Operating System/Solaris2007/07/28 22:12

11장. DNS (Domain name Service)

1) Domain Server 의 구성절차

1. /etc/named.boot 생성
2. /var/named Directory 생성
3. /var/named/???.cache
4. /var/named/???.zone: host DB file 이며, 이 파일에 추가되는 host를 update 시켜야 한다.
5. /var/named/???.rzon: reverse 된 host DB file 이며, 이 파일에 추가되는 host를 update 시켜야 한다.
6. /var/named/???.loop: Loop Back file
7. /etc/resolv.conf: Domain과 name_server_IP address를 기술하는 File
8. /etc/defaultrouter: System의 G/W
9. /etc/defaultdomain
10. /etc/nsswitch.conf File Modified; hosts: files dns <--- 추가
11. Daemon 실행 : #in.named -b /etc/named.boot
12. Server 확인 : #nslookup <Server IP Address>
13. 아래 예시는 각 설정 file 내용이며, 부분별로 설명을 넣었다.

*정보통신교육원(AIIT)에 적용된 실제 예이다.

2) PRIMARY SERVER 의 구성 예

; /etc/named.boot
;

directory /var/named
cache . aiit.cache
primary aiit.or.kr. aiit.zone
primary in-addr.arpa aiit.rev
primary 0.0.127.in-addr.arpa aiit.loop

; /var/named/aiit.loop
;

@ IN SOA www.aiit.or.kr. root.www.aiit.or.kr. (

19980521 ; Serial
3600 ; Refresh
300 ; Retry
3600000 ; Expire
14400 ) ; Minimum

IN NS www.aiit.or.kr.
1 IN PTR localhost.

; /var/named/aiit.zone
;

$ORIGIN aiit.or.kr.
aiit.or.kr. IN SOA www.aiit.or.kr. root.www.aiit.or.kr. (

19990930
7200
3600
432000
86400

)

aiit.or.kr. IN NS www
localhost IN A 127.0.0.1

;
; SEOUL
;

$ORIGIN or.kr.
aiit IN A 134.75.107.202

$ORIGIN aiit.or.kr.
www IN A 134.75.107.202

........... 중략 ............................................

infor07 IN A 134.75.107.13

;
; PUSAN
;

pusan IN A 134.75.156.201

........... 중략 ............................................

kbe11 IN A 134.75.156.211

;
; TAEGU
;

jboh IN A 134.75.142.111

........... 중략 ............................................

tk240 IN A 134.75.142.240

;
;
;
; TAEJEON
;

cts IN A 210.119.58.6

tschang IN A 210.119.58.5
taejeon IN A 210.119.58.2

$ORIGIN taejeon.aiit.or.kr.

tjaiit IN A 210.119.58.2
www IN A 210.119.58.2

;
;
;

$ORIGIN aiit.or.kr.

kj IN A 210.119.59.3

........... 중략 ............................................

ts IN A 210.107.252.5

$ORIGIN ts.aiit.or.kr.

aiitfire IN A 210.107.253.20
aiitmain IN A 210.107.252.5

$ORIGIN gis.aiit.or.kr.

gis141 IN A 150.183.46.141

$ORIGIN mm.aiit.or.kr.

sun IN A 210.114.126.150

$ORIGIN aiit.or.kr.

multi IN A 210.114.126.150

;
; EOF
;
; /var/named/aiit.rev
;

$ORIGIN in-addr.arpa.

in-addr.arpa. IN SOA www.aiit.or.kr. root.www.aiit.or.kr.

(

19991026
7200
3600
432000
86400

)

in-addr.arpa. IN NS www.aiit.or.kr.
1.0.0.127 IN PTR localhost.

;
; SEOUL
;

$ORIGIN 107.75.134.in-addr.arpa.

202 IN PTR aiit.or.kr.

........... 중략 ............................................

13 IN PTR infor07.aiit.or.kr.

;
; PUSAN
;

$ORIGIN 156.75.134.in-addr.arpa.

210 IN PTR kbe10.aiit.or.kr.

........... 중략 ............................................

211 IN PTR kbe11.aiit.or.kr.

;
; TAEGU
;

$ORIGIN 142.75.134.in-addr.arpa.

111 IN PTR jboh.aiit.or.kr.

........... 중략 ............................................

240 IN PTR tk240.aiit.or.kr.

;
;TAEJEON
;

$ORIGIN 58.119.210.in-addr.arpa.

6 IN PTR cts.aiit.or.kr.

........... 중략 ............................................

2 IN PTR www.taejeon.aiit.or.kr.

;
;
;

$ORIGIN 155.233.203.in-addr.arpa.

233.155.233.203 IN PTR handy.aiit.or.kr.
232.155.233.203 IN PTR cybus.aiit.or.kr.
214.155.233.203 IN PTR choi.aiit.or.kr.

$ORIGIN 59.119.210.in-addr.arpa.

3 IN PTR kj.aiit.or.kr.

;ts

$ORIGIN 253.107.210.in-addr.arpa.

22 IN PTR w3.aiit.or.kr.
20 IN PTR aiitfire.ts.aiit.or.kr.

$ORIGIN 252.107.210.in-addr.arpa.

5 IN PTR ts.aiit.or.kr.
5 IN PTR aiitmain.ts.aiit.or.kr.

$ORIGIN 46.183.150.in-addr.arpa.

141 IN PTR gis141.gis.aiit.or.kr.

$ORIGIN 126.114.210.in-addr.arpa.

150 IN PTR sun.mm.aiit.or.kr.

$ORIGIN 126.114.210.in-addr.arpa.

150 IN PTR multi.aiit.or.kr.

;
; EOF
;
; /var/named/aiit.cache
;

. 3600000 IN NS A.ROOT-SERVERS.NET.
A.ROOT-SERVERS.NET. 3600000 A 198.41.0.4

;
; formerly NS1.ISI.EDU
;

. 3600000 NS B.ROOT-SERVERS.NET.
B.ROOT-SERVERS.NET. 3600000 A 128.9.0.107

;
; formerly C.PSI.NET
;

. 3600000 NS C.ROOT-SERVERS.NET.
C.ROOT-SERVERS.NET. 3600000 A 192.33.4.12

;

................................ 중략 ..............................................

; temporarily housed at NSI (InterNIC)
;

. 3600000 NS K.ROOT-SERVERS.NET.
K.ROOT-SERVERS.NET. 3600000 A 198.41.0.11

. 3600000 NS www.
www. 3600000 A 134.75.107.202

; End of File

3) SECONDARY SERVER

SECONDARY 에서는 /etc/named.boot, /var/named/loop.back , /var/named/cache 만 만들어 주고 /usr/sbin/in.named를 구동하면 PRIMARY Server에서 필요한 ???.zone ???.rev File을 가져온 후, Server가 준비 상태에 놓인다.

# tail -5 /var/adm/messages

.............

Oct 27 11:56:19 tjaiit named[6427]: starting. named 4.9.3-P1
Oct 27 11:56:19 tjaiit named[6428]: Ready to answer queries.

; /etc/named.boot
;
; type domain source file
;

directory /var/named ; running directory for named
cache . tj.cache
primary 0.0.127.IN-ADDR.ARPA tj.loop
secondary aiit.or.kr 134.75.107.202 tj.zone
secondary in-addr.arpa 134.75.107.202 tj.rev

;

forwarders 134.75.107.202
slave

; /var/named/tj.loop
;
;

@ IN SOA taejeon.aiit.or.kr. root.taejeon.aiit.or.kr. (

980116 ; Serial
7200 ; Refresh every 2 hours
7200 ; Retry every 2 hour
604800 ; Expire after a week
86400 ) ; Minimum ttl of 1 day

IN NS tjaiit.taejeon.aiit.or.kr.
1 IN PTR localhost.

; /var/named.tj.cache
;

. 3600000 IN NS A.ROOT-SERVERS.NET.
A.ROOT-SERVERS.NET. 3600000 A 198.41.0.4

;
; formerly NS1.ISI.EDU
;

. 3600000 NS B.ROOT-SERVERS.NET.
B.ROOT-SERVERS.NET. 3600000 A 128.9.0.107

;

............. 중략 ............................................

;

. 3600000 NS I.ROOT-SERVERS.NET.
I.ROOT-SERVERS.NET. 3600000 A 192.36.148.17

; End of File

; /var/named/tj.zone - /usr/sbin/in.named를 가동시키면 Server가 자동으로
; PRIMARY SERVER에서 Download하며, 바뀐 내용을 계속
; Update 하게 된다.
;
; BIND version named 4.9.3-P1
; zone 'aiit.or.kr' last serial 0
; from 134.75.107.202 at Wed Oct 27 11:52:03 1999

$ORIGIN or.kr.

aiit IN SOA www.aiit.or.kr. root.www.aiit.or.kr. (

19990930 7200 3600 432000 86400 )

IN NS www.aiit.or.kr.

$ORIGIN aiit.or.kr.

www IN A 134.75.107.202

$ORIGIN or.kr.

aiit IN A 134.75.107.202

$ORIGIN mm.aiit.or.kr.

sun IN A 210.114.126.150

$ORIGIN aiit.or.kr.

pusan IN A 134.75.156.201
tksun IN A 134.75.142.105
potato IN A 134.75.107.13
eagle5 IN A 134.75.107.39

................ 이하생략 ..............................................

; /var/named/tj.rev - /usr/sbin/in.named를 가동시키면 Server가 자동으로
; PRIMARY SERVER에서 Download하며, 바뀐 내용을 계속
; Update 하게 된다.
;
; BIND version named 4.9.3-P1
; zone 'in-addr.arpa' last serial 0
; from 134.75.107.202 at Wed Oct 27 11:52:03 1999

$ORIGIN arpa.

in-addr IN SOA www.aiit.or.kr. root.www.aiit.or.kr. (

19991026 7200 3600 432000 86400 )

IN NS www.aiit.or.kr.

; Ignoring info about www.aiit.or.kr, not in zone in-addr.arpa.
; $ORIGIN aiit.or.kr.
; www IN A 134.75.107.202

$ORIGIN 0.127.in-addr.arpa.

0 14400 IN NS www.aiit.or.kr.

; Ignoring info about www.aiit.or.kr, not in zone in-addr.arpa.
; $ORIGIN aiit.or.kr.
; www IN A 134.75.107.202

$ORIGIN 155.233.203.155.233.203.in-addr.arpa.

214 IN PTR choi.aiit.or.kr.
232 IN PTR cybus.aiit.or.kr.
233 IN PTR handy.aiit.or.kr.

$ORIGIN 142.75.134.in-addr.arpa.

115 IN PTR shan.aiit.or.kr.
117 IN PTR wspark.aiit.or.kr.
118 IN PTR sbhong.aiit.or.kr.
119 IN PTR jtsung.aiit.or.kr.
201 IN PTR tk201.aiit.or.kr.

................ 이하생략 ..............................................

;
; /var/named/tj.cache - PRIMARY 서버의 것과 같다.
;

. 3600000 IN NS A.ROOT-SERVERS.NET.
A.ROOT-SERVERS.NET. 3600000 A 198.41.0.4

;
; formerly NS1.ISI.EDU
;

. 3600000 NS B.ROOT-SERVERS.NET.
B.ROOT-SERVERS.NET. 3600000 A 128.9.0.107

;
; formerly C.PSI.NET
;

. 3600000 NS C.ROOT-SERVERS.NET.
C.ROOT-SERVERS.NET. 3600000 A 192.33.4.12

;

................ 중략 ..................................................

;

. 3600000 NS I.ROOT-SERVERS.NET.
I.ROOT-SERVERS.NET. 3600000 A 192.36.148.17

; End of File

Creative Commons License

'Operating System > Solaris' 카테고리의 다른 글

POWER ADMIN for SUN (AWK)  (0) 2007/08/02
POWER ADMIN for SUN (System Tuning)  (0) 2007/08/01
POWER ADMIN for SUN (PPP)  (0) 2007/07/31
POWER ADMIN for SUN (FTP)  (0) 2007/07/30
POWER ADMIN for SUN (NFS)  (0) 2007/07/29
POWER ADMIN for SUN (DNS)  (0) 2007/07/28
POWER ADMIN for SUN (POP Server)  (0) 2007/07/27
POWER ADMIN for SUN (Mail)  (0) 2007/07/26
POWER ADMIN for SUN (Swap)  (0) 2007/07/25
POWER ADMIN for SUN (NVRAM; OK_mod Command)  (0) 2007/07/24
POWER ADMIN for SUN (CRON)  (0) 2007/07/23
Posted by BLUEDAY™