Question

我对Bind / DNS区域比较陌生，但最近已经阅读了很多内容，并通过了一个链接来检查DNS。我运行了检查，可以通过以下方式查看：http://intodns.com/empireconqueror.com

问题是该区域似乎还存在许多问题，似乎没有关于互联网上这些错误的信息，所以我来这里寻求帮助。

我的选择如下：

options {
    directory "/var/cache/bind";

    // If there is a firewall between you and nameservers you want
    // to talk to, you may need to fix the firewall to allow multiple
    // ports to talk.  See http://www.kb.cert.org/vuls/id/800113

    // If your ISP provided one or more IP addresses for stable
    // nameservers, you probably want to use them as forwarders.
    // Uncomment the following block, and insert the addresses replacing
    // the all-0's placeholder.

    //forwarders {
    //      199.115.230.239;
    //};

    allow-query {
            any;
    };

    auth-nxdomain no;    # conform to RFC1035
    listen-on-v6 { any; };

    allow-recursion { localhost; };
};

对于实际的区域选项：

include "/etc/bind/named.conf.options";

view "external-in" in {
    match-clients { any; };
    allow-query { none; };
    allow-query-cache { none; };
    recursion no;
    additional-from-auth yes;
    additional-from-cache yes;

    include "/etc/bind/named.conf.default-zones";
};

这是一个主区示例：

zone "empireconqueror.com" {
    type master;
    file "/ect/bind/db.empireconqueror.com";
};

数据库文件：

$TTL    86400
$ORIGIN empireconqueror.com.
@       IN      SOA     ns2.webserverhome.com. hostmaster.empireconqueror.com. (
                          2002022401
                          28800
                          7200
                          864000
                          86400
                         )
; Root site
    IN      A       199.115.230.240

; Nameservers
    IN      NS      ns1.webserverhome.com.
    IN      NS      ns2.webserverhome.com.

; Aliases
www     IN      CNAME   empireconqueror.com.
fb      IN      CNAME   empireconqueror.com.
mail    IN      CNAME   ghs.google.com.

; MX Records
    IN      MX      1       aspmx.l.google.com.
    IN      MX      5       alt1.aspmx.l.google.com.
    IN      MX      5       alt2.aspmx.l.google.com.
    IN      MX      10      aspmx2.googlemail.com.
    IN      MX      10      aspmx3.googlemail.com.

非常感谢帮助，肖恩

Answer 1

问题是ns1.webserverhome.com和n2.webserverhome.com似乎不存在于区域文件中或回答。您需要先解决该问题。如果你也拥有webserverhome.com，你需要去注册商并添加DNS粘合记录或基于webserverhome.com构建NS）。没有它们，您无法从其他区域引用名称服务器。

绑定区域的良好做法

1 个答案: