实现反向解析区域

Posted 2021-05-15 凭栏听枫

1 反向解析配置

反向区域：将IP地址反向解析为FQDN

区域名称：网络地址反写.in-addr.arpa.

示例：

172.16.100. --> 100.16.172.in-addr.arpa.

（1）定义区域

zone "ZONE_NAME" IN {
type {master|slave|forward}；
file "网络地址.zone"
};

(2) 定义区域解析库文件
注意：不需要MX,以PTR记录为主
范例：

$TTL 86400
$ORIGIN 16.172.in-addr.arpa.
@ IN SOA ns1.zhang.org. admin.zhang.org. (
2015042201
1H
5M
7D
1D )
IN NS ns1.zhang.org.
1.2 IN PTR www.zhang.org.
3.4 IN PTR mx1.zhang.org.
#实现以下解析
172.16.2.1 www.zhang.org.
172.16.4.3 mx1.zhang.org.

2 实现反向解析

[root@centos8 ~]#cat /etc/named.conf
options {
......
listen-on port 53 { localhost; };
......
allow-query   { any; };
......
}

[root@centos8 ~]#vim /etc/named.rfc1912.zones
zone "0.0.10.in-addr.arpa" {
 type master;
 file "10.0.0.zone";
};

[root@centos8 named]# cat 10.0.0.zone
$TTL 1D
@	IN SOA	ns1 admin.zhang.org. (
					0	; serial
					1D	; refresh
					1H	; retry
					1W	; expire
					3H )	; minimum
		NS	ns1.zhang.org.
184		PTR	www.zhang.org.

[root@centos8 named]# named-checkzone 0.0.10.in.addr.arpa 10.0.0.zone
zone 0.0.10.in.addr.arpa/IN: loaded serial 0
OK

[root@centos8 named]# rndc reload
server reload successful

#客户端测试
[root@centos7 ~]# dig -t ptr 184.0.0.10.in-addr.arpa. @10.0.0.208

; <<>> DiG 9.11.4-P2-RedHat-9.11.4-26.P2.el7 <<>> -t ptr 184.0.0.10.in-addr.arpa. @10.0.0.208
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 714
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;184.0.0.10.in-addr.arpa.	IN	PTR

;; ANSWER SECTION:
184.0.0.10.in-addr.arpa. 86400	IN	PTR	www.zhang.org.

;; AUTHORITY SECTION:
0.0.10.in-addr.arpa.	86400	IN	NS	ns1.zhang.org.

;; Query time: 0 msec
;; SERVER: 10.0.0.208#53(10.0.0.208)
;; WHEN: Tue May 11 20:29:55 CST 2021
;; MSG SIZE  rcvd: 97

[root@centos7 ~]# host 10.0.0.184
184.0.0.10.in-addr.arpa domain name pointer www.zhang.org.