{"id":543,"date":"2020-04-04T02:28:07","date_gmt":"2020-04-03T18:28:07","guid":{"rendered":"https:\/\/broso.synology.me\/wordpress\/?p=543"},"modified":"2021-07-19T00:09:15","modified_gmt":"2021-07-18T16:09:15","slug":"%e5%8d%80%e7%b6%b2-dns-server-%e8%88%87%e8%b7%af%e7%94%b1%e5%99%a8%e5%85%a7%e5%bb%ba-dns-server-%e7%9a%84%e8%a1%9d%e7%aa%81%e8%88%87%e8%a8%ad%e5%ae%9a","status":"publish","type":"post","link":"https:\/\/cychien.tw\/wordpress\/2020\/04\/04\/%e5%8d%80%e7%b6%b2-dns-server-%e8%88%87%e8%b7%af%e7%94%b1%e5%99%a8%e5%85%a7%e5%bb%ba-dns-server-%e7%9a%84%e8%a1%9d%e7%aa%81%e8%88%87%e8%a8%ad%e5%ae%9a\/","title":{"rendered":"\u5340\u7db2 DNS Server \u8207\u8def\u7531\u5668\u5167\u5efa DNS Server \u7684\u885d\u7a81\u8207\u8a2d\u5b9a"},"content":{"rendered":"<p>\u8def\u7531\u5668\u4e00\u822c\u90fd\u6709\u5167\u5efa\u7c21\u6613\u578b\u7684 DNS server (dnsmasq)\uff0c\u53ef\u4ee5\u81ea\u884c\u8a2d\u5b9a\u672c\u5730\u6a5f\u5668\u7684 domain name\uff0c\u5982\u679c\u662f\u8981\u67e5\u8a62\u5916\u90e8 domain \uff0c\u4e5f\u53ef\u4ee5\u8a2d\u5b9a\u4e00\u5230\u591a\u7d44\u7684\u5916\u90e8 DNS server \u4ee5\u4fbf\u8f49\u767c\u5230\u5916\u90e8\u9032\u884c\u67e5\u8a62\uff0c\u4e00\u822c\u4f86\u8aaa\u5e38\u8a2d\u5b9a ISP \u63d0\u4f9b\u7684 DNS \u6216\u662f\u4f7f\u7528 Google \u5f37\u5927\u7684 8.8.8.8 \u53ca 8.8.4.4\u9019\u5169\u53f0 DNS\u3002<br \/>\n<!--more--><br \/>\n\u800c Synology \u4e5f\u53ef\u4ee5\u81ea\u5efa DNS server\uff0c\u800c\u4e14\u662f\u5b8c\u6574\u7248\u7684\uff0c\u5982\u679c\u8981\u555f\u52d5 AD \u7db2\u57df\uff0c\u5f97\u5148\u5b89\u88dd\u4e26\u555f\u52d5 DNS server\uff0c\u4ee5\u4fbf\u7ba1\u7406 AD \u7db2\u57df\u4e2d\u7684\u5404\u53f0\u4e3b\u6a5f\u540d\u7a31\u3002\u70ba\u4e86\u59a5\u5584\u7ba1\u7406\u5bb6\u4e2d\u5404\u9805\u88dd\u7f6e\uff0c\u6211\u555f\u7528\u4e86 AD \u7db2\u57df\uff0c\u4e26\u5c07\u5bb6\u4e2d\u7684\u8a2d\u5099\u90fd\u9010\u4e00\u7684\u8a2d\u5b9a\u5230 Synology \u7684 DNS server \u4e2d\uff0c\u540c\u6642\u4e5f\u8a2d\u5b9a\u4e86 DNS \u5916\u90e8\u8f49\u5bc4\u7ad9\u7684\u898f\u5247\uff0c\u540c\u6642\u70ba\u4e86\u52a0\u5feb\u700f\u89bd\u7684\u901f\u5ea6\uff0cbroso.synology.me \u5728\u672c\u5730\u88dd\u7f6e\u9032\u884c\u67e5\u8a62\u6642\uff0c\u9084\u53ef\u4ee5\u4f7f\u7528\u5340\u7db2\u7684 IP \u4f86\u700f\u89bd\uff0c\u5c11\u4e86\u4e00\u5c64 NAT \u7684\u8f49\u63db\uff0c\u901f\u5ea6\u6703\u52a0\u5feb\u4e0d\u5c11\u3002<\/p>\n<p>\u63a5\u8457\u554f\u984c\u4f86\u4e86\uff0c\u6211\u767c\u73fe\u5e38\u5e38\u5728\u5340\u7db2\u700f\u89bd\u00a0<a href=\"https:\/\/broso.synology.me\" target=\"_blank\" rel=\"noopener noreferrer\">\u96a8\u60f3\u610f\u8a8c<\/a> \u6642\uff0c\u5e38\u5e38\u6703\u767c\u751f\u7121\u6cd5\u986f\u793a\u7db2\u9801\uff0c\u518d\u4ed4\u7d30\u4f7f\u7528 nslookup \u6307\u4ee4\u67e5\u8a62\uff0c\u624d\u767c\u73fe\u539f\u4f86 broso.synology.me \u5728\u672c\u5730\u67e5\u8a62\u6642\uff0c\u7121\u6cd5\u5f9e Synology \u7684 DNS \u67e5\u8a62\u5230\u5340\u7db2 IP\uff0c\u6240\u4ee5\u7576\u7136\u7121\u6cd5\u986f\u793a\u7db2\u9801\u3002<br \/>\n<img decoding=\"async\" class=\"alignnone wp-image-544 size-full lazyload\" data-src=\"https:\/\/broso.synology.me\/wordpress\/wp-content\/uploads\/2020\/04\/nslookup_fail.png\" alt=\"\" width=\"745\" height=\"365\" data-srcset=\"https:\/\/cychien.tw\/wordpress\/wp-content\/uploads\/2020\/04\/nslookup_fail.png 745w, https:\/\/cychien.tw\/wordpress\/wp-content\/uploads\/2020\/04\/nslookup_fail-300x147.png 300w\" data-sizes=\"(max-width: 745px) 100vw, 745px\" src=\"data:image\/svg+xml;base64,PHN2ZyB3aWR0aD0iMSIgaGVpZ2h0PSIxIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciPjwvc3ZnPg==\" style=\"--smush-placeholder-width: 745px; --smush-placeholder-aspect-ratio: 745\/365;\" \/><\/p>\n<p>\u4ed4\u7d30\u9806\u4e86\u4e00\u904d\u76ee\u524d\u8def\u7531\u5668\u8207Synology\u4e0a\u7684 DNS \u8a2d\u5b9a\uff0c\u61c9\u8a72\u662f\u76ee\u524d\u7684\u8a2d\u5b9a\u6df7\u4e82\uff0c\u6bcf\u500b DNS Server \u90fd\u6709\u8a2d\u5b9a\u5916\u90e8\u8f49\u5bc4\u7ad9\u9032\u884c\u67e5\u8a62\uff0c\u540c\u6642\u8def\u7531\u5668\u4e0a\u9762\u7684\u8a2d\u5b9a\u4e5f\u6709\u9ede\u7709\u89d2\u8981\u6ce8\u610f\uff0c\u6240\u4ee5\u9084\u662f\u8a18\u9304\u4e00\u4e0b\uff0c\u65b9\u4fbf\u81ea\u5df1\u4ee5\u5f8c\u56de\u982d\u4f86\u67e5\u8a62\u3002<\/p>\n<ul>\n<li>\n<h3>DNS \u7684\u8a2d\u5b9a\u61c9\u8a72\u5206\u5c64\u6709\u5e8f\uff0c\u4e26\u4e14\u4e0d\u8981\u90fd\u8a2d\u5b9a\u53ef\u4ee5\u5f80\u5916\u67e5\u8a62\u3002<\/h3>\n<\/li>\n<\/ul>\n<p>\u56e0\u70ba\u6240\u6709\u88dd\u7f6e\u7684 IP \u662f\u7531\u8def\u7531\u5668\u7684 DHCP \u4f86\u9032\u884c\u6d3e\u767c\uff0c\u6240\u4ee5\u9810\u8a2d\u7684 DNS \u5c31\u9084\u662f\u8a2d\u5b9a\u5728\u8def\u7531\u5668\u4e0a\u7684 DNS\uff0c\u4f46\u8def\u7531\u5668\u7684 DNS \u8a2d\u5b9a\uff0c\u5916\u90e8\u8f49\u5bc4\u7ad9\u5c31\u53ea\u8a2d\u5b9a Synology \u7684 IP\uff08\u4e0d\u8981\u518d\u8a2d\u5b9a\u5916\u90e8\u8f49\u5bc4\u7ad9\uff0c\u50cf\u662f ISP \u6216\u662f Google \u7684 DNS\uff09\uff0c\u4ee5\u4fbf\u5c07\u6240\u6709\u7684 DNS \u67e5\u8a62\u90fd\u8f49\u4ea4\u7d66 Synology \u7684 DNS \u4f86\u56de\u61c9\uff08\u5982\u6b64 broso.synology.me \u624d\u6709\u6a5f\u6703\u67e5\u8a62\u70ba\u672c\u5730\u7684\u5340\u7db2 IP\uff09\u3002\u540c\u6642\u8def\u7531\u5668\u7684\u5f80\u4e0a\u5c64 DNS \u8f49\u5bc4\u67e5\u8a62\u8a2d\u5b9a\u7576\u7136\u8981\u6253\u958b\u56c9\uff08\u5982\u4e0b\u7d05\u6846\uff09\u3002<img decoding=\"async\" class=\"alignnone wp-image-546 size-full lazyload\" data-src=\"https:\/\/broso.synology.me\/wordpress\/wp-content\/uploads\/2020\/04\/router_dns_setting_1.png\" alt=\"\" width=\"758\" height=\"814\" data-srcset=\"https:\/\/cychien.tw\/wordpress\/wp-content\/uploads\/2020\/04\/router_dns_setting_1.png 758w, https:\/\/cychien.tw\/wordpress\/wp-content\/uploads\/2020\/04\/router_dns_setting_1-279x300.png 279w\" data-sizes=\"(max-width: 758px) 100vw, 758px\" src=\"data:image\/svg+xml;base64,PHN2ZyB3aWR0aD0iMSIgaGVpZ2h0PSIxIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciPjwvc3ZnPg==\" style=\"--smush-placeholder-width: 758px; --smush-placeholder-aspect-ratio: 758\/814;\" \/><\/p>\n<p>\u5176\u6b21 Synology \u7684 DNS \u8a2d\u5b9a\u5c31\u5f97\u8a2d\u5b9a\u5916\u90e8\u8f49\u5bc4\u7ad9\u4e86\uff0c\u4e26\u4e14\u6307\u5411 ISP \u6216 Google \u7684 DNS\u3002<img decoding=\"async\" class=\"alignnone size-full wp-image-548 lazyload\" data-src=\"https:\/\/broso.synology.me\/wordpress\/wp-content\/uploads\/2020\/04\/synology_dns_setting.png\" alt=\"\" width=\"998\" height=\"432\" data-srcset=\"https:\/\/cychien.tw\/wordpress\/wp-content\/uploads\/2020\/04\/synology_dns_setting.png 998w, https:\/\/cychien.tw\/wordpress\/wp-content\/uploads\/2020\/04\/synology_dns_setting-300x130.png 300w, https:\/\/cychien.tw\/wordpress\/wp-content\/uploads\/2020\/04\/synology_dns_setting-768x332.png 768w\" data-sizes=\"(max-width: 998px) 100vw, 998px\" src=\"data:image\/svg+xml;base64,PHN2ZyB3aWR0aD0iMSIgaGVpZ2h0PSIxIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciPjwvc3ZnPg==\" style=\"--smush-placeholder-width: 998px; --smush-placeholder-aspect-ratio: 998\/432;\" \/><\/p>\n<ul>\n<li>\n<h3>RT-AC86U \u7684 DNS \u8a2d\u5b9a\u8981\u6ce8\u610f<\/h3>\n<\/li>\n<\/ul>\n<p>DNS Rebind protection \u8a18\u5f97\u8981\u95dc\u6389\uff0c\u4e0d\u7136 dnsmasq \u5f80\u4e0a\u5c64\u672c\u5730\u7aef\u7684 DNS \u67e5\u8a62\u6642\uff0c\u6703\u5224\u5b9a\u70ba DNS Rebind attack\u3002<br \/>\n<img decoding=\"async\" class=\"alignnone wp-image-549 size-full lazyload\" data-src=\"https:\/\/broso.synology.me\/wordpress\/wp-content\/uploads\/2020\/04\/router_dns_setting_2.png\" alt=\"\" width=\"755\" height=\"347\" data-srcset=\"https:\/\/cychien.tw\/wordpress\/wp-content\/uploads\/2020\/04\/router_dns_setting_2.png 755w, https:\/\/cychien.tw\/wordpress\/wp-content\/uploads\/2020\/04\/router_dns_setting_2-300x138.png 300w\" data-sizes=\"(max-width: 755px) 100vw, 755px\" src=\"data:image\/svg+xml;base64,PHN2ZyB3aWR0aD0iMSIgaGVpZ2h0PSIxIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciPjwvc3ZnPg==\" style=\"--smush-placeholder-width: 755px; --smush-placeholder-aspect-ratio: 755\/347;\" \/><br \/>\n<img decoding=\"async\" class=\"alignnone size-full wp-image-551 lazyload\" data-src=\"https:\/\/broso.synology.me\/wordpress\/wp-content\/uploads\/2020\/04\/dnsmasq_log.png\" alt=\"\" width=\"839\" height=\"208\" data-srcset=\"https:\/\/cychien.tw\/wordpress\/wp-content\/uploads\/2020\/04\/dnsmasq_log.png 839w, https:\/\/cychien.tw\/wordpress\/wp-content\/uploads\/2020\/04\/dnsmasq_log-300x74.png 300w, https:\/\/cychien.tw\/wordpress\/wp-content\/uploads\/2020\/04\/dnsmasq_log-768x190.png 768w\" data-sizes=\"(max-width: 839px) 100vw, 839px\" src=\"data:image\/svg+xml;base64,PHN2ZyB3aWR0aD0iMSIgaGVpZ2h0PSIxIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciPjwvc3ZnPg==\" style=\"--smush-placeholder-width: 839px; --smush-placeholder-aspect-ratio: 839\/208;\" \/><\/p>\n","protected":false},"excerpt":{"rendered":"<p>\u8def\u7531\u5668\u4e00\u822c\u90fd\u6709\u5167\u5efa\u7c21\u6613\u578b\u7684 DNS server (dnsmasq)\uff0c\u53ef\u4ee5\u81ea\u884c\u8a2d\u5b9a\u672c\u5730\u6a5f\u5668\u7684 domain n [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":546,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[39],"tags":[48,49,41],"class_list":["post-543","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-ittech-nas","tag-dns","tag-dnsmasq","tag-synology"],"_links":{"self":[{"href":"https:\/\/cychien.tw\/wordpress\/wp-json\/wp\/v2\/posts\/543","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cychien.tw\/wordpress\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cychien.tw\/wordpress\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cychien.tw\/wordpress\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/cychien.tw\/wordpress\/wp-json\/wp\/v2\/comments?post=543"}],"version-history":[{"count":5,"href":"https:\/\/cychien.tw\/wordpress\/wp-json\/wp\/v2\/posts\/543\/revisions"}],"predecessor-version":[{"id":639,"href":"https:\/\/cychien.tw\/wordpress\/wp-json\/wp\/v2\/posts\/543\/revisions\/639"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/cychien.tw\/wordpress\/wp-json\/wp\/v2\/media\/546"}],"wp:attachment":[{"href":"https:\/\/cychien.tw\/wordpress\/wp-json\/wp\/v2\/media?parent=543"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cychien.tw\/wordpress\/wp-json\/wp\/v2\/categories?post=543"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cychien.tw\/wordpress\/wp-json\/wp\/v2\/tags?post=543"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}