{"id":41572,"date":"2024-11-07T16:56:10","date_gmt":"2024-11-07T16:56:10","guid":{"rendered":"https:\/\/atmokpo.com\/w\/?p=41572"},"modified":"2024-11-26T06:36:18","modified_gmt":"2024-11-26T06:36:18","slug":"12-dns-%ec%84%9c%eb%b2%84-%ea%b5%ac%ec%b6%95%ed%95%98%ea%b8%b0-bind9%eb%a5%bc-%ec%9d%b4%ec%9a%a9%ed%95%9c-%ec%9e%90%ec%b2%b4-dns-%ec%84%9c%eb%b2%84-%ea%b5%ac%ec%b6%95","status":"publish","type":"post","link":"https:\/\/atmokpo.com\/w\/41572\/","title":{"rendered":"12.DNS \uc11c\ubc84 \uad6c\ucd95\ud558\uae30, BIND9\ub97c \uc774\uc6a9\ud55c \uc790\uccb4 DNS \uc11c\ubc84 \uad6c\ucd95"},"content":{"rendered":"

<\/p>\n

DNS(Domain Name System)\ub294 \uc778\ud130\ub137 \uc778\ud504\ub77c\uc758 \uae30\ubcf8 \uad6c\uc131 \uc694\uc18c\ub85c, \ub3c4\uba54\uc778 \uc774\ub984\uc744 IP \uc8fc\uc18c\ub85c \ubcc0\ud658\ud558\ub294 \uc5ed\ud560\uc744 \ud569\ub2c8\ub2e4. \uc989, \uc0ac\uc6a9\uc790\uac00 \uc6f9\uc0ac\uc774\ud2b8 \uc8fc\uc18c\ub97c \uc785\ub825\ud560 \ub54c, \uadf8\uc5d0 \ud574\ub2f9\ud558\ub294 IP \uc8fc\uc18c\ub97c \ucc3e\uc544\uc8fc\ub294 \uc2dc\uc2a4\ud15c\uc785\ub2c8\ub2e4. \uc774\ubc88 \uae00\uc5d0\uc11c\ub294 BIND9\ub97c \uc774\uc6a9\ud574 \uc6b0\ubd84\ud22c \uc11c\ubc84\uc5d0\uc11c \uc790\uccb4 DNS \uc11c\ubc84\ub97c \uad6c\ucd95\ud558\ub294 \ubc29\ubc95\uc5d0 \ub300\ud574 \uc790\uc138\ud788 \uc124\uba85\ud558\uaca0\uc2b5\ub2c8\ub2e4.<\/p>\n

1. BIND9\ub780 \ubb34\uc5c7\uc778\uac00?<\/h2>\n

BIND(Berkley Internet Name Domain)\ub294 \uac00\uc7a5 \ub110\ub9ac \uc0ac\uc6a9\ub418\ub294 DNS \uc11c\ubc84 \uc18c\ud504\ud2b8\uc6e8\uc5b4 \uc911 \ud558\ub098\ub85c, \uc804 \uc138\uacc4\uc801\uc73c\ub85c \uc218\ub9ce\uc740 DNS \uc11c\ubc84\uc5d0\uc11c BIND\ub97c \uc0ac\uc6a9\ud558\uace0 \uc788\uc2b5\ub2c8\ub2e4. BIND9\ub294 BIND\uc758 \ucd5c\uc2e0 \ubc84\uc804\uc73c\ub85c, IPv6 \uc9c0\uc6d0, \ubcf4\uc548 \uae30\ub2a5 \ud5a5\uc0c1 \ubc0f \ub3d9\uc801 DNS \uc5c5\ub370\uc774\ud2b8 \ub4f1\uc758 \uae30\ub2a5\uc774 \ucd94\uac00\ub418\uc5c8\uc2b5\ub2c8\ub2e4.<\/p>\n

2. BIND9 \uc124\uce58\ud558\uae30<\/h2>\n

\uc6b0\ubd84\ud22c\uc5d0\uc11c BIND9\ub97c \uc124\uce58\ud558\ub294 \ubc29\ubc95\uc740 \ub9e4\uc6b0 \uac04\ub2e8\ud569\ub2c8\ub2e4. \ub2e4\uc74c \ub2e8\uacc4\ub97c \ub530\ub974\uba74 \ub429\ub2c8\ub2e4.<\/p>\n

sudo apt update\nsudo apt install bind9 bind9utils bind9-doc<\/code><\/pre>\n
\uc124\uce58\uac00 \uc644\ub8cc\ub418\uba74 BIND9 \uc11c\ube44\uc2a4\uac00 \uc790\ub3d9\uc73c\ub85c \uc2dc\uc791\ub429\ub2c8\ub2e4. \uc544\ub798 \uba85\ub839\uc5b4\ub85c \uc0c1\ud0dc\ub97c \ud655\uc778\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4.<\/p>\n
sudo systemctl status bind9<\/code><\/pre>\n
3. BIND9 \uae30\ubcf8 \uc124\uc815<\/h2>\n
\uc124\uce58\uac00 \uc644\ub8cc\ub41c \ud6c4\uc5d0\ub294 BIND9\uc758 \uae30\ubcf8 \uc124\uc815 \ud30c\uc77c\uc744 \uc218\uc815\ud574\uc57c \ud569\ub2c8\ub2e4. \uae30\ubcf8 \uc124\uc815 \ud30c\uc77c\uc740 \/etc\/bind\/named.conf.options\uc785\ub2c8\ub2e4.<\/p>\n
sudo nano \/etc\/bind\/named.conf.options<\/code><\/pre>\n
\ud30c\uc77c\uc744 \uc5f4\uc5b4 \uc544\ub798\uc640 \uac19\uc774 \uc218\uc815\ud569\ub2c8\ub2e4. \uc774 \uc124\uc815\uc740 DNS \uc694\uccad\uc744 \uc218\uc2e0\ud558\ub294 \uc11c\ubc84\uc758 IP \uc8fc\uc18c\ub97c \uc9c0\uc815\ud569\ub2c8\ub2e4.<\/p>\n
options {\n    directory \"\/var\/cache\/bind\";\n\n    \/\/ DNS \uc694\uccad\uc744 \uc218\uc2e0\ud560 IP \uc8fc\uc18c\n    listen-on { any; };\n    listen-on-v6 { any; };\n\n    \/\/ Forwarding \uc124\uc815\n    forwarders {\n        8.8.8.8; \/\/ Google DNS\n        8.8.4.4; \/\/ Google DNS\n    };\n    \n    \/\/ DNSSEC \uc124\uc815\n    dnssec-validation auto;\n\n    \/\/ \uae30\ubcf8\uc801\uc778 \ub3d9\uc791 \uc124\uc815\n    auth-nxdomain no;    \n    listening-on-v6 { any; };\n};<\/code><\/pre>\n
4. \uc874 \ud30c\uc77c(Zone File) \uc124\uc815<\/h2>\n
BIND\ub294 \uc874 \ud30c\uc77c\uc744 \ud1b5\ud574 \ub3c4\uba54\uc778 \uc774\ub984\uacfc \uadf8\uc5d0 \ud574\ub2f9\ud558\ub294 IP \uc8fc\uc18c\ub97c \uad00\ub9ac\ud569\ub2c8\ub2e4. \uc874 \ud30c\uc77c\uc744 \uc124\uc815\ud558\ub824\uba74 \uba3c\uc800 \/etc\/bind\/named.conf.local \ud30c\uc77c\uc744 \uc5f4\uc5b4\uc57c \ud569\ub2c8\ub2e4.<\/p>\n
sudo nano \/etc\/bind\/named.conf.local<\/code><\/pre>\n
\uc874 \ud30c\uc77c\uc744 \ucd94\uac00\ud558\ub824\uba74 \uc544\ub798\uc640 \uac19\uc774 \uc785\ub825\ud569\ub2c8\ub2e4.<\/p>\n
zone \"example.com\" {\n    type master;\n    file \"\/etc\/bind\/db.example.com\";\n};<\/code><\/pre>\n
\uc5ec\uae30\uc11c “example.com”\uc740 \uad00\ub9ac\ud560 \ub3c4\uba54\uc778 \uc774\ub984\uc73c\ub85c \uc6d0\ud558\ub294 \ub3c4\uba54\uc778\uc73c\ub85c \ubcc0\uacbd\ud569\ub2c8\ub2e4. \uc5bc\ub9c8\ub4e0\uc9c0 \uc790\uc2e0\uc774 \uad00\ub9ac\ud558\uace0 \uc2f6\uc740 \ub3c4\uba54\uc778\uc744 \ucd94\uac00\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4.<\/p>\n
5. \uc874 \ud30c\uc77c \uc0dd\uc131\ud558\uae30<\/h2>\n
\uc874 \ud30c\uc77c\uc744 \uc0dd\uc131\ud558\ub824\uba74 \uc544\ub798 \uba85\ub839\uc5b4\ub97c \uc0ac\uc6a9\ud558\uc154\uc57c \ud569\ub2c8\ub2e4.<\/p>\n
sudo cp \/etc\/bind\/db.empty \/etc\/bind\/db.example.com<\/code><\/pre>\n
\uadf8 \ub2e4\uc74c, \uc0dd\uc131\ud55c \ud30c\uc77c\uc744 \uc5f4\uc5b4 \ud544\uc694\ud55c \uac12\uc744 \ud3b8\uc9d1\ud569\ub2c8\ub2e4.<\/p>\n
sudo nano \/etc\/bind\/db.example.com<\/code><\/pre>\n
\uae30\ubcf8\uc801\uc778 \uc874 \ud30c\uc77c\uc740 \uc544\ub798\uc640 \uac19\uc2b5\ub2c8\ub2e4.<\/p>\n
$TTL    604800\n@       IN      SOA     ns.example.com. admin.example.com. (\n                              2         ; Serial\n                         604800         ; Refresh\n                          86400         ; Retry\n                        2419200         ; Expire\n                         604800 )       ; Negative Cache TTL\n;\n@       IN      NS      ns.example.com.\n@       IN      A       192.168.1.1\nns      IN      A       192.168.1.1<\/code><\/pre>\n
\uc5ec\uae30\uc11c 192.168.1.1<\/code>\ub294 \uc11c\ubc84\uc758 \uc2e4\uc81c IP \uc8fc\uc18c\ub85c \ubcc0\uacbd\ud574\uc57c \ud569\ub2c8\ub2e4. \ub610\ud55c, admin.example.com.<\/code>\uc740 \uad00\ub9ac\uc790 \uc774\uba54\uc77c\uc744 \uc758\ubbf8\ud558\uba70, \uc5ec\uae30\uc5d0\uc120 “@”\uac00 “.”\uc73c\ub85c \ub300\uccb4\ub418\uc5b4\uc57c \ud569\ub2c8\ub2e4.<\/p>\n
6. DNS \uc11c\ubc84 \uc7ac\uc2dc\uc791 \ubc0f \ud14c\uc2a4\ud2b8<\/h2>\n
\ubaa8\ub4e0 \uc124\uc815\uc744 \ub9c8\uce5c \ud6c4\uc5d0\ub294 BIND \uc11c\ube44\uc2a4\ub97c \uc7ac\uc2dc\uc791\ud574\uc57c \ud569\ub2c8\ub2e4. \ub2e4\uc74c \uba85\ub839\uc5b4\ub97c \ud1b5\ud574 \uc218\ud589\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4.<\/p>\n
sudo systemctl restart bind9<\/code><\/pre>\n
DNS \uc11c\ubc84\uac00 \uc815\uc0c1\uc801\uc73c\ub85c \uc791\ub3d9\ud558\ub294\uc9c0 \ud655\uc778\ud558\ub824\uba74 dig<\/code> \uba85\ub839\uc5b4\ub97c \uc0ac\uc6a9\ud558\uc5ec \ud655\uc778\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4.<\/p>\n
dig @localhost example.com<\/code><\/pre>\n
\uc815\uc0c1\uc801\uc73c\ub85c \uc791\ub3d9\ud558\uace0 \uc788\ub2e4\uba74, \uc751\ub2f5\uc73c\ub85c A \ub808\ucf54\ub4dc\uac00 \ubc18\ud658\ub429\ub2c8\ub2e4.<\/p>\n
7. \ubc29\ud654\ubcbd \uc124\uc815<\/h2>\n
DNS \uc11c\ubc84\uac00 \uc678\ubd80\uc5d0\uc11c \uc811\uadfc\ud560 \uc218 \uc788\ub3c4\ub85d \ud558\uae30 \uc704\ud574 \ubc29\ud654\ubcbd \uc124\uc815\uc744 \ud655\uc778\ud574\uc57c \ud569\ub2c8\ub2e4. UFW\ub97c \uc0ac\uc6a9\ud558\ub294 \uacbd\uc6b0, \ub2e4\uc74c \uba85\ub839\uc5b4\ub85c DNS \ud3ec\ud2b8\ub97c \uc5f4 \uc218 \uc788\uc2b5\ub2c8\ub2e4.<\/p>\n
sudo ufw allow 53<\/code><\/pre>\n
8. \uc815\ub9ac \ubc0f \uc694\uc57d<\/h2>\n
\uc774\uc81c \uc6b0\ubd84\ud22c \uc11c\ubc84\uc5d0\uc11c BIND9\ub97c \uc774\uc6a9\ud558\uc5ec \uc790\uccb4 DNS \uc11c\ubc84\ub97c \uc131\uacf5\uc801\uc73c\ub85c \uad6c\ucd95\ud558\uc600\uc2b5\ub2c8\ub2e4. \uc790\uccb4 DNS \uc11c\ubc84\ub294 \ube60\ub974\uace0 \uc548\uc804\ud558\uac8c \ub3c4\uba54\uc778 \uc774\ub984\uc744 \uad00\ub9ac\ud560 \uc218 \uc788\ub294 \ud6cc\ub96d\ud55c \ubc29\ubc95\uc785\ub2c8\ub2e4. BIND\uc758 \uac15\ub825\ud55c \uae30\ub2a5\uc744 \ud65c\uc6a9\ud558\uc5ec \ubcf5\uc7a1\ud55c \ud658\uacbd\uc5d0\uc11c\ub3c4 \ud6a8\uc728\uc801\uc778 DNS \uc11c\ube44\uc2a4\ub97c \uc81c\uacf5\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4.<\/p>\n
\uc774 \ubb38\uc11c\ub97c \ud1b5\ud574 BIND9\uc758 \uc124\uce58, \uae30\ubcf8 \uc124\uc815, \uc874 \ud30c\uc77c\uc758 \uc0dd\uc131 \ubc0f DNS \uc11c\ubc84\uc758 \ud14c\uc2a4\ud2b8\uae4c\uc9c0 \ubaa8\ub4e0 \uacfc\uc815\uc744 \uc548\ub0b4\ud558\uc600\uc2b5\ub2c8\ub2e4. \uc774\ub97c \ubc14\ud0d5\uc73c\ub85c \ubcf4\ub2e4 \uc2ec\ud654\ub41c DNS \uc11c\ubc84 \uad00\ub9ac \ubc0f \ubcf4\uc548 \uc124\uc815 \ub4f1\uc744 \uace0\ub824\ud574 \ubcf4\uc2dc\uae30 \ubc14\ub78d\ub2c8\ub2e4.<\/p>\n