[root@localhost~]#yum-yinstalldhcp*bind*

[root@localhost~]#servicenamedrestart

[root@localhost~]#chkconfignamedon

[root@localhost~]#servicedhcpdrestart

[root@localhost~]#chkconfignamedon

[root@localhost~]#vim/etc/named.conf

10options{

11listen-onport53{any;};

12listen-on-v6port53{any;};

13directory"/var/named";

14dump-file"/var/named/data/cache_dump.db";

15statistics-file"/var/named/data/named_stats.txt";

16memstatistics-file"/var/named/data/named_mem_stats.txt";

17allow-query{any;};

18recursionyes;

19

20dnssec-enableyes;

21dnssec-validationyes;

22dnssec-lookasideauto;

23

24/*PathtoISCDLVkey*/

25bindkeys-file"/etc/named.iscdlv.key";

26

27managed-keys-directory"/var/named/dynamic";

28};

29

30logging{

31channeldefault_debug{

32file"data/named.run";

33severitydynamic;

34};

35};

36

37controls{

38inetport953

39allow{localhost;}keys{"rndc-key";};

40};

41

42

43zone""IN{

44typemaster;

45file".zone";

46allow-update{key"rndc-key";};

47};

48

49zone"137.168.192."IN{

50typemaster;

51file".rev";

52allow-update{key"rndc-key";};

53};

54

55zone"."IN{

56typehint;

57file"named.ca";

58};

59

60include"/etc/named.rfc1912.zones";

61include"/etc/named.root.key";

62include"/etc/rndc.key";

[root@localhost~]#dnssec-keygen-ahmac-md5-b512-nHOSTddns-key

[root@localhost~]#cd/var/named

[root@localhostnamed]#cpnamed.localhost.zone

[root@localhostnamed]#cpnamed.localhost.rev

[root@localhostnamed]#vim/var/named/.zone

$TTL86400

@INSOAdnsroot(

1;serial

1D;refresh

1H;retry

1W;expire

3H);minimum

NSdns

dnsA3

[root@localhostnamed]#vim/var/named/.rev

$TTL86400

@INSOAdnsroot(

1;serial

1D;refresh

1H;retry

1W;expire

INSOA..(

2;serial

86400;refresh(1day)

3600;retry(1hour)

604800;expire(1week)

10800;minimum(3hours)

)

NS.

$ORIGIN.

dnsA3

$TTL302400;3days12hours

xuegod74A65

TXT"001e15c0dc8759236c36687c3185aef359"

cat/var/named/.rev

$ORIGIN.

$TTL86400;1day

137.168.192.INSOA..(

2;serial

86400;refresh(1day)

3600;retry(1hour)

60