Ubuntu 22.04 BIND 内部 DNS – 内部名前解決と再帰問い合わせの設計

sudo apt update
sudo DEBIAN_FRONTEND=noninteractive apt-get install -y bind9 bind9-utils dnsutils

sudo tee /etc/bind/named.conf.options <<'EOF'
acl internal_networks {
    127.0.0.0/8;
    10.1.0.0/16;
    fd00::/8;
};

options {
    directory "/var/cache/bind";

    recursion yes;
    allow-recursion { internal_networks; };
    allow-query { internal_networks; };

    listen-on { 127.0.0.1; 10.1.0.10; };
    listen-on-v6 { ::1; fd00::a01:10; };

    dnssec-validation auto;
};
EOF

sudo tee /etc/bind/named.conf.local <<'EOF'
zone "example.local" {
    type primary;
    file "/etc/bind/zones/db.example.local";
};

zone "1.10.in-addr.arpa" {
    type primary;
    file "/etc/bind/zones/db.10.1";
};
EOF

sudo install -d -m 0755 /etc/bind/zones

sudo tee /etc/bind/zones/db.example.local <<'EOF'
$TTL 3600
@   IN SOA ns1.example.local. admin.example.local. (
        2026060801 ; serial
        3600       ; refresh
        900        ; retry
        604800     ; expire
        3600 )     ; negative cache ttl

    IN NS  ns1.example.local.

ns1     IN A    10.1.0.10
www     IN A    10.1.0.20
ldap    IN A    10.1.0.30
mail    IN A    10.1.0.40
EOF

sudo tee /etc/bind/zones/db.10.1 <<'EOF'
$TTL 3600
@   IN SOA ns1.example.local. admin.example.local. (
        2026060801
        3600
        900
        604800
        3600 )

    IN NS ns1.example.local.

10.0    IN PTR ns1.example.local.
20.0    IN PTR www.example.local.
30.0    IN PTR ldap.example.local.
40.0    IN PTR mail.example.local.
EOF

sudo named-checkconf
sudo named-checkzone example.local /etc/bind/zones/db.example.local
sudo named-checkzone 1.10.in-addr.arpa /etc/bind/zones/db.10.1
sudo systemctl restart bind9

dig @127.0.0.1 www.example.local A
dig @127.0.0.1 ldap.example.local A
dig @127.0.0.1 -x 10.1.0.20
dig @127.0.0.1 example.com A