下載軟件包
wget https://ftp.isc.org/isc/bind9/cur/9.10/bind-9.10.5.tar.gz -P /usr/local
軟件安裝
tar xvf /usr/local/bind-9.10.5.tar.gz
cd /usr/local/bind-9.10.5
./configure --enable-largefile --enable-threads --prefix=/usr/local/named
make && make install
配置
- 設置rndc密鑰配置文件
/usr/local/named/sbin/rndc-confgen > /usr/local/named/etc/rndc.conf
- 將rndc密鑰文件配置在named.conf文件中
vi /usr/local/named/named.conf
腳本如下：
options{
directory"/var/named";
};
zone"."IN{
typehint;
file"named.ca";
};
zone"localhost"IN{
typemaster;
file"named.localhost";
allow-update{none;};
};
zone"0.0.127.in-addr.arpa"IN{
typemaster;
file"named.loopback";
allow-update{none;};
};
Usewiththefollowinginnamed.conf,adjustingtheallowlistasneeded:
key"rndc-key"{
algorithmhmac-md5;
secret"4a8/AsRRQ5OH5a0oRaBeAg==";
};
controls{
inet127.0.0.1port953
allow{127.0.0.1;}keys{"rndc-key";};
};
至此，已經完成bind基礎配置，但仍不能使用。下篇文章將繼續介紹BIND配置
