如何解决启用 DNS 转发 Bind9
我在 Ubuntu 中有一个 bind9。它可以很好地解析我实验室域 xutilab.local 的 DNS 名称,但是如果我请求类似 www.google.com
这是named.conf.options文件:
options {
directory "/var/cache/bind";
// If there is a firewall between you and nameservers you want
// to talk to,you may need to fix the firewall to allow multiple
// ports to talk. See http://www.kb.cert.org/vuls/id/800113
// If your ISP provided one or more IP addresses for stable
// nameservers,you probably want to use them as forwarders.
// Uncomment the following block,and insert the addresses replacing
// the all-0's placeholder.
allow-query {
any;
};
forwarders {
8.8.8.8;
};
//========================================================================
// If BIND logs error messages about the root key being expired,// you will need to update your keys. See https://www.isc.org/bind-keys
//========================================================================
dnssec-validation auto;
auth-nxdomain no; # conform to RFC1035
listen-on-v6 { any; };
notify yes;
allow-transfer { any; };
这里缺少任何选项吗?
非常感谢。
解决方法
在此块(选项)内,尝试添加:
allow-recursion { any; };
allow-query { any; };
allow-query-cache { any; };
,
我终于发现问题出在我的路由器上,它有一个与 DNS 安全相关的选项。禁用它,Bind9 能够以当前配置正常转发请求。
谢谢!
版权声明:本文内容由互联网用户自发贡献,该文观点与技术仅代表作者本人。本站仅提供信息存储空间服务,不拥有所有权,不承担相关法律责任。如发现本站有涉嫌侵权/违法违规的内容, 请发送邮件至 dio@foxmail.com 举报,一经查实,本站将立刻删除。