いつものごとく、以下のサイトを参照

★DNSサーバー構築(BIND) – CentOSで自宅サーバー構築

先ずはBINDをインストール

yum -y install bind bind-chroot caching-nam

実行結果はこんな感じ。

Loaded plugins: fastestmirror, priorities
Loading mirror speeds from cached hostfile
* rpmforge: fr2.rpmfind.net
* base: www.ftp.ne.jp
* updates: www.ftp.ne.jp
* addons: www.ftp.ne.jp
* extras: www.ftp.ne.jp
rpmforge                                                                                                                              | 1.1 kB     00:00
base                                                                                                                                  | 1.1 kB     00:00
updates                                                                                                                               |  951 B     00:00
addons                                                                                                                                |  951 B     00:00
extras                                                                                                                                | 1.1 kB     00:00
401 packages excluded due to repository priority protections
Setting up Install Process
Parsing package install arguments
Package 30:bind-9.3.4-10.P1.el5_3.3.i386 already installed and latest version
Package 30:bind-chroot-9.3.4-10.P1.el5_3.3.i386 already installed and latest version
Resolving Dependencies
–> Running transaction check
—> Package caching-nameserver.i386 30:9.3.4-10.P1.el5_3.3 set to be updated
–> Finished Dependency Resolution

Dependencies Resolved

=============================================================================================================================================================
Package                                   Arch                        Version                                          Repository                      Size
=============================================================================================================================================================
Installing:
caching-nameserver                        i386                        30:9.3.4-10.P1.el5_3.3                           updates                         59 k

Transaction Summary
=============================================================================================================================================================
Install      1 Package(s)
Update       0 Package(s)
Remove       0 Package(s)

Total download size: 59 k
Downloading Packages:
caching-nameserver-9.3.4-10.P1.el5_3.3.i386.rpm                                                                                       |  59 kB     00:00
Running rpm_check_debug
Running Transaction Test
Finished Transaction Test
Transaction Test Succeeded
Running Transaction
Installing     : caching-nameserver                                [1/1]

Installed: caching-nameserver.i386 30:9.3.4-10.P1.el5_3.3
Complete!

設定ファイルコピー

cp /var/named/chroot/etc/named.caching-nameserver.conf /var/named/chroot/etc/named.conf

設定ファイル編集

vi /var/named/chroot/etc/named.conf

こんな感じになったっす。

//
// named.caching-nameserver.conf
//
// Provided by Red Hat caching-nameserver package to configure the
// ISC BIND named(8) DNS server as a caching only nameserver
// (as a localhost DNS resolver only).
//
// See /usr/share/doc/bind*/sample/ for example named configuration files.
//
// DO NOT EDIT THIS FILE – use system-config-bind or an editor
// to create named.conf – edits to this file will be lost on
// caching-nameserver package upgrade.
//

options {
#listen-on port 53 { 127.0.0.1; };
#listen-on-v6 port 53 { ::1; };
version “unknown”;
directory       “/var/named”;
dump-file       “/var/named/data/cache_dump.db”;
statistics-file “/var/named/data/named_stats.txt”;
memstatistics-file “/var/named/data/named_mem_stats.txt”;

// Those options should be used carefully because they disable port
// randomization
query-source    port 53;
query-source-v6 port 53;
allow-query     { localhost; localnets; };
//allow-recursion{ localnets; };
//allow-transfer{ localnets; };
forwarders{
192.168.1.1;
};
};
logging {
channel default_debug {
file “data/named.run”;
severity dynamic;
};
};
view localhost_resolver {
match-clients      { localhost; };
match-destinations { localhost; };
recursion yes;
include “/etc/named.rfc1912.zones”;
include “/etc/named.good-life-space.com.zone”;
};
view “internal” {
match-clients { localnets; };
match-destinations { localnets; };
recursion yes;
include “/etc/named.rfc1912.zones”;
include “/etc/named.good-life-space.com.zone”;
};

次にゾーンファイル作成

vi /var/named/chroot/etc/named.good-life-space.com.zone

これまたこんな感じになってます。

zone “good-life-space.com” {
type master;
file “good-life-space.com.db”;
};
zone “1.168.192.in-addr.arpa” {
type master;
file “1.168.192.in-addr.arpa.db”;
};

ルートゾーン最新化とルートゾーン自動更新スクリプトの作成もページを参考に実施。

で、内部向け正引きゾーンデータベース作成

vi /var/named/chroot/var/named/good-life-space.com.db

大体こんな感じ

$TTL    86400
@       IN      SOA     good-life-space.com.  root.good-life-space.com.(
2009081601 ; Serial
28800      ; Refresh
14400      ; Retry
3600000    ; Expire
86400 )    ; Minimum
IN NS    good-life-space.com.
IN MX 10 good-life-space.com.
@       IN A     192.168.1.XX
*       IN A     192.168.1.XX

で、内部向け逆引きゾーンデータベース作成

vi /var/named/chroot/var/named/12.168.192.in-addr.arpa.db

こんな感じ

$TTL    86400
@       IN      SOA     good-life-space.com.  root.good-life-space.com.(
2009081601 ; Serial
28800      ; Refresh
14400      ; Retry
3600000    ; Expire
86400 )    ; Minimum
IN      NS    good-life-space.com.
XX             IN      PTR   good-life-space.com.

でBIND起動！

/etc/rc.d/init.d/named start
named を起動中:                                            [失敗]

ありゃ？失敗。。。

none:0: open: /etc/named.conf: permission denied

権限かな。

-rw-r—– 1 root root  1562  8月 16 02:50 named.conf

権限変更。

chown root:named /var/named/chroot/etc/named.conf

で再度実行

/etc/rc.d/init.d/named start
named を起動中:                                            [  OK  ]

おっ、起動した。

自動起動の設定も実施。

chkconfig named on

chkconfig –list named
named           0:off   1:off   2:on    3:on    4:on    5:on    6:

YahooでDNSテストして見た。

dig www.yahoo.co.jp

; <<>> DiG 9.3.4-P1 <<>> www.yahoo.co.jp
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 11560
;; flags: qr rd ra; QUERY: 1, ANSWER: 13, AUTHORITY: 2, ADDITIONAL: 2

;; QUESTION SECTION:
;www.yahoo.co.jp.               IN      A

;; ANSWER SECTION:
www.yahoo.co.jp.        107     IN      A       124.83.139.191
www.yahoo.co.jp.        107     IN      A       124.83.139.192
www.yahoo.co.jp.        107     IN      A       124.83.147.202
www.yahoo.co.jp.        107     IN      A       124.83.147.203
www.yahoo.co.jp.        107     IN      A       124.83.147.204
www.yahoo.co.jp.        107     IN      A       124.83.147.205
www.yahoo.co.jp.        107     IN      A       124.83.167.212
www.yahoo.co.jp.        107     IN      A       203.216.227.176
www.yahoo.co.jp.        107     IN      A       203.216.235.154
www.yahoo.co.jp.        107     IN      A       203.216.235.201
www.yahoo.co.jp.        107     IN      A       203.216.243.218
www.yahoo.co.jp.        107     IN      A       203.216.247.225
www.yahoo.co.jp.        107     IN      A       203.216.247.249

;; AUTHORITY SECTION:
yahoo.co.jp.            407     IN      NS      ns04.ops.ogk.yahoo.co.jp.
yahoo.co.jp.            407     IN      NS      dnsg01.yahoo.co.jp.

;; ADDITIONAL SECTION:
ns04.ops.ogk.yahoo.co.jp. 21995 IN      A       124.83.218.185
dnsg01.yahoo.co.jp.     48646   IN      A       211.14.12.10

;; Query time: 20 msec
;; SERVER: 127.0.0.1#53(127.0.0.1)
;; WHEN: Sun Aug 16 03:05:14 2009
;; MSG SIZE  rcvd: 321

完了です。