1、install bind

yum -y install bind-chroot bind-utils

2、修改named.conf

vim /etc/named.conf
options {
	listen-on port 53 { any; };     # 修改监听任意ip
	listen-on-v6 port 53 { ::1; };
	directory 	"/var/named";
	dump-file 	"/var/named/data/cache_dump.db";
	statistics-file "/var/named/data/named_stats.txt";
	memstatistics-file "/var/named/data/named_mem_stats.txt";
	secroots-file	"/var/named/data/named.secroots";
	recursing-file	"/var/named/data/named.recursing";
	allow-query     { any; };       # 允许任意ip查询

	/*
	 - If you are building an AUTHORITATIVE DNS server, do NOT enable recursion.
	 - If you are building a RECURSIVE (caching) DNS server, you need to enable
	   recursion.
	 - If your recursive DNS server has a public IP address, you MUST enable access
	   control to limit queries to your legitimate users. Failing to do so will
	   cause your server to become part of large scale DNS amplification
	   attacks. Implementing BCP38 within your network would greatly
	   reduce such attack surface
	*/
	recursion yes;

	dnssec-enable yes;
	dnssec-validation yes;

	managed-keys-directory "/var/named/dynamic";

	pid-file "/run/named/named.pid";
	session-keyfile "/run/named/session.key";

	/* https://fedoraproject.org/wiki/Changes/CryptoPolicy */
	include "/etc/crypto-policies/back-ends/bind.config";
};

logging {
        channel default_debug {
                file "data/named.run";
                severity dynamic;
        };
};

zone "." IN {
	type hint;
	file "named.ca";
};

include "/etc/named.rfc1912.zones";
include "/etc/named.root.key";

3、添加正向解析域

vim /etc/named.rfc1912.zones

# add content 
zone "levart123123.com" IN {
        type master;
        file "named.levart123123.com";
};

4、配置 named.levart123123.com 文件

cp -p  /var/named/named.localhost /var/named/named.levart123123.com

# cp -p 参数同时复制文件权限

vim /var/named/named.levart123123.com

# add content 
$TTL 1D
@	IN SOA	levart123123.com. root.levart123123.com. (
					0	; serial
					1D	; refresh
					1H	; retry
					1W	; expire
					3H )	; minimum
	NS	levart123123.com.
	A	127.0.0.1
	AAAA	::1
dsn IN A 127.0.0.1
www IN A 192.168.1.42

5、测试

nslookup -qt=A www.levart123123.com 127.0.0.1

# 127.0.0.1 为指定 dns server 地址

*** Invalid option: qt=A
Server:		127.0.0.1
Address:	127.0.0.1#53

Name:	www.levart123123.com
Address: 192.168.1.42