knilsson/dns-zones
1
0
Fork 0
forked from critical/dns-zones
Code Pull requests Activity
dns-zones/cacert.org

103 lines
4.7 KiB
Org Mode
Raw Normal View History

Add software configuration for CAcert ns server. The primary revision control is kept in RCS on the actual server, but the RCS logs of that server are also kept in this svn repository. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2323 14b1bab8-4ef6-0310-b690-991c95c89dfd
2011-11-22 16:03:52 +00:00
; DNS master zone file for cacert.org, under RCS control
Add PTR records for the full infra and critical networks. Add four new infrastructure systems. Put the "real" infrastructure systems in a /80 subnet to simplify firewall rules. Correct network addresses in comments. Name changes per e-mail request from Mario Lipinski on 05.02.2014. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2542 14b1bab8-4ef6-0310-b690-991c95c89dfd
2014-02-06 13:51:52 +00:00
; @(#)(CAcert) $Id: cacert.org,v 1.75 2014/02/06 13:43:11 root Exp $
Add software configuration for CAcert ns server. The primary revision control is kept in RCS on the actual server, but the RCS logs of that server are also kept in this svn repository. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2323 14b1bab8-4ef6-0310-b690-991c95c89dfd
2011-11-22 16:03:52 +00:00
$TTL 12h ; default TTL for zone data
@ IN SOA ns1.cacert.org. hostmaster.cacert.org. (
Add PTR records for the full infra and critical networks. Add four new infrastructure systems. Put the "real" infrastructure systems in a /80 subnet to simplify firewall rules. Correct network addresses in comments. Name changes per e-mail request from Mario Lipinski on 05.02.2014. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2542 14b1bab8-4ef6-0310-b690-991c95c89dfd
2014-02-06 13:51:52 +00:00
2014020601 ; Serial
Add software configuration for CAcert ns server. The primary revision control is kept in RCS on the actual server, but the RCS logs of that server are also kept in this svn repository. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2323 14b1bab8-4ef6-0310-b690-991c95c89dfd
2011-11-22 16:03:52 +00:00
4h ; refresh time
1h ; retry interval
Reduce SOA expiration timer from 1 week to 2 days, in order to comply with a recommendation made in RFC 4641bis: the SOA expiration timer should be between 1/4th and 1/3rd of the size of the signature validity period (1 week at CAcert). git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2370 14b1bab8-4ef6-0310-b690-991c95c89dfd
2012-04-17 07:10:49 +00:00
2d ; expire time
Add software configuration for CAcert ns server. The primary revision control is kept in RCS on the actual server, but the RCS logs of that server are also kept in this svn repository. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2323 14b1bab8-4ef6-0310-b690-991c95c89dfd
2011-11-22 16:03:52 +00:00
12h ) ; negative caching TTL
@ IN NS ns1.cacert.org.
@ IN NS ns3.cacert.org.
@ IN NS ns4.cacert.org.
@ IN NS ns5.cacert.org.
@ IN A 213.154.225.245
Also add IPv6 address for cacert.org itself. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2388 14b1bab8-4ef6-0310-b690-991c95c89dfd
2012-06-07 08:57:43 +00:00
@ IN AAAA 2001:7b8:3:9c::245
Add software configuration for CAcert ns server. The primary revision control is kept in RCS on the actual server, but the RCS logs of that server are also kept in this svn repository. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2323 14b1bab8-4ef6-0310-b690-991c95c89dfd
2011-11-22 16:03:52 +00:00
@ IN MX 10 email.cacert.org.
Zone file updates. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2528 14b1bab8-4ef6-0310-b690-991c95c89dfd
2013-12-17 16:42:44 +00:00
; TODO: Remove 'ip4:213.154.225.239' after transition
@ IN TXT "v=spf1 ip4:213.154.225.245 ip4:213.154.225.246 ip4:213.154.225.247 ip6:2001:7b8:3:9c::245 ip6:2001:7b8:3:9c::246 ip6:2001:7b8:3:9c::247 ip4:213.154.225.228 ip4:213.154.225.230 ip4:213.154.225.239 -all"
Add software configuration for CAcert ns server. The primary revision control is kept in RCS on the actual server, but the RCS logs of that server are also kept in this svn repository. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2323 14b1bab8-4ef6-0310-b690-991c95c89dfd
2011-11-22 16:03:52 +00:00
Add PTR records for the full infra and critical networks. Add four new infrastructure systems. Put the "real" infrastructure systems in a /80 subnet to simplify firewall rules. Correct network addresses in comments. Name changes per e-mail request from Mario Lipinski on 05.02.2014. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2542 14b1bab8-4ef6-0310-b690-991c95c89dfd
2014-02-06 13:51:52 +00:00
arbitration IN A 213.154.225.241
Add software configuration for CAcert ns server. The primary revision control is kept in RCS on the actual server, but the RCS logs of that server are also kept in this svn repository. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2323 14b1bab8-4ef6-0310-b690-991c95c89dfd
2011-11-22 16:03:52 +00:00
audit IN A 78.46.255.66
blog IN A 213.154.225.234
board IN A 213.154.225.252
bugs IN A 213.154.225.232
Zone file updates. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2528 14b1bab8-4ef6-0310-b690-991c95c89dfd
2013-12-17 16:42:44 +00:00
cacert-fw IN A 213.154.225.229
cacert-fw IN AAAA 2001:7b8:3:9c::4
cacert-fw01 IN A 213.154.225.253
cacert-fw01 IN AAAA 2001:7b8:3:9c::5
cacert-fw01 IN SSHFP 2 1 6a5497e3e430425439fe849b47a6b5a5add22241
cacert-fw01 IN SSHFP 2 2 ce88f62b161af3d1f3f9c5a79a72608fed455340ff3609a51b73dc42232823c1
cacert-fw01 IN SSHFP 3 1 3e8acf86c3360992eea677a1154b6c3f20811c56
cacert-fw01 IN SSHFP 3 2 c51db0de0b5cd2096f8326e0252903cc06838c060a3689e2088c215e951ef82c
cacert-fw01 IN SSHFP 1 1 2dd0073329ec5f4ff8ecb7667f10a1bfe65ef6f4
cacert-fw01 IN SSHFP 1 2 a508ec95e20a465a231f0d6b86afc46ab1486ca7a88272d4ccfdc4b260366885
cacert-fw02 IN A 213.154.225.254
cacert-fw02 IN AAAA 2001:7b8:3:9c::6
cacert-fw02 IN SSHFP 2 1 6e47b51da962818bdf884eb527252019397599ac
cacert-fw02 IN SSHFP 2 2 50faa61404e7a6afb1a46b7224e7b0d609d7dad7d40e5f04d4df78b2a50e79d5
cacert-fw02 IN SSHFP 3 1 4b136c402acb26cb01a04de243f0c8412d211bbd
cacert-fw02 IN SSHFP 3 2 9c4fc8f7cb81bd45a48313114e55ab261a6379abd6fcc7fd878d05b7206210d7
cacert-fw02 IN SSHFP 1 1 3bbc40993094812db7188fc01f3dc8b89536bd69
cacert-fw02 IN SSHFP 1 2 8e0cc3bcabfed1470f82f85c9726c2f002fb8dbc8f636601a7262c7b489b7d6e
Add software configuration for CAcert ns server. The primary revision control is kept in RCS on the actual server, but the RCS logs of that server are also kept in this svn repository. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2323 14b1bab8-4ef6-0310-b690-991c95c89dfd
2011-11-22 16:03:52 +00:00
cats IN A 213.154.225.243
Zone file updates. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2528 14b1bab8-4ef6-0310-b690-991c95c89dfd
2013-12-17 16:42:44 +00:00
community IN CNAME email.cacert.org.
Add software configuration for CAcert ns server. The primary revision control is kept in RCS on the actual server, but the RCS logs of that server are also kept in this svn repository. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2323 14b1bab8-4ef6-0310-b690-991c95c89dfd
2011-11-22 16:03:52 +00:00
community-vpn IN A 78.47.142.76
crl IN A 213.154.225.236
dev IN A 78.46.255.66
email IN A 213.154.225.228
emailout IN A 213.154.225.239
Add A record for eu.cacert.org (which is actually cacert.eu), to show that the IPv4 address in our range is taken. Add IPv6 address, SSHFP and PTR records for hopper.cacert.org. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2533 14b1bab8-4ef6-0310-b690-991c95c89dfd
2014-01-26 09:27:38 +00:00
eu IN A 213.154.225.242
Zone file updates. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2528 14b1bab8-4ef6-0310-b690-991c95c89dfd
2013-12-17 16:42:44 +00:00
finance IN CNAME board.cacert.org.
Add PTR records for the full infra and critical networks. Add four new infrastructure systems. Put the "real" infrastructure systems in a /80 subnet to simplify firewall rules. Correct network addresses in comments. Name changes per e-mail request from Mario Lipinski on 05.02.2014. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2542 14b1bab8-4ef6-0310-b690-991c95c89dfd
2014-02-06 13:51:52 +00:00
git IN A 213.154.225.250
Add A record for eu.cacert.org (which is actually cacert.eu), to show that the IPv4 address in our range is taken. Add IPv6 address, SSHFP and PTR records for hopper.cacert.org. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2533 14b1bab8-4ef6-0310-b690-991c95c89dfd
2014-01-26 09:27:38 +00:00
hopper IN AAAA 2001:7b8:616:0162::100
hopper IN SSHFP 1 1 22f35bfddd356b119c1555c3bf4f86edd8ae8dfd
hopper IN SSHFP 2 1 026d7dda6753c2d8810466336fe758d37aed899d
Add A records for infrastructure.cacert.org and monitor.cacert.org, both pointing to 213.154.225.230, per e-mail request from Mario Lipinski on May 23, 2012. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2384 14b1bab8-4ef6-0310-b690-991c95c89dfd
2012-05-23 09:27:20 +00:00
infrastructure IN A 213.154.225.230
Add software configuration for CAcert ns server. The primary revision control is kept in RCS on the actual server, but the RCS logs of that server are also kept in this svn repository. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2323 14b1bab8-4ef6-0310-b690-991c95c89dfd
2011-11-22 16:03:52 +00:00
irc IN A 213.154.225.233
issue IN A 213.154.225.244
l10n IN CNAME translations.cacert.org.
lists IN A 213.154.225.231
Zone file updates. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2528 14b1bab8-4ef6-0310-b690-991c95c89dfd
2013-12-17 16:42:44 +00:00
cert.lists IN CNAME lists.cacert.org.
nocert.lists IN CNAME lists.cacert.org.
Add software configuration for CAcert ns server. The primary revision control is kept in RCS on the actual server, but the RCS logs of that server are also kept in this svn repository. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2323 14b1bab8-4ef6-0310-b690-991c95c89dfd
2011-11-22 16:03:52 +00:00
lists IN MX 10 email.cacert.org.
Zone file updates. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2528 14b1bab8-4ef6-0310-b690-991c95c89dfd
2013-12-17 16:42:44 +00:00
lists IN TXT "v=spf1 ip4:213.154.225.231 -all"
Add software configuration for CAcert ns server. The primary revision control is kept in RCS on the actual server, but the RCS logs of that server are also kept in this svn repository. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2323 14b1bab8-4ef6-0310-b690-991c95c89dfd
2011-11-22 16:03:52 +00:00
_adsp._domainkey IN TXT "dkim=unknown"
_adsp._domainkey.lists IN TXT "dkim=all"
DKIM records changed after infrastructure update. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2360 14b1bab8-4ef6-0310-b690-991c95c89dfd
2012-03-27 08:13:05 +00:00
lists._domainkey.lists IN TXT "v=DKIM1\;g=*\;k=rsa\;t=y\;p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCs2Hu5HQpT5FWj2TrqHZwFM/h0Tc35idlBviaArkdp5fRPx402ID+pMYZZW6lVM/IJlmeTqPGO73oQyl/tFlnXWj/X8p809IFqWnKWzGKJLhnxMAZW7bmzyjR8siK3It93+s5mu9r/4pwHCW3bEbdtKartd7cud84JO15cLJYA+QIDAQAB"
mail._domainkey IN TXT "v=DKIM1\;g=*\;k=rsa\;t=y\;p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDOZV5h3rm18QRiNfNnwXadX8jeSC3zjpU7GFNTfZk1ifjLxrlVrSsfAvlVfFvR2/uQXegwEkiNV5bd57d989T+VVLZZbSv+OAXX4ZwihsLkf3huDszKtJTvsybqUNh97OE00THSyJCrcowFDcLv5IN2ULCOlMjTqbZxZuaNW0S6wIDAQAB"
auto._domainkey IN TXT "v=DKIM1\;g=*\;k=rsa\;t=y\;p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDDNFxiNr+NHJwih3OPhGr4iwLE+BBDu72YrMSzUnU1FF50CW7iOtuhg796UZ6xrZ5VuhAix6YmmzcvF2UxYzoD/XpfZ4MzBu0ND4/nkt9/YOTyIBzwQqn9uMNve0Y76Zsel89dIJtOI+y+lfnFExV0jKwe53gzmxMVpMSSCcZPGwIDAQAB" ; ----- DKIM auto for cacert.org
Zone file updates. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2528 14b1bab8-4ef6-0310-b690-991c95c89dfd
2013-12-17 16:42:44 +00:00
monitor IN CNAME infrastructure.cacert.org.
Add software configuration for CAcert ns server. The primary revision control is kept in RCS on the actual server, but the RCS logs of that server are also kept in this svn repository. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2323 14b1bab8-4ef6-0310-b690-991c95c89dfd
2011-11-22 16:03:52 +00:00
ns IN A 213.154.225.251 ; master
ns1 IN A 213.154.225.251 ; ns.cacert.org
Upgrade nsd to new release: 3.2.17. Add PTR record for ns1.cacert.org in 2001:07b8:616.ip6 zone. Drop dummy PTR record from 2001:07b8:616.ip6 zone. Add AAAA record for ns1.cacert.org. to cacert.org zone. Configure nsd for external access over IPv6. Expand firewall script to support IPv6. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2534 14b1bab8-4ef6-0310-b690-991c95c89dfd
2014-01-27 16:27:37 +00:00
ns1 IN AAAA 2001:7b8:616:0163::102
Update A and AAAA records for ns3 after server migration of mars.overmeer.net. Drop obsolete name 'hlin' from the cacert.org zone. Drop wwwdb and securedb entries which were added for testing new web server. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2503 14b1bab8-4ef6-0310-b690-991c95c89dfd
2013-06-01 09:16:53 +00:00
ns3 IN A 46.249.47.169 ; mars.overmeer.net
ns3 IN AAAA 2a00:1ca8:2a::31
Add software configuration for CAcert ns server. The primary revision control is kept in RCS on the actual server, but the RCS logs of that server are also kept in this svn repository. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2323 14b1bab8-4ef6-0310-b690-991c95c89dfd
2011-11-22 16:03:52 +00:00
ns4 IN A 213.154.224.4 ; ns-ext.nlnetlabs.nl
ns4 IN AAAA 2001:7b8:206:1::4:53
ns5 IN A 192.5.4.1 ; sns-pb.isc.org
ns5 IN AAAA 2001:500:2e::1
ocsp IN A 213.154.225.237
ocsp1 IN A 213.154.225.237
secure IN A 213.154.225.246
Add IPv6 addresses for {www,secure,tverify}.cacert.org in preparation for World IPv6 Launch on 6 June 2012. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2386 14b1bab8-4ef6-0310-b690-991c95c89dfd
2012-06-04 09:59:01 +00:00
secure IN AAAA 2001:7b8:3:9c::246
Add software configuration for CAcert ns server. The primary revision control is kept in RCS on the actual server, but the RCS logs of that server are also kept in this svn repository. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2323 14b1bab8-4ef6-0310-b690-991c95c89dfd
2011-11-22 16:03:52 +00:00
svn IN A 213.154.225.238
cert.svn IN CNAME svn.cacert.org.
nocert.svn IN CNAME svn.cacert.org.
Add PTR records for the full infra and critical networks. Add four new infrastructure systems. Put the "real" infrastructure systems in a /80 subnet to simplify firewall rules. Correct network addresses in comments. Name changes per e-mail request from Mario Lipinski on 05.02.2014. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2542 14b1bab8-4ef6-0310-b690-991c95c89dfd
2014-02-06 13:51:52 +00:00
test IN A 213.154.225.248
secure.test IN CNAME test.cacert.org.
cats.test IN CNAME test.cacert.org.
mgr.test IN CNAME test.cacert.org.
test2 IN A 213.154.225.249
secure.test2 IN CNAME test2.cacert.org.
Add software configuration for CAcert ns server. The primary revision control is kept in RCS on the actual server, but the RCS logs of that server are also kept in this svn repository. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2323 14b1bab8-4ef6-0310-b690-991c95c89dfd
2011-11-22 16:03:52 +00:00
translations IN A 213.154.225.240
tverify IN A 213.154.225.247
Add IPv6 addresses for {www,secure,tverify}.cacert.org in preparation for World IPv6 Launch on 6 June 2012. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2386 14b1bab8-4ef6-0310-b690-991c95c89dfd
2012-06-04 09:59:01 +00:00
tverify IN AAAA 2001:7b8:3:9c::247
Add software configuration for CAcert ns server. The primary revision control is kept in RCS on the actual server, but the RCS logs of that server are also kept in this svn repository. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2323 14b1bab8-4ef6-0310-b690-991c95c89dfd
2011-11-22 16:03:52 +00:00
wiki IN A 213.154.225.235
www IN A 213.154.225.245
Add IPv6 addresses for {www,secure,tverify}.cacert.org in preparation for World IPv6 Launch on 6 June 2012. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2386 14b1bab8-4ef6-0310-b690-991c95c89dfd
2012-06-04 09:59:01 +00:00
www IN AAAA 2001:7b8:3:9c::245
Copy permalink