我有一个 bind9 服务器正在运行以请求i.example.com
. 当我像这样从名称服务器向其自己的公共 IP 发出请求时,nslookup ns1.i.example.com xxx.xxx.xxx.xxx
我得到了预期的答案:
Server: xxx.xxx.xxx.xxx
Address: xxx.xxx.xxx.xxx#53
Name: ns1.i.example.com
Address: xxx.xxx.xxx.xxx
如果我从办公室计算机发出请求,我不会得到任何答案:
C:\Users\user>nslookup ns1.i.example.com xxx.xxx.xxx.xxx
DNS request timed out.
timeout was 2 seconds.
Server: UnKnown
Address: xxx.xxx.xxx.xxx
DNS request timed out.
timeout was 2 seconds.
DNS request timed out.
timeout was 2 seconds.
DNS request timed out.
timeout was 2 seconds.
DNS request timed out.
timeout was 2 seconds.
*** Request to UnKnown timed-out
Nmap 显示可以从办公室计算机访问端口 53:
PORT STATE SERVICE
53/udp open|filtered domain
在我的 bind9 选项中,我也在监听我的公共 IP 地址:
dnssec-validation auto;
listen-on-v6 { any; };
listen-on port 53 { 127.0.0.1; xxx.xxx.xxx.xxx; };
allow-query {
any;
};
allow-recursion { any; };
另外,我没有设置任何 iptables 规则。
任何想法如何解决这一问题?