From 9da4b0b01bffe460785e078c15e1ed456260f645 Mon Sep 17 00:00:00 2001 From: "wytze@deboca.net" Date: Sun, 17 Mar 2013 10:24:21 +0000 Subject: [PATCH] Drop nameserver ns2 because it will be taken out of service soon. A corresponding change has already been made in the GKG.NET registry. Drop newsys.gun.de secondary nameserver for cacert.{org,net,com} because it will be taken out of service soon, and drop its TSIG key as well. Add temporary experimental A and AAAA records for wwwdb and securedb, as part of the migration of CAcert's main webserver to new hardware. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2482 14b1bab8-4ef6-0310-b690-991c95c89dfd --- cacert.com | 7 ++----- cacert.com.log | 9 +++++++-- cacert.net | 7 ++----- cacert.net.log | 9 +++++++-- cacert.org | 11 ++++++----- cacert.org.log | 14 ++++++++++++-- 6 files changed, 36 insertions(+), 21 deletions(-) diff --git a/cacert.com b/cacert.com index 3fe3b43..a6aefde 100644 --- a/cacert.com +++ b/cacert.com @@ -1,17 +1,16 @@ ; DNS master zone file for cacert.com, under RCS control -; @(#)(CAcert) $Id: cacert.com,v 1.15 2012/04/17 07:07:02 root Exp $ +; @(#)(CAcert) $Id: cacert.com,v 1.16 2013/03/17 10:19:32 root Exp $ $TTL 12h ; default TTL for zone data @ IN SOA ns1.cacert.com. hostmaster.cacert.com. ( - 2012041701 ; Serial + 2013031701 ; Serial 4h ; refresh time 1h ; retry interval 2d ; expire time 12h ) ; negative caching TTL @ IN NS ns1.cacert.com. -@ IN NS ns2.cacert.com. @ IN NS ns3.cacert.com. @ IN NS ns4.cacert.com. @ IN NS ns5.cacert.com. @@ -20,8 +19,6 @@ $TTL 12h ; default TTL for zone data @ IN MX 10 email.cacert.org. ns1 IN A 213.154.225.251 ; ns.cacert.org -ns2 IN A 195.34.169.146 ; newsys.gun.de -ns2 IN AAAA 2001:470:1f0a:1a4e::2 ns3 IN A 193.200.132.194 ; mars.overmeer.net ns3 IN AAAA 2a02:2308:10::6:2 ns4 IN A 213.154.224.4 ; ns-ext.nlnetlabs.nl diff --git a/cacert.com.log b/cacert.com.log index e04cf36..42f5029 100644 --- a/cacert.com.log +++ b/cacert.com.log @@ -1,16 +1,21 @@ RCS file: /var/opendnssec/unsigned/RCS/cacert.com,v Working file: /var/opendnssec/unsigned/cacert.com -head: 1.15 +head: 1.16 branch: locks: strict access list: symbolic names: keyword substitution: kv -total revisions: 15; selected revisions: 15 +total revisions: 16; selected revisions: 16 description: cacert.com - zone file for cacert.com ---------------------------- +revision 1.16 +date: 2013/03/17 10:19:32; author: root; state: Exp; lines: +2 -5 +Drop nameserver ns2 because it will be taken out of service soon. +A corresponding change has already been made in the GKG.NET registry. +---------------------------- revision 1.15 date: 2012/04/17 07:07:02; author: root; state: Exp; lines: +3 -3 Reduce SOA expiration timer from 1 week to 2 days, in order to comply with diff --git a/cacert.net b/cacert.net index cad5df3..bbbab29 100644 --- a/cacert.net +++ b/cacert.net @@ -1,17 +1,16 @@ ; DNS master zone file for cacert.net, under RCS control -; @(#)(CAcert) $Id: cacert.net,v 1.16 2012/04/17 07:07:02 root Exp $ +; @(#)(CAcert) $Id: cacert.net,v 1.17 2013/03/17 10:19:32 root Exp $ $TTL 12h ; default TTL for zone data @ IN SOA ns1.cacert.net. hostmaster.cacert.net. ( - 2012041701 ; Serial + 2013031701 ; Serial 4h ; refresh time 1h ; retry interval 2d ; expire time 12h ) ; negative caching TTL @ IN NS ns1.cacert.net. -@ IN NS ns2.cacert.net. @ IN NS ns3.cacert.net. @ IN NS ns4.cacert.net. @ IN NS ns5.cacert.net. @@ -20,8 +19,6 @@ $TTL 12h ; default TTL for zone data @ IN MX 10 email.cacert.org. ns1 IN A 213.154.225.251 ; ns.cacert.org -ns2 IN A 195.34.169.146 ; newsys.gun.de -ns2 IN AAAA 2001:470:1f0a:1a4e::2 ns3 IN A 193.200.132.194 ; mars.overmeer.net ns3 IN AAAA 2a02:2308:10::6:2 ns4 IN A 213.154.224.4 ; ns-ext.nlnetlabs.nl diff --git a/cacert.net.log b/cacert.net.log index a20cba3..5f88ec4 100644 --- a/cacert.net.log +++ b/cacert.net.log @@ -1,16 +1,21 @@ RCS file: /var/opendnssec/unsigned/RCS/cacert.net,v Working file: /var/opendnssec/unsigned/cacert.net -head: 1.16 +head: 1.17 branch: locks: strict access list: symbolic names: keyword substitution: kv -total revisions: 16; selected revisions: 16 +total revisions: 17; selected revisions: 17 description: cacert.net - DNS master zone file for cacert.net, under RCS control ---------------------------- +revision 1.17 +date: 2013/03/17 10:19:32; author: root; state: Exp; lines: +2 -5 +Drop nameserver ns2 because it will be taken out of service soon. +A corresponding change has already been made in the GKG.NET registry. +---------------------------- revision 1.16 date: 2012/04/17 07:07:02; author: root; state: Exp; lines: +3 -3 Reduce SOA expiration timer from 1 week to 2 days, in order to comply with diff --git a/cacert.org b/cacert.org index df285c2..20b3446 100644 --- a/cacert.org +++ b/cacert.org @@ -1,17 +1,16 @@ ; DNS master zone file for cacert.org, under RCS control -; @(#)(CAcert) $Id: cacert.org,v 1.57 2012/06/12 15:06:45 root Exp $ +; @(#)(CAcert) $Id: cacert.org,v 1.59 2013/03/17 10:19:32 root Exp $ $TTL 12h ; default TTL for zone data @ IN SOA ns1.cacert.org. hostmaster.cacert.org. ( - 2012061201 ; Serial + 2013031701 ; Serial 4h ; refresh time 1h ; retry interval 2d ; expire time 12h ) ; negative caching TTL @ IN NS ns1.cacert.org. -@ IN NS ns2.cacert.org. @ IN NS ns3.cacert.org. @ IN NS ns4.cacert.org. @ IN NS ns5.cacert.org. @@ -50,8 +49,6 @@ auto._domainkey IN TXT "v=DKIM1\;g=*\;k=rsa\;t=y\;p=MIGfMA0GCSqGSIb3DQEBAQUAA4GN monitor IN A 213.154.225.230 ns IN A 213.154.225.251 ; master ns1 IN A 213.154.225.251 ; ns.cacert.org -ns2 IN A 195.34.169.146 ; newsys.gun.de -ns2 IN AAAA 2001:470:1f0a:1a4e::2 ns3 IN A 193.200.132.194 ; mark.overmeer.net ns3 IN AAAA 2a02:2308:10::6:2 ns4 IN A 213.154.224.4 ; ns-ext.nlnetlabs.nl @@ -73,3 +70,7 @@ www IN A 213.154.225.245 www IN AAAA 2001:7b8:3:9c::245 wwwmail IN A 213.154.225.245 wwwmail IN AAAA 2001:7b8:3:9c::245 +wwwdb IN A 213.154.225.253 + IN AAAA 2001:7b8:3:9c::253 +securedb IN A 213.154.225.254 + IN AAAA 2001:7b8:3:9c::254 diff --git a/cacert.org.log b/cacert.org.log index 620fe21..55703de 100644 --- a/cacert.org.log +++ b/cacert.org.log @@ -1,16 +1,26 @@ RCS file: /var/opendnssec/unsigned/RCS/cacert.org,v Working file: /var/opendnssec/unsigned/cacert.org -head: 1.57 +head: 1.59 branch: locks: strict access list: symbolic names: keyword substitution: kv -total revisions: 57; selected revisions: 57 +total revisions: 59; selected revisions: 59 description: cacert.org - zone file for cacert.org ---------------------------- +revision 1.59 +date: 2013/03/17 10:19:32; author: root; state: Exp; lines: +2 -5 +Drop nameserver ns2 because it will be taken out of service soon. +A corresponding change has already been made in the GKG.NET registry. +---------------------------- +revision 1.58 +date: 2013/02/27 16:02:23; author: root; state: Exp; lines: +6 -2 +Add temporary experimental A and AAAA records for wwwdb and securedb, +as part of the migration of CAcert's main webserver to new hardware. +---------------------------- revision 1.57 date: 2012/06/12 15:06:45; author: root; state: Exp; lines: +3 -3 Update SPF record for lists.cacert.org because it appears that this host is