options {
/*
* If there is a firewall between you and nameservers you want
* to talk to, you might need to uncomment the query-source
* directive below. Previous versions of BIND always asked
* questions using port 53, but BIND 8.1 uses an unprivileged
* port by default.
*/
// query-source address * port 53;
directory "/var/named";
};
controls {
inet 127.0.0.1 allow { localhost; } keys { rndckey; };
};
acl "exter" {
{192.168.8.0/24;};
};
view "iQ"{
match-clients {192.168.8.0/24;};
zone "." {
type hint;
file "named.ca";
};
zone "localhost" {
allow-update { none; };
type master;
file "localhost.zone";
};
zone "0.0.127.in-addr.arpa" {
allow-update { none; };
type master;
file "named.local";
};
zone "iQ.com" {
type master;
file "iQ.com.zone";
allow-update {exter;};
};
zone "8.168.192.in-addr.arpa"{
type master;
file "192.168.8.rev";
allow-update { exter;};
};
zone "iQue.net" {
type forward;
forwarders {127.0.0.1;};
};
};
view "world" {
match-clients {any;};
recursion no;
zone "iQ.com" {
type master;
file "iQ.com-internel";
};
zone "iQue.net"{
type slave;
file "iQue.net";
masters {192.168.200.13;};
};
};
include "/etc/rndc.key"
我的iQ.com.zone
$TTL 86400
@ IN SOA rh3.iq.com.root.iq.com (
2004113001 ; serial
28800 ; refresh
14400 ; retry
3600000 ; expire
86400 ; ttl
)
IN NS rh3.iq.com.
IN MX 10 mail.iq.com.
rh3 IN A 192.168.8.1
rh3 IN TXT "test DNS"
ftp IN A 192.168.8.1
我的192.168.8.rev
$TTL 86400
@ IN SOA rh3.iq.com.root.iq.com. (
2004112908 ; serial
28800 ; refresh
14400 ; retry
3600000 ; expire
86400 ; ttl
)
IN NS rh3.iq.com.
1 IN PTR rh3.iq.com
1 IN PTR ftp.iq.com
1 IN PTR ns1.iq.com
21 IN PTR network.iq.com
100 IN PTR zh.iq.com
iQ.com-internal
$TTL 86400
@ IN SOA rh3.iq.com. root.iq.com. (
2004113009 ; serial
28800 ; refresh
14400 ; retry
3600000 ; expire
86400 ; ttl
)
IN NS rh3.iq.com.