千家信息网

SHELL脚本之配置DNS分离服务

发表于:2025-02-02 作者:千家信息网编辑
千家信息网最后更新 2025年02月02日,配置DNS分离服务之解析脚本文件1.实验环境:准备2个网卡2.脚本如下:#!/bin/bash#配置双网卡#定义网卡配置文件位置k=/etc/sysconfig/network-scripts#复制网
千家信息网最后更新 2025年02月02日SHELL脚本之配置DNS分离服务

配置DNS分离服务之解析脚本文件

1.实验环境:

准备2个网卡

2.脚本如下:

#!/bin/bash#配置双网卡#定义网卡配置文件位置k=/etc/sysconfig/network-scripts#复制网卡配置文件模板cd /etc/sysconfig/network-scriptscp -p ifcfg-ens33 ifcfg-ens36#修改第1块网卡配置文件sed -i 's/dhcp/static/' $k/ifcfg-ens33cat >>$k/ifcfg-ens33 <<-EOFIPADDR=192.168.100.1NETMASK=255.255.255.0EOF#修改第2块网卡配置文件sed -i 's/dhcp/static/' $k/ifcfg-ens36sed -i 's/ens33/ens36/' $k/ifcfg-ens36sed -i '/UUID/d' $k/ifcfg-ens36cat >>$k/ifcfg-ens36 <<-EOFIPADDR=12.0.0.1NETMASK=255.255.255.0EOF#重启网络服务systemctl restart network#安装dns服务yum install bind -y#修改主配置文件sed -i '/listen-on/s/127.0.0.1/any/' /etc/named.confsed -i '/allow-query/s/localhost/any/' /etc/named.confsed -i '54,57d' /etc/named.conf#修改区域配置文件sed -i '12,$d' /etc/named.rfc1912.zonescat >>/etc/named.rfc1912.zones <<-EOFview "lan" {        match-clients { 192.168.100.0/24; };        zone "kgc.com." IN {                type master;                file "kgc.com.lan";        };        zone "." IN {                type hint;                file "named.ca";        };};view "wan" {match-clients { 12.0.0.0/24; };        zone "kgc.com." IN {                type master;                file "kgc.com.wan";        };};EOF#复制区域数据配置文件模板cp -p /var/named/named.localhost /var/named/kgc.com.lancp -p /var/named/named.localhost /var/named/kgc.com.wan#修改lan区域数据配置文件sed -i '2s/@/kgc.com/2' /var/named/kgc.com.lansed -i '2s/rname.invalid./admin.kgc.com/' /var/named/kgc.com.lansed -i '8,10d' /var/named/kgc.com.lancat >>/var/named/kgc.com.lan <<-EOF        NS  kgc.com.        A   192.168.100.1www     IN      A       192.168.100.99ftp     IN      A       192.168.100.88EOF#修改wan区域数据配置文件sed -i '2s/@/kgc.com/2' /var/named/kgc.com.wansed -i '2s/rname.invalid./admin.kgc.com/' /var/named/kgc.com.wansed -i '8,10' /var/named/kgc.com.wancat >>/var/named/kgc.com.wan <<-EOF        NS  kgc.com.        A   12.0.0.1www     IN      A       12.0.0.1ftp     IN      A       12.0.0.1EOF#开启服务systemctl start named#关闭防火墙systemctl stop firewalld.servicesetenforce 0
0