user3486308's questions

这是我的 DNS 转发文件，当我想将它作为服务运行时它给了我错误。我认为这是一个语法错误，但不知道如何纠正它？

$TTL 86400
@   IN  SOA     ns1.sudia.com. root.sudia.com. (
                                              3           ;Serial
                                              3600        ;Refresh
                                              1800        ;Retry
                                              604800      ;Expire
                                              86400       ;Minimum TTL
)
@   IN  SOA     ns2.sudia.com. root.sudia.com. (
                                              3           ;Serial
                                              3600        ;Refresh
                                              1800        ;Retry
                                              604800      ;Expire
                                              86400       ;Minimum TTL
)



;Name Server Information
@       IN  NS      ns1.sudia.com.
@       IN  NS      ns2.sudia.com.

;IP address of Name Server
ns1       IN  A       136.243.197.164
ns2       IN  A       136.243.197.164

;A - Record HostName To Ip Address
sudia.com.     IN  A       136.243.197.164
www             IN  A       136.243.197.164

;CNAME record
ftp     IN CNAME        www.sudia.com.

这是错误：

(base) [root@wdrserver named]# systemctl status named.service
● named.service - Berkeley Internet Name Domain (DNS)
   Loaded: loaded (/usr/lib/systemd/system/named.service; enabled; vendor preset: disabled)
   Active: failed (Result: exit-code) since Mon 2020-06-22 23:39:21 +0430; 13s ago
  Process: 3135 ExecStop=/bin/sh -c /usr/sbin/rndc stop > /dev/null 2>&1 || /bin/kill -TERM $MAINPID (code=exited, status=0/SUCCESS)
  Process: 3110 ExecStart=/usr/sbin/named -u named -c ${NAMEDCONF} $OPTIONS (code=exited, status=0/SUCCESS)
  Process: 3233 ExecStartPre=/bin/bash -c if [ ! "$DISABLE_ZONE_CHECKING" == "yes" ]; then /usr/sbin/named-checkconf -z "$NAMEDCONF"; else echo "Checking of zone files is disabled"; fi (co>
 Main PID: 3111 (code=exited, status=0/SUCCESS)

Jun 22 23:39:21 wdrserver bash[3233]: zone 1.0.0.127.in-addr.arpa/IN: loaded serial 0
Jun 22 23:39:21 wdrserver bash[3233]: zone 0.in-addr.arpa/IN: loaded serial 0
Jun 22 23:39:21 wdrserver bash[3233]: dns_master_load: fwd.sudia.com.db:28: sudia.com: multiple RRs of singleton type
Jun 22 23:39:21 wdrserver bash[3233]: zone sudia.com/IN: loading from master file fwd.sudia.com.db failed: multiple RRs of singleton type
Jun 22 23:39:21 wdrserver bash[3233]: zone sudia.com/IN: not loaded due to errors.
Jun 22 23:39:21 wdrserver bash[3233]: _default/sudia.com/IN: multiple RRs of singleton type
Jun 22 23:39:21 wdrserver bash[3233]: zone 197.243.136.in-addr.arpa/IN: loaded serial 3
Jun 22 23:39:21 wdrserver systemd[1]: named.service: Control process exited, code=exited status=1
Jun 22 23:39:21 wdrserver systemd[1]: named.service: Failed with result 'exit-code'.
Jun 22 23:39:21 wdrserver systemd[1]: Failed to start Berkeley Internet Name Domain (DNS).

我使用以下文件创建了一个 DNS 服务器，将我的域地址映射sudia.com到我的 VPS 服务器，但它不起作用，我无法使用我的域地址访问我的服务器。还必须说有一个 NginX 正在运行http://136.243.197.164:3200。

/etc/named.conf：

        directory       "/var/named";
        dump-file       "/var/named/data/cache_dump.db";
        statistics-file "/var/named/data/named_stats.txt";
        memstatistics-file "/var/named/data/named_mem_stats.txt";
        secroots-file   "/var/named/data/named.secroots";
        recursing-file  "/var/named/data/named.recursing";
        allow-query     { localhost; 136.243.197.164;};

        /*
         - If you are building an AUTHORITATIVE DNS server, do NOT enable recursion.
         - If you are building a RECURSIVE (caching) DNS server, you need to enable
           recursion.
         - If your recursive DNS server has a public IP address, you MUST enable access
           control to limit queries to your legitimate users. Failing to do so will
           cause your server to become part of large scale DNS amplification
           attacks. Implementing BCP38 within your network would greatly
           reduce such attack surface
        */
        recursion yes;

        dnssec-enable yes;
        dnssec-validation yes;

        managed-keys-directory "/var/named/dynamic";

        pid-file "/run/named/named.pid";
        session-keyfile "/run/named/session.key";

        /* https://fedoraproject.org/wiki/Changes/CryptoPolicy */
        include "/etc/crypto-policies/back-ends/bind.config";
};

logging {
        channel default_debug {
                file "data/named.run";
                severity dynamic;
        };
};

zone "." IN {
        type hint;
        file "named.ca";
};

include "/etc/named.rfc1912.zones";
include "/etc/named.root.key";

//forward zone
zone "sudia.com" IN {
        type master;
        file "fwd.sudia.com.db";
        allow-update { none; };
        allow-query  { any; };
};

//backward zone
zone "197.243.136.in-addr.arpa" IN {
        type master;
        file "sudia.com.rev";
        allow-update { none; };
        allow-query  { any; };
};

/var/named/fwd.sudia.com.db：

$TTL 86400
@   IN  SOA     ns1.sudia.com. ns2.sudia.com. (
                                              3           ;Serial
                                              3600        ;Refresh
                                              1800        ;Retry
                                              604800      ;Expire
                                              86400       ;Minimum TTL
)

;Name Server Information
@       IN  NS      ns1.sudia.com.

;IP address of Name Server
ns1       IN  A       136.243.197.164

;A - Record HostName To Ip Address
www     IN  A       136.243.197.164

;CNAME record
ftp     IN CNAME        www.sudsuz.com.

/var/named/sudia.com.rev：

$TTL 86400
@   IN  SOA     ns1.sudia.com. ns2.sudia.com. (
                                       3           ;Serial
                                       3600        ;Refresh
                                       1800        ;Retry
                                       604800      ;Expire
                                       86400       ;Minimum TTL
)

;Name Server Information
@         IN      NS         ns1.sudia.com.

;Reverse lookup for Name Server
164        IN  PTR     ns1.sudia.com.

;PTR Record IP address to HostName
164      IN  PTR     www.sudia.com

编辑：这是结果host www.sudia.com：

www.sudia.com has address 136.243.197.164

但是host sudia.com（没有www）不起作用！