我对 Bind/DNS 区域比较陌生,但最近阅读了很多内容,并通过了一个链接来检查 DNS。我运行了可以通过以下方式查看的检查:http: //intodns.com/empireconqueror.com
问题是该区域似乎还有很多问题,互联网上似乎没有关于这些错误的信息,所以我来这里寻求帮助。
我的选择如下:
options {
directory "/var/cache/bind";
// If there is a firewall between you and nameservers you want
// to talk to, you may need to fix the firewall to allow multiple
// ports to talk. See http://www.kb.cert.org/vuls/id/800113
// If your ISP provided one or more IP addresses for stable
// nameservers, you probably want to use them as forwarders.
// Uncomment the following block, and insert the addresses replacing
// the all-0's placeholder.
//forwarders {
// 199.115.230.239;
//};
allow-query {
any;
};
auth-nxdomain no; # conform to RFC1035
listen-on-v6 { any; };
allow-recursion { localhost; };
};
对于实际的区域选项:
include "/etc/bind/named.conf.options";
view "external-in" in {
match-clients { any; };
allow-query { none; };
allow-query-cache { none; };
recursion no;
additional-from-auth yes;
additional-from-cache yes;
include "/etc/bind/named.conf.default-zones";
};
这是一个主区域示例:
zone "empireconqueror.com" {
type master;
file "/ect/bind/db.empireconqueror.com";
};
数据库文件:
$TTL 86400
$ORIGIN empireconqueror.com.
@ IN SOA ns2.webserverhome.com. hostmaster.empireconqueror.com. (
2002022401
28800
7200
864000
86400
)
; Root site
IN A 199.115.230.240
; Nameservers
IN NS ns1.webserverhome.com.
IN NS ns2.webserverhome.com.
; Aliases
www IN CNAME empireconqueror.com.
fb IN CNAME empireconqueror.com.
mail IN CNAME ghs.google.com.
; MX Records
IN MX 1 aspmx.l.google.com.
IN MX 5 alt1.aspmx.l.google.com.
IN MX 5 alt2.aspmx.l.google.com.
IN MX 10 aspmx2.googlemail.com.
IN MX 10 aspmx3.googlemail.com.
非常感谢您的帮助,肖恩