DNS 슬레이브는 연결 실패를 나타냅니다. 호스트에 연결할 수 없습니다.

DNS 마스터(192.168.102.159)와 슬레이브(192.168.102.132)가 있는데 둘 다 가상 머신이고 마스터가 잘 구성되어 있으며 정방향 및 역방향 조회를 수행하지만 슬레이브를 사용하려고 하면 서버가 영역을 수행할 때 전송하면 슬레이브 서버에서 다음 오류가 발생합니다. 연결할 수 없습니다: 호스트에 액세스할 수 없습니다. conf 및 영역 파일의 IP 주소가 올바른지 확인했으며 영역 파일은 명명된-checkzone에 오류를 표시하지 않습니다. 이것은 두 번째 설정입니다. 이전 설정에서는 rndc.key not find 오류가 발생하고 이 오류가 발생했습니다. 그러나 이 설정에서는 이 오류만 발생합니다.

Slave의 Slaves 폴더에 chgrp와 chown을 추가했지만 방화벽 항목은 추가되지 않았으므로 이것이 필요한지 확실하지 않습니다.

방화벽 항목

iptables -A INPUT -i ens33 -p tcp -m state --state NEW,ESTABLISHED -s 192.168.102.132 --sport 1024:65535 --dport 53 -j ACCEPT

iptables -A INPUT -i ens33 -p udp -m state --state NEW,ESTABLISHED -s 192.168.102.132 --sport 1024:65535 --dport 53 -j ACCEPT

명명된.conf(기본)

acl internals { 192.168.102.0/24;  };

options {
        listen-on port 53 { 127.0.0.1; 192.168.102.159; };
        listen-on-v6 port 53 { ::1; };
        directory       "/var/named";
        dump-file       "/var/named/data/cache_dump.db";
        statistics-file "/var/named/data/named_stats.txt";
        memstatistics-file "/var/named/data/named_mem_stats.txt";
        recursing-file  "/var/named/data/named.recursing";
        secroots-file   "/var/named/data/named.secroots";
        allow-transfer { 192.168.102.132; };
        allow-query     { localhost; internals; };

        recursion yes;
        /*
        dnssec-enable yes;
        dnssec-validation yes;
        */
        /* Path to ISC DLV key */
        bindkeys-file "/etc/named.iscdlv.key";

        managed-keys-directory "/var/named/dynamic";

        pid-file "/run/named/named.pid";
        session-keyfile "/run/named/session.key";
};

logging {
        channel default_debug {
                file "data/named.run";
                severity dynamic;
        };
};

zone "." IN {
        type hint;
        file "named.ca";
};

zone "abc.local" { type master; file "abc.db"; allow-transfer { 192.168.102.132; };  };

zone "102.168.192.IN-ADDR.ARPA" { type master; file "cba.db"; allow-transfer { 192.168.102.132; }; };

include "/etc/named.rfc1912.zones";
include "/etc/named.root.key";

명명된.conf(슬레이브)

acl internals { 192.168.102.0/24; };

options {
        listen-on port 53 { 127.0.0.1; 192.168.102.132; };
        listen-on-v6 port 53 { ::1; };
        directory       "/var/named";
        dump-file       "/var/named/data/cache_dump.db";
        statistics-file "/var/named/data/named_stats.txt";
        memstatistics-file "/var/named/data/named_mem_stats.txt";
        recursing-file  "/var/named/data/named.recursing";
        secroots-file   "/var/named/data/named.secroots";
        allow-notify { 192.168.102.159; };
        allow-query     { localhost; internals; };

        recursion yes;

        dnssec-enable yes;
        dnssec-validation yes;

        /* Path to ISC DLV key */
        bindkeys-file "/etc/named.iscdlv.key";

        managed-keys-directory "/var/named/dynamic";

        pid-file "/run/named/named.pid";
        session-keyfile "/run/named/session.key";
};

logging {
        channel default_debug {
                file "data/named.run";
                severity dynamic;
        };
};

zone "." IN {
        type hint;
        file "named.ca";
};

zone "abc.local" { type slave; masters { 192.168.102.159; }; file "slaves/abc.db"; allow-transfer { 192.168.102.159; }; };

zone "102.168.192.IN-ADDR.ARPA" { type slave; masters { 192.168.102.159; }; file "slaves/cba.db"; allow-transfer { 192.168.102.159; }; };

include "/etc/named.rfc1912.zones";
include "/etc/named.root.key";

abc.db

$TTL 3H
$ORIGIN abc.local.
@       IN SOA ns1.abc.local. ns2.abc.local. (
                                        0       ; serial
                                        1D      ; refresh
                                        1H      ; retry
                                        1W      ; expire
                                        3H )    ; minimum
        IN NS ns1.abc.local.
        IN NS ns2.abc.local.
ns1     IN A 192.168.102.159
ns2     IN A 192.168.102.132

농구 협회 데이터베이스

$TTL 3H
$ORIGIN 102.168.192.IN-ADDR.ARPA.
@       IN SOA ns1.abc.local. ns2.abc.local. (
                                        0       ; serial
                                        1D      ; refresh
                                        1H      ; retry
                                        1W      ; expire
                                        3H )    ; minimum
        IN NS ns1.abc.local.
        IN NS ns2.abc.local.
159     IN PTR ns1.abc.local.
132     IN PTR ns2.abc.local.

실수

30-Dec-2018 20:33:24.030 managed-keys-zone: journal file is out of date: removing journal file

30-Dec-2018 20:33:24.030 managed-keys-zone: loaded serial 2

30-Dec-2018 20:33:24.031 zone 0.in-addr.arpa/IN: loaded serial 0

30-Dec-2018 20:33:24.033 zone 1.0.0.127.in-addr.arpa/IN: loaded serial 0

30-Dec-2018 20:33:24.035 zone localhost.localdomain/IN: loaded serial 0

30-Dec-2018 20:33:24.035 zone localhost/IN: loaded serial 0

30-Dec-2018 20:33:24.037 zone 1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ip6.arpa/IN: loaded serial 0

30-Dec-2018 20:33:24.037 all zones loaded

30-Dec-2018 20:33:24.037 running

30-Dec-2018 20:34:54.045 zone abc.local/IN: refresh: retry limit for master 192.168.102.159#53 exceeded (source 0.0.0.0#0)

30-Dec-2018 20:34:54.045 zone abc.local/IN: Transfer started.

30-Dec-2018 20:34:54.046 transfer of 'abc.local/IN' from 192.168.102.159#53: failed to connect: host unreachable

30-Dec-2018 20:34:54.046 transfer of 'abc.local/IN' from 192.168.102.159#53: Transfer completed: 0 messages, 0 records, 0 bytes, 0.001 secs (0 bytes/sec)

30-Dec-2018 20:34:54.547 zone 102.168.192.IN-ADDR.ARPA/IN: refresh: retry limit for master 192.168.102.159#53 exceeded (source 0.0.0.0#0)

마스터와 슬레이브 모두 서로 ping을 보낼 수 있습니다.