acl localnet {
192.168.1.0/24;
127.0.0.1;
};
options {
directory "/var/named";
auth-nxdomain yes;
allow-transfer { localnet; };
allow-query { localnet; };
};
# LAN内部への応答設定
view "inside"{
match-clients { localnet; }; ←内部からの問い合わせに応える
recursion yes;
zone "." {
type hint;
file "named.ca"; ←初期設定のまま
};
zone "0.0.127.in-addr.arpa" {
type master;
file "localhost.rev"; ←localhostの逆引き
};
zone "kitahotaru.com" {
type master;
file "named.hosts"; ←内部向けの正引き
};
zone "1.168.192.in-addr.arpa" {
type master;
file "named.rev"; ←内部向けの逆引き
};
};
# 外部への応答設定
view "outside"{
match-clients { any; };
allow-query { any; };
recursion no;
zone "kitahotaru.com" {
type master;
file "out_named.hosts"; ←外部向けの正引き
allow-transfer { localnet; 555.666.777.888; }; ←セカンダリ
};
}; |