knilsson/dns-zones
1
0
Fork 0
forked from critical/dns-zones
Code Pull requests Activity

Fix forward and reverse entries

Browse source 
- add missing AAAA records in cacert.org
- add missing PTR records in IPv6 reverse zone
- remove broken PTR records in IPv6 reverse zone
- fix SPF records
This commit is contained in:
Jan Dittberner 2022-10-30 12:31:57 +01:00
parent 1f976e4d65
commit 17106f7c86
2 changed files with 47 additions and 24 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

22
6.1.6.0.8.b.7.0.1.0.0.2.ip6.arpa
View file

@ -10,42 +10,52 @@ $ORIGIN .
0.0.1.0.0.0.0.0.0.0.0.0.0.0.0.0.2.6.1.0.6.1.6.0.8.b.7.0.1.0.0.2.ip6.arpa 3600 IN PTR hopper.cacert.org 0.0.1.0.0.0.0.0.0.0.0.0.0.0.0.0.2.6.1.0.6.1.6.0.8.b.7.0.1.0.0.2.ip6.arpa 3600 IN PTR hopper.cacert.org
0.0.1.0.0.0.0.0.0.0.0.0.0.0.0.0.3.6.1.0.6.1.6.0.8.b.7.0.1.0.0.2.ip6.arpa 3600 IN PTR hopper.cacert.org 0.0.1.0.0.0.0.0.0.0.0.0.0.0.0.0.3.6.1.0.6.1.6.0.8.b.7.0.1.0.0.2.ip6.arpa 3600 IN PTR hopper.cacert.org
0.1.0.0.0.0.0.0.0.0.0.0.1.0.0.0.2.6.1.0.6.1.6.0.8.b.7.0.1.0.0.2.ip6.arpa 3600 IN PTR infrastructure.cacert.org 0.1.0.0.0.0.0.0.0.0.0.0.1.0.0.0.2.6.1.0.6.1.6.0.8.b.7.0.1.0.0.2.ip6.arpa 3600 IN PTR infra02.cacert.org
0.1.0.0.0.0.0.0.0.0.0.0.2.0.0.0.2.6.1.0.6.1.6.0.8.b.7.0.1.0.0.2.ip6.arpa 3600 IN PTR infra02.cacert.org 0.1.0.0.0.0.0.0.0.0.0.0.2.0.0.0.2.6.1.0.6.1.6.0.8.b.7.0.1.0.0.2.ip6.arpa 3600 IN PTR infra02.cacert.org
0.1.0.0.0.0.0.0.0.0.0.0.3.0.0.0.2.6.1.0.6.1.6.0.8.b.7.0.1.0.0.2.ip6.arpa 3600 IN PTR ingress03.cacert.org
0.2.0.0.0.0.0.0.0.0.0.0.2.0.0.0.2.6.1.0.6.1.6.0.8.b.7.0.1.0.0.2.ip6.arpa 3600 IN PTR community.cacert.org 0.2.0.0.0.0.0.0.0.0.0.0.2.0.0.0.2.6.1.0.6.1.6.0.8.b.7.0.1.0.0.2.ip6.arpa 3600 IN PTR community.cacert.org
0.5.2.0.0.0.0.0.0.0.0.0.2.0.0.0.2.6.1.0.6.1.6.0.8.b.7.0.1.0.0.2.ip6.arpa 3600 IN PTR git.cacert.org 0.5.2.0.0.0.0.0.0.0.0.0.2.0.0.0.2.6.1.0.6.1.6.0.8.b.7.0.1.0.0.2.ip6.arpa 3600 IN PTR git.cacert.org
1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.2.6.1.0.6.1.6.0.8.b.7.0.1.0.0.2.ip6.arpa 3600 IN PTR fw.cacert.org 1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.2.6.1.0.6.1.6.0.8.b.7.0.1.0.0.2.ip6.arpa 3600 IN PTR fw.cacert.org
1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.3.6.1.0.6.1.6.0.8.b.7.0.1.0.0.2.ip6.arpa 3600 IN PTR fw.cacert.org 1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.3.6.1.0.6.1.6.0.8.b.7.0.1.0.0.2.ip6.arpa 3600 IN PTR fw.cacert.org
1.0.0.0.0.0.0.0.0.0.0.0.3.0.0.0.2.6.1.0.6.1.6.0.8.b.7.0.1.0.0.2.ip6.arpa 3600 IN PTR infra03.cacert.org
1.0.2.0.0.0.0.0.0.0.0.0.2.0.0.0.2.6.1.0.6.1.6.0.8.b.7.0.1.0.0.2.ip6.arpa 3600 IN PTR proxyout.cacert.org 1.0.2.0.0.0.0.0.0.0.0.0.2.0.0.0.2.6.1.0.6.1.6.0.8.b.7.0.1.0.0.2.ip6.arpa 3600 IN PTR proxyout.cacert.org
1.1.0.0.0.0.0.0.0.0.0.0.0.5.0.0.8.2.0.0.6.1.6.0.8.b.7.0.1.0.0.2.ip6.arpa 3600 IN PTR ping.cacert.org 1.1.0.0.0.0.0.0.0.0.0.0.0.5.0.0.8.2.0.0.6.1.6.0.8.b.7.0.1.0.0.2.ip6.arpa 3600 IN PTR ping.cacert.org
1.1.0.0.0.0.0.0.0.0.0.0.2.0.0.0.2.6.1.0.6.1.6.0.8.b.7.0.1.0.0.2.ip6.arpa 3600 IN PTR ldap.cacert.org 1.1.0.0.0.0.0.0.0.0.0.0.2.0.0.0.2.6.1.0.6.1.6.0.8.b.7.0.1.0.0.2.ip6.arpa 3600 IN PTR ldap.cacert.org
1.1.0.0.0.0.0.0.0.0.0.0.3.0.0.0.2.6.1.0.6.1.6.0.8.b.7.0.1.0.0.2.ip6.arpa 3600 IN PTR mariadb.cacert.org
1.2.0.0.0.0.0.0.0.0.0.0.0.5.0.0.8.2.0.0.6.1.6.0.8.b.7.0.1.0.0.2.ip6.arpa 3600 IN PTR ping.cacert.org 1.2.0.0.0.0.0.0.0.0.0.0.0.5.0.0.8.2.0.0.6.1.6.0.8.b.7.0.1.0.0.2.ip6.arpa 3600 IN PTR ping.cacert.org
1.2.0.0.0.0.0.0.0.0.0.0.2.0.0.0.2.6.1.0.6.1.6.0.8.b.7.0.1.0.0.2.ip6.arpa 3600 IN PTR mail.cacert.org
1.3.0.0.0.0.0.0.0.0.0.0.2.0.0.0.2.6.1.0.6.1.6.0.8.b.7.0.1.0.0.2.ip6.arpa 3600 IN PTR l10n.cacert.org
1.3.0.0.0.0.0.0.0.0.0.0.2.0.0.0.2.6.1.0.6.1.6.0.8.b.7.0.1.0.0.2.ip6.arpa 3600 IN PTR translations.cacert.org 1.3.0.0.0.0.0.0.0.0.0.0.2.0.0.0.2.6.1.0.6.1.6.0.8.b.7.0.1.0.0.2.ip6.arpa 3600 IN PTR translations.cacert.org
2.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.2.6.1.0.6.1.6.0.8.b.7.0.1.0.0.2.ip6.arpa 3600 IN PTR fw01.cacert.org 2.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.2.6.1.0.6.1.6.0.8.b.7.0.1.0.0.2.ip6.arpa 3600 IN PTR fw01.cacert.org
2.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.3.6.1.0.6.1.6.0.8.b.7.0.1.0.0.2.ip6.arpa 3600 IN PTR fw01.cacert.org 2.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.3.6.1.0.6.1.6.0.8.b.7.0.1.0.0.2.ip6.arpa 3600 IN PTR fw01.cacert.org
2.0.1.0.0.0.0.0.0.0.0.0.0.0.0.0.3.6.1.0.6.1.6.0.8.b.7.0.1.0.0.2.ip6.arpa 3600 IN PTR ns1.cacert.org 2.0.1.0.0.0.0.0.0.0.0.0.0.0.0.0.3.6.1.0.6.1.6.0.8.b.7.0.1.0.0.2.ip6.arpa 3600 IN PTR ns1.cacert.org
2.0.2.0.0.0.0.0.0.0.0.0.0.0.0.0.3.6.1.0.6.1.6.0.8.b.7.0.1.0.0.2.ip6.arpa 3600 IN PTR ns2.cacert.org
2.1.0.0.0.0.0.0.0.0.0.0.2.0.0.0.2.6.1.0.6.1.6.0.8.b.7.0.1.0.0.2.ip6.arpa 3600 IN PTR wiki.cacert.org 2.1.0.0.0.0.0.0.0.0.0.0.2.0.0.0.2.6.1.0.6.1.6.0.8.b.7.0.1.0.0.2.ip6.arpa 3600 IN PTR wiki.cacert.org
2.3.0.0.0.0.0.0.0.0.0.0.2.0.0.0.2.6.1.0.6.1.6.0.8.b.7.0.1.0.0.2.ip6.arpa 3600 IN PTR emailout.cacert.org 2.1.0.0.0.0.0.0.0.0.0.0.3.0.0.0.2.6.1.0.6.1.6.0.8.b.7.0.1.0.0.2.ip6.arpa 3600 IN PTR nextcloud.cacert.org
3.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.2.6.1.0.6.1.6.0.8.b.7.0.1.0.0.2.ip6.arpa 3600 IN PTR fw02.cacert.org 3.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.2.6.1.0.6.1.6.0.8.b.7.0.1.0.0.2.ip6.arpa 3600 IN PTR fw02.cacert.org
3.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.3.6.1.0.6.1.6.0.8.b.7.0.1.0.0.2.ip6.arpa 3600 IN PTR fw02.cacert.org 3.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.3.6.1.0.6.1.6.0.8.b.7.0.1.0.0.2.ip6.arpa 3600 IN PTR fw02.cacert.org
3.0.1.0.0.0.0.0.0.0.0.0.0.0.0.0.3.6.1.0.6.1.6.0.8.b.7.0.1.0.0.2.ip6.arpa 3600 IN PTR ocsp.cacert.org 3.0.1.0.0.0.0.0.0.0.0.0.0.0.0.0.3.6.1.0.6.1.6.0.8.b.7.0.1.0.0.2.ip6.arpa 3600 IN PTR ocsp.cacert.org
3.1.0.0.0.0.0.0.0.0.0.0.2.0.0.0.2.6.1.0.6.1.6.0.8.b.7.0.1.0.0.2.ip6.arpa 3600 IN PTR blog.cacert.org 3.1.0.0.0.0.0.0.0.0.0.0.2.0.0.0.2.6.1.0.6.1.6.0.8.b.7.0.1.0.0.2.ip6.arpa 3600 IN PTR blog.cacert.org
3.1.0.0.0.0.0.0.0.0.0.0.3.0.0.0.2.6.1.0.6.1.6.0.8.b.7.0.1.0.0.2.ip6.arpa 3600 IN PTR pgsql.cacert.org
4.0.1.0.0.0.0.0.0.0.0.0.0.0.0.0.3.6.1.0.6.1.6.0.8.b.7.0.1.0.0.2.ip6.arpa 3600 IN PTR crl.cacert.org 4.0.1.0.0.0.0.0.0.0.0.0.0.0.0.0.3.6.1.0.6.1.6.0.8.b.7.0.1.0.0.2.ip6.arpa 3600 IN PTR crl.cacert.org
4.1.0.0.0.0.0.0.0.0.0.0.2.0.0.0.2.6.1.0.6.1.6.0.8.b.7.0.1.0.0.2.ip6.arpa 3600 IN PTR irc.cacert.org 4.1.0.0.0.0.0.0.0.0.0.0.2.0.0.0.2.6.1.0.6.1.6.0.8.b.7.0.1.0.0.2.ip6.arpa 3600 IN PTR irc.cacert.org
4.3.0.0.0.0.0.0.0.0.0.0.2.0.0.0.2.6.1.0.6.1.6.0.8.b.7.0.1.0.0.2.ip6.arpa 3600 IN PTR board.cacert.org 4.3.0.0.0.0.0.0.0.0.0.0.2.0.0.0.2.6.1.0.6.1.6.0.8.b.7.0.1.0.0.2.ip6.arpa 3600 IN PTR board.cacert.org
4.3.0.0.0.0.0.0.0.0.0.0.2.0.0.0.2.6.1.0.6.1.6.0.8.b.7.0.1.0.0.2.ip6.arpa 3600 IN PTR cod.cacert.org
5.1.0.0.0.0.0.0.0.0.0.0.2.0.0.0.2.6.1.0.6.1.6.0.8.b.7.0.1.0.0.2.ip6.arpa 3600 IN PTR svn.cacert.org 5.1.0.0.0.0.0.0.0.0.0.0.2.0.0.0.2.6.1.0.6.1.6.0.8.b.7.0.1.0.0.2.ip6.arpa 3600 IN PTR svn.cacert.org
5.1.0.0.0.0.0.0.0.0.0.0.3.0.0.0.2.6.1.0.6.1.6.0.8.b.7.0.1.0.0.2.ip6.arpa 3600 IN PTR code.cacert.org 5.1.0.0.0.0.0.0.0.0.0.0.3.0.0.0.2.6.1.0.6.1.6.0.8.b.7.0.1.0.0.2.ip6.arpa 3600 IN PTR code.cacert.org
5.1.1.0.0.0.0.0.0.0.0.0.2.0.0.0.2.6.1.0.6.1.6.0.8.b.7.0.1.0.0.2.ip6.arpa 3600 IN PTR jenkins.cacert.org
5.3.0.0.0.0.0.0.0.0.0.0.2.0.0.0.2.6.1.0.6.1.6.0.8.b.7.0.1.0.0.2.ip6.arpa 3600 IN PTR proxyin.cacert.org 5.3.0.0.0.0.0.0.0.0.0.0.2.0.0.0.2.6.1.0.6.1.6.0.8.b.7.0.1.0.0.2.ip6.arpa 3600 IN PTR proxyin.cacert.org
6.1.0.0.0.0.0.0.0.0.0.0.2.0.0.0.2.6.1.0.6.1.6.0.8.b.7.0.1.0.0.2.ip6.arpa 3600 IN PTR bugs.cacert.org 6.1.0.0.0.0.0.0.0.0.0.0.2.0.0.0.2.6.1.0.6.1.6.0.8.b.7.0.1.0.0.2.ip6.arpa 3600 IN PTR bugs.cacert.org
6.1.1.0.0.0.0.0.0.0.0.0.2.0.0.0.2.6.1.0.6.1.6.0.8.b.7.0.1.0.0.2.ip6.arpa 3600 IN PTR webstatic.cacert.org
6.2.0.0.0.0.0.0.0.0.0.0.2.0.0.0.2.6.1.0.6.1.6.0.8.b.7.0.1.0.0.2.ip6.arpa 3600 IN PTR translingo.cacert.org 6.2.0.0.0.0.0.0.0.0.0.0.2.0.0.0.2.6.1.0.6.1.6.0.8.b.7.0.1.0.0.2.ip6.arpa 3600 IN PTR translingo.cacert.org
6.2.0.0.0.0.0.0.0.0.0.0.2.0.0.0.2.6.1.0.6.1.6.0.8.b.7.0.1.0.0.2.ip6.arpa 3600 IN PTR web.cacert.org
7.1.0.0.0.0.0.0.0.0.0.0.2.0.0.0.2.6.1.0.6.1.6.0.8.b.7.0.1.0.0.2.ip6.arpa 3600 IN PTR lists.cacert.org 7.1.0.0.0.0.0.0.0.0.0.0.2.0.0.0.2.6.1.0.6.1.6.0.8.b.7.0.1.0.0.2.ip6.arpa 3600 IN PTR lists.cacert.org
7.1.1.0.0.0.0.0.0.0.0.0.2.0.0.0.2.6.1.0.6.1.6.0.8.b.7.0.1.0.0.2.ip6.arpa 3600 IN PTR motion.cacert.org
7.2.0.0.0.0.0.0.0.0.0.0.2.0.0.0.2.6.1.0.6.1.6.0.8.b.7.0.1.0.0.2.ip6.arpa 3600 IN PTR cats.cacert.org 7.2.0.0.0.0.0.0.0.0.0.0.2.0.0.0.2.6.1.0.6.1.6.0.8.b.7.0.1.0.0.2.ip6.arpa 3600 IN PTR cats.cacert.org
8.1.0.0.0.0.0.0.0.0.0.0.2.0.0.0.2.6.1.0.6.1.6.0.8.b.7.0.1.0.0.2.ip6.arpa 3600 IN PTR monitor.cacert.org 8.1.0.0.0.0.0.0.0.0.0.0.2.0.0.0.2.6.1.0.6.1.6.0.8.b.7.0.1.0.0.2.ip6.arpa 3600 IN PTR monitor.cacert.org
8.1.1.0.0.0.0.0.0.0.0.0.2.0.0.0.2.6.1.0.6.1.6.0.8.b.7.0.1.0.0.2.ip6.arpa 3600 IN PTR webmail.cacert.org
8.2.0.0.0.0.0.0.0.0.0.0.2.0.0.0.2.6.1.0.6.1.6.0.8.b.7.0.1.0.0.2.ip6.arpa 3600 IN PTR issue.cacert.org 8.2.0.0.0.0.0.0.0.0.0.0.2.0.0.0.2.6.1.0.6.1.6.0.8.b.7.0.1.0.0.2.ip6.arpa 3600 IN PTR issue.cacert.org
8.2.2.0.0.0.0.0.0.0.0.0.2.0.0.0.2.6.1.0.6.1.6.0.8.b.7.0.1.0.0.2.ip6.arpa 3600 IN PTR email.cacert.org
8.4.2.0.0.0.0.0.0.0.0.0.2.0.0.0.2.6.1.0.6.1.6.0.8.b.7.0.1.0.0.2.ip6.arpa 3600 IN PTR test.cacert.org 8.4.2.0.0.0.0.0.0.0.0.0.2.0.0.0.2.6.1.0.6.1.6.0.8.b.7.0.1.0.0.2.ip6.arpa 3600 IN PTR test.cacert.org
9.1.0.0.0.0.0.0.0.0.0.0.2.0.0.0.2.6.1.0.6.1.6.0.8.b.7.0.1.0.0.2.ip6.arpa 3600 IN PTR email.cacert.org 9.0.0.0.0.0.0.0.0.0.0.0.1.0.0.0.2.6.1.0.6.1.6.0.8.b.7.0.1.0.0.2.ip6.arpa 3600 IN PTR infra03.cacert.org
9.2.0.0.0.0.0.0.0.0.0.0.2.0.0.0.2.6.1.0.6.1.6.0.8.b.7.0.1.0.0.2.ip6.arpa 3600 IN PTR logging.cacert.org 9.2.0.0.0.0.0.0.0.0.0.0.2.0.0.0.2.6.1.0.6.1.6.0.8.b.7.0.1.0.0.2.ip6.arpa 3600 IN PTR logging.cacert.org
9.3.2.0.0.0.0.0.0.0.0.0.2.0.0.0.2.6.1.0.6.1.6.0.8.b.7.0.1.0.0.2.ip6.arpa 3600 IN PTR emailout.cacert.org
9.4.1.0.0.0.0.0.0.0.0.0.2.0.0.0.2.6.1.0.6.1.6.0.8.b.7.0.1.0.0.2.ip6.arpa 3600 IN PTR test3.cacert.org
9.4.2.0.0.0.0.0.0.0.0.0.2.0.0.0.2.6.1.0.6.1.6.0.8.b.7.0.1.0.0.2.ip6.arpa 3600 IN PTR test2.cacert.org 9.4.2.0.0.0.0.0.0.0.0.0.2.0.0.0.2.6.1.0.6.1.6.0.8.b.7.0.1.0.0.2.ip6.arpa 3600 IN PTR test2.cacert.org

49
cacert.org
View file

@ -18,7 +18,8 @@ cacert.org 43200 IN NS ns2.cacert.org.
cacert.org 43200 IN NS ns4.cacert.org. cacert.org 43200 IN NS ns4.cacert.org.
; SPF and DKIM ; SPF and DKIM
cacert.org 43200 IN TXT "v=spf1 ip4:213.154.225.245 ip4:213.154.225.246 ip4:213.154.225.247 ip6:2001:7b8:3:9c::245 ip6:2001:7b8:3:9c::246 ip6:2001:7b8:3:9c::247" " ip4:213.154.225.228 ip6:2001:7b8:616:162:2::228 ip4:213.154.225.230 ip4:213.154.225.239 ip6:2001:7b8:616:162:2::239 -all" ; SPF allows www, secure, www1, email, infra02, emailout, ping
cacert.org 43200 IN TXT "v=spf1 ip4:213.154.225.245 ip4:213.154.225.246 ip4:213.154.225.247 ip6:2001:7b8:3:9c::245 ip6:2001:7b8:3:9c::246 ip6:2001:7b8:3:9c::247 ip4:213.154.225.228 ip6:2001:7b8:616:162:2::228 ip4:213.154.225.230 ip6:2001:7b8:616:162:1::10 ip4:213.154.225.239 ip6:2001:7b8:616:162:2::239 ip6:2001:7b8:616:28:50::11 -all"
auto._domainkey.cacert.org 43200 IN TXT "v=DKIM1;g=*;k=rsa;t=y;p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDDNFxiNr+NHJwih3OPhGr4iwLE+BBDu72YrMSzUnU1FF50CW7iOtuhg796UZ6xrZ5VuhAix6YmmzcvF2UxYzoD/XpfZ4MzBu0ND4/nkt9/YOTyIBzwQqn9uMNve0Y76Zsel89dIJtOI+y+lfnFExV0jKwe53gzmxMVpMSSCcZPGwIDAQAB" auto._domainkey.cacert.org 43200 IN TXT "v=DKIM1;g=*;k=rsa;t=y;p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDDNFxiNr+NHJwih3OPhGr4iwLE+BBDu72YrMSzUnU1FF50CW7iOtuhg796UZ6xrZ5VuhAix6YmmzcvF2UxYzoD/XpfZ4MzBu0ND4/nkt9/YOTyIBzwQqn9uMNve0Y76Zsel89dIJtOI+y+lfnFExV0jKwe53gzmxMVpMSSCcZPGwIDAQAB"
mail._domainkey.cacert.org 43200 IN TXT "v=DKIM1;g=*;k=rsa;t=y;p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDOZV5h3rm18QRiNfNnwXadX8jeSC3zjpU7GFNTfZk1ifjLxrlVrSsfAvlVfFvR2/uQXegwEkiNV5bd57d989T+VVLZZbSv+OAXX4ZwihsLkf3huDszKtJTvsybqUNh97OE00THSyJCrcowFDcLv5IN2ULCOlMjTqbZxZuaNW0S6wIDAQAB" mail._domainkey.cacert.org 43200 IN TXT "v=DKIM1;g=*;k=rsa;t=y;p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDOZV5h3rm18QRiNfNnwXadX8jeSC3zjpU7GFNTfZk1ifjLxrlVrSsfAvlVfFvR2/uQXegwEkiNV5bd57d989T+VVLZZbSv+OAXX4ZwihsLkf3huDszKtJTvsybqUNh97OE00THSyJCrcowFDcLv5IN2ULCOlMjTqbZxZuaNW0S6wIDAQAB"
@ -60,6 +61,7 @@ blog.cacert.org 43200 IN SSHFP 4 2 f24b770c16dcb91afc9461e62e6fe63a63d413efa4794
; board OpenERP ; board OpenERP
board.cacert.org 43200 IN A 213.154.225.252 board.cacert.org 43200 IN A 213.154.225.252
board.cacert.org 43200 IN AAAA 2001:7b8:616:162:2::34
board.cacert.org 43200 IN SSHFP 1 1 f5c02a860a1cc07aeefbf802540680c7476bde6e board.cacert.org 43200 IN SSHFP 1 1 f5c02a860a1cc07aeefbf802540680c7476bde6e
board.cacert.org 43200 IN SSHFP 2 1 7b6eeb0ccdfb2e2cfe479e0aece36ff995fdd1f4 board.cacert.org 43200 IN SSHFP 2 1 7b6eeb0ccdfb2e2cfe479e0aece36ff995fdd1f4
finance.cacert.org 43200 IN CNAME board.cacert.org. finance.cacert.org 43200 IN CNAME board.cacert.org.
@ -76,11 +78,12 @@ bugs.cacert.org 43200 IN SSHFP 3 2 152fc9f8d7d72979846757db7fa433bd3f6340cd0dceb
bugs.cacert.org 43200 IN SSHFP 4 1 bb6b5f8599c3a93383392b80cc029a0d65ffc7f1 bugs.cacert.org 43200 IN SSHFP 4 1 bb6b5f8599c3a93383392b80cc029a0d65ffc7f1
bugs.cacert.org 43200 IN SSHFP 4 2 caa52e4c5ddecc5ee144aa2b6965101961ff7e7518063b43908d133f1cdf6e15 bugs.cacert.org 43200 IN SSHFP 4 2 caa52e4c5ddecc5ee144aa2b6965101961ff7e7518063b43908d133f1cdf6e15
; Firewall virtual IP ; Firewall virtual IPv6 and IPv4 gateway address
cacert-fw.cacert.org 43200 IN A 213.154.225.229 cacert-fw.cacert.org 43200 IN A 213.154.225.229
cacert-fw.cacert.org 43200 IN AAAA 2001:7b8:3:9c::4 cacert-fw.cacert.org 43200 IN AAAA 2001:7b8:3:9c::4
; Firewall 01 ; Firewall 01, reachable via dedicated jump hosts only
; IPv6 is wrong https://code.cacert.org/critical/dns-zones/issues/8
cacert-fw01.cacert.org 43200 IN A 213.154.225.253 cacert-fw01.cacert.org 43200 IN A 213.154.225.253
cacert-fw01.cacert.org 43200 IN AAAA 2001:7b8:3:9c::5 cacert-fw01.cacert.org 43200 IN AAAA 2001:7b8:3:9c::5
cacert-fw01.cacert.org 43200 IN SSHFP 1 1 43a7c6105193d121a8b27f5cd1c59aae32a35c5a cacert-fw01.cacert.org 43200 IN SSHFP 1 1 43a7c6105193d121a8b27f5cd1c59aae32a35c5a
@ -92,7 +95,8 @@ cacert-fw01.cacert.org 43200 IN SSHFP 3 2 dc9d37b1cd325175437e5836ed1691d594f5af
cacert-fw01.cacert.org 43200 IN SSHFP 4 1 119d5aa477a8a8dc79334fc84a64d1f3ea3a3319 cacert-fw01.cacert.org 43200 IN SSHFP 4 1 119d5aa477a8a8dc79334fc84a64d1f3ea3a3319
cacert-fw01.cacert.org 43200 IN SSHFP 4 2 60d46e0d94070064e48a0d9de5a30778f00fd9c2c23dedb5a674c5ec873e3cdc cacert-fw01.cacert.org 43200 IN SSHFP 4 2 60d46e0d94070064e48a0d9de5a30778f00fd9c2c23dedb5a674c5ec873e3cdc
; Firewall 02 ; Firewall 02, reachable via dedicated jump hosts only
; IPv6 is wrong https://code.cacert.org/critical/dns-zones/issues/8
cacert-fw02.cacert.org 43200 IN A 213.154.225.254 cacert-fw02.cacert.org 43200 IN A 213.154.225.254
cacert-fw02.cacert.org 43200 IN AAAA 2001:7b8:3:9c::6 cacert-fw02.cacert.org 43200 IN AAAA 2001:7b8:3:9c::6
cacert-fw02.cacert.org 43200 IN SSHFP 1 1 43a7c6105193d121a8b27f5cd1c59aae32a35c5a cacert-fw02.cacert.org 43200 IN SSHFP 1 1 43a7c6105193d121a8b27f5cd1c59aae32a35c5a
@ -106,6 +110,7 @@ cacert-fw02.cacert.org 43200 IN SSHFP 4 2 60d46e0d94070064e48a0d9de5a30778f00fd9
; CAcert Assurer Training System ; CAcert Assurer Training System
cats.cacert.org 43200 IN A 213.154.225.243 cats.cacert.org 43200 IN A 213.154.225.243
cats.cacert.org 43200 IN AAAA 2001:7b8:616:162:2::27
cats.cacert.org 43200 IN SSHFP 1 1 d29d4cc4662d5cb5f42c02823ca8677f05439589 cats.cacert.org 43200 IN SSHFP 1 1 d29d4cc4662d5cb5f42c02823ca8677f05439589
cats.cacert.org 43200 IN SSHFP 1 2 605af57ce0f1ecf8eeac5c71901f1434bf65c06fc0796b932d0f10f21ddf65fe cats.cacert.org 43200 IN SSHFP 1 2 605af57ce0f1ecf8eeac5c71901f1434bf65c06fc0796b932d0f10f21ddf65fe
cats.cacert.org 43200 IN SSHFP 2 1 0342eb1e7325eb90a1c0483de3d6597e36e569c8 cats.cacert.org 43200 IN SSHFP 2 1 0342eb1e7325eb90a1c0483de3d6597e36e569c8
@ -150,6 +155,7 @@ emailout.cacert.org 43200 IN SSHFP 4 2 4ceb488ad17ea7c8db161fdf3357e273d2ea1fe5b
; git repository server ; git repository server
git.cacert.org 43200 IN A 213.154.225.250 git.cacert.org 43200 IN A 213.154.225.250
git.cacert.org 43200 IN AAAA 2001:7b8:616:162:2::250
git.cacert.org 43200 IN SSHFP 1 1 23c7622d6db5822c809152c1c0fd9ea7838f76c6 git.cacert.org 43200 IN SSHFP 1 1 23c7622d6db5822c809152c1c0fd9ea7838f76c6
git.cacert.org 43200 IN SSHFP 1 2 dabbe1766c7933071c4e6942a1dfc72c26d9d867d8dee84beda210c8ef9ea2c5 git.cacert.org 43200 IN SSHFP 1 2 dabbe1766c7933071c4e6942a1dfc72c26d9d867d8dee84beda210c8ef9ea2c5
git.cacert.org 43200 IN SSHFP 2 1 8509db491902fe10ab84c8f24b02f10c1adf0e7f git.cacert.org 43200 IN SSHFP 2 1 8509db491902fe10ab84c8f24b02f10c1adf0e7f
@ -160,6 +166,7 @@ git.cacert.org 43200 IN SSHFP 4 1 13d611007b43d073cf4d89784510398116623eb7
git.cacert.org 43200 IN SSHFP 4 2 40a61a25488fe01c056eaaff703ef0ff9c6b01bee00580a91b95741dfaa59751 git.cacert.org 43200 IN SSHFP 4 2 40a61a25488fe01c056eaaff703ef0ff9c6b01bee00580a91b95741dfaa59751
; hopper for critical systems ; hopper for critical systems
; need to clarify https://nextcloud.cacert.org/apps/deck/#/board/10/card/64
hopper.cacert.org 43200 IN A 213.136.19.144 hopper.cacert.org 43200 IN A 213.136.19.144
hopper.cacert.org 43200 IN AAAA 2001:7b8:616:163::100 hopper.cacert.org 43200 IN AAAA 2001:7b8:616:163::100
hopper.cacert.org 43200 IN SSHFP 1 1 0632f537b79c8c7216a56b5da37aadfca3ff2b0c hopper.cacert.org 43200 IN SSHFP 1 1 0632f537b79c8c7216a56b5da37aadfca3ff2b0c
@ -170,15 +177,14 @@ hopper.cacert.org 43200 IN SSHFP 3 1 f450a0cb1816e519b3f03e9ea9c8a54a94955071
hopper.cacert.org 43200 IN SSHFP 3 2 cc1b07f5bc75760dbb98a5bc515bf9cf7f3559bff032d56ba37b32bc38031375 hopper.cacert.org 43200 IN SSHFP 3 2 cc1b07f5bc75760dbb98a5bc515bf9cf7f3559bff032d56ba37b32bc38031375
; infrastructure host infra02 ; infrastructure host infra02
infrastructure.cacert.org 43200 IN A 213.154.225.230 infra02.cacert.org 43200 IN A 213.154.225.230
infrastructure.cacert.org 43200 IN AAAA 2001:7b8:616:162:1::10 infra02.cacert.org 43200 IN AAAA 2001:7b8:616:162:1::10
infrastructure.cacert.org 43200 IN SSHFP 1 1 5a82d3c150af002c05784f73250a067053aeed63 infra02.cacert.org 43200 IN SSHFP 1 1 5a82d3c150af002c05784f73250a067053aeed63
infrastructure.cacert.org 43200 IN SSHFP 1 2 63b0d74a3f1ce61865a5eb0497ef05243bc4067ec983c69ab8e62f3cb940cc82 infra02.cacert.org 43200 IN SSHFP 1 2 63b0d74a3f1ce61865a5eb0497ef05243bc4067ec983c69ab8e62f3cb940cc82
infrastructure.cacert.org 43200 IN SSHFP 2 1 af8d8e3386eaa72997709632adf2b457e6fef0dc infra02.cacert.org 43200 IN SSHFP 2 1 af8d8e3386eaa72997709632adf2b457e6fef0dc
infrastructure.cacert.org 43200 IN SSHFP 2 2 3a0188fc47d1fdd14d70a2fb78f51792d06ba11eae6ab16e73cb7bb8dd6a0dc8 infra02.cacert.org 43200 IN SSHFP 2 2 3a0188fc47d1fdd14d70a2fb78f51792d06ba11eae6ab16e73cb7bb8dd6a0dc8
infrastructure.cacert.org 43200 IN SSHFP 3 1 3e1b9ebf85b726cf831c76ecb8c17786aedf40e8 infra02.cacert.org 43200 IN SSHFP 3 1 3e1b9ebf85b726cf831c76ecb8c17786aedf40e8
infrastructure.cacert.org 43200 IN SSHFP 3 2 3ae7f0035c2172977e99bfe312c7a8299650dea16a975ea13eece8fda426062a infra02.cacert.org 43200 IN SSHFP 3 2 3ae7f0035c2172977e99bfe312c7a8299650dea16a975ea13eece8fda426062a
infra02.cacert.org 43200 IN CNAME infrastructure.cacert.org.
; infrastructure host infra03 ; infrastructure host infra03
infra03.cacert.org 43200 IN A 213.154.225.249 infra03.cacert.org 43200 IN A 213.154.225.249
@ -214,11 +220,13 @@ irc.cacert.org 43200 IN SSHFP 4 2 68d44bc21d05550c8aab62163b9257c85b9bcf0a4cab1c
; support issue tracker ; support issue tracker
issue.cacert.org 43200 IN A 213.154.225.244 issue.cacert.org 43200 IN A 213.154.225.244
issue.cacert.org 43200 IN AAAA 2001:7b8:616:162:2::28
issue.cacert.org 43200 IN SSHFP 1 1 3f55e52b51d142ef9d15eeaa9ca25b3aa30c7c6e issue.cacert.org 43200 IN SSHFP 1 1 3f55e52b51d142ef9d15eeaa9ca25b3aa30c7c6e
issue.cacert.org 43200 IN SSHFP 2 1 fd9a5c79c4a9057b87ae8e639fd223b386af4bdb issue.cacert.org 43200 IN SSHFP 2 1 fd9a5c79c4a9057b87ae8e639fd223b386af4bdb
; Jenkins CI/CD service ; Jenkins CI/CD service
jenkins.cacert.org 43200 IN A 213.154.225.242 jenkins.cacert.org 43200 IN A 213.154.225.242
jenkins.cacert.org 43200 IN AAAA 2001:7b8:616:162:2::115
jenkins.cacert.org 43200 IN SSHFP 1 1 2caebe197c0f1c25404890adfedabb371fb05650 jenkins.cacert.org 43200 IN SSHFP 1 1 2caebe197c0f1c25404890adfedabb371fb05650
jenkins.cacert.org 43200 IN SSHFP 1 2 6110a42530a5197ab1180417ee32b2eb581813ca773498177481b11d969bb529 jenkins.cacert.org 43200 IN SSHFP 1 2 6110a42530a5197ab1180417ee32b2eb581813ca773498177481b11d969bb529
jenkins.cacert.org 43200 IN SSHFP 2 1 4ce4eef515bdee033d68b92419f71679880b2fd5 jenkins.cacert.org 43200 IN SSHFP 2 1 4ce4eef515bdee033d68b92419f71679880b2fd5
@ -230,10 +238,11 @@ jenkins.cacert.org 43200 IN SSHFP 4 2 db988ff234a4948bbcb1a61ff21c080efed4548251
; mailing list service ; mailing list service
lists.cacert.org 43200 IN A 213.154.225.231 lists.cacert.org 43200 IN A 213.154.225.231
lists.cacert.org 43200 IN AAAA 2001:7b8:616:162:2::17
lists.cacert.org 43200 IN MX 10 email.cacert.org. lists.cacert.org 43200 IN MX 10 email.cacert.org.
lists.cacert.org 43200 IN SSHFP 1 1 87f75b9124326b566ed22dcf65a9740eede8f0ff lists.cacert.org 43200 IN SSHFP 1 1 87f75b9124326b566ed22dcf65a9740eede8f0ff
lists.cacert.org 43200 IN SSHFP 2 1 8d79e68e731ed72667f3d286c477245df653083b lists.cacert.org 43200 IN SSHFP 2 1 8d79e68e731ed72667f3d286c477245df653083b
lists.cacert.org 43200 IN TXT "v=spf1 ip4:213.154.225.231 -all" lists.cacert.org 43200 IN TXT "v=spf1 ip4:213.154.225.231 ip6:2001:7b8:616:162:2::17 -all"
cert.lists.cacert.org 43200 IN CNAME lists.cacert.org. cert.lists.cacert.org 43200 IN CNAME lists.cacert.org.
nocert.lists.cacert.org 43200 IN CNAME lists.cacert.org. nocert.lists.cacert.org 43200 IN CNAME lists.cacert.org.
@ -263,7 +272,7 @@ monitor.cacert.org 43200 IN SSHFP 4 2 2f9ae80bcebb6efc432747246e12103add80f4d875
; Board motion system ; Board motion system
motion.cacert.org 43200 IN A 213.154.225.241 motion.cacert.org 43200 IN A 213.154.225.241
motion.cacert.org 43200 IN AAAA 2001:7b8:616:162:2::35 motion.cacert.org 43200 IN AAAA 2001:7b8:616:162:2::117
motion.cacert.org 43200 IN SSHFP 2 2 53dedfd2c566011db80311528eba15fd000b0a5092ab1fc8104ca5804490cd18 motion.cacert.org 43200 IN SSHFP 2 2 53dedfd2c566011db80311528eba15fd000b0a5092ab1fc8104ca5804490cd18
motion.cacert.org 43200 IN SSHFP 3 1 6d4a9ec30f30aa0634b8879cded8ce884498e290 motion.cacert.org 43200 IN SSHFP 3 1 6d4a9ec30f30aa0634b8879cded8ce884498e290
motion.cacert.org 43200 IN SSHFP 3 2 325ee301da21844adb8f12c0011b8d73709be8b2b9f375829224ac79c8fdfa6e motion.cacert.org 43200 IN SSHFP 3 2 325ee301da21844adb8f12c0011b8d73709be8b2b9f375829224ac79c8fdfa6e
@ -288,8 +297,10 @@ ns1.cacert.org 43200 IN A 213.154.225.251
ns1.cacert.org 43200 IN AAAA 2001:7b8:616:163::102 ns1.cacert.org 43200 IN AAAA 2001:7b8:616:163::102
ns2.cacert.org 43200 IN A 213.154.225.237 ns2.cacert.org 43200 IN A 213.154.225.237
ns2.cacert.org 43200 IN AAAA 2001:7b8:616:163::202 ns2.cacert.org 43200 IN AAAA 2001:7b8:616:163::202
ns3.cacert.org 43200 IN A 46.249.47.169
ns3.cacert.org 43200 IN AAAA 2001:19f0:4400:407d::1313
ns4.cacert.org 43200 IN A 45.77.40.159 ns4.cacert.org 43200 IN A 45.77.40.159
ns4.cacert.org 43200 IN AAAA 2001:19f0:4400:407d::1313 ns4.cacert.org 43200 IN AAAA 2a00:1ca8:2a::31
ns5.cacert.org 43200 IN A 167.86.117.119 ns5.cacert.org 43200 IN A 167.86.117.119
ns5.cacert.org 43200 IN AAAA 2a02:c207:3004:6195::1 ns5.cacert.org 43200 IN AAAA 2a02:c207:3004:6195::1
@ -307,7 +318,7 @@ pgsql.cacert.org 43200 IN SSHFP 4 1 a90a3d944b848ffda49b1c814b07d0a4368a6195
pgsql.cacert.org 43200 IN SSHFP 4 2 4319929ff7c2dd0edcc69d1fec2b8f660737dbd1ba8d49f719daddaceb4d08d1 pgsql.cacert.org 43200 IN SSHFP 4 2 4319929ff7c2dd0edcc69d1fec2b8f660737dbd1ba8d49f719daddaceb4d08d1
; email ping for users ; email ping for users
; TODO: needs to be referenced in the SPF record for cacert.org ; needs to be referenced in the SPF record for cacert.org
ping.cacert.org 43200 IN AAAA 2001:7b8:616:28:50::11 ping.cacert.org 43200 IN AAAA 2001:7b8:616:28:50::11
; incoming proxy on infra02 ; incoming proxy on infra02
@ -408,6 +419,7 @@ l10n.cacert.org 43200 IN CNAME translations.cacert.org.
; community web site hosting ; community web site hosting
web.cacert.org 43200 IN A 213.154.225.242 web.cacert.org 43200 IN A 213.154.225.242
web.cacert.org 43200 IN AAAA 2001:7b8:616:162:2::26
web.cacert.org 43200 IN SSHFP 1 1 85f5338d90930200cbbfce1aab56988b4c8f0f22 web.cacert.org 43200 IN SSHFP 1 1 85f5338d90930200cbbfce1aab56988b4c8f0f22
web.cacert.org 43200 IN SSHFP 1 2 d39cbd51588f322f7b4384274cf0166f25b10f54a6cd153ed7251ff30b5b516e web.cacert.org 43200 IN SSHFP 1 2 d39cbd51588f322f7b4384274cf0166f25b10f54a6cd153ed7251ff30b5b516e
web.cacert.org 43200 IN SSHFP 2 1 906f0c17bb0e233b0f52ce33cfe64038d45ac4f2 web.cacert.org 43200 IN SSHFP 2 1 906f0c17bb0e233b0f52ce33cfe64038d45ac4f2
@ -420,7 +432,7 @@ codedocs.cacert.org 43200 IN CNAME web.cacert.org.
funding.cacert.org 43200 IN CNAME web.cacert.org. funding.cacert.org 43200 IN CNAME web.cacert.org.
infradocs.cacert.org 43200 IN CNAME web.cacert.org. infradocs.cacert.org 43200 IN CNAME web.cacert.org.
; community webmail ; community webmail -- vm-community on infra02
webmail.cacert.org 43200 IN A 213.154.225.239 webmail.cacert.org 43200 IN A 213.154.225.239
webmail.cacert.org 43200 IN AAAA 2001:7b8:616:162:2::118 webmail.cacert.org 43200 IN AAAA 2001:7b8:616:162:2::118
webmail.cacert.org 43200 IN SSHFP 1 1 b56a68f3c30c5d5b7854c615cb0f20b6807c7aef webmail.cacert.org 43200 IN SSHFP 1 1 b56a68f3c30c5d5b7854c615cb0f20b6807c7aef
@ -432,6 +444,7 @@ webmail.cacert.org 43200 IN SSHFP 4 2 4411a6a0820eb811474bcd71e82f00c007030b79bf
; static websites ; static websites
webstatic.cacert.org 43200 IN A 213.154.225.242 webstatic.cacert.org 43200 IN A 213.154.225.242
webstatic.cacert.org 43200 IN AAAA 2001:7b8:616:162:2::116
webstatic.cacert.org 43200 IN SSHFP 1 1 30897a7a984d8350495946d54c6374e9331237ef webstatic.cacert.org 43200 IN SSHFP 1 1 30897a7a984d8350495946d54c6374e9331237ef
webstatic.cacert.org 43200 IN SSHFP 1 2 32bb10c5cf48532d077066e012230058ddf3cce731c561f228e310eb7a546e3f webstatic.cacert.org 43200 IN SSHFP 1 2 32bb10c5cf48532d077066e012230058ddf3cce731c561f228e310eb7a546e3f
webstatic.cacert.org 43200 IN SSHFP 2 1 868361a51ec60607bfd964d0f8f3e4ee5e803fc6 webstatic.cacert.org 43200 IN SSHFP 2 1 868361a51ec60607bfd964d0f8f3e4ee5e803fc6