Linux下BIND9.6配置

#wget http://ftp.isc.org/isc/bind9/9.6.1-P1/bind-9.6.1-P1.tar.gz
#tar zxvf bind-9.6.1-P1.tar.gz
#cd bind-9.6.1-P1
#./configure --prefix=/usr/local/named --enable-threads --disable-openssl-version-check --disable-ipv6
#make && make install
#cd /usr/local/named
#sbin/rndc-confgen > etc/rndc.conf 
 
# cd etc
# tail -10 rndc.conf | head -9 | sed s/#\ //g > named.conf
＃cd /usr/local/named/etc
配置named.conf文件
 key "rndc-key" {
       algorithm hmac-md5;
       secret "jRCkX7915o21W9COW0ps4Q==";
 };
 controls {
       inet 127.0.0.1 port 953
               allow { 127.0.0.1; } keys { "rndc-key"; };
 };
acl "trusted" {
     61.178.241.0/24;
};
acl "CNC" {
   60.28.0.0/15;
   202.106.0.0/16;
   202.102.224.0/19;
   125.46.11.0/24;
   58.37.0.0/16;
   202.98.0.0/19;
   125.32.0.0/16;
   218.67.128.0/17;
   218.68.0.0/16;
   218.69.0.0/16;
   60.0.0.0/13;
   60.8.0.0/15;
   60.10.0.0/16;
   198.32.0.0/16;
   205.207.237.0/23;
   62.128.160.0/20;
   62.143.104.0/21;
   62.240.178.0/24;
   96.224.0.0/11;
   97.80.0.0/12;
   98.16.0.0/13;
   98.160.0.0/11;
   98.192.0.0/10;
   99.128.0.0/10;
   99.224.0.0/11;
   116.2.0.0/15;
   116.12.139.192/28;
   116.56.128.0/19;
   116.60.0.0/16;
   116.62.0.0/18;
   116.112.0.0/12;
   117.8.0.0/13;
   125.36.0.0/14;
   61.136.0.0/18;
   58.24.0.0/15;
   58.16.0.0/16;
58.17.0.0/17;
58.17.128.0/17;
58.