绑定区域良好实践

Question

我对绑定/DNS 区域比较陌生，但最近阅读了很多内容，并通过了一个链接来检查 DNS。我运行了检查，可以通过以下方式查看： http://intodns.com/empireconqueror.com

问题该区域似乎仍然存在很多问题，互联网上似乎没有关于这些错误的信息，所以我来这里寻求帮助。

我的选项如下：

options {
    directory "/var/cache/bind";

    // If there is a firewall between you and nameservers you want
    // to talk to, you may need to fix the firewall to allow multiple
    // ports to talk.  See http://www.kb.cert.org/vuls/id/800113

    // If your ISP provided one or more IP addresses for stable
    // nameservers, you probably want to use them as forwarders.
    // Uncomment the following block, and insert the addresses replacing
    // the all-0's placeholder.

    //forwarders {
    //      199.115.230.239;
    //};

    allow-query {
            any;
    };

    auth-nxdomain no;    # conform to RFC1035
    listen-on-v6 { any; };

    allow-recursion { localhost; };
};

对于实际的区域选项：

include "/etc/bind/named.conf.options";

view "external-in" in {
    match-clients { any; };
    allow-query { none; };
    allow-query-cache { none; };
    recursion no;
    additional-from-auth yes;
    additional-from-cache yes;

    include "/etc/bind/named.conf.default-zones";
};

这是一个主区域示例：

zone "empireconqueror.com" {
    type master;
    file "/ect/bind/db.empireconqueror.com";
};

数据库文件：

$TTL    86400
$ORIGIN empireconqueror.com.
@       IN      SOA     ns2.webserverhome.com. hostmaster.empireconqueror.com. (
                          2002022401
                          28800
                          7200
                          864000
                          86400
                         )
; Root site
    IN      A       199.115.230.240

; Nameservers
    IN      NS      ns1.webserverhome.com.
    IN      NS      ns2.webserverhome.com.

; Aliases
www     IN      CNAME   empireconqueror.com.
fb      IN      CNAME   empireconqueror.com.
mail    IN      CNAME   ghs.google.com.

; MX Records
    IN      MX      1       aspmx.l.google.com.
    IN      MX      5       alt1.aspmx.l.google.com.
    IN      MX      5       alt2.aspmx.l.google.com.
    IN      MX      10      aspmx2.googlemail.com.
    IN      MX      10      aspmx3.googlemail.com.

非常感谢您的帮助， 肖恩

Answer 1

问题是 ns1.webserverhome.com 和 n2.webserverhome.com 似乎不存在于区域文件或答案中。您需要首先解决该问题。如果您也拥有 webserverhome.com，则需要前往注册商添加 DNS 粘合记录或基于 webserverhome.com 构建 NS）。没有它们，您无法引用其他区域的名称服务器。