使用中華電信固定IP
架設DNS後只能在本機查詢
不知是否有那裡沒設定好


【作業環境】
FreeBSD 5.4-RELEASE
BIND 9.3.1

named.conf
【路徑】
/etc/namedb/named.conf
【內容】
options {
directory "/etc/namedb";
pid-file "/var/run/named/pid";
dump-file "/var/dump/named_dump.db";
statistics-file "/var/stats/named.stats";

forwarders {
168.95.1.2 ;
168.95.192.3;
} ;

listen-on { 127.0.0.1; };

};

zone "." {
type hint;
file "named.root";
};

zone "0.0.127.IN-ADDR.ARPA" {
type master;
file "master/localhost.rev";
};

zone "donfa.com.tw" {
type master;
file "/etc/namedb/donfa.com.tw.hosts";
allow-transfer {168.95.192.3; 168.95.1.2; }; //BIND 9 以上版本 中華電信要求加入
};

//BIND 9 以上版本 中華電信要求加入【開始】
server 168.95.1.2 {
transfer-format one-answer;
};

server 168.95.192.3 {
transfer-format one-answer;
};
//BIND 9 以上版本 中華電信要求加入【結束】

zone "49.54.125.59.in-addr.arpa" {
type master;
file "/etc/namedb/59.125.54.49.rev";
};

----------------------------------------------------------

donfa.com.tw.hosts
【路徑】
/etc/namedb/donfa.com.tw.hosts
【內容】
$ttl 38400
donfa.com.tw. IN SOA dns.donfa.com.tw. reilong.mail.donfa.com.tw. (
1148456785
10800
3600
604800
38400 )
donfa.com.tw. IN NS dns.donfa.com.tw.
donfa.com.tw. IN MX 10 www.donfa.com.tw.
localhost IN A 127.0.0.1
www.donfa.com.tw. IN A 59.125.54.49
mail.donfa.com.tw. IN CNAME www
ftp.donfa.com.tw. IN CNAME www

----------------------------------------------------------

59.125.54.49.rev
【路徑】
/etc/namedb/59.125.54.49.rev
【內容】
$ttl 38400
49.54.125.59.in-addr.arpa. IN SOA dns.donfa.com.tw. reilong.mail.donfa.com.tw (
1148457174
10800
3600
604800
38400 )
49.54.125.59.in-addr.arpa. IN NS dns.donfa.com.tw.
49.54.125.59.in-addr.arpa. IN PTR dns.donfa.com.tw.

----------------------------------------------------------

/etc/resolv.conf
【內容】
domain donfa.com.tw
nameserver 127.0.0.1

----------------------------------------------------------

本機測試
www# nslookup www.donfa.com.tw
Server: 127.0.0.1
Address: 127.0.0.1#53

Name: www.donfa.com.tw
Address: 59.125.54.49

www# nslookup mail.donfa.com.tw
Server: 127.0.0.1
Address: 127.0.0.1#53

mail.donfa.com.tw canonical name = www.donfa.com.tw.
Name: www.donfa.com.tw
Address: 59.125.54.49

www# nslookup ftp.donfa.com.tw
Server: 127.0.0.1
Address: 127.0.0.1#53

ftp.donfa.com.tw canonical name = www.donfa.com.tw.
Name: www.donfa.com.tw
Address: 59.125.54.49

www# nslookup 59.125.54.49
Server: 127.0.0.1
Address: 127.0.0.1#53

49.54.125.59.in-addr.arpa name = dns.donfa.com.tw.

www# nslookup
> set type=MX
> donfa.com.tw
Server: 127.0.0.1
Address: 127.0.0.1#53

donfa.com.tw mail exchanger = 10 www.donfa.com.tw.

---------------------------------------------------------
非本機測試

Microsoft Windows XP [版本 5.1.2600]
(C) Copyright 1985-2001 Microsoft Corp.

C:\Documents and Settings\Administrator>cd\

C:\>nslookup
Default Server: dns.hinet.net
Address: 168.95.1.1

> www.donfa.com.tw
Server: dns.hinet.net
Address: 168.95.1.1

DNS request timed out.
timeout was 2 seconds.
DNS request timed out.
timeout was 2 seconds.
*** Request to dns.hinet.net timed-out
> donfa.com.tw
Server: dns.hinet.net
Address: 168.95.1.1

DNS request timed out.
timeout was 2 seconds.
DNS request timed out.
timeout was 2 seconds.
*** Request to dns.hinet.net timed-out
>

我猜是因為你在 config 檔中只設定 listen 127.0.0.1

listen-on { 127.0.0.1; };

感謝幫忙
我把named.conf內的
listen-on { 127.0.0.1; };
拿掉就可以了
謝謝