forum.lissyara.su

Код: Выделить всё

options {
	directory "/var/named";
	/*
	 * If there is a firewall between you and nameservers you want
	 * to talk to, you might need to uncomment the query-source
	 * directive below.  Previous versions of BIND always asked
	 * questions using port 53, but BIND 8.1 uses an unprivileged
	 * port by default.
	 */
	// query-source address * port 53;
	
	allow-transfer { 192.168/16; 171.10.10.0/24; ***.***.167.1; 10.7.1.2;};
	allow-query { 192.168.1.0/0; 192.168.90.0/24; 192.168.95.0/27; 192.168.20.0/27; 171.10.10.0/24; };
//	allow-recursion { 192.168/16; 171.10.10.0/24; 127.0.0.1; };
	version "Made in MN";
	listen-on-v6 { none; };
	
};

// 
// a caching only nameserver config
// 
// controls {
//	inet 127.0.0.1 allow { localhost; } keys { rndckey; };
//};



view "emer-int" {
	match-clients { 192.168.90.0/24; 192.168.1.0/24; 192.168.95.0/27; 192.168.20.0/27; 171.10.10.0/24;};
	recursion yes;
	notify yes;
	allow-transfer {none;};
	
	zone "otzer-d.com" IN {
		type slave;
		file "otzer-d.com.int";
		masters { 192.168.90.2; };
	};
	
	zone "domain.com" {
		type slave;
		file "domain.com.int";
		masters { 192.168.1.113; };
	};

	zone "1.168.192.in-addr.arpa" {
		type slave;
		file "1.168.192.rev";
		masters { 192.168.1.113; };
	};

	zone "33.16.172.in-addr.arpa" {
		type slave;
		file "33.16.172.rev";
		masters { 192.168.90.2; };
	};

	zone "90.168.192.in-addr.arpa" {
		type master;
		file "90.168.192.rev";
		allow-update { none; };
	};

	zone "0.0.127.in-addr.arpa" {
		type master;
		file "named.local";
		allow-update { none; };
	};

	zone "localhost" {
		type master;
		file "localhost.zone";
		allow-update { none; };
	};

	zone "." {
		type hint;
		file "named.ca";
	};

};

view "emer-ext" {
	match-clients { any; };
	recursion no;
	allow-transfer {***.***.167.1;};
	notify yes;
	
	zone "domain.com" IN {
		type master;
		file "domain.com.ext";
		notify yes;
	};

	zone "177.***.***.in-addr.arpa" {
		type master;
		file "177.***.***.rev";
	};
};

view "emer-vpn" {
	match-clients { any;};
	recursion yes;
	notify yes;
	allow-transfer { 10.7.1.2; };
		
	zone "domain.com" {
		type master;
		file "domain.com.vpn";
		notify yes;
	};

	zone "90.168.192.in-addr.arpa" {
		type master;
		file "90.168.192.vpn";
		allow-update { none; };
	};
};

Код: Выделить всё

view "emer-vpn" {
   match-clients { any;};
   recursion yes;
   notify yes;
   allow-transfer { 10.7.1.2; };
      
   zone "domain.com" {

Код: Выделить всё

named-checkzone
named-checkconf

Код: Выделить всё

root@ns:/var/named# named-checkzone domain.com /var/named/90.168.192.rev
/var/named/90.168.192.rev:3: ignoring out-of-zone data (90.168.192.in-addr.arpa)
/var/named/90.168.192.rev:14: ignoring out-of-zone data (1.90.168.192.in-addr.arpa)
/var/named/90.168.192.rev:15: ignoring out-of-zone data (2.90.168.192.in-addr.arpa)
/var/named/90.168.192.rev:16: ignoring out-of-zone data (4.90.168.192.in-addr.arpa)
/var/named/90.168.192.rev:17: ignoring out-of-zone data (5.90.168.192.in-addr.arpa)
/var/named/90.168.192.rev:18: ignoring out-of-zone data (8.90.168.192.in-addr.arpa)
zone domain.com/IN: has 0 SOA records
zone domain.com/IN: has no NS records
zone domain.com/IN: not loaded due to errors.

Код: Выделить всё

$ORIGIN .
$TTL 3600	; 1 hour
90.168.192.in-addr.arpa	IN SOA	sv06.domain.com. hostmaster.domain.com. (
				93         ; serial
				900        ; refresh (15 minutes)
				600        ; retry (10 minutes)
				86400      ; expire (1 day)
				3600       ; minimum (1 hour)
				)
			NS	ns.domain.com.
			NS	ns1.domain.com.
			NS	sv06.domain.com.
$ORIGIN 90.168.192.in-addr.arpa.
1			PTR	ns.domain.com.
2			PTR	sv06.domain.com.
4			PTR	update.domain.com.
5			PTR	mx.domain.com.
8			PTR	sa.domain.com.
$ORIGIN domain.com.
ns			A	192.168.90.1
ns1			A	192.168.1.110

Код: Выделить всё

zone domain.com/IN: has 0 SOA records
zone domain.com/IN: has no NS records
zone domain.com/IN: not loaded due to errors.

Код: Выделить всё

uname -ar
named -v

Код: Выделить всё

root@ns:~# uname -ar
Linux ns 2.6.32-5-686 #1 SMP Mon Oct 3 04:15:24 UTC 2011 i686 GNU/Linux
root@ns:~# named -v
BIND 9.7.3

Код: Выделить всё

cat /var/named/domain.com.vpn

Код: Выделить всё

view "emer-vpn" {
   match-clients { any;};
   recursion yes;
   notify yes;
      
zone "domain.com"  IN {
      type master;
      file "domain.com.vpn";
      notify yes;
   };

   zone "90.168.192.in-addr.arpa"  IN {
      type master;
      file "90.168.192.rev";
      allow-update { none; };
   };