{"id":1890,"date":"2012-03-30T21:32:25","date_gmt":"2012-03-30T13:32:25","guid":{"rendered":"http:\/\/blog.pmail.idv.tw\/?p=1890"},"modified":"2012-03-30T21:32:25","modified_gmt":"2012-03-30T13:32:25","slug":"centos-5-4-bind-view-%e8%a8%ad%e5%ae%9a","status":"publish","type":"post","link":"https:\/\/blog.pmail.idv.tw\/?p=1890","title":{"rendered":"CentOS 5.4 Bind View \u8a2d\u5b9a"},"content":{"rendered":"

Bind 9 \u4ee5\u5f8c\u7684\u7248\u672c\u6709\u63d0\u4f9bview \u7684\u529f\u80fd<\/p>\n

<\/p>\n

view \u7684\u529f\u80fd\u5c31\u662f\u53ef\u4ee5\u5340\u5206\u5167\u5916\u7db2\u4f86\u56de\u61c9\u4e0d\u540c\u7684\u540d\u7a31\u89e3\u6790<\/p>\n

\u4e5f\u5c31\u662f[\u898b\u4eba\u8aaa\u4eba\u8a71,\u898b\u9b3c\u8aaa\u9b3c\u8a71]<\/p>\n

\u9054\u6210\u76ee\u6a19:<\/p>\n

\u5167\u7db2\u7db2\u6bb5: 192.168.3.0\/24<\/p>\n

\u5167\u90e8\u67e5\u8a62blog.pmail.idv.tw \u56de\u61c9 192.168.3.12<\/p>\n

\u5916\u90e8\u67e5\u8a62blog.pmail.idv.tw \u56de\u61c9 59.12X.15X.23X<\/p>\n

\u8a2d\u5b9a\u65b9\u5f0f\u5982\u4e0b<\/p>\n

\u4fee\u6539\/etc\/named.conf<\/p>\n

————————————————————————————
\/\/ Red Hat BIND Configuration Tool
\/\/
\/\/ Default initial “Caching Only” name server configuration
\/\/<\/p>\n

options {
        directory “\/var\/named”;
        dump-file “\/var\/named\/data\/cache_dump.db”;
        statistics-file “\/var\/named\/data\/named_stats.txt”;
        \/*
         * If there is a firewall between you and nameservers you want
         * to talk to, you might need to uncomment the query-source
         * directive below.  Previous versions of BIND always asked
         * questions using port 53, but BIND 8.1 uses an unprivileged
         * port by default.
         *\/
         \/\/ query-source address * port 53;
};<\/p>\n

view “wan”{                 
        match-clients{
        !192.168.3.0\/24;
        any;
};<\/strong><\/font><\/p>\n

zone “pmail.idv.tw.”IN{
        type master;
        file “pmail.wan”;
        };<\/strong><\/font><\/p>\n

zone “.” IN {
        type hint;
        file “named.root”;
};
};<\/strong><\/font><\/p>\n

view “lan”{<\/font><\/p>\n

        match-clients{
        192.168.3.0\/24;
        };
zone “pmail.idv.tw.”IN{
        type master;
        file “pmail.lan”;
        };<\/font><\/p>\n

};<\/font><\/p>\n

include “\/etc\/rndc.key”;<\/p>\n

——————————————————————<\/p>\n

zone file \u6a94\u6848 pmail.wan & pmail.lan \u653e\u7f6e\u8def\u5f91 \/var\/named (zone file\u8a2d\u5b9a\u4e0d\u5728\u8aaa\u660e)<\/p>\n

\"bind-view\"<\/a><\/p>\n

\u8a2d\u5b9a\u8aaa\u660e<\/p>\n

1.view wan \u662f\u5916\u90e8\u67e5\u8a62, match-clients \u8a2d\u5b9a !192.168.3.0\/24\u8868\u793a\u9664\u4e86192.168.3.0\/24 \u5916\u90fd\u7528\u9019\u500bview<\/p>\n

2. view lan \u662f\u5167\u90e8\u67e5\u8a62, match-clients \u8a2d\u5b9a 192.168.3.0\/24\u8868\u793a\u90fd\u7528\u9019\u500bview<\/p>\n

\u6e2c\u8a66<\/p>\n

\u5167\u90e8\u67e5\u8a62<\/p>\n

\"bind-view1\"<\/a><\/p>\n

\u5916\u90e8\u67e5\u8a62<\/p>\n

\"bind-view2\"<\/a><\/p>\n

\n