☰

Scientific Linux 7 BIND不轉送

tag-icon • tag-icon domain-name-system centos bind forwarding
Scientific Linux 7 BIND不轉送

我安裝了named-chroot 並將其配置為內部網路。一切都很好，但沒有任何轉發。

這是我的配置：

options {
    listen-on port 53 { 127.0.0.1; 192.168.0.15; };
    #listen-on-v6 port 53 { ::1; };
    directory       "/var/named";
    dump-file       "/var/named/data/cache_dump.db";
    statistics-file "/var/named/data/named_stats.txt";
    memstatistics-file "/var/named/data/named_mem_stats.txt";
    allow-query     { clients; };
    notify master-only;
    transfers-in 30;
    auth-nxdomain no;
    empty-zones-enable yes;
    allow-recursion { clients; };
    allow-transfer { localhost; };
    forwarders { 194.15.215.236; 194.15.215.237; 194.15.215.2; };
    recursion yes;

    dnssec-enable yes;
    dnssec-validation yes;
    dnssec-lookaside auto;
    /* Path to ISC DLV key */
    bindkeys-file "/etc/named.iscdlv.key";
    managed-keys-directory "/var/named/dynamic";
    pid-file "/run/named/named.pid";
    session-keyfile "/run/named/session.key";
};

zone "." IN {
        type hint;
        file "named.ca";
};

#zone "localhost" {
#        type master;
#        file "standard/localhost";
#        allow-transfer { localhost; };
#};

zone "127.in-addr.arpa" {
        type master;
        file "standard/loopback";
        allow-transfer { localhost; };
};

#zone "1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ip6.arpa" {
#        type master;
#        file "standard/loopback6.arpa";
#        allow-transfer { localhost; };
#};

include "/etc/named.rfc1912.zones";
include "/etc/named.root.key";

我也在Google上搜尋了很多，停用DNSSEC等，找不到解決方案。

答案1

我稍微縮短了配置。

問題是，停用 DNS Sec 在代理上持續存在。 keppen DNS Sec 關閉幾分鐘後，代理識別了它。

謝謝！

相關內容