¸¶½ºÅÍÆ÷À¯(Master4U)
Monday, 17 of January
 

·Î±×ÀÎ
¸®´ª½º - DNS¼­¹ö ¼³Á¤ ÆÄÀÏ (/etc/named.conf, /etc/named.rfc1912.zones)
°ü¸®ÀÚ  2014-03-30 01:58:18 Hit:15901
¸µÅ© #1: http://babbo1836.blog.me/140205258755
÷ºÎÆÄÀÏ #1: named_conf.jpg (36.4 KB), ´Ù¿î·Îµå: 510
÷ºÎÆÄÀÏ #2: named_rfc1912_zones.jpg (44.6 KB), ´Ù¿î·Îµå: 17





¸®´ª½º - DNS¼­¹ö ¼³Á¤ ÆÄÀÏ (/etc/named.conf, /etc/named.rfc1912.zones)

Linux

2014/01/22 16:11

ÀÌ ÆÄÀÏÀº named µ¥¸óÀÇ ¼³Á¤ÆÄÀÏÀÌ´Ù. DNS ¼­¹ö¸¦ ±¸ÃàÇϰíÀÚ ÇÒ ¶§ °¡À帹ÀÌ Á¢±ÙÇØ¾ß ÇÏ´Â ÆÄÀÏÀ̸ç, °¡Àå Áß¿äÇÑ ÆÄÀÏÁßÀÇ ÇϳªÀÌ´Ù.

ÀÌ ÆÄÀÏ¿¡´Â °³º°µµ¸ÞÀÎ ¼³Á¤À» À§ÇÑ zoneÆÄÀÏÀÇ À§Ä¡, named.caÆÄÀÏ, named.localÆÄÀÏ µî¿¡ ´ëÇÑ Á¤º¸°¡ ÀÖ´Ù.

<±×¸²> named_conf.jpg

 

1. directory "/var/named"

ÀÌ ºÎºÐÀº DNS¼­¹ö¿¡ Àִ zoneÆÄÀϵéÀÇ À§Ä¡¸¦ ³ªÅ¸³½´Ù. Áï, ³×ÀÓ¼­¹ö DBÆÄÀϵéÀÌ Á¸ÀçÇÏ´Â À§Ä¡¸¦ ÁöÁ¤ÇØÁÖ´Â ºÎºÐÀÌ´Ù. /var/named µð·ºÅ丮¿¡ °¡º¸¸é zoneÆÄÀϵéÀÌ ÀÖÀ» °ÍÀÌ´Ù. zoneÆÄÀÏ¿¡ ´ëÇØ¼± ³ªÁß¿¡ ¼³¸íÇϰڴÙ.

 

 

2. allow-query {any;}

³×ÀÓ ¼­¹ö´Â ÇϳªÀÇ ³×ÀÓ¼­¹ö¸¸ ÀÖ´Â °ÍÀÌ ¾Æ´Ï°í ÇϳªÀÇ DNS ¼­¹ö¿¡´Â ¿©·¯°³ÀÇ ³×ÀÓ¼­¹ö¸¦ °¡Á®¿Ã¼ö ÀÖ´Ù. ÀÌ Ç׸ñÀ» Çã¿ëÇϰڳĴ °ÍÀÌ´Ù. Áï, Ãß°¡ µÇ´Â ³×ÀÓ¼­¹ö¸¦ Çã¿ëÇϰڴÀ³Ä ¶ó´Â °Í!

 

3. recursion no;

Àç½Ãµµ¸¦ ¸»ÇÑ´Ù. ¿¹¸¦ µé¾î 1Â÷ ³×ÀÓ¼­¹ö¿¡ ´ëÇØ ¿äûÀ» ÇßÀ»¶§ 2Â÷ ±×´ÙÀ½ 3Â÷·Î °è¼Ó °£ ÈÄ ¸¶Áö¸·À» 4Â÷·Î ÇÏÀÚ... ±×·¸°Ô µÇ¸é 4Â÷ ³×ÀÓ¼­¹ö ±îÁö ¿äûÀ» ÇßÀ» ¶§ ´Ù½Ã 1Â÷ ³×ÀÓ¼­¹ö·Î ÁúÀǸ¦ ÇÒ °ÍÀÎÁö¸¦ yes noÇÏ´Â Ç׸ñÀÌ´Ù.

 

 

4. zone "." IN {

   type hint;

   file "named.ca";

};

ÀÌ ºÎºÐÀº DNSÀÇ ·çÆ®µµ¸ÞÀο¡ ´ëÇÑ ¼³Á¤À» named.ca ÆÄÀÏ¿¡ Çϰí ÀÖ´Ù¶ó´Â ¼³Á¤ÀÌ´Ù.

hint´Â ·çÆ®µµ¸ÞÀÎ ÁöÁ¤, master´Â 1Â÷ ³×ÀÓ¼­¹ö, slave´Â 2Â÷ ³×ÀÓ¼­¹öÀÌ´Ù.

 

5. include "/etc/rndc.key";

ÀÌ ºÎºÐÀº named¿Í rndc°¡ »ç¿ëÇÒ ÀÎÁõ۰ªÀ» ÀúÀåÇϰí ÀÖ´Â ÆÄÀÏÀÇ À̸§À¸·Î /etc/rndc.keyÆÄÀÏÀ» ÁöÁ¤ÇÑ °ÍÀÌ´Ù. (¿ø°ÝÁ¢¼Ó)

 

6. zone "naver.com" IN {

   type master;

   file "naver.com.db";

};

ÀÌ ºÎºÐÀº °³º°µµ¸ÞÀο¡ ´ëÇÑ ¼³Á¤ÀÌ´Ù. naver.comÀ̶ó´Â µµ¸ÞÀο¡ ´ëÇØ¼­ ¼³Á¤ÇÑ´Ù ¶ó´Â ÀǹÌÀ̸ç naver.com.dbÆÄÀÏÀ» zoneÆÄÀÏ·Î ÇÏ¿© ³×ÀÓ ¼­ºñ½º¸¦ Çϰڴ٠¶ó´Â ¼³Á¤ÀÌ´Ù. file¿¡ ¸í½ÃµÇ¾î ÀÖ´Â ÆÄÀÏÀº /var/named/chroot/var/named/µð·ºÅ丮³»¿¡ Á¸ÀçÇÏ°Ô µÈ´Ù. typeÀº masterÀ̱⠶§¹®¿¡ Áö±Ý ¼³Á¤Çϰí ÀÖ´Â ¼­¹ö°¡ naver.comÀÇ µµ¸ÞÀο¡ ´ëÇÑ 1Â÷ ³×ÀÓ¼­¹ö¶ó´Â ÀǹÌÀÌ´Ù. (naver.comÀº »ç¼³³×Æ®¿öÅ©¿¡¼­ Á¶ÀÛÇϰí Àֱ⠶§¹®¿¡ ½ÇÁ¦ ¿ì¸®°¡ »ç¿ëÇÏ´Â naver.com°ú´Â ¿ÏÀü ´Ù¸£´Ù.)

 

ÀÌ ÆÄÀÏÀº Caching-nameserver packageÆÄÀÏÀÌ´Ù. DNS¼­¹ö¿¡ IP¿Í µµ¸ÞÀÎÀ» ºñ±³ÇØÁÖ´Â ÆÄÀÏÀÎ zoneÆÄÀϰú revÆÄÀÏÀÌ ÀÖ´Â °æ·Î¿Í Á¤º¸°¡ ÀÖ´Â ÆÄÀÏÀÌ´Ù.

 

<±×¸²> named-rfc1912-zones.jpg

 

ÀÚ ¸ÕÀú, °¡¿îµ¥¿¡ 0.0.0.0.0.0.0.0.0À¸·Î µÇ¾î ÀÖ´Â ºÎºÐÀº Á¤¹æÇâ°ú ¿ª¹æÇâ ¸ÅĪÀ» ±¸ºÐÇÏ´Â °ÍÀÌ´Ù.

À§°¡ Á¤¹æÇâ(zoneÆÄÀÏ), ¾Æ·¡°¡ ¿ª¹æÇâ(revÆÄÀÏ)À̶ó°í »ý°¢ÇÏ¸é µÈ´Ù.

zone "localhost" IN {
        type master;
        file "named.localhost";
        allow-update { none; };
};
ÀÌ ºÎºÐ°ú

zone "1.0.0.127.in-addr.arpa" IN {
        type master;
        file "named.loopback";
        allow-update { none; };
};

ÀÌ ºÎºÐÀ» ¸Ç ¹Ø¿¡ º¹»çÇÑ´Ù.

zone "abc.com" IN {
type master;
file "abc.zone";
allow-update { none; };
};

zone "1.168.192.in-addr.arpa" IN {
type master;
file "abc.rev";
allow-update { none; };
};

ÀÌ·¸°Ô ¼öÁ¤Çؼ­ ³Ö¾îÁØ´Ù. ±âÁ¸Àº Áö¿ìÁö ¸»°í ÀÌ·¸°Ô ½á³Ö¾îÁְųª º¹»çÇÏ¿© ¼öÁ¤ÇØÁÖ¸é µÈ´Ù.

±× ÈÄ¿¡... abc.zoneÆÄÀϰú abc.revÆÄÀÏÀ» ¼öÁ¤ÇØÁÖ¸é µÈ´Ù.

 


º»¹®Àμ⺻¹®¸ÞÀϹ߼Û
¡â ¸®´ª½º - DNS¼­¹ö ¼³Á¤ ÆÄÀÏ /var/named/zone, revÆÄÀÏ ¼³Á¤
¡ä ¸®´ª½º - DNS¼­¹ö ¼³Á¤ ÆÄÀÏ (/etc/host.conf, /etc/resolv.conf)
Copyright 1999-2025 Zeroboard / skin by ChanBi