[解決済み] サーバーがNXDOMAINを見つけることができません。

質問

ローカルにDNSサーバーを設定しようとしています。 私は、/etc/named.confを設定します。

options {
    listen-on port 53 {
            127.0.0.1; 192.168.220.135;
            };
    listen-on-v6 port 53 { ::1; };
    directory       "/var/named";
    dump-file       "/var/named/data/cache_dump.db";
    statistics-file "/var/named/data/named_stats.txt";
    memstatistics-file "/var/named/data/named_mem_stats.txt";
    allow-query {
            localhost; 192.168.220.0/24;
            };
    allow-transfer{
            localhost; 192.168.220.136;
            };
    recursion yes;

    dnssec-enable yes;
    dnssec-validation yes;
    dnssec-lookaside auto;

    /* Path to ISC DLV key */
    bindkeys-file "/etc/named.iscdlv.key";

    managed-keys-directory "/var/named/dynamic";
    also-notify {
            };
    };
    logging {
    channel default_debug {
            file "data/named.run";
            severity dynamic;
    };
    };
    zone "." IN {
    type hint;
    file "named.ca";
    };
    zone "ayoub.local" IN {
    type master;
    file "direct.zone";
    #allow-update {none;};
    };
    zone "220.168.192.in-addr.arpa" IN {
    type master;
    file "inverse.zone";
    #allow-update {none;};};
    include "/etc/named.rfc1912.zones";
    include "/etc/named.root.key";

と/var/named/direct.zoneの2つです。

    **$TTL 3H
    @       IN SOA  MasterDNS.ayoub.local. root.ayoub.local. (
                                            20160421        ; serial
                                            1D              ; refresh
                                            1H              ; retry
                                            1W              ; expire
                                            3H )            ; minim
    @               IN      NS      MasterDNS.ayoub.local.
    @               IN      NS      SlaveDNS.ayoub.local.
    @               IN      A       192.168.220.135
    @               IN      A       192.168.220.136
    @               IN      A       192.168.220.137
    MasterDNS       IN      A       192.168.220.135
    SlaveDNS        IN      A       192.168.220.136
    Client          IN      A       192.168.220.137    

と、/var/named/inverse.zoneにある。

     $TTL 3H
    @       IN SOA  MasterDNS.ayoub.local. root.ayoub.local. (
                                            20160418        ; serial
                                            1D              ; refresh
                                            1H              ; retry
                                            1W              ; expire
                                            3H )            ; minimum
    @               IN      NS      MasterDNS.ayoub.local.
    @               IN      NS      SlaveDNS.ayoub.local.
    @               IN      PTR     ayoub.local.
    MasterDNS       IN      A       192.168.220.135
    SlaveDNS        IN      A       192.168.220.136
    Client          IN      A       192.168.220.137
    135             IN      PTR     MasterDNS.ayoub.local.
    136             IN      PTR     SlaveDNS.ayoub.local.
    137             IN      PTR     Client1.ayoub.local.

と、/etc/resolv.confの

domain ayoub.local
search ayoub.local
nameserver 127.0.0.1
nameserver 192.168.220.136

nslookupでドメインをテストしたところ

;; Got SERVFAIL reply from 127.0.0.1, trying next server
;; connection timed out; trying next origin
;; Got SERVFAIL reply from 127.0.0.1, trying next server
;; connection timed out; no servers could be reached

で、/etc/resolv.confを設定したところ

search localdomain
nameserver 192.168.220.2

nslookupの結果は同じです。

Server:         192.168.220.2
Address:        192.168.220.2#53

** server can't find ayoub.local: NXDOMAIN

解決方法は？

解決しました。direct.zoneとinverse.zoneのグループをrootからnamedに変更するのを忘れていただけです、コマンドは:

chgroup named /var/named/direct.zone

で、DHCPで強制的にresolveを変更しないようにしています。

chattr +i /etc/resolv.conf