSTROUTING -o eth0 -p udp -m udp --sport 8053 -j SNAT --to-source 10.xx.xx.xx:53

COMMIT

代码： 全选

#!/bin/sh

echo "Enabling IP Forwarding ..."
echo 1 > /proc/sys/net/ipv4/ip_forward

echo "Enabling DNS(outside) Service ..."
/usr/sbin/named -u named -c /etc/named.out

echo "Enabling DNS(inside) Service ..."
/usr/sbin/named -u named -c /etc/named.in

代码： 全选

include "/etc/rndc.key";

options { 
	directory "/var/named/";	
	... ...
	};
};

#Log Files
logging {
	category queries {
		default_syslog;
	};
};

#DataBase Files
#注意view和match-clients的用法，就是它们在起作用
view  "internal" {
	match-clients { 10.0.0.0/8; };
	recursion yes;
	zone  "." { 
		type hint; 
		file  "named.ca";
	};
	zone  "0.0.127.in-addr.arpa" { 
		type master; 
		file  "0.0.127.in-addr.arpa.zone"; 
	};
	zone  "localhost" { 
		type master; 
		file  "localhost.zone"; 
	};
	zone  "xxu.edu.cn" { 
		type master; 
		file  "xxu.edu.cn.in.zone"; 
	};
	zone  "10.in-addr.arpa" { 
		type master; 
		file  "10.in-addr.arpa.zone"; 
	};
};

view  "external" {
	match-clients { any; };
	recursion yes;
	zone  "." { 
		type hint; 
		file  "named.ca";
	};
	zone  "0.0.127.in-addr.arpa" { 
		type master; 
		file  "0.0.127.in-addr.arpa.zone"; 
	};
	zone  "localhost" { 
		type master; 
		file  "localhost.zone"; 
	};
	zone  "xxu.edu.cn" { 
		type master; 
		file  "xxu.edu.cn.out.zone"; 
	};
	zone  "xx.xx.210.in-addr.arpa" {
		type master;
		file  "xx.xx.210.in-addr.arpa.zone";
	};
};