Hang ha ke tobane le mosebetsi oa ho fa e mong oa bareki tokelo ea ho hlophisa litlaleho tsa PTR tsa subnet /28 eo a e abetsoeng. Ha ke na automation ea ho hlophisa litlhophiso tsa BIND ho tsoa kantle. Ka hona, ke nkile qeto ea ho tsamaea ka tsela e 'ngoe - ho abela moreki karolo ea sebaka sa PTR sa /24 subnet.
E ka bonahala - ke eng e ka bang bonolo haholoanyane? Ngolisa feela subnet ka tsela e nepahetseng 'me u e lebise ho NS e hlokahalang joalokaha e etsoa ka subdomain. Empa che. Ha se ntho e bonolo joalo (le hoja ha e le hantle e le ea khale, empa intuition e ke ke ea thusa), ke kahoo ke ngolang sengoloa sena.
Mang kapa mang ea batlang ho ipalla eona a ka ipalla sena
Haeba u batla tharollo e lokiselitsoeng, amohela tlas'a sehiloeng.
E le hore ke se ke ka liehisa ba ratang mokhoa oa ho kopitsa-ho beha, ke tla qala ka ho beha karolo e sebetsang, ebe ke ea khopolo-taba.
1. Itloaetse. Ho abela libaka /28
Ha re re re na le subnet 7.8.9.0/24. Re hloka ho fana ka subnet 7.8.9.240/28 ho dns client 7.8.7.8 (ns1.client.domain).
Ho DNS ea mofani, o hloka ho fumana faele e hlalosang sebaka se ka morao sa subnet ena. E tlohelle 9.8.7.in-addr.arpa.
Re fana ka maikutlo ka likenyo ho tloha ho 240 ho isa ho 255, haeba li teng. 'Me qetellong ea faele re ngola tse latelang:
255-240 IN NS 7.8.7.8
$GENERATE 240-255 $ CNAME $.255-240u seke oa lebala ho eketsa libaka tsa serial le ho e etsa
rndc reloadSena se phethela karolo ea mofani. Ha re feteleng ho DNS ea moreki.
Pele, ha re theheng faele /etc/bind/master/255-240.9.8.7.in-addr.arpa litaba tse latelang:
$ORIGIN 255-240.9.8.7.in-addr.arpa.
$TTL 1W
@ 1D IN SOA ns1.client.domain. root.client.domain. (
2008152607 ; serial
3H ; refresh
15M ; retry
1W ; expiry
1D ) ; minimum
@ IN NS ns1.client.domain.
@ IN NS ns2.client.domain.
241 IN PTR test.client.domain.
242 IN PTR test2.client.domain.
245 IN PTR test5.client.domain.
Le ho e bitsoang.conf re kenya tlhaloso ea faele ea rona e ncha:
zone "255-240.9.8.7.in-addr.arpa." IN {
type master;
file "master/255-240.9.8.7.in-addr.arpa";
};B qala hape ts'ebetso ea ho tlama.
/etc/init.d/named restartHo felile ke lehlohonolo. Joale u ka hlahloba.
#> host 7.8.9.245
245.9.8.7.in-addr.arpa is an alias for 245.255-240.9.8.7.in-addr.arpa.
245.255-240.9.8.7.in-addr.arpa domain name pointer test5.client.domain.Ka kopo hlokomela hore ha ho khutlise rekoto ea PTR feela, empa le CNAME. Ke kamoo e lokelang ho ba kateng. Haeba u thahasella lebaka, joale amohela khaolo e latelang.
2. Khopolo. Kamoo e sebetsang kateng.
Ho thata ho fetola le ho lokisa lebokose le letšo. Ho bonolo haholo haeba u utloisisa se etsahalang ka hare.
Ha re abela subdomain sebakeng domain name, ebe re ngola ntho e kang ena:
client.domain. NS ns1.client.domain.
ns1.client.domain. A 7.8.7.8Re bolella e mong le e mong ea botsang hore ha re na boikarabello sebakeng sena mme re ba bolella hore na ke mang ea ikarabellang. Le likopo tsohle bakeng sa client.domain e fetiselitsoe ho 7.8.7.8. Ha re hlahloba re bona setšoantšo se latelang (ha re tlōle seo moreki a nang le sona moo. Ha se bohlokoa):
# host test.client.domain
test.client.domain has address 7.8.9.241Ke hore re ile ra tsebisoa hore ho na le A record e joalo le IP ea eona ke 7.8.9.241. Ha ho lintlha tse sa hlokahaleng.
Se tšoanang se ka etsoa joang ka subnet?
Kaha seva sa rona sa DNS se ngolisitsoe ho RIPE, ha re kopa aterese ea PTR IP ho marang-rang a rona, kopo ea pele e ntse e tla ba ho rona. The logic e tšoana le ka domains. Empa u ka kenya subnet joang faeleng ea libaka?
Ha re leke ho e kenya tjena:
255-240 IN NS 7.8.7.8Mme ... mohlolo ha oa etsahala. Ha re fumane kopo ea ho khutlisa. Taba eohle ke hore bind ha e tsebe ho hang hore lirekoto tsena tse faeleng e ka morao ke liaterese tsa IP mme ka sebele ha li utloisise rekoto ea mefuta. Bakeng sa eona, ke li-subdomain tse ling tsa tšoantšetso. Ke hore, ho tlama ho ke ke ha e-ba le phapang pakeng tsa "255-240"Le"moreki e moholo". 'Me kopo ea ho ea moo e lokelang ho ea teng, aterese ea kopo e lokela ho shebahala tjena: 241.255-240.9.8.7.in-addr.arpa. Kapa joalo ka sena, haeba re sebelisa subdomain ea tšoantšetso: 241.moreki oa rona.9.8.7.in-addr.arpa. Sena se fapane le se tloaelehileng: 241.9.8.7.in-addr.arpa.
Ho tla ba bothata ho etsa kopo e joalo ka letsoho. 'Me le haeba e sebetsa, ho ntse ho sa hlaka hore na e ka sebelisoa joang bophelong ba sebele. Etsoe, ho ea ka kopo 7.8.9.241 Re ntse re fumana likarabo ho tsoa ho DNS ea mofani oa litšebeletso, eseng ea moreki.
Mme ke hona moo dintho di kenang teng CNAME.
Ka lehlakoreng la mofani, o hloka ho theha alias bakeng sa liaterese tsohle tsa IP tsa subnet ka sebopeho se tla fetisetsa kopo ho DNS ea moreki.
255-240 IN NS ns1.client.domain.
241 IN CNAME 241.255-240
242 IN CNAME 242.255-240
и т.д.
Sena ke sa ba sebetsang ka thata =).
'Me bakeng sa ba botsoa, moralo o ka tlase o loketse haholoanyane:
255-240 IN NS ns1.client.domain.
$GENERATE 240-255 $ CNAME $.255-240Joale kopa lintlha atereseng 7.8.9.241 ho tswa 241.9.8.7.in-addr.arpa ho seva sa DNS ea mofani e tla fetoloa ho 241.255-240.9.8.7.in-addr.arpa 'me e tla ea ho moreki oa DNS.
Moreki o tla hloka ho sebetsana le likopo tse joalo. Ka hona, re theha sebaka 255-240.9.8.7.in-addr.arpa. Ho eona, ha e le hantle, re ka beha lirekoto tsa morao-rao bakeng sa IP leha e le efe ea subnet eohle / 24, empa re tla botsoa feela ka tseo mofani a re fang tsona, kahoo re ke ke ra khona ho bapala ho pota =).
Ho etsa mohlala, ke tla boela ke fane ka mohlala oa litaba tsa file ea reverse zone ho tloha lehlakoreng la bareki:
$ORIGIN 255-240.9.8.7.in-addr.arpa.
$TTL 1W
@ 1D IN SOA ns1.client.domain. root.client.domain. (
2008152607 ; serial
3H ; refresh
15M ; retry
1W ; expiry
1D ) ; minimum
@ IN NS ns1.client.domain.
@ IN NS ns2.client.domain.
241 IN PTR test.client.domain.
242 IN PTR test2.client.domain.
245 IN PTR test5.client.domain.
Ke hobane re sebelisa CNAME ka lehlakoreng la mofani oa litšebeletso moo re fumanang lintlha tse latelang ho arabela kopo: Aterese ea IP tse peli tse kentsweng, eseng e le 'ngoe.
#> host 7.8.9.245
245.9.8.7.in-addr.arpa is an alias for 245.255-240.9.8.7.in-addr.arpa.
245.255-240.9.8.7.in-addr.arpa domain name pointer test5.client.domain. 'Me u se ke ua lebala ho theha ACL ea hau ka nepo. Hobane ha ho na thuso ho nka sebaka sa PTR mme u se ke ua arabela mang kapa mang ea tsoang ka ntle =).
Source: www.habr.com
