>> Edit article
이름
제목
패스워드
안녕하세요... 님의 글은 잘 읽었습니다...우선 감사합니다... 설정을 다하구 재시작을 했는데...다음과 같은 에러가 message에 생기는데 이런것은 어떻게 해야하나요... Aug 10 23:10:32 lusia 8월 10 23:10:32 named: named shutdown failed Aug 10 23:10:32 lusia 8월 10 23:10:32 named: named startup succeeded Aug 10 23:10:32 lusia named[2535]: starting BIND 9.1.0 -u named Aug 10 23:10:32 lusia named[2535]: using 1 CPU Aug 10 23:10:32 lusia named[2539]: loading configuration from '/etc/named.conf' Aug 10 23:10:32 lusia named[2539]: /etc/named.conf:34: parse error near controls Aug 10 23:10:32 lusia named[2539]: loading configuration: failure Aug 10 23:10:32 lusia named[2539]: exiting (due to fatal error) 설정은 맞게 한것 같은데...영 않되네요... 답변글 부탁드립니다... : RedHat 7.1 Kernel 2.4.2-2 : Bind-9.1.3rc3 Install : : 예제도메인명은 "sample.co.kr" IP는 211.100.300.0-255라고 가정한다. : : linux 7.1 install시 firewall은 midium으로 해야함. : : 1. Bind구하기 http://www.isc.org/ : : 2. /usr/src/bind-9.1.3rc3.tar.gz에 복사한다. : : 3. /usr/src/# tar zxvf bind-9.1.3rc3.tar.gz 압축을 푼다. : : 4. /usr/src/bind-9.1.3rc3/# ./configure : : 5. /usr/src/bind-9.1.3rc3/# make clean depend all install : : 6. DNSSEC 키를 생성합니다. 아래와 같이 : # dnssec-keygen -a hmac-md5 -b 512 -n HOST sample.co.kr : Ksample.co.kr.+157+61799.key, : Ksample.co.kr.+157+61799.private가 만들어 진다. : : 여기서 Ksample.co.kr.+157+61799.key의 base64로 인코딩 : 된 것을 /etc/rndc.conf의 'key' 설정 중 secure 항목에 복사합니다 : "key"이름은 적당히 바꾼다. seckey로 바꿔본다 : : 예를 들면, : : options { : default-server localhost; : default-key "key"; : }; : : server localhost { : key "key"; : }; : : key "seckey" { : algorithm hmac-md5; : : secret "HyRBfBemPSsrQzjHgOlGbqOveiOSXdLxiQkrQxtvCBUkVILHEOHqejZCNlmn"; : }; : : localhost의 key는 변경할 필요없음. : : 7. named.conf는 아래와 같이 : : options { : directory "/var/named"; : /* : * If there is a firewall between you and nameservers you want : * to talk to, you might need to uncomment the query-source : * directive below. Previous versions of BIND always asked : * questions using port 53, but BIND 8.1 uses an unprivileged : * port by default. : */ : auth-nxdomain yes; : pid-file "/var/run/named/named.pid"; : // query-source address * port 53; : }; : : zone "." IN { : type hint; : file "named.ca"; : }; : : zone "localhost" IN { : type master; : file "localhost.zone"; : allow-update { none; }; : }; : : zone "0.0.127.in-addr.arpa" IN { : type master; : file "named.local"; : allow-update { none; }; : }; : : controls { : inet * port 1500 //port번호는 안쓰는것으로 : allow { any; } keys { "seckey"; }; : }; : : key "seckey" { : algorithm hmac-md5; : : secret "HyRBfBemPSsrQzjHgOlGbqOveiOSXdLxiQkrQxtvCBUkVILHEOHqejZCNlmn"; : }; : : zone "sample.co.kr" IN { : type master; : file "sample.host"; //파일명은 각자알아서 : notify no; : allow-update { key "seckey"; }; : }; : : zone "300.100.211.in-addr.arpa" IN { : type master; : file "db.300.100.211"; //파일명은 각자알아서 : notify no; : allow-update { key "seckey"; }; : }; : : 8. /var/named에서 : 먼저 /var의 named 디렉토리를 그룹과소유를 named로 되어있어야 한다. : drwxr-xr-x 2 named named 4096 Jul 5 16:22 named/ : 안돼있으면 아래와 같이 바꾼다. : chgrp -R named named : chown -R named named : : /var/named의 파일들은 아래와 같다. : localhost.zone파일은 : $TTL 86400 : $ORIGIN localhost. : @ 1D IN SOA @ admin ( : 2001070301 ; serial (d. adams) : 3H ; refresh : 15M ; retry : 1W ; expiry : 1D ) ; minimum : ; : IN NS @ : 1D IN A 127.0.0.1 : : named.local파일은 : $TTL 86400 : @ IN SOA localhost. admin.localhost. ( : 2001070301 ; Serial : 28800 ; Refresh : 14400 ; Retry : 3600000 ; Expire : 86400 ) ; Minimum : IN NS localhost. : ; : 1 IN PTR localhost. : : sample.host파일은 : $TTL 86400 : @ IN SOA ns.sample.co.kr. admin.sample.co.kr. ( : 2001070304 ; Serial : 28800 ; Refresh : 14400 ; Retry : 3600000 ; Expire : 86400 ) ; Minimum : IN NS ns.sample.co.kr. : ; : IN A 211.100.300.3 //이것은 sample.co.kr에 : 해당(kldp.org와 같이) : ; : IN MX 10 mail.sample.co.kr. : ; : ns IN A 211.100.300.1 : mail IN A 211.100.300.2 : www IN A 211.100.300.3 : : db.300.100.211파일은 : $TTL 86400 : $ORIGIN 300.100.211.in-addr.arpa. : @ 1D IN SOA ns.sample.co.kr. admin.sample.co.kr. ( : 2001070304 ; serial (d. adams) : 3H ; refresh : 15M ; retry : 1W ; expiry : 1D ) ; minimum : IN NS ns.sample.co.kr. : 1D IN A 127.0.0.1 : 1D 2 IN PTR mail.sample.co.kr. : 1D 3 IN PTR www.sample.co.kr. : : 9. /etc/rc.d/init.d/named start(restart) named를 실행한다. : : 10. /var/log/messages확인한다. : Jul 5 19:39:42 ns named[10623]: shutting down : Jul 5 19:39:42 ns named[10623]: no longer listening on 127.0.0.1#53 : Jul 5 19:39:42 ns named[10623]: no longer listening on : 211.100.300.1#53 : Jul 5 19:39:42 ns named[10619]: exiting : Jul 5 19:39:42 ns named: named shutdown succeeded : Jul 5 19:39:42 ns named[10643]: starting BIND 9.1.3rc3 -u named : Jul 5 19:39:42 ns named: named startup succeeded : Jul 5 19:39:42 ns named[10643]: using 1 CPU : Jul 5 19:39:42 ns named[10647]: loading configuration : from '/etc/named.conf' : Jul 5 19:39:42 ns named[10647]: no IPv6 interfaces found : Jul 5 19:39:42 ns named[10647]: listening on IPv4 interface lo, : 127.0.0.1#53 : Jul 5 19:39:42 ns named[10647]: listening on IPv4 interface eth0, : 211.100.300.1#53 : Jul 5 19:39:42 ns named[10647]: command channel listening on : 0.0.0.0#1500 : Jul 5 19:39:42 ns named[10647]: running : : 다들 성공하시길 바라며..... : : -- : 고생하면 즐거워진다.^^--아~~~~ 졸립니당...^^
Copyleft
1999-2026 by
JSBoard Open Project
Theme Designed by
IDOO
All right reserved