- 論壇徽章:
- 0
|
我安裝的是企業(yè)版4的,想在上面安裝bind-9.5.1-P1,實(shí)驗(yàn)了好多次都不成功,人快要崩潰了,求各位高手幫忙
.我的安裝過程如下:
1.將源文件bind-9.5.1-P1.tar.gz置于/usr/local/目錄下。
2.解壓縮源文件bind-9.5.1-P1.tar.gz
# tar -xzvf bind-9.5.1-P1.tar.gz
3.進(jìn)入安裝目錄
# cd bind-9.5.1-P1
4.配置、編譯
# ../configure --disable-ipv6
可能會(huì)出現(xiàn)以下提示:
Your OpenSSL crypto library may be vulnerable to
one or more of the the following known security
It is recommended that you upgrade to OpenSSL
version 0.9.8d/0.9.7l (or greater).
You can disable this warning by specifying:
--disable-openssl-version-check
按照提示中說的,使用以下的命令就行了:
./configure –disable-openssl-version-check ----------------默認(rèn)的安裝是不是在/usr/local/sbin里??
然后運(yùn)行以下命令:
make
make install
# make
5.創(chuàng)建rndc.conf配置文件。
# /usr/local/sbin/rndc-confgen > /etc/rndc.conf
# cat /etc/rndc.conf
輸出為:
# Start of rndc.conf
key "rndc-key" {
algorithm hmac-md5;
secret "y9xvvfQjdWv9f/Fo7wquBg==";
};
options {
default-key "rndc-key";
default-server 127.0.0.1;
default-port 953;
};
# End of rndc.conf
# Use with the following in named.conf, adjusting the allow list as needed:
# key "rndc-key" {
# algorithm hmac-md5;
# secret "y9xvvfQjdWv9f/Fo7wquBg==";
# };
#
# controls {
# inet 127.0.0.1 port 953
# allow { 127.0.0.1; } keys { "rndc-key"; };
# };
# End of named.conf
6.創(chuàng)建rndc.key文件。將rndc.conf文件中注釋部分拷貝生成如下文件:
# vi /etc/rndc.key
key "rndc-key" {
algorithm hmac-md5;
secret "y9xvvfQjdWv9f/Fo7wquBg==";
};
controls {
inet 127.0.0.1 port 953
allow { 127.0.0.1; } keys { "rndc-key"; };
};
7.創(chuàng)建named.conf配置文件。
# vi /etc/named.conf
// generated by named-bootconf.pl
options {
directory "/var/named";
/*
* If there is a firewall between you and nameservers you want
* to talk to, you might need to uncomment the query-source
* directive below. Previous versions of BIND always asked
* questions using port 53, but BIND 8.1 uses an unprivileged
* port by default.
*/
// query-source address * port 53;
};
//
// a caching only nameserver config
//
zone "." IN {
type hint;
file "named.root";
};
zone "localhost" IN {
type master;
file "localhost.zone";
allow-update { none; };
};
zone "0.0.127.in-addr.arpa" IN {
type master;
file "named.local";
allow-update { none; };
};
zone "ycmail.net" IN {
type master;
file "ycmail.net.zone";
allow-update { none; };
};
zone "252.177.61.in-addr.arpa" IN {
type master;
file "named.61.177.252";
allow-update { none; };
};
include "/etc/rndc.key";
創(chuàng)建named.conf配置文件。
# vi /etc/named.conf
// generated by named-bootconf.pl
options {
directory "/var/named";
/*
* If there is a firewall between you and nameservers you want
* to talk to, you might need to uncomment the query-source
* directive below. Previous versions of BIND always asked
* questions using port 53, but BIND 8.1 uses an unprivileged
* port by default.
*/
// query-source address * port 53;
};
//
// a caching only nameserver config
//
zone "." IN {
type hint;
file "named.root";
};
zone "localhost" IN {
type master;
file "localhost.zone";
allow-update { none; };
};
zone "0.0.127.in-addr.arpa" IN {
type master;
file "named.local";
allow-update { none; };
};
zone "ycmail.net" IN {
type master;
file "ycmail.net.zone";
allow-update { none; };
};
zone "252.177.61.in-addr.arpa" IN {
type master;
file "named.61.177.252";
allow-update { none; };
};
include "/etc/rndc.key";
創(chuàng)建/var/named目錄
# mkdir /var/named
# cd /var/named
匿名登錄到ftp站點(diǎn)FTP.RS.INTERNIC.NET,獲取/domain目錄下的named.root文件,將該文件置于/var/named目錄下。
14.創(chuàng)建localhost文件
# vi localhost
$TTL86400
$ORIGIN localhost.
@1D IN SOA@ root (
42; serial (d. adams)
3H; refresh
15M; retry
1W; expiry
1D ); minimum
1D IN NS@
1D IN A127.0.0.1
創(chuàng)建named.local文件
# vi named.local
$TTL86400
@ IN SOA localhost. root.localhost. (
1997022700 ; Serial
28800 ; Refresh
14400 ; Retry
3600000 ; Expire
86400 ) ; Minimum
IN NS localhost.
1 IN PTR localhost.
創(chuàng)建ycmail.net.zone文件
# vi ycmail.net.zone
$TTL 86400
@ IN SOA mail.ycmail.net. postmaster.ycmail.net. (
2003061800 ; Serial
28800 ; Refresh
14400 ; Retry
3600000 ; Expire
86400 ) ; Minimum
IN NS mail.ycmail.net.
mail IN A 61.177.252.34
www IN CNAME mail
創(chuàng)建named.61.177.252文件
# vi named.61.177.252
$TTL 86400
@ IN SOA mail.ycmail.net. postmaster.ycmail.net. (
2003061800 ; Serial
28800 ; Refresh
14400 ; Retry
3600000 ; Expire
86400 ) ; Minimum
IN NS mail.ycmail.net.
34 IN PTR mail.ycmail.net.
最后:啟動(dòng)bind9
啟動(dòng)BIND了
/usr/local/sbin/named -c /etc/named.conf
出現(xiàn)如下錯(cuò)誤: /usr/local/sbin/named -c /etc/named.conf &
[1] 17906--------根本不知道為什么
服務(wù)都沒有起動(dòng)
請(qǐng)問各位專家我是漏了那個(gè)環(huán)節(jié)?幫幫我
謝謝 |
|