树莓派安装dns服务器

➜  sudo apt-get  install -y bind9
➜  cd bind
➜  sudo vi named.conf.default-zones
// prime the server with knowledge of the root servers
zone "." {
    type hint;
    file "/etc/bind/db.root";
};

// be authoritative for the localhost forward and reverse zones, and for
// broadcast zones as per RFC 1912

zone "kevinharbor.com" {
    type master;
    file "/etc/bind/db.local";
};

zone "150.31.168.192.in-addr.arpa" {
    type master;
    file "/etc/bind/db.127";
};

zone "0.in-addr.arpa" {
    type master;
    file "/etc/bind/db.0";
};

zone "255.in-addr.arpa" {
    type master;
    file "/etc/bind/db.255";
};

➜  sudo vi /etc/bind/db.local
;
; BIND data file for local loopback interface
;
$TTL    604800
@    IN    SOA    kevinharbor.com. root.localhost. (
                  2        ; Serial
             604800        ; Refresh
              86400        ; Retry
            2419200        ; Expire
             604800 )    ; Negative Cache TTL
;
@    IN    NS    kevinharbor.com.
@    IN    A    192.168.31.150
www     A       192.168.31.150

➜  named-checkzone kevinharbor.com /etc/bind/db.local 
zone kevinharbor.com/IN: loaded serial 2
OK

➜  sudo vi /etc/bind/db.127
;
; BIND reverse data file for local loopback interface
;
$TTL    604800
@    IN    SOA    kevinharbor.com. root.localhost. (
              1        ; Serial
         604800        ; Refresh
          86400        ; Retry
        2419200        ; Expire
         604800 )    ; Negative Cache TTL
;
@    IN    NS    kevinharbor.com.
@    A        192.168.31.150
150    IN    PTR    www.kevinharbor.com

➜  named-checkzone kevinharbor.com /etc/bind/db.127

    // If there is a firewall between you and nameservers you want
    // to talk to, you may need to fix the firewall to allow multiple
    // ports to talk.  See http://www.kb.cert.org/vuls/id/800113

    // If your ISP provided one or more IP addresses for stable 
    // nameservers, you probably want to use them as forwarders.  
    // Uncomment the following block, and insert the addresses replacing 
    // the all-0's placeholder.

    forwarders {
        180.153.225.136;  //上游dns地址
    };

    //========================================================================
    // If BIND logs error messages about the root key being expired,
    // you will need to update your keys.  See https://www.isc.org/bind-keys
    //========================================================================
        dnssec-enable no;  //添加这一句
    dnssec-validation no;　//修改auto为no

    auth-nxdomain no;    # conform to RFC1035
    listen-on-v6 { any; };
};

➜  service bind9 restart