From 17106f7c86851ec686e948ecf063d05f659e000d Mon Sep 17 00:00:00 2001 From: Jan Dittberner Date: Sun, 30 Oct 2022 12:31:57 +0100 Subject: [PATCH] Fix forward and reverse entries - add missing AAAA records in cacert.org - add missing PTR records in IPv6 reverse zone - remove broken PTR records in IPv6 reverse zone - fix SPF records --- 6.1.6.0.8.b.7.0.1.0.0.2.ip6.arpa | 22 ++++++++++---- cacert.org | 49 ++++++++++++++++++++------------ 2 files changed, 47 insertions(+), 24 deletions(-) diff --git a/6.1.6.0.8.b.7.0.1.0.0.2.ip6.arpa b/6.1.6.0.8.b.7.0.1.0.0.2.ip6.arpa index 678cbe9..1d9ce81 100644 --- a/6.1.6.0.8.b.7.0.1.0.0.2.ip6.arpa +++ b/6.1.6.0.8.b.7.0.1.0.0.2.ip6.arpa @@ -10,42 +10,52 @@ $ORIGIN . 0.0.1.0.0.0.0.0.0.0.0.0.0.0.0.0.2.6.1.0.6.1.6.0.8.b.7.0.1.0.0.2.ip6.arpa 3600 IN PTR hopper.cacert.org 0.0.1.0.0.0.0.0.0.0.0.0.0.0.0.0.3.6.1.0.6.1.6.0.8.b.7.0.1.0.0.2.ip6.arpa 3600 IN PTR hopper.cacert.org -0.1.0.0.0.0.0.0.0.0.0.0.1.0.0.0.2.6.1.0.6.1.6.0.8.b.7.0.1.0.0.2.ip6.arpa 3600 IN PTR infrastructure.cacert.org +0.1.0.0.0.0.0.0.0.0.0.0.1.0.0.0.2.6.1.0.6.1.6.0.8.b.7.0.1.0.0.2.ip6.arpa 3600 IN PTR infra02.cacert.org 0.1.0.0.0.0.0.0.0.0.0.0.2.0.0.0.2.6.1.0.6.1.6.0.8.b.7.0.1.0.0.2.ip6.arpa 3600 IN PTR infra02.cacert.org +0.1.0.0.0.0.0.0.0.0.0.0.3.0.0.0.2.6.1.0.6.1.6.0.8.b.7.0.1.0.0.2.ip6.arpa 3600 IN PTR ingress03.cacert.org 0.2.0.0.0.0.0.0.0.0.0.0.2.0.0.0.2.6.1.0.6.1.6.0.8.b.7.0.1.0.0.2.ip6.arpa 3600 IN PTR community.cacert.org 0.5.2.0.0.0.0.0.0.0.0.0.2.0.0.0.2.6.1.0.6.1.6.0.8.b.7.0.1.0.0.2.ip6.arpa 3600 IN PTR git.cacert.org 1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.2.6.1.0.6.1.6.0.8.b.7.0.1.0.0.2.ip6.arpa 3600 IN PTR fw.cacert.org 1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.3.6.1.0.6.1.6.0.8.b.7.0.1.0.0.2.ip6.arpa 3600 IN PTR fw.cacert.org +1.0.0.0.0.0.0.0.0.0.0.0.3.0.0.0.2.6.1.0.6.1.6.0.8.b.7.0.1.0.0.2.ip6.arpa 3600 IN PTR infra03.cacert.org 1.0.2.0.0.0.0.0.0.0.0.0.2.0.0.0.2.6.1.0.6.1.6.0.8.b.7.0.1.0.0.2.ip6.arpa 3600 IN PTR proxyout.cacert.org 1.1.0.0.0.0.0.0.0.0.0.0.0.5.0.0.8.2.0.0.6.1.6.0.8.b.7.0.1.0.0.2.ip6.arpa 3600 IN PTR ping.cacert.org 1.1.0.0.0.0.0.0.0.0.0.0.2.0.0.0.2.6.1.0.6.1.6.0.8.b.7.0.1.0.0.2.ip6.arpa 3600 IN PTR ldap.cacert.org +1.1.0.0.0.0.0.0.0.0.0.0.3.0.0.0.2.6.1.0.6.1.6.0.8.b.7.0.1.0.0.2.ip6.arpa 3600 IN PTR mariadb.cacert.org 1.2.0.0.0.0.0.0.0.0.0.0.0.5.0.0.8.2.0.0.6.1.6.0.8.b.7.0.1.0.0.2.ip6.arpa 3600 IN PTR ping.cacert.org -1.2.0.0.0.0.0.0.0.0.0.0.2.0.0.0.2.6.1.0.6.1.6.0.8.b.7.0.1.0.0.2.ip6.arpa 3600 IN PTR mail.cacert.org -1.3.0.0.0.0.0.0.0.0.0.0.2.0.0.0.2.6.1.0.6.1.6.0.8.b.7.0.1.0.0.2.ip6.arpa 3600 IN PTR l10n.cacert.org 1.3.0.0.0.0.0.0.0.0.0.0.2.0.0.0.2.6.1.0.6.1.6.0.8.b.7.0.1.0.0.2.ip6.arpa 3600 IN PTR translations.cacert.org 2.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.2.6.1.0.6.1.6.0.8.b.7.0.1.0.0.2.ip6.arpa 3600 IN PTR fw01.cacert.org 2.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.3.6.1.0.6.1.6.0.8.b.7.0.1.0.0.2.ip6.arpa 3600 IN PTR fw01.cacert.org 2.0.1.0.0.0.0.0.0.0.0.0.0.0.0.0.3.6.1.0.6.1.6.0.8.b.7.0.1.0.0.2.ip6.arpa 3600 IN PTR ns1.cacert.org +2.0.2.0.0.0.0.0.0.0.0.0.0.0.0.0.3.6.1.0.6.1.6.0.8.b.7.0.1.0.0.2.ip6.arpa 3600 IN PTR ns2.cacert.org 2.1.0.0.0.0.0.0.0.0.0.0.2.0.0.0.2.6.1.0.6.1.6.0.8.b.7.0.1.0.0.2.ip6.arpa 3600 IN PTR wiki.cacert.org -2.3.0.0.0.0.0.0.0.0.0.0.2.0.0.0.2.6.1.0.6.1.6.0.8.b.7.0.1.0.0.2.ip6.arpa 3600 IN PTR emailout.cacert.org +2.1.0.0.0.0.0.0.0.0.0.0.3.0.0.0.2.6.1.0.6.1.6.0.8.b.7.0.1.0.0.2.ip6.arpa 3600 IN PTR nextcloud.cacert.org 3.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.2.6.1.0.6.1.6.0.8.b.7.0.1.0.0.2.ip6.arpa 3600 IN PTR fw02.cacert.org 3.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.3.6.1.0.6.1.6.0.8.b.7.0.1.0.0.2.ip6.arpa 3600 IN PTR fw02.cacert.org 3.0.1.0.0.0.0.0.0.0.0.0.0.0.0.0.3.6.1.0.6.1.6.0.8.b.7.0.1.0.0.2.ip6.arpa 3600 IN PTR ocsp.cacert.org 3.1.0.0.0.0.0.0.0.0.0.0.2.0.0.0.2.6.1.0.6.1.6.0.8.b.7.0.1.0.0.2.ip6.arpa 3600 IN PTR blog.cacert.org +3.1.0.0.0.0.0.0.0.0.0.0.3.0.0.0.2.6.1.0.6.1.6.0.8.b.7.0.1.0.0.2.ip6.arpa 3600 IN PTR pgsql.cacert.org 4.0.1.0.0.0.0.0.0.0.0.0.0.0.0.0.3.6.1.0.6.1.6.0.8.b.7.0.1.0.0.2.ip6.arpa 3600 IN PTR crl.cacert.org 4.1.0.0.0.0.0.0.0.0.0.0.2.0.0.0.2.6.1.0.6.1.6.0.8.b.7.0.1.0.0.2.ip6.arpa 3600 IN PTR irc.cacert.org 4.3.0.0.0.0.0.0.0.0.0.0.2.0.0.0.2.6.1.0.6.1.6.0.8.b.7.0.1.0.0.2.ip6.arpa 3600 IN PTR board.cacert.org -4.3.0.0.0.0.0.0.0.0.0.0.2.0.0.0.2.6.1.0.6.1.6.0.8.b.7.0.1.0.0.2.ip6.arpa 3600 IN PTR cod.cacert.org 5.1.0.0.0.0.0.0.0.0.0.0.2.0.0.0.2.6.1.0.6.1.6.0.8.b.7.0.1.0.0.2.ip6.arpa 3600 IN PTR svn.cacert.org 5.1.0.0.0.0.0.0.0.0.0.0.3.0.0.0.2.6.1.0.6.1.6.0.8.b.7.0.1.0.0.2.ip6.arpa 3600 IN PTR code.cacert.org +5.1.1.0.0.0.0.0.0.0.0.0.2.0.0.0.2.6.1.0.6.1.6.0.8.b.7.0.1.0.0.2.ip6.arpa 3600 IN PTR jenkins.cacert.org 5.3.0.0.0.0.0.0.0.0.0.0.2.0.0.0.2.6.1.0.6.1.6.0.8.b.7.0.1.0.0.2.ip6.arpa 3600 IN PTR proxyin.cacert.org 6.1.0.0.0.0.0.0.0.0.0.0.2.0.0.0.2.6.1.0.6.1.6.0.8.b.7.0.1.0.0.2.ip6.arpa 3600 IN PTR bugs.cacert.org +6.1.1.0.0.0.0.0.0.0.0.0.2.0.0.0.2.6.1.0.6.1.6.0.8.b.7.0.1.0.0.2.ip6.arpa 3600 IN PTR webstatic.cacert.org 6.2.0.0.0.0.0.0.0.0.0.0.2.0.0.0.2.6.1.0.6.1.6.0.8.b.7.0.1.0.0.2.ip6.arpa 3600 IN PTR translingo.cacert.org +6.2.0.0.0.0.0.0.0.0.0.0.2.0.0.0.2.6.1.0.6.1.6.0.8.b.7.0.1.0.0.2.ip6.arpa 3600 IN PTR web.cacert.org 7.1.0.0.0.0.0.0.0.0.0.0.2.0.0.0.2.6.1.0.6.1.6.0.8.b.7.0.1.0.0.2.ip6.arpa 3600 IN PTR lists.cacert.org +7.1.1.0.0.0.0.0.0.0.0.0.2.0.0.0.2.6.1.0.6.1.6.0.8.b.7.0.1.0.0.2.ip6.arpa 3600 IN PTR motion.cacert.org 7.2.0.0.0.0.0.0.0.0.0.0.2.0.0.0.2.6.1.0.6.1.6.0.8.b.7.0.1.0.0.2.ip6.arpa 3600 IN PTR cats.cacert.org 8.1.0.0.0.0.0.0.0.0.0.0.2.0.0.0.2.6.1.0.6.1.6.0.8.b.7.0.1.0.0.2.ip6.arpa 3600 IN PTR monitor.cacert.org +8.1.1.0.0.0.0.0.0.0.0.0.2.0.0.0.2.6.1.0.6.1.6.0.8.b.7.0.1.0.0.2.ip6.arpa 3600 IN PTR webmail.cacert.org 8.2.0.0.0.0.0.0.0.0.0.0.2.0.0.0.2.6.1.0.6.1.6.0.8.b.7.0.1.0.0.2.ip6.arpa 3600 IN PTR issue.cacert.org +8.2.2.0.0.0.0.0.0.0.0.0.2.0.0.0.2.6.1.0.6.1.6.0.8.b.7.0.1.0.0.2.ip6.arpa 3600 IN PTR email.cacert.org 8.4.2.0.0.0.0.0.0.0.0.0.2.0.0.0.2.6.1.0.6.1.6.0.8.b.7.0.1.0.0.2.ip6.arpa 3600 IN PTR test.cacert.org -9.1.0.0.0.0.0.0.0.0.0.0.2.0.0.0.2.6.1.0.6.1.6.0.8.b.7.0.1.0.0.2.ip6.arpa 3600 IN PTR email.cacert.org +9.0.0.0.0.0.0.0.0.0.0.0.1.0.0.0.2.6.1.0.6.1.6.0.8.b.7.0.1.0.0.2.ip6.arpa 3600 IN PTR infra03.cacert.org 9.2.0.0.0.0.0.0.0.0.0.0.2.0.0.0.2.6.1.0.6.1.6.0.8.b.7.0.1.0.0.2.ip6.arpa 3600 IN PTR logging.cacert.org +9.3.2.0.0.0.0.0.0.0.0.0.2.0.0.0.2.6.1.0.6.1.6.0.8.b.7.0.1.0.0.2.ip6.arpa 3600 IN PTR emailout.cacert.org +9.4.1.0.0.0.0.0.0.0.0.0.2.0.0.0.2.6.1.0.6.1.6.0.8.b.7.0.1.0.0.2.ip6.arpa 3600 IN PTR test3.cacert.org 9.4.2.0.0.0.0.0.0.0.0.0.2.0.0.0.2.6.1.0.6.1.6.0.8.b.7.0.1.0.0.2.ip6.arpa 3600 IN PTR test2.cacert.org diff --git a/cacert.org b/cacert.org index 71c92cc..9065e6b 100644 --- a/cacert.org +++ b/cacert.org @@ -18,7 +18,8 @@ cacert.org 43200 IN NS ns2.cacert.org. cacert.org 43200 IN NS ns4.cacert.org. ; SPF and DKIM -cacert.org 43200 IN TXT "v=spf1 ip4:213.154.225.245 ip4:213.154.225.246 ip4:213.154.225.247 ip6:2001:7b8:3:9c::245 ip6:2001:7b8:3:9c::246 ip6:2001:7b8:3:9c::247" " ip4:213.154.225.228 ip6:2001:7b8:616:162:2::228 ip4:213.154.225.230 ip4:213.154.225.239 ip6:2001:7b8:616:162:2::239 -all" +; SPF allows www, secure, www1, email, infra02, emailout, ping +cacert.org 43200 IN TXT "v=spf1 ip4:213.154.225.245 ip4:213.154.225.246 ip4:213.154.225.247 ip6:2001:7b8:3:9c::245 ip6:2001:7b8:3:9c::246 ip6:2001:7b8:3:9c::247 ip4:213.154.225.228 ip6:2001:7b8:616:162:2::228 ip4:213.154.225.230 ip6:2001:7b8:616:162:1::10 ip4:213.154.225.239 ip6:2001:7b8:616:162:2::239 ip6:2001:7b8:616:28:50::11 -all" auto._domainkey.cacert.org 43200 IN TXT "v=DKIM1;g=*;k=rsa;t=y;p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDDNFxiNr+NHJwih3OPhGr4iwLE+BBDu72YrMSzUnU1FF50CW7iOtuhg796UZ6xrZ5VuhAix6YmmzcvF2UxYzoD/XpfZ4MzBu0ND4/nkt9/YOTyIBzwQqn9uMNve0Y76Zsel89dIJtOI+y+lfnFExV0jKwe53gzmxMVpMSSCcZPGwIDAQAB" mail._domainkey.cacert.org 43200 IN TXT "v=DKIM1;g=*;k=rsa;t=y;p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDOZV5h3rm18QRiNfNnwXadX8jeSC3zjpU7GFNTfZk1ifjLxrlVrSsfAvlVfFvR2/uQXegwEkiNV5bd57d989T+VVLZZbSv+OAXX4ZwihsLkf3huDszKtJTvsybqUNh97OE00THSyJCrcowFDcLv5IN2ULCOlMjTqbZxZuaNW0S6wIDAQAB" @@ -60,6 +61,7 @@ blog.cacert.org 43200 IN SSHFP 4 2 f24b770c16dcb91afc9461e62e6fe63a63d413efa4794 ; board OpenERP board.cacert.org 43200 IN A 213.154.225.252 +board.cacert.org 43200 IN AAAA 2001:7b8:616:162:2::34 board.cacert.org 43200 IN SSHFP 1 1 f5c02a860a1cc07aeefbf802540680c7476bde6e board.cacert.org 43200 IN SSHFP 2 1 7b6eeb0ccdfb2e2cfe479e0aece36ff995fdd1f4 finance.cacert.org 43200 IN CNAME board.cacert.org. @@ -76,11 +78,12 @@ bugs.cacert.org 43200 IN SSHFP 3 2 152fc9f8d7d72979846757db7fa433bd3f6340cd0dceb bugs.cacert.org 43200 IN SSHFP 4 1 bb6b5f8599c3a93383392b80cc029a0d65ffc7f1 bugs.cacert.org 43200 IN SSHFP 4 2 caa52e4c5ddecc5ee144aa2b6965101961ff7e7518063b43908d133f1cdf6e15 -; Firewall virtual IP +; Firewall virtual IPv6 and IPv4 gateway address cacert-fw.cacert.org 43200 IN A 213.154.225.229 cacert-fw.cacert.org 43200 IN AAAA 2001:7b8:3:9c::4 -; Firewall 01 +; Firewall 01, reachable via dedicated jump hosts only +; IPv6 is wrong https://code.cacert.org/critical/dns-zones/issues/8 cacert-fw01.cacert.org 43200 IN A 213.154.225.253 cacert-fw01.cacert.org 43200 IN AAAA 2001:7b8:3:9c::5 cacert-fw01.cacert.org 43200 IN SSHFP 1 1 43a7c6105193d121a8b27f5cd1c59aae32a35c5a @@ -92,7 +95,8 @@ cacert-fw01.cacert.org 43200 IN SSHFP 3 2 dc9d37b1cd325175437e5836ed1691d594f5af cacert-fw01.cacert.org 43200 IN SSHFP 4 1 119d5aa477a8a8dc79334fc84a64d1f3ea3a3319 cacert-fw01.cacert.org 43200 IN SSHFP 4 2 60d46e0d94070064e48a0d9de5a30778f00fd9c2c23dedb5a674c5ec873e3cdc -; Firewall 02 +; Firewall 02, reachable via dedicated jump hosts only +; IPv6 is wrong https://code.cacert.org/critical/dns-zones/issues/8 cacert-fw02.cacert.org 43200 IN A 213.154.225.254 cacert-fw02.cacert.org 43200 IN AAAA 2001:7b8:3:9c::6 cacert-fw02.cacert.org 43200 IN SSHFP 1 1 43a7c6105193d121a8b27f5cd1c59aae32a35c5a @@ -106,6 +110,7 @@ cacert-fw02.cacert.org 43200 IN SSHFP 4 2 60d46e0d94070064e48a0d9de5a30778f00fd9 ; CAcert Assurer Training System cats.cacert.org 43200 IN A 213.154.225.243 +cats.cacert.org 43200 IN AAAA 2001:7b8:616:162:2::27 cats.cacert.org 43200 IN SSHFP 1 1 d29d4cc4662d5cb5f42c02823ca8677f05439589 cats.cacert.org 43200 IN SSHFP 1 2 605af57ce0f1ecf8eeac5c71901f1434bf65c06fc0796b932d0f10f21ddf65fe cats.cacert.org 43200 IN SSHFP 2 1 0342eb1e7325eb90a1c0483de3d6597e36e569c8 @@ -150,6 +155,7 @@ emailout.cacert.org 43200 IN SSHFP 4 2 4ceb488ad17ea7c8db161fdf3357e273d2ea1fe5b ; git repository server git.cacert.org 43200 IN A 213.154.225.250 +git.cacert.org 43200 IN AAAA 2001:7b8:616:162:2::250 git.cacert.org 43200 IN SSHFP 1 1 23c7622d6db5822c809152c1c0fd9ea7838f76c6 git.cacert.org 43200 IN SSHFP 1 2 dabbe1766c7933071c4e6942a1dfc72c26d9d867d8dee84beda210c8ef9ea2c5 git.cacert.org 43200 IN SSHFP 2 1 8509db491902fe10ab84c8f24b02f10c1adf0e7f @@ -160,6 +166,7 @@ git.cacert.org 43200 IN SSHFP 4 1 13d611007b43d073cf4d89784510398116623eb7 git.cacert.org 43200 IN SSHFP 4 2 40a61a25488fe01c056eaaff703ef0ff9c6b01bee00580a91b95741dfaa59751 ; hopper for critical systems +; need to clarify https://nextcloud.cacert.org/apps/deck/#/board/10/card/64 hopper.cacert.org 43200 IN A 213.136.19.144 hopper.cacert.org 43200 IN AAAA 2001:7b8:616:163::100 hopper.cacert.org 43200 IN SSHFP 1 1 0632f537b79c8c7216a56b5da37aadfca3ff2b0c @@ -170,15 +177,14 @@ hopper.cacert.org 43200 IN SSHFP 3 1 f450a0cb1816e519b3f03e9ea9c8a54a94955071 hopper.cacert.org 43200 IN SSHFP 3 2 cc1b07f5bc75760dbb98a5bc515bf9cf7f3559bff032d56ba37b32bc38031375 ; infrastructure host infra02 -infrastructure.cacert.org 43200 IN A 213.154.225.230 -infrastructure.cacert.org 43200 IN AAAA 2001:7b8:616:162:1::10 -infrastructure.cacert.org 43200 IN SSHFP 1 1 5a82d3c150af002c05784f73250a067053aeed63 -infrastructure.cacert.org 43200 IN SSHFP 1 2 63b0d74a3f1ce61865a5eb0497ef05243bc4067ec983c69ab8e62f3cb940cc82 -infrastructure.cacert.org 43200 IN SSHFP 2 1 af8d8e3386eaa72997709632adf2b457e6fef0dc -infrastructure.cacert.org 43200 IN SSHFP 2 2 3a0188fc47d1fdd14d70a2fb78f51792d06ba11eae6ab16e73cb7bb8dd6a0dc8 -infrastructure.cacert.org 43200 IN SSHFP 3 1 3e1b9ebf85b726cf831c76ecb8c17786aedf40e8 -infrastructure.cacert.org 43200 IN SSHFP 3 2 3ae7f0035c2172977e99bfe312c7a8299650dea16a975ea13eece8fda426062a -infra02.cacert.org 43200 IN CNAME infrastructure.cacert.org. +infra02.cacert.org 43200 IN A 213.154.225.230 +infra02.cacert.org 43200 IN AAAA 2001:7b8:616:162:1::10 +infra02.cacert.org 43200 IN SSHFP 1 1 5a82d3c150af002c05784f73250a067053aeed63 +infra02.cacert.org 43200 IN SSHFP 1 2 63b0d74a3f1ce61865a5eb0497ef05243bc4067ec983c69ab8e62f3cb940cc82 +infra02.cacert.org 43200 IN SSHFP 2 1 af8d8e3386eaa72997709632adf2b457e6fef0dc +infra02.cacert.org 43200 IN SSHFP 2 2 3a0188fc47d1fdd14d70a2fb78f51792d06ba11eae6ab16e73cb7bb8dd6a0dc8 +infra02.cacert.org 43200 IN SSHFP 3 1 3e1b9ebf85b726cf831c76ecb8c17786aedf40e8 +infra02.cacert.org 43200 IN SSHFP 3 2 3ae7f0035c2172977e99bfe312c7a8299650dea16a975ea13eece8fda426062a ; infrastructure host infra03 infra03.cacert.org 43200 IN A 213.154.225.249 @@ -214,11 +220,13 @@ irc.cacert.org 43200 IN SSHFP 4 2 68d44bc21d05550c8aab62163b9257c85b9bcf0a4cab1c ; support issue tracker issue.cacert.org 43200 IN A 213.154.225.244 +issue.cacert.org 43200 IN AAAA 2001:7b8:616:162:2::28 issue.cacert.org 43200 IN SSHFP 1 1 3f55e52b51d142ef9d15eeaa9ca25b3aa30c7c6e issue.cacert.org 43200 IN SSHFP 2 1 fd9a5c79c4a9057b87ae8e639fd223b386af4bdb ; Jenkins CI/CD service jenkins.cacert.org 43200 IN A 213.154.225.242 +jenkins.cacert.org 43200 IN AAAA 2001:7b8:616:162:2::115 jenkins.cacert.org 43200 IN SSHFP 1 1 2caebe197c0f1c25404890adfedabb371fb05650 jenkins.cacert.org 43200 IN SSHFP 1 2 6110a42530a5197ab1180417ee32b2eb581813ca773498177481b11d969bb529 jenkins.cacert.org 43200 IN SSHFP 2 1 4ce4eef515bdee033d68b92419f71679880b2fd5 @@ -230,10 +238,11 @@ jenkins.cacert.org 43200 IN SSHFP 4 2 db988ff234a4948bbcb1a61ff21c080efed4548251 ; mailing list service lists.cacert.org 43200 IN A 213.154.225.231 +lists.cacert.org 43200 IN AAAA 2001:7b8:616:162:2::17 lists.cacert.org 43200 IN MX 10 email.cacert.org. lists.cacert.org 43200 IN SSHFP 1 1 87f75b9124326b566ed22dcf65a9740eede8f0ff lists.cacert.org 43200 IN SSHFP 2 1 8d79e68e731ed72667f3d286c477245df653083b -lists.cacert.org 43200 IN TXT "v=spf1 ip4:213.154.225.231 -all" +lists.cacert.org 43200 IN TXT "v=spf1 ip4:213.154.225.231 ip6:2001:7b8:616:162:2::17 -all" cert.lists.cacert.org 43200 IN CNAME lists.cacert.org. nocert.lists.cacert.org 43200 IN CNAME lists.cacert.org. @@ -263,7 +272,7 @@ monitor.cacert.org 43200 IN SSHFP 4 2 2f9ae80bcebb6efc432747246e12103add80f4d875 ; Board motion system motion.cacert.org 43200 IN A 213.154.225.241 -motion.cacert.org 43200 IN AAAA 2001:7b8:616:162:2::35 +motion.cacert.org 43200 IN AAAA 2001:7b8:616:162:2::117 motion.cacert.org 43200 IN SSHFP 2 2 53dedfd2c566011db80311528eba15fd000b0a5092ab1fc8104ca5804490cd18 motion.cacert.org 43200 IN SSHFP 3 1 6d4a9ec30f30aa0634b8879cded8ce884498e290 motion.cacert.org 43200 IN SSHFP 3 2 325ee301da21844adb8f12c0011b8d73709be8b2b9f375829224ac79c8fdfa6e @@ -288,8 +297,10 @@ ns1.cacert.org 43200 IN A 213.154.225.251 ns1.cacert.org 43200 IN AAAA 2001:7b8:616:163::102 ns2.cacert.org 43200 IN A 213.154.225.237 ns2.cacert.org 43200 IN AAAA 2001:7b8:616:163::202 +ns3.cacert.org 43200 IN A 46.249.47.169 +ns3.cacert.org 43200 IN AAAA 2001:19f0:4400:407d::1313 ns4.cacert.org 43200 IN A 45.77.40.159 -ns4.cacert.org 43200 IN AAAA 2001:19f0:4400:407d::1313 +ns4.cacert.org 43200 IN AAAA 2a00:1ca8:2a::31 ns5.cacert.org 43200 IN A 167.86.117.119 ns5.cacert.org 43200 IN AAAA 2a02:c207:3004:6195::1 @@ -307,7 +318,7 @@ pgsql.cacert.org 43200 IN SSHFP 4 1 a90a3d944b848ffda49b1c814b07d0a4368a6195 pgsql.cacert.org 43200 IN SSHFP 4 2 4319929ff7c2dd0edcc69d1fec2b8f660737dbd1ba8d49f719daddaceb4d08d1 ; email ping for users -; TODO: needs to be referenced in the SPF record for cacert.org +; needs to be referenced in the SPF record for cacert.org ping.cacert.org 43200 IN AAAA 2001:7b8:616:28:50::11 ; incoming proxy on infra02 @@ -408,6 +419,7 @@ l10n.cacert.org 43200 IN CNAME translations.cacert.org. ; community web site hosting web.cacert.org 43200 IN A 213.154.225.242 +web.cacert.org 43200 IN AAAA 2001:7b8:616:162:2::26 web.cacert.org 43200 IN SSHFP 1 1 85f5338d90930200cbbfce1aab56988b4c8f0f22 web.cacert.org 43200 IN SSHFP 1 2 d39cbd51588f322f7b4384274cf0166f25b10f54a6cd153ed7251ff30b5b516e web.cacert.org 43200 IN SSHFP 2 1 906f0c17bb0e233b0f52ce33cfe64038d45ac4f2 @@ -420,7 +432,7 @@ codedocs.cacert.org 43200 IN CNAME web.cacert.org. funding.cacert.org 43200 IN CNAME web.cacert.org. infradocs.cacert.org 43200 IN CNAME web.cacert.org. -; community webmail +; community webmail -- vm-community on infra02 webmail.cacert.org 43200 IN A 213.154.225.239 webmail.cacert.org 43200 IN AAAA 2001:7b8:616:162:2::118 webmail.cacert.org 43200 IN SSHFP 1 1 b56a68f3c30c5d5b7854c615cb0f20b6807c7aef @@ -432,6 +444,7 @@ webmail.cacert.org 43200 IN SSHFP 4 2 4411a6a0820eb811474bcd71e82f00c007030b79bf ; static websites webstatic.cacert.org 43200 IN A 213.154.225.242 +webstatic.cacert.org 43200 IN AAAA 2001:7b8:616:162:2::116 webstatic.cacert.org 43200 IN SSHFP 1 1 30897a7a984d8350495946d54c6374e9331237ef webstatic.cacert.org 43200 IN SSHFP 1 2 32bb10c5cf48532d077066e012230058ddf3cce731c561f228e310eb7a546e3f webstatic.cacert.org 43200 IN SSHFP 2 1 868361a51ec60607bfd964d0f8f3e4ee5e803fc6