首页 新闻 搜索 专区 学院

bind子域授权问题

0
悬赏园豆:50 [已关闭问题] 关闭于 2016-02-10 14:57

因为是菜鸟,所以大家想得不用太复杂><||,我觉得大概是哪儿写错了吧><||。。。

 

主域:192.168.1.32   

         名字:walle.com

子域:192.168.1.28   

         名字:child1.walle.com

两个都是虚拟机,桥接;

 

主域和子域主机/etc/named.conf均为:


options {
//    listen-on port 53 { 127.0.0.1; };
//    listen-on-v6 port 53 { ::1; };
      directory     "/var/named";
      dump-file     "/var/named/data/cache_dump.db";
      statistics-file "/var/named/data/named_stats.txt";
      memstatistics-file "/var/named/data/named_mem_stats.txt";
//    allow-query     { localhost; };
      recursion yes;

      dnssec-enable no;
      dnssec-validation no;
//    dnssec-lookaside auto;

      /* Path to ISC DLV key */
//    bindkeys-file "/etc/named.iscdlv.key";
//    managed-keys-directory "/var/named/dynamic";
};

logging {
        channel default_debug {
                file "data/named.run";
                severity dynamic;
        };
};

zone "." IN {
    type hint;
    file "named.ca";
};

include "/etc/named.rfc1912.zones";
include "/etc/named.root.key";

主域/etc/named.rfc1912.zones:

zone "localhost.localdomain" IN {
    type master;
    file "named.localhost";
    allow-update { none; };
};
zone "localhost" IN {
    type master;
    file "named.localhost";
    allow-update { none; };
};
zone "1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ip6.arpa" IN {
    type master;
    file "named.loopback";
    allow-update { none; };
};
zone "1.0.0.127.in-addr.arpa" IN {
    type master;
    file "named.loopback";
    allow-update { none; };
};
zone "0.in-addr.arpa" IN {
    type master;
    file "named.empty";
    allow-update { none; };
};

zone "walle.com" IN {
      type master;
      file "walle.com.zone";
};

主域/var/named/ walle.com.zone文件:

$TTL 1D
$ORIGIN walle.com.
@      IN    SOA    ns1.walle.com.  admin.walle.com. (
                        2015020201
                        1H
                        5M
                        3D
                        1D)
        IN     NS       ns1
ns1     IN     A       192.168.1.32
*       IN     A       192.168.1.32 

child1        IN      NS      ns1.child1
ns1.child1    IN      A       192.168.1.28

子域/etc/named.rfc1912.zones:

zone "localhost.localdomain" IN {
    type master;
    file "named.localhost";
    allow-update { none; };
};
zone "localhost" IN {
    type master;
    file "named.localhost";
    allow-update { none; };
};
zone "1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ip6.arpa" IN {
    type master;
    file "named.loopback";
    allow-update { none; };
};
zone "1.0.0.127.in-addr.arpa" IN {
    type master;
    file "named.loopback";
    allow-update { none; };
};
zone "0.in-addr.arpa" IN {
    type master;
    file "named.empty";
    allow-update { none; };
};

zone "child1.walle.com" IN {
        type master;
        file "child1.walle.com.zone";
};

zone "walle.com" IN {
        type forward;
        forward only;
        forwarders { 192.168.1.32; };
}; 

子域/var/named/child1.walle.com.zone:

@    IN    SOA    ns1.child1.walle.com. admin.child1.walle.com. (
                        2016020201
                        1H
                        5M
                        3D
                        1D
                        )
        IN      NS      ns1
ns1     IN      A       192.168.1.28
*       IN      A       192.168.146.28
www     IN      A       192.168.146.28

在主域主机上  dig -t A www.child1.walle.com @192.168.1.32 可以解析成功;

在子域主机上  dig -t A www.walle.com @192.168.1.28的结果为:

; <<>> DiG 9.8.2rc1-RedHat-9.8.2-0.37.rc1.el6_7.6 <<>> -t A www.walle.com @192.168.1.28
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 53180
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;www.walle.com.            IN    A

;; Query time: 2 msec
;; SERVER: 192.168.1.28#53(192.168.1.28)
;; WHEN: Mon Feb  8 13:22:40 2016
;; MSG SIZE  rcvd: 31

子域主机日志仅显示:

Feb  8 13:22:40 centos6 named[3691]: error (host unreachable) resolving 'www.walle.com/A/IN': 192.168.1.32#53

 

求各位帮助~这问题困扰我好久><||一直整不好...

d170621773的主页 d170621773 | 初学一级 | 园豆:156
提问于:2016-02-09 12:12
< >
分享
所有回答(1)
0

好吧,原来是一台机子防火墙没关

d170621773 | 园豆:156 (初学一级) | 2016-02-10 14:56
清除回答草稿
   您需要登录以后才能回答,未注册用户请先注册