Debian 10 + Bind9 9.16.3 編譯安裝

先安裝相關所需套件

apt install build-essential pkg-config libuv1-dev pytho3-ply python3-ply libssl-dev libcap-dev default-libmysqlclient-dev libtool libtool-bin libnghttp2-dev

建立使用者、群組

groupadd -r named
useradd -s /sbin/nologin -M -r -g named named

下載 Bind9 9.16.3

https://downloads.isc.org/isc/bind9/9.16.3/bind-9.16.3.tar.xz

解壓縮後，開始編譯與安裝

./configure --enable-largefile --prefix=/usr/local/bind --with-openssl
make
make install 

配置 Bind9

cd /usr/local/bind/etc
../sbin/rndc-confgen >rndc.conf
tail -n10 rndc.conf | head -n9 | sed -e 's/# //g' > named.conf
wget https://www.internic.net/domain/named.root
mkdir /usr/local/bind/log/
mkdir /usr/local/bind/db/

將以下內容附加於 named.conf

zone "." IN {
    type hint;
    file "/usr/local/bind/etc/named.root";
};

options {
        listen-on-v6 { any; };
        tcp-clients 50000;
        directory "/usr/local/bind/var";
        pid-file "/usr/local/bind/var/bind.pid";
        dump-file "/usr/local/bind/var/bind_dump.db";
        statistics-file "/usr/local/bind/var/bind.stats";
        rate-limit {
                nxdomains-per-second 3;
                window 1;
        };
        notify yes;
        recursion no;
        version "ooxx-bind:1.0.24";
        allow-notify       { none; };
        allow-recursion    { any; };
        allow-transfer     { none; };
        allow-query        { any; };
        additional-from-cache no;
};

logging {
        channel bind_log {
                file "/usr/local/bind/log/bind.log" versions 3 size 20m;
                severity info;
                print-time yes;
                print-severity yes;
                print-category yes;
        };
        category default {
                bind_log;
        };
};
zone "csie.online" in {
    type    master;
    file    "/usr/local/bind/db/csie.online/csie.online.db";
};

編輯 /usr/local/bind/db/csie.online/csie.online.db 內容

$TTL 60
$ORIGIN csie.online.
@            IN    SOA    csie.online. admin.csie.online. (
                2019111200 ; Serial
                300 ; Refresh
                300 ; Retry
                300 ; Expire
                60 ) ; Negative Cache TTL

@            IN    NS    ns1.csie.online.
@            IN    NS    ns2.csie.online.
@            IN    A    999.444.555.34
@            IN    AAAA    XXXX:1688:1688:1688::1688
@            IN    MX 10   mail.server.
*            IN    A    999.444.555.34
*            IN    AAAA    XXXX:1688:1688:1688::1688

將 bind 目錄賦予給 named 權限

chown named:named /usr/local/bind/ -R

建立開機啟動

vi /usr/lib/systemd/system/named.service

貼上以下內容

[Unit]
Description=Internet domain name server
After=network.target

[Service]
ExecStart=/usr/local/bind/sbin/named -f -u named
ExecReload=/usr/local/bind/sbin/rndc reload
ExecStop=/usr/local/bind/sbin/rndc stop

[Install]
WantedBy=multi-user.target
Alias=bind.service

設定開機啟動

systemctl enable named
systemctl start named