ESXI如何快速安装Linux与Mosdns

下载镜像

ubuntu镜像官方下载站 https://cloud-images.ubuntu.com/

创建虚拟机

修改配置文件

guestinfo.userdata.encoding base64 guestinfo.userdata

I2Nsb3VkLWNvbmZpZwp1c2VyczoKIyDnlKjmiLflkI0KICAtIG5hbWU6IG1hYwogICAgZ3JvdXBzOiBzdWRvCiAgICBzdWRvOiBbJ0FMTD0oQUxMKSBOT1BBU1NXRDpBTEwnXQogICAgIyDlr4bnoIEKICAgIHBsYWluX3RleHRfcGFzc3dkOiAnMTIzNDUnCiAgICBsb2NrX3Bhc3N3ZDogZmFsc2UKICAgICNzc2gg5YWs6ZKl

#cloud-config users: # 用户名 - name: mac groups: sudo sudo: ['ALL=(ALL) NOPASSWD:ALL'] # 密码 plain_text_passwd: '12345' lock_passwd: false #ssh 公钥

开启ssh登录

sudo -i passwd # 设置root账户密码 nano /etc/ssh/sshd_config

#PermitRootLogin prohibit-password # 修改为 PermitRootLogin yes

linux操作

系统必要性更新

apt update apt install curl unzip -y # 修改时间 timedatectl set-timezone Asia/Shanghai echo "zh_CN.UTF-8 UTF-8" >> /etc/locale.gen # 修改中文 dpkg-reconfigure locales # 指定本地语言 reboot apt update # 验证中文设置是否生效

修改固定ip

进入/etc/netplan文件夹

network: ethernets: ens192: addresses: - 192.168.16.8/24 routes: - to: 0.0.0.0/0 via: 192.168.16.5 nameservers: addresses: [192.168.16.2] match: macaddress: 00:0c:29:34:70:3c set-name: eth0 version: 2

netplan apply

53端口解绑

为了方便直接使用本机的53端口进行解析，需要进行端口绑定解除。

lsof -i:53 nano /etc/systemd/resolved.conf DNSStubListener=no # 找到这句话，去了# ， yes 改到 no sudo systemctl reload-or-restart systemd-resolved lsof -i:53

#建议进行快照

mosdns 安装过程

# 挂载运行目录 mkdir /etc/mosdns cd /home # 解压至指定目录 unzip mosdns-linux-amd64.zip -d /etc/mosdns # 进入运行文件夹 cd /etc/mosdns # 赋予可执行权限 chmod +x mosdns # 复制到存放自定义或第三方安装的可执行程序的文件夹 cp mosdns /usr/local/bin # 返回根目录 cd / # 进入启动目录 cd /etc/systemd/system/ # 创建启动服务 touch mosdns.service # 编辑启动文件内容 nano mosdns.service [Unit] Description=mosdns daemon, DNS server. After=network-online.target [Service] Type=simple Restart=always ExecStart=/usr/local/bin/mosdns start -c /etc/mosdns/config.yaml -d /etc/mosdns [Install] WantedBy=multi-user.target mkdir /etc/mosdns/rule touch /etc/mosdns/rule/{whitelist,blocklist,greylist,ddnslist,hosts,redirect,adlist,localptr}.txt

基础规则复制

需增加内容

在 blocklist 中增加内容，进行优化

keyword:.localdomain domain:in-addr.arpa domain:ip6.arpa

在 localptr. txt 中增加一下内容，进行查询优化

# block all PTR requests domain:in-addr.arpa domain:ip6.arpa

在 whitelist. txt 文件中，增加以下内容，进行查询优化

domain:push-apple.com.akadns.net domain:push.apple.com domain:iphone-ld.apple.com domain:lcdn-locator.apple.com domain:lcdn-registration.apple.com domain:cn-ssl.ls.apple.com domain:time.apple.com domain:store.ui.com.cn domain:amd.com domain:msftncsi.com domain:msftconnecttest.com domain:office.com domain:office365.com

配置文件内容

以下配置文件为 fakeip 模式+远程 DNS 真实IP解析

log: level: info file: "/etc/mosdns/mosdns.log" api: http: "0.0.0.0:8338" include: [] plugins: - tag: geosite_cn type: domain_set args: files: - "/etc/mosdns/geosite_cn.txt" - tag: geoip_cn type: ip_set args: files: - "/etc/mosdns/geoip_cn.txt" - tag: geosite_no_cn type: domain_set args: files: - "/etc/mosdns/geosite_geolocation_noncn.txt" - tag: whitelist type: domain_set args: files: - "/etc/mosdns/rule/whitelist.txt" - tag: blocklist type: domain_set args: files: - "/etc/mosdns/rule/blocklist.txt" - tag: greylist type: domain_set args: files: - "/etc/mosdns/rule/greylist.txt" - tag: ddnslist type: domain_set args: files: - "/etc/mosdns/rule/ddnslist.txt" - tag: hosts type: hosts args: files: - "/etc/mosdns/rule/hosts.txt" - tag: redirect type: redirect args: files: - "/etc/mosdns/rule/redirect.txt" - tag: adlist type: domain_set args: files: - "/etc/mosdns/rule/adlist.txt" - tag: local_ptr type: domain_set args: files: - "/etc/mosdns/rule/localptr.txt" - tag: lazy_cache type: cache args: size: 32768 lazy_cache_ttl: 86400 dump_file: /etc/mosdns/cache.dump dump_interval: 3600 - tag: reject_3 type: sequence args: - exec: reject 3 - tag: reject_blocklist type: sequence args: - exec: query_summary reject_blocklist - exec: $reject_3 - tag: reject_adlist type: sequence args: - exec: query_summary reject_adlist - exec: $reject_3 - tag: reject_ptrlist type: sequence args: - exec: query_summary reject_ptrlist - exec: $reject_3 - tag: reject_qtype65 type: sequence args: - exec: query_summary reject_qtype65 - exec: $reject_3 - tag: forward_local type: forward args: concurrent: 1 upstreams: - addr: udp://223.5.5.5:53 enable_pipeline: false insecure_skip_verify: false idle_timeout: 10 enable_http3: false - tag: forward_remote type: forward args: concurrent: 1 upstreams: - addr: udp://192.168.6.15:6666 enable_pipeline: false insecure_skip_verify: false idle_timeout: 10 enable_http3: false - tag: forward_cf type: forward args: concurrent: 1 upstreams: - addr: tls://1.1.1.1:853 enable_pipeline: true insecure_skip_verify: false idle_timeout: 30 enable_http3: false - tag: modify_ttl type: sequence args: - exec: ttl 0-0 - tag: modify_ddns_ttl type: sequence args: - exec: ttl 5-5 - tag: local_sequence type: sequence args: - exec: query_summary forward_local - exec: prefer_ipv4 - exec: $forward_local - tag: remote_sequence type: sequence args: - exec: query_summary forward_remote - exec: prefer_ipv4 - exec: $forward_remote - tag: forward_cf_upstream type: sequence args: - exec: query_summary forward_cf - exec: prefer_ipv4 - exec: $forward_cf - tag: has_resp_sequence type: sequence args: - matches: qname $ddnslist exec: $modify_ddns_ttl - matches: "!qname $ddnslist" exec: $modify_ttl - matches: has_resp exec: accept - tag: query_is_ddns_domain type: sequence args: - matches: qname $ddnslist exec: $local_sequence - tag: query_is_local_domain type: sequence args: - matches: qname $geosite_cn exec: $local_sequence - tag: query_is_no_local_domain type: sequence args: - matches: qname $geosite_no_cn exec: $remote_sequence - tag: query_is_whitelist_domain type: sequence args: - matches: qname $whitelist exec: $local_sequence - tag: query_is_greylist_domain type: sequence args: - matches: qname $greylist exec: $remote_sequence - tag: query_is_reject_domain type: sequence args: - matches: qname $blocklist exec: $reject_blocklist - matches: qname $adlist exec: $reject_adlist - matches: - qtype 12 - qname $local_ptr exec: $reject_ptrlist - matches: qtype 65 exec: $reject_qtype65 - tag: fallback_sequence type: sequence args: - exec: $forward_cf_upstream - matches: "rcode 2" exec: goto local_sequence - matches: "resp_ip $geoip_cn" exec: goto local_sequence - matches: "!resp_ip $geoip_cn" exec: goto remote_sequence - tag: main_sequence type: sequence args: - exec: metrics_collector metrics - exec: $hosts - exec: jump has_resp_sequence - matches: - "!qname $ddnslist" - "!qname $blocklist" - "!qname $adlist" - "!qname $local_ptr" exec: $lazy_cache - exec: $redirect - exec: jump has_resp_sequence - exec: $query_is_ddns_domain - exec: jump has_resp_sequence - exec: $query_is_whitelist_domain - exec: jump has_resp_sequence - exec: $query_is_reject_domain - exec: jump has_resp_sequence - exec: $query_is_greylist_domain - exec: jump has_resp_sequence - exec: $query_is_local_domain - exec: jump has_resp_sequence - exec: $query_is_no_local_domain - exec: jump has_resp_sequence - exec: $fallback_sequence - tag: udp_server type: udp_server args: entry: main_sequence listen: ":53" - tag: tcp_server type: tcp_server args: entry: main_sequence listen: ":53"