我正在尝试测试dnsmasq和未绑定服务器。当我从机器"Y“发出getaddrinfo()请求时,我从dnsmasq服务器机器"X”获得dns查询响应。但是,当我通过关闭dnsmasq并打开机器"X“上的未绑定服务器从未绑定客户端API发送dns查询时,我没有看到任何dns响应/解析。
我已经从源代码中安装了未绑定服务器,并解决了它对"X“上RHEL5的依赖关系。
我将机器"X“上的未绑定服务器启动为:
未绑定的-c /usr/local/etc/ unbound /un界.local
而且正常的启动没有任何错误。
unbound.conf的配置是:
server:
verbosity: 1
## Specify the interface address to listen on:
interface: xxx.xxx.xxx.xxx
## To listen on all interfaces use:
# interface: 0.0.0.0
do-ip4: yes
do-ip6: yes
do-udp: yes
do-tcp: yes
do-daemonize: yes
access-control: 0.0.0.0/0 allow
## Other access control examples
#access-control: 192.168.1.0/24 action
## 'action' should be replaced by any one of:
#deny (drop message)
#refuse (sends a DNS rcode REFUSED error message back)
#allow (recursive ok)
#allow_snoop (recursive and nonrecursive ok).
## Minimum lifetime of cache entries in seconds. Default is 0.
#cache-min-ttl: 60
## Maximum lifetime of cached entries. Default is 86400 seconds (1 day).
#cache-max-ttl: 172800
## enable to not answer id.server and hostname.bind queries.
hide-identity: yes
## enable to not answer version.server and version.bind queries.
hide-version: yes
## default is to use syslog, which will log to /var/log/messages.
use-syslog: yes
## to log elsewhere, set 'use-syslog' to 'no' and set the log file location below:
#logfile: /var/log/unbound
python:
remote-control:
control-enable: no
## Stub zones are like forward zones (see below) but must only contain authority server (no recursive servers)
#stub-zone:
# name: "my.test.com"
## Note for forward zones, the destination servers must be able to handle recursion to other DNS server
## Forward all *.example.com queries to the server at 192.168.1.1
#forward-zone:
# name: "example.com"
# forward-addr: 192.168.1.1
## Forward all other queries to the Verizon DNS servers
forward-zone:
name: "."
## Level3 Verizon
forward-addr: 4.2.2.1
forward-addr: 4.2.2.4请告诉我,如果我在哪里出错,还想知道dnsmasq服务器是否实现了线程/叉子进程来处理查询,我们能在/etc/dnsmasq.conf中设置相同的子进程吗?
发布于 2014-07-17 07:21:49
必须在unbound.conf中添加配置
access-control: <IP of client machine>/8 allow_snoop发布于 2014-07-19 06:42:32
.You必须将您的ip添加到该列表中。
访问控制: /8 allow_snoop
Dnsmasq实现了一个进程model.So --他将为每个新请求分叉一个新进程,但是unbound具有一个静态计数,它是在处理所有后续请求时生成的进程数,而且您还可以在未绑定的情况下使用线程。
https://stackoverflow.com/questions/24736522
复制相似问题