用到了bind 9的view功能，按ip地址解析不同的地址

dns服务器地址:dns.test.com 192.168.0.211
web服务器地址:www.test.com 192.168.0.100 192.168.0.200
电信地址:192.168.0.210 解析为192.168.0.100
网通地址:192.168.0.213 解析为192.168.0.200


--------------------------------------------------------------------------------

bind的主配置文件 named.conf

//定义全局配置选项
options {
//配置文件工作目录
directory"/var/named";
//域名转发器
forwarders {
192.168.0.1;
};
};

key "rndc-key" {
algorithm hmac-md5;
secret "dT68MZ0x70oXNKQ59NFpeQ==";
};

//rndc命令使用的控制通道
controls {
inet 127.0.0.1 port 953
allow { 127.0.0.1; } keys { "rndc-key"; };
};

//ip地址访问列表
acl "telecom" {
192.168.0.210;
};
acl "cnc" {
192.168.0.213;
};

//使用view功能时，所有zone必须包含在view里面
//电信
view "telecom" {
//匹配acl列表
match-clients { "telecom"; };
//递归查询
recursion yes;
//定义根区声明
zone "." IN {
type hint;
file "named.ca";
};
//定义localhost正向解析区声明
zone "localhost" IN {
type master;
file "localhost.zone";
allow-update { none; };
};
zone "0.0.127.in-addr.arpa" IN {
type master;
file "named.local";
allow-update { none; };
};
//定义test.com正向解析区声明
zone "test.com" IN {
type master;
file "test.zone.telecom";
allow-update { none; };
};
zone "0.168.192.in-addr.arpa" IN {
type master;
file "0.168.192.arpa";
allow-update { none; };
};
};

//网通
view "cnc" {
match-clients { "cnc"; };
recursion yes;
zone "." IN {
type hint;
file "named.ca";
};
zone "localhost" IN {
type master;
file "localhost.zone";
allow-update { none; };
};
zone "0.0.127.in-addr.arpa" IN {
type master;
file "named.local";
allow-update { none; };
};
zone "test.com" IN {
type master;
file "test.zone.cnc";
allow-update { none; };
};
zone "0.168.192.in-addr.arpa" IN {
type master;
file "0.168.192.arpa";
allow-update { none; };
};
};

[1] [2]  下一页