??? DNS???????

1
??? DNS???????

• ??
• ??DNS????
• ??DNS???

2
????

• ????????????,??????Domain Name,?www.google.com.tw,
  ??????72.14.235.147??IP??,??Domain
  Name??????,IP????????,???????????????
• ??????????(FQDNFully Qualified Domain
  Name)?????,??FQDN?????
• ?????????????.?
• ?www.google.com.tw
• www??????????
• google.com.tw.????????????

3
DNS(Domain Name Server) ??

• DNS(Domain Name Server) ?????IP?FQDN????,DNS??????
  ?????????????Domain Name???IP Address
  ?,????????????????????, ?????????????????
• ??????DNS ????FQDN??IP??,????????????,???IP????FQD
  N??????,??????????????

4
????????

• ?1????Domain Name?????,??TWNIC?????????????????,?
  ?????????????????
• ?2??????????,TWNIC(????????????http//www.twnic.n
  et)?????????????????,????? ?????????????TWNIC?????
  ??????????,??????????
• ?3??????,?????????????????????
• ?4????????????????
• ?5??????????????,??DNS(Host/IP)?????????

5
DNS????(Hierarchical)????????

• DNS??????(Hierarchical)????????,?????,???Root
  Domain(???)?Top Level Domain(????)?Second Level
  Domain(?????)?Host(??)?
• ??DNS??????????????????,????????DNS?????????,?????
  ????????,????????????????,??????DNS?????????,?????
  ????,????????????????
• ????????DNS ??????,???????????????????????,???????
  ?????????,?????????Domain?????DNS??????,
  ?????????DNS???????

6
DNS????(Hierarchical)????????
7
?????????

• ?????????????????,?????????????(The Internet
  Corporation for Assigned Names and
  NumbersICANN)???????????,??IP??????????????(gener
  icTop-Level DomaingTLD)?????????(country code
  Top-Level DomainccTLD)?????,??????(Root
  Server)??????

8
?????????

• ???DNS??????,????????DNS?????????FQDN???,??Root
  DNS????????
• ???????????????,??ISO 3116???????(country
  code)???,??.tw????.cn????.hk??????????????????????
  ?,??????3???????????2?????,??
• .edu???????
• .mil????
• .gov????
• .com????
• .org????
• .net????
• .idv????
• ICANN?2000????7?????????.aero,.biz,.coop,.info,.
  museum,.name??.pro?

9
?????????

• ???????????????????,????????????????,??????
• ????????????????

10
????

• DNS???????? (Recursive Query),????????????
• ??DNS??????53,???DNS???UDP,DNS?DNS???TCP?Cache????
  ????????????????,Host????????,?????????

11
????
12
DNS ????

• ??(Domain)Root?????????????,???????????????,???ts
  lg.idv.tw??idv.tw??????????
• ????????????????DNS???,????????,?????????????????
  ,??????????????????DNS???????????????,????????
• ??(Forwarding)????FQDN???IP??????

13
DNS ????

• ??(Reversing) ???????,?????IP????????FQDN?
• Primary(Master)DNS???????????????????????????????
  ?????????,????????DNS??,???????????,??????????????
  ?IP????????
• Secondary(Slave)DNS??????????????????????????????
  ???????DNS?????????

14
DNS ????

• Cache-only?????DNS???????Domain
  Name?cache??,????DNS????????????,??????Domain?data
  base???
• Resolver????DNS???????,????DNS???????????????

15
????(DNS?????)

• Name Server Software Windows (http//www.dns.net/
  dnsrd/servers/windows.html)???????????????????,???
  ??????????????,?????????????
• ??Bind??,?BIND9.4.2.zip,???????????????,??BINDInst
  all.exe?????,?????,?????,???????(C\WINDOWS\system
  32\dns)????????,?????bin?etc?
• bin?????????DNS???????,etc????????????????

16
DNS?????
17
???

• ????????google.com.tw?????(??????????,??????)???
  ??????????
• DNS????FQDN?
• dns.google.com.tw
• IP? 192.192.73.46
• ?????etc\named.conf,? C\WINWONS\system32\dns\etc?
  ????named.conf???named????,named????????zone
  files?

18
named.conf??

• options
• directory "C\WINDOWS\system32\dns\etc\named"
• zone "." IN
• type hint
• file "named.ca"
• zone "localhost" IN
• type master
• file "localhost.zone"
• allow-update none
• zone "0.0.127.in-addr.arpa" IN
• type master
• file "named.local"
• allow-update none
• zone "google.com.tw"
• type master

19
name.conf ??????????

• options(??)?BIND8???????,options??????????
  ??????????,????????????????,??????
• directory "C\WINDOWS\system32\dns\etc\named"
• ????????

20
name.conf ??????????

• zone(??) ???????????????????,????????????????,???
  ?????????????,????
• root???DNS??????????????,???root??,????????DNS???
  ??????,?????????????,??root ?????,???root?????????
  ?named.ca(????),?type???hint?,????????(???????ftp
  //rs.internic.net/domain/named.root???????)?

21
name.conf ??????????

• localhost????????????????,?????????,??????,??????
  ??????????????????,????????????????,localhost.zone
  ????????
• TTL 86400
• ORIGIN localhost.
• _at_ IN SOA _at_ root (
• 2008013001 serial (d. adams)
• 3600 refresh
• 900 retry
• 3600000 expiry
• 3600 ) minimum
• IN NS _at_
• IN A 127.0.0.1

22
name.conf ??????????

• TTL ????DNS?????????????,?????
• ORIGIN ??????????????,????ORIGIN ??,???
  /etc/named.conf ????zone?????
• _at_??????????,???localhost?
• SOASOA ??,??????????
• root?????,???????_at_??"."?????? " .
  ",??admin.abc.com.tw.???admin_at_abc.com.tw?
• 20080130Serial ???,????????????,?????????,
  ???2???, ??2004021101
• 3600Refresh ??????????????????,???3600 ??
• 900Retry ????,???????????,?????????,????????
• 3600000Expire????,??????????????????????,???????
• 3600Minimum ???????
• IN NS _at_????NS??,?????????????localhost.(_at_)?
• IN A 127.0.0.1????A(??)??,????????????????IP?127.
  0.0.1?

23
name.conf ??????????

• 0.0.127.in-addr.arpa???"0.0.127.in-addr.arpa"????
  ????,?named.local?????????
• TTL 86400
• _at_ IN SOA localhost.
  root.localhost. (
• 2008013001
  Serial
• 28800
  Refresh
• 14400
  Retry
• 3600000
  Expire
• 86400 )
  Minimum
• IN NS localhost.
• 1 IN PTR localhost.

24
name.conf ??????????

• google.com.tw??????,???????localhost.zone????,???
  ???????(resource records),????????????????google.c
  om.tw.hosts????
• TTL 86400
• _at_ IN SOA google.com.tw. postmaster.google.com.tw.
  (
• 2008013001 serial
• 3600 refresh
• 900 retry
• 3600000 expiry
• 3600 ) minimum
• _at_ IN NS dns.google.com.tw.
• google.com.tw. IN A 192.192.73.46
• www IN A 192.192.73.3
• mail IN A 192.192.73.1
• mail IN MX 5 mail.ee.oit.edu.tw.

25
name.conf ??????????

• ????
• NS??????????????????
• A?????????,????????IP??,????????????IP????
• CNAME???????????????
• MX????mail??????
• PTR????IP??????????,??????

26
name.conf ??????????

• 73.192.192.in-addr.arpa???????PTR???IP??????FQDN?
  ????????,???????????C???????,?????????,????????ISP
  ?????,???ISP???????google.com.tw.rev??????
• TTL 86400
• _at_ IN SOA google.com.tw. postmaster.google.com.tw.
  (
• 2008013001 serial
• 3600 refresh
• 900 retry
• 3600000 expiry
• 3600 ) minimum
• _at_ IN NS dns.google.com.tw.
• 46 IN PTR www.google.com.tw.
• 1 IN PTR mail.google.com.tw.

27
??Bind

• ????????,??????? C\WINWONS\system32\dns\bin
  ??????"named -f"??????Bind

28
DNS??????

• ??????DNS???????????nslookup????,????????DNS???,??
  ?????????????????????????????????Internet
  Protocol(TCP/IP)?,????????DNS??????

29
??????IP??

• ?nslookup???????IP??,nslookup????????
• Server??DNS???
• Set type ?????Set typesoa, set typemx
• ????DNS??????192.192.73.46,??????SOA?MX?PTR???????
  ??????

30
??????IP??
31
????

1. ????????????DNS??????
2. ?????DNS??????DNS?????
3. ????IP??????DNS???
4. ??Dynamic DNS?
5. ??????DNS???
6. ????DNS???
7. ??DNS??????Unix?????????????
8. ??BIND??????????
9. ??BIND?????????
10. ??Nslookup??????????