knilsson/dns-zones
1
0
Fork 0
forked from critical/dns-zones
Code Pull requests Activity

Upgrade nsd to new release: 3.2.17.

Browse source 
Add PTR record for ns1.cacert.org in 2001:07b8:616.ip6 zone.
Drop dummy PTR record from 2001:07b8:616.ip6 zone.
Add AAAA record for ns1.cacert.org. to cacert.org zone.
Configure nsd for external access over IPv6.
Expand firewall script to support IPv6.


git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2534 14b1bab8-4ef6-0310-b690-991c95c89dfd
This commit is contained in:
wytze@deboca.net 2014-01-27 16:27:37 +00:00
parent 3234773ffd
commit 0bb876704e
4 changed files with 19 additions and 9 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

6
2001:07b8:616.ip6
View file

@ -1,10 +1,10 @@
; DNS master zone file for reverse IPv6 for cacert.org, under RCS control
; @(#)(CAcert) $Id: 2001:07b8:616.ip6,v 1.4 2014/01/26 09:19:46 root Exp $
; @(#)(CAcert) $Id: 2001:07b8:616.ip6,v 1.5 2014/01/27 16:00:45 root Exp $
$TTL 12h ; default TTL for zone data
@ IN SOA ns1.cacert.org. hostmaster.cacert.org. (
2014012601 ; Serial
2014012701 ; Serial
4h ; refresh time
1h ; retry interval
2d ; expire time
@ -14,5 +14,5 @@ $TTL 12h ; default TTL for zone data
@ IN NS ns3.cacert.org.
@ IN NS ns5.cacert.org.
1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0 PTR dummy.cacert.org.
0.0.1.0.0.0.0.0.0.0.0.0.0.0.0.0.2.6.1.0 PTR hopper.cacert.org.
2.0.1.0.0.0.0.0.0.0.0.0.0.0.0.0.3.6.1.0 PTR ns1.cacert.org.

9
2001:07b8:616.ip6.log
View file

@ -1,16 +1,21 @@
RCS file: /var/opendnssec/unsigned/RCS/2001:07b8:616.ip6,v
Working file: /var/opendnssec/unsigned/2001:07b8:616.ip6
head: 1.4
head: 1.5
branch:
locks: strict
access list:
symbolic names:
keyword substitution: kv
total revisions: 4; selected revisions: 4
total revisions: 5; selected revisions: 5
description:
2001:07b8:616.ip6 - zone file for reverse IPv6 of cacert.org
----------------------------
revision 1.5
date: 2014/01/27 16:00:45; author: root; state: Exp; lines: +3 -3
Add PTR record for ns1.cacert.org.
Drop dummy PTR record.
----------------------------
revision 1.4
date: 2014/01/26 09:19:46; author: root; state: Exp; lines: +3 -2
Add PTR record for hopper.cacert.org.

5
cacert.org
View file

@ -1,10 +1,10 @@
; DNS master zone file for cacert.org, under RCS control
; @(#)(CAcert) $Id: cacert.org,v 1.71 2014/01/25 16:50:15 root Exp $
; @(#)(CAcert) $Id: cacert.org,v 1.72 2014/01/27 16:03:20 root Exp $
$TTL 12h ; default TTL for zone data
@ IN SOA ns1.cacert.org. hostmaster.cacert.org. (
2014012502 ; Serial
2014012601 ; Serial
4h ; refresh time
1h ; retry interval
2d ; expire time
@ -72,6 +72,7 @@ auto._domainkey IN TXT "v=DKIM1\;g=*\;k=rsa\;t=y\;p=MIGfMA0GCSqGSIb3DQEBAQUAA4GN
monitor IN CNAME infrastructure.cacert.org.
ns IN A 213.154.225.251 ; master
ns1 IN A 213.154.225.251 ; ns.cacert.org
ns1 IN AAAA 2001:7b8:616:0163::102
ns3 IN A 46.249.47.169 ; mars.overmeer.net
ns3 IN AAAA 2a00:1ca8:2a::31
ns4 IN A 213.154.224.4 ; ns-ext.nlnetlabs.nl

8
cacert.org.log
View file

@ -1,16 +1,20 @@
RCS file: /var/opendnssec/unsigned/RCS/cacert.org,v
Working file: /var/opendnssec/unsigned/cacert.org
head: 1.71
head: 1.72
branch:
locks: strict
access list:
symbolic names:
keyword substitution: kv
total revisions: 71; selected revisions: 71
total revisions: 72; selected revisions: 72
description:
cacert.org - zone file for cacert.org
----------------------------
revision 1.72
date: 2014/01/27 16:03:20; author: root; state: Exp; lines: +3 -2
Add AAAA record for ns1.cacert.org.
----------------------------
revision 1.71
date: 2014/01/25 16:50:15; author: root; state: Exp; lines: +4 -2
Add SSHFP records for hopper.