DNSの仕組みとBINDの設定（基礎＋ログ出力設定）

[root@ns1 ~]# cat /etc/redhat-release
CentOS release 6.6 (Final)
[root@ns1 ~]# uname -a
Linux ns1.homelab.strike-witches.moe 2.6.32-504.30.3.el6.x86_64 #1 SMP Wed Jul 15 10:13:09 UTC 2015 x86_64 x86_64 x86_64 GNU/Linux

[root@ns1 ~]# yum install bind

  //
  // named.conf
  //
  // Provided by Red Hat bind package to configure the ISC BIND named(8) DNS
  // server as a caching only nameserver (as a localhost DNS resolver only).
  //
  // See /usr/share/doc/bind*/sample/ for example named configuration files.
  //

  acl internal{
  192.168.100.0/24;
  127.0.0.1/32;
  };

  acl my_nic{
  192.168.100.1;
  127.0.0.1;
  };

  options {
  listen-on port 53 { my_nic; };
  #listen-on-v6 port 53 { ::1; };
  version"unknown";
  directory "/var/named";
  dump-file "/var/named/data/cache_dump.db";
        statistics-file "/var/named/data/named_stats.txt";
        memstatistics-file "/var/named/data/named_mem_stats.txt";
    allow-query     { internal; };
    recursion yes;
    allow-recursion { internal; };

    dnssec-enable yes;
    dnssec-validation yes;
    dnssec-lookaside auto;

    /* Path to ISC DLV key */
    bindkeys-file "/etc/named.iscdlv.key";

    managed-keys-directory "/var/named/dynamic";
  };

  logging {
        channel default_debug {
                file "data/named.run";
                severity dynamic;
        };
  };

  zone "." IN {
  type hint;
  file "named.ca";
  };

  include "/etc/named.rfc1912.zones";
  include "/etc/named.root.key";

  zone "homelab.strike-witches.moe" IN {
    type master;
    file "internal_homelab.strike-witches.moe.zone";
  };

  zone "100.168.192.in-addrarpa" IN {
    type master;
    file "internal_100.168.192.in-addr.arpa.zone";
  };

  zone "test.jp" IN {
    type forward;
    forward only;
    forwarders { 192.168.100.254; };
    };

  acl acl-name {
    address_match_list
  };

  zone zone_name [class] {
            .....
  };

0.168.192.in-addr.arpa -> 192.168.0.0/24に関するゾーンステートメント
128/28.0.168.192.in-addr.arpa -> 192.168.0.128/28に関するゾーンステートメント

  view "view_name" {
       match-clients{ acl_name; };
       ......
  };

  zone "domain_name" IN {
   type forward;
   forward first | only ; (default is first)
   forwarders {DNS_Address; .... };
   };

  $ORIGIN homelab.strike-witches.moe.
  $TTL 43200
  @    IN SOA ns1.homelab.strike-witches.moe. root.homelab.strike-witches.moe.(
       2015072501 ;Serial
       10800 ;Refresh
       10800 ;Retry
       86400 ;Expire
       3600 ;Minimum
  )

  homelab.strike-witches.moe. IN NS ns1.homelab.strike-witches.moe.
  ns1                         IN A  192.168.100.1
  proxy               IN A  192.168.100.2
  main                IN A  192.168.100.3
  www                 IN A  192.168.100.4
  esxi                IN A  192.168.24.60
  splunk              IN A  192.168.24.63

  domain IN SOA ドメインの権威サーバ名 ドメイン管理者のメールアドレス (Serial,Refresh,Retry,Expire,Minimum);

  domain IN NS DNSサーバ名

  domain IN MX プリファレンス値 メールサーバ名

  ホスト名 IN A IPv4アドレス

 ホスト名 IN AAAA IPv6アドレス

 別名 IN CNAME ホスト名

 IPアドレス IN PTR ホスト名

  logging {
         channel query_log {
                file "log/query.log" versions 10 size 20M;
                severity dynamic;
                print-time yes;
                print-severity yes;
                print-category yes;
        };

        category queries {
                 query_log;
        };

  };

critical,error,warning,notice,info,debug,dynamic

  31-Jul-2015 23:48:00.563 queries: info: client 192.168.100.3#50986: query: splunk.homelab.strike-witches.moe IN A + (192.168.100.1)