Site icon KerKer 的模組世界

DNS伺服器阻擋特定domain設定(Bind9)

&NewLine;<p class&equals;"wp-block-paragraph"> 邊做邊學,順便留個筆記,若有錯誤請不吝指教。 <&sol;p>&NewLine;&NewLine;&NewLine;&NewLine;<p class&equals;"wp-block-paragraph">有時候可能因為資安疑慮而不想讓使用者透過你的DNS Server查詢某些特定的Domain,這個時候我們可以用在DNS Server上把那個Domain鎖起來不給查。<&sol;p>&NewLine;&NewLine;&NewLine;&NewLine;<&excl;--more-->&NewLine;&NewLine;&NewLine;&NewLine;<p class&equals;"wp-block-paragraph">我們這邊以Bind9為例,首先要修改的是named&period;conf檔案,將要阻擋的Domain新增一筆zone並對應到一個專門用來封鎖的zonefile。 <&sol;p>&NewLine;&NewLine;&NewLine;&NewLine;<p class&equals;"wp-block-paragraph">一般來說這個檔案位置會在&&num;8221&semi;&sol;etc&sol;named&period;conf&&num;8221&semi;是&&num;8221&semi;&sol;etc&sol;namedb&sol;named&period;conf&&num;8221&semi;,實際位置還是有可有所異同。<&sol;p>&NewLine;&NewLine;&NewLine;&NewLine;<p class&equals;"wp-block-paragraph">以要封鎖test&period;com並將封鎖的zonefile命名為block&period;db為例,則在named&period;conf中加入下面這一行:<&sol;p>&NewLine;&NewLine;&NewLine;&NewLine;<pre class&equals;"wp-block-code"><code> zone &OpenCurlyDoubleQuote;test&period;com” &lbrace; type master&semi; file &OpenCurlyDoubleQuote;block&period;db"&semi; &rcub;&semi;<&sol;code><&sol;pre>&NewLine;&NewLine;&NewLine;&NewLine;<p class&equals;"wp-block-paragraph">然後我們要建立名為block&period;db的zonefile,並在其中加入一條正解記錄將其對應到127&period;0&period;0&period;1,可以參考以下設定方式:<&sol;p>&NewLine;&NewLine;&NewLine;&NewLine;<pre class&equals;"wp-block-code"><code> &dollar;TTL 24h&NewLine; &commat; IN SOA dns&period;kerker&period;website&period; &lpar;2019032700 86400 300 604800 3600 &rpar;&NewLine; &commat; IN NS dns&period;kerker&period;website&period;&NewLine; &commat; IN A 127&period;0&period;0&period;1&NewLine; &ast; IN A 127&period;0&period;0&period;1<&sol;code><&sol;pre>&NewLine;&NewLine;&NewLine;&NewLine;<p class&equals;"wp-block-paragraph">完成設定後記得重啟DNS服務:<&sol;p>&NewLine;&NewLine;&NewLine;&NewLine;<pre class&equals;"wp-block-code"><code> service named restart<&sol;code><&sol;pre>&NewLine;&NewLine;&NewLine;&NewLine;<p class&equals;"wp-block-paragraph">然後使用dig指令測試,&&num;8221&semi;&commat;&&num;8221&semi;符號後請填上自己的DNS IP:<&sol;p>&NewLine;&NewLine;&NewLine;&NewLine;<pre class&equals;"wp-block-code"><code> dig test&period;com &commat;dns&period;kerker&period;website<&sol;code><&sol;pre>&NewLine;&NewLine;&NewLine;&NewLine;<p class&equals;"wp-block-paragraph">如果有看到他回應你的A記錄為127&period;0&period;0&period;1就代表你成功了!<&sol;p>&NewLine;

Exit mobile version