DNS配置（三）

1436阅读　0评论2011-08-21　hanlenry
分类：LINUX

（三） view（视图），实现访问控制
    当来自不同ip的主机访问时，我将其解析到不同的地方。比如，来自192.168.0.0/24网段的主机访问，我将其解析到192.168.0.15。来自172.16.0.0/16网段的主机访问，我将其解析到172.16.100.1。

  1. #vim /etc/named.conf
  2. ---------------------
  3. acl internal {
  4. 192.168.0.0/24;
  5. 127.0.0.0/8;
  6. };
  7. acl external {
  8. 172.16.0.0/16;
  9. };
  10. options {
  11. directory "/var/named";
  12. }
  13. view "INNET" {
  14.  match-clients { internal; };
  15.  recursion yes;

  17.  zone "." IN {
  18.   type hint;
  19.   file "named.ca";
  20.  };

  22.  zone "a.org" IN {
  23.   type master;
  24.   file "a.org.internal";
  25.   };

  27. };
  28. view "EXNET" {
  29.  match-clients { external; };
  30.  recursion no;

  32.  zone "." IN {
  33.   type hint;
  34.   file "named.ca";
  35.  };

  37.  zone "a.org" IN {
  38.   type master;
  39.   file "a.org.external";
  40.   };
  41. };
  42. ---------------------------
  43. #vim a.org.internal
  44. ---------------
  45. $TTL 86400
  46. @ IN SOA ns1.a.org. admin.a.org. (
  47.                                                 2011081701
  48.                                                 1H
  49.                                                 10M
  50.                                                 7D
  51.                                                 1D )
  52. @ IN NS ns1.a.org.
  53. @ IN MX 10 mail.a.org.
  54. ns1.a.org. IN A 192.168.0.15
  55. www.a.org. IN A 192.168.0.15
  56. ftp.a.org. IN A 192.168.0.12
  57. --------
  58. #vim a.org.external
  59. --------
  60. $TTL 86400
  61. @ IN SOA ns1.a.org. admin.a.org. (
  62.                                                 2011081701
  63.                                                 1H
  64.                                                 10M
  65.                                                 7D
  66.                                                 1D )
  67. @ IN NS ns1.a.org.
  68. @ IN MX 10 mail.a.org.
  69. ns1.a.org. IN A 172.16.100.1
  70. www.a.org. IN A 172.16.100.1
  71. ftp.a.org. IN A 172.16.100.2
上一篇：DNS配置（二）
下一篇：iptables的使用