Commit graph

10 commits

Author SHA1 Message Date
72e71adb89 Add reverse zones from ns2
- use the correct names that will make the delegation from BIT work
2022-07-16 14:44:36 +02:00
wytze@deboca.net
1129b6e7c3 Disable ns-ext.nlnetlabs.nl for cacert.{org,com,net}.
Disable sns-pba.dm1.sns.isc.org for cacert.{com,net}.
Drop all records for ns5.cacert.{com,net} since ISC will be ending the
secondary name service on January 31, 2020.
Note: ns5.cacert.org should be dropped as well before January 31, 2020.


git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2741 14b1bab8-4ef6-0310-b690-991c95c89dfd
2019-10-19 15:20:32 +00:00
wytze@deboca.net
95293b329d Apply changes for infrastructure systems per e-mail request from Jan Dittberner on 03.08.2019.
git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2735 14b1bab8-4ef6-0310-b690-991c95c89dfd
2019-08-04 07:45:46 +00:00
wytze@deboca.net
396ec2467c Zone updates up to 25 February 2018.
git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2695 14b1bab8-4ef6-0310-b690-991c95c89dfd
2018-02-25 09:45:00 +00:00
wytze@deboca.net
f3fd6a45f5 Move infra LXC containers to a separate /80 subnet.
git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2600 14b1bab8-4ef6-0310-b690-991c95c89dfd
2015-05-29 07:51:04 +00:00
wytze@deboca.net
be584cdb5e Add PTR records for the full infra and critical networks.
Add four new infrastructure systems.
Put the "real" infrastructure systems in a /80 subnet to simplify firewall rules.
Correct network addresses in comments.
Name changes per e-mail request from Mario Lipinski on 05.02.2014.


git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2542 14b1bab8-4ef6-0310-b690-991c95c89dfd
2014-02-06 13:51:52 +00:00
wytze@deboca.net
0bb876704e Upgrade nsd to new release: 3.2.17.
Add PTR record for ns1.cacert.org in 2001:07b8:616.ip6 zone.
Drop dummy PTR record from 2001:07b8:616.ip6 zone.
Add AAAA record for ns1.cacert.org. to cacert.org zone.
Configure nsd for external access over IPv6.
Expand firewall script to support IPv6.


git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2534 14b1bab8-4ef6-0310-b690-991c95c89dfd
2014-01-27 16:27:37 +00:00
wytze@deboca.net
3234773ffd Add A record for eu.cacert.org (which is actually cacert.eu),
to show that the IPv4 address in our range is taken.
Add IPv6 address, SSHFP and PTR records for hopper.cacert.org.


git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2533 14b1bab8-4ef6-0310-b690-991c95c89dfd
2014-01-26 09:27:38 +00:00
wytze@deboca.net
f01c9a7ad7 Zone file updates.
git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2528 14b1bab8-4ef6-0310-b690-991c95c89dfd
2013-12-17 16:42:44 +00:00
wytze@deboca.net
3b120dbb93 Add new zone 6.1.6.0.8.b.7.0.1.0.0.2.ip6.arpa (reverse IPv6 of cacert.org).
git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2526 14b1bab8-4ef6-0310-b690-991c95c89dfd
2013-11-25 10:12:46 +00:00