knilsson/dns-zones
1
0
Fork 0
forked from critical/dns-zones
Code Pull requests Activity
dns-zones/cacert.org
Jan Dittberner 992d534697 Tighten SPF record 
PowerDNS cuts TXT records at 255 chars
(https://doc.powerdns.com/authoritative/appendices/types.html#txt). This
commit reduces the size by using mx and a SPF policy entries.
2023-05-02 20:10:20 +02:00

472 lines
30 KiB
Org Mode
Raw Blame History

$ORIGIN .
; vim: set ft=dns noet:
; records in domain cacert.org
cacert.org 43200 IN SOA ns1.cacert.org hostmaster.cacert.org 2022102005 14400 3600 604800 43200
cacert.org 43200 IN A 213.154.225.245
cacert.org 43200 IN AAAA 2001:7b8:3:9c::245
cacert.org 43200 IN CAA 0 issue "cacert.org"
cacert.org 43200 IN CAA 0 issuewild "cacert.org"
cacert.org 43200 IN CAA 0 iodef "mailto:critical-admin@cacert.org"
cacert.org 43200 IN MX 10 email.cacert.org.
cacert.org 43200 IN NS ns1.cacert.org.
cacert.org 43200 IN NS ns5.cacert.org.
cacert.org 43200 IN NS ns2.cacert.org.
cacert.org 43200 IN NS ns4.cacert.org.
; SPF and DKIM
; SPF allows www, secure, www1, email, infra02, emailout, ping
cacert.org 43200 IN TXT "v=spf1 a mx a:emailout.cacert.org a:secure.cacert.org a:www1.cacert.org ip4:213.154.225.230 ip6:2001:7b8:616:162:1::10 ip6:2001:7b8:616:28:50::11 -all"
auto._domainkey.cacert.org 43200 IN TXT "v=DKIM1;g=*;k=rsa;t=y;p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDDNFxiNr+NHJwih3OPhGr4iwLE+BBDu72YrMSzUnU1FF50CW7iOtuhg796UZ6xrZ5VuhAix6YmmzcvF2UxYzoD/XpfZ4MzBu0ND4/nkt9/YOTyIBzwQqn9uMNve0Y76Zsel89dIJtOI+y+lfnFExV0jKwe53gzmxMVpMSSCcZPGwIDAQAB"
mail._domainkey.cacert.org 43200 IN TXT "v=DKIM1;g=*;k=rsa;t=y;p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDOZV5h3rm18QRiNfNnwXadX8jeSC3zjpU7GFNTfZk1ifjLxrlVrSsfAvlVfFvR2/uQXegwEkiNV5bd57d989T+VVLZZbSv+OAXX4ZwihsLkf3huDszKtJTvsybqUNh97OE00THSyJCrcowFDcLv5IN2ULCOlMjTqbZxZuaNW0S6wIDAQAB"
_adsp._domainkey.cacert.org 43200 IN TXT "dkim=unknown"
; certificate fingerprints
_certs.g1._fp.cacert.org 43200 IN TXT "root_X0F class3_2021"
_md5.class3.g1._fp.cacert.org 43200 IN TXT "F72512824E67B5D08D92B77C0B867A42"
_md5.class3_2021.g1._fp.cacert.org 43200 IN TXT "C0DED85DF82B03269F371478125E8AB3"
_md5.class3_x0e.g1._fp.cacert.org 43200 IN TXT "2CFA3FF9F44A0A6D3F577EA8A82315BE"
_md5.root.g1._fp.cacert.org 43200 IN TXT "A61B375E390D9C3654EEBD2031461F6B"
_md5.root_x0f.g1._fp.cacert.org 43200 IN TXT "8AE61B1AF7679A9095A7E9E02DFF1FF3"
_oldcerts.g1._fp.cacert.org 43200 IN TXT "root class3 class3_X0E"
_sha1.class3.g1._fp.cacert.org 43200 IN TXT "AD7C3F64FC4439FEF4E90BE8F47C6CFA8AADFDCE"
_sha1.class3_2021.g1._fp.cacert.org 43200 IN TXT "D8A83A64117FFD2194FEE1983DD25C7B32A8FFC8"
_sha1.class3_x0e.g1._fp.cacert.org 43200 IN TXT "A7C48FBE6B026DBD0EC1B465B88DD813EE1DEFA0"
_sha1.root.g1._fp.cacert.org 43200 IN TXT "135CEC36F49CB8E93B1AB270CD80884676CE8F33"
_sha1.root_x0f.g1._fp.cacert.org 43200 IN TXT "DDFCDA541E7577ADDCA87E8827A98A50603252A5"
_sha256.class3.g1._fp.cacert.org 43200 IN TXT "4EDDE9E55CA453B388887CAA25D5C5C5BCCF2891D73B87495808293D5FAC83C8"
_sha256.class3_2021.g1._fp.cacert.org 43200 IN TXT "1BC5A61A2C0C0132C52B284F3DA0D8DACF717A0F6C1DDF81D80B36EEE4442869"
_sha256.class3_x0e.g1._fp.cacert.org 43200 IN TXT "F6873D70D67596C2ACBA34401E69738B52701DD6AB06B49749BC55150936D544"
_sha256.root.g1._fp.cacert.org 43200 IN TXT "FF2A65CFF1149C7430101E0F65A07EC19183A3B633EF4A6510890DAD18316B3A"
_sha256.root_x0f.g1._fp.cacert.org 43200 IN TXT "07EDBD824A4988CFEF4215DA20D48C2B41D71529D7C900F570926F277CC230C5"
_url.class3.g1._fp.cacert.org 43200 IN TXT "http://www.cacert.org/certs/class3.crt"
_url.class3_2021.g1._fp.cacert.org 43200 IN TXT "http://www.cacert.org/certs/class3_2021.crt"
_url.class3_x0e.g1._fp.cacert.org 43200 IN TXT "http://www.cacert.org/certs/class3_X0E.crt"
_url.root.g1._fp.cacert.org 43200 IN TXT "http://www.cacert.org/certs/root.crt"
_url.root_x0f.g1._fp.cacert.org 43200 IN TXT "http://www.cacert.org/certs/root_X0F.crt"
; Blog server
blog.cacert.org 43200 IN A 213.154.225.234
blog.cacert.org 43200 IN AAAA 2001:7b8:616:162:2::13
blog.cacert.org 43200 IN SSHFP 1 1 32ca6e4ba3275aab0d65f0f46969b11a4c4b36e8
blog.cacert.org 43200 IN SSHFP 1 2 3afb452ac3690cf7cd9a3332813bf7b13dbd288c7a4efbd9ab9dd4b4649ff2b6
blog.cacert.org 43200 IN SSHFP 3 1 8fa85a31215f10ea78fd0126d1c705c9a3662c86
blog.cacert.org 43200 IN SSHFP 3 2 86d330b900db9bf0a8bc9ec34b126aa8261fec9e02b123ab61c2aee0b56ae047
blog.cacert.org 43200 IN SSHFP 4 1 90903e8f4b35457bf41235f070adf592d7f724dd
blog.cacert.org 43200 IN SSHFP 4 2 f24b770c16dcb91afc9461e62e6fe63a63d413efa4794751c039ed6d5213127b
; board OpenERP
board.cacert.org 43200 IN A 213.154.225.252
board.cacert.org 43200 IN AAAA 2001:7b8:616:162:2::34
board.cacert.org 43200 IN SSHFP 1 1 f5c02a860a1cc07aeefbf802540680c7476bde6e
board.cacert.org 43200 IN SSHFP 2 1 7b6eeb0ccdfb2e2cfe479e0aece36ff995fdd1f4
finance.cacert.org 43200 IN CNAME board.cacert.org.
; bug tracker
bugs.cacert.org 43200 IN A 213.154.225.232
bugs.cacert.org 43200 IN AAAA 2001:7b8:616:162:2::16
bugs.cacert.org 43200 IN SSHFP 1 1 4b4bc32c4e655559b43a370b77cad4983e8c24f8
bugs.cacert.org 43200 IN SSHFP 2 1 7916e317983d8bc85d719bb793e5e46a6b4976b2
bugs.cacert.org 43200 IN SSHFP 1 2 51f10258849d1194f282deb0da97009016423d5f0b28a0056a551c4f38c2870a
bugs.cacert.org 43200 IN SSHFP 2 2 7632a8a40f1534a3afa3c630d062062dd23c7b1fd24fc518334d82cfa4977892
bugs.cacert.org 43200 IN SSHFP 3 1 72737bd1240b446c2b8e0aad0acff889e3b72ec7
bugs.cacert.org 43200 IN SSHFP 3 2 152fc9f8d7d72979846757db7fa433bd3f6340cd0dcebcce5d681e60dc46ca44
bugs.cacert.org 43200 IN SSHFP 4 1 bb6b5f8599c3a93383392b80cc029a0d65ffc7f1
bugs.cacert.org 43200 IN SSHFP 4 2 caa52e4c5ddecc5ee144aa2b6965101961ff7e7518063b43908d133f1cdf6e15
; Firewall virtual IPv6 and IPv4 gateway address
cacert-fw.cacert.org 43200 IN A 213.154.225.229
cacert-fw.cacert.org 43200 IN AAAA 2001:7b8:3:9c::4
; Firewall 01, reachable via dedicated jump hosts only
; IPv6 is wrong https://code.cacert.org/critical/dns-zones/issues/8
cacert-fw01.cacert.org 43200 IN A 213.154.225.253
cacert-fw01.cacert.org 43200 IN AAAA 2001:7b8:3:9c::5
cacert-fw01.cacert.org 43200 IN SSHFP 1 1 43a7c6105193d121a8b27f5cd1c59aae32a35c5a
cacert-fw01.cacert.org 43200 IN SSHFP 1 2 dfd30a1ef7ad3f97be62d278bee5deae0e599d3396cf3fec7be89c842c8d4e1e
cacert-fw01.cacert.org 43200 IN SSHFP 2 1 14361f8c63524d5b31d9fde535627db77cf74f6c
cacert-fw01.cacert.org 43200 IN SSHFP 2 2 4ee02374bb0144aa6d51cded9682ece865cf856f7df1ae63de812f68aea3e8d9
cacert-fw01.cacert.org 43200 IN SSHFP 3 1 c45e669fcd8f951e78e74340f75dbd6ae611ac4c
cacert-fw01.cacert.org 43200 IN SSHFP 3 2 dc9d37b1cd325175437e5836ed1691d594f5af253a34e3b736b4522274c28f92
cacert-fw01.cacert.org 43200 IN SSHFP 4 1 119d5aa477a8a8dc79334fc84a64d1f3ea3a3319
cacert-fw01.cacert.org 43200 IN SSHFP 4 2 60d46e0d94070064e48a0d9de5a30778f00fd9c2c23dedb5a674c5ec873e3cdc
; Firewall 02, reachable via dedicated jump hosts only
; IPv6 is wrong https://code.cacert.org/critical/dns-zones/issues/8
cacert-fw02.cacert.org 43200 IN A 213.154.225.254
cacert-fw02.cacert.org 43200 IN AAAA 2001:7b8:3:9c::6
cacert-fw02.cacert.org 43200 IN SSHFP 1 1 43a7c6105193d121a8b27f5cd1c59aae32a35c5a
cacert-fw02.cacert.org 43200 IN SSHFP 1 2 dfd30a1ef7ad3f97be62d278bee5deae0e599d3396cf3fec7be89c842c8d4e1e
cacert-fw02.cacert.org 43200 IN SSHFP 2 1 14361f8c63524d5b31d9fde535627db77cf74f6c
cacert-fw02.cacert.org 43200 IN SSHFP 2 2 4ee02374bb0144aa6d51cded9682ece865cf856f7df1ae63de812f68aea3e8d9
cacert-fw02.cacert.org 43200 IN SSHFP 3 1 c45e669fcd8f951e78e74340f75dbd6ae611ac4c
cacert-fw02.cacert.org 43200 IN SSHFP 3 2 dc9d37b1cd325175437e5836ed1691d594f5af253a34e3b736b4522274c28f92
cacert-fw02.cacert.org 43200 IN SSHFP 4 1 119d5aa477a8a8dc79334fc84a64d1f3ea3a3319
cacert-fw02.cacert.org 43200 IN SSHFP 4 2 60d46e0d94070064e48a0d9de5a30778f00fd9c2c23dedb5a674c5ec873e3cdc
; CAcert Assurer Training System
cats.cacert.org 43200 IN A 213.154.225.243
cats.cacert.org 43200 IN AAAA 2001:7b8:616:162:2::27
cats.cacert.org 43200 IN SSHFP 1 1 d29d4cc4662d5cb5f42c02823ca8677f05439589
cats.cacert.org 43200 IN SSHFP 1 2 605af57ce0f1ecf8eeac5c71901f1434bf65c06fc0796b932d0f10f21ddf65fe
cats.cacert.org 43200 IN SSHFP 2 1 0342eb1e7325eb90a1c0483de3d6597e36e569c8
cats.cacert.org 43200 IN SSHFP 2 2 0835241a5b1905097c332b176faec92e05c690169ba125184f3fe2c9612d9718
cats.cacert.org 43200 IN SSHFP 3 1 cc7f9edc6f2b9ce4a3f3953ff97c951572ba0f8c
cats.cacert.org 43200 IN SSHFP 3 2 1f54953c96de0e93cd19e66ca25085d6773ceefd3c376be2e77c1a337ccd008d
; code (Gitea)
code.cacert.org 43200 IN A 213.154.225.249
code.cacert.org 43200 IN AAAA 2001:7b8:616:162:3::15
code.cacert.org 43200 IN SSHFP 1 1 99fe627866921e9cbb8e10fca89681518f7e6ed5
code.cacert.org 43200 IN SSHFP 1 2 34cc996e568ddbe93354f284a52bd60602395a0e1fcb87770e190fbc97dd9ce7
code.cacert.org 43200 IN SSHFP 3 1 e8021534def77726741a874945ec578ed6d84f31
code.cacert.org 43200 IN SSHFP 3 2 54e42fd9ac210cd6bd3ec1ca75b80bf4585eb47606a40b4627d1916f355dcb9f
code.cacert.org 43200 IN SSHFP 4 1 33305c1b89678caa80ef42a31e29b3e8dc70ccb9
code.cacert.org 43200 IN SSHFP 4 2 cce03a264ec4b947d4a30ddc2b86fe80fc73d51f751baa834ff1ec848181b8eb
; public CRL service
crl.cacert.org 43200 IN A 213.154.225.236
crl.cacert.org 43200 IN AAAA 2001:7b8:616:163::104
; community email (incoming) / MX
email.cacert.org 43200 IN A 213.154.225.228
email.cacert.org 43200 IN AAAA 2001:7b8:616:162:2::228
email.cacert.org 43200 IN SSHFP 1 1 bf391fd72656a275524d1d25a624c6045b44ae90
email.cacert.org 43200 IN SSHFP 1 2 c8b68f3eb9a83902391b78686b4885a317fac0f74b0490a78b32ecbbee921df1
email.cacert.org 43200 IN SSHFP 3 1 5ffbc51c37cdff52db9c488c08b89af9ffee06a0
email.cacert.org 43200 IN SSHFP 3 2 a114de78fc26bd0dc6fa2206d7c04519ec875023cf203e446d4bbbbc4e24da19
email.cacert.org 43200 IN SSHFP 4 1 18418515e94817f0624bf0a192331addf878ff66
email.cacert.org 43200 IN SSHFP 4 2 d4fe3165206ba69baf4643253138561789918688375ed8ab89bcfc4411535221
community.cacert.org 43200 IN CNAME email.cacert.org.
; outgoing email relay
emailout.cacert.org 43200 IN A 213.154.225.239
emailout.cacert.org 43200 IN AAAA 2001:7b8:616:162:2::239
emailout.cacert.org 43200 IN SSHFP 1 1 1ba1ab632911e8a68a69521130120695086d858c
emailout.cacert.org 43200 IN SSHFP 1 2 6e50d5b2034006b69eb7ba19d3f3fd2c48015bea2bb3d5e2a0f8cf25ff030055
emailout.cacert.org 43200 IN SSHFP 3 1 527004f2091d2cef2c28b5f8241fc0e76307b2ba
emailout.cacert.org 43200 IN SSHFP 3 2 9094dcf8860523a83542ec4cc46fbcfed396f5525bc202cfecf42d1a7044136d
emailout.cacert.org 43200 IN SSHFP 4 1 63f40df8536052d33d2d515eceb111ccb7983619
emailout.cacert.org 43200 IN SSHFP 4 2 4ceb488ad17ea7c8db161fdf3357e273d2ea1fe5be183794aacd7c4bfdfaa8a5
; git repository server
git.cacert.org 43200 IN A 213.154.225.250
git.cacert.org 43200 IN AAAA 2001:7b8:616:162:2::250
git.cacert.org 43200 IN SSHFP 1 1 23c7622d6db5822c809152c1c0fd9ea7838f76c6
git.cacert.org 43200 IN SSHFP 1 2 dabbe1766c7933071c4e6942a1dfc72c26d9d867d8dee84beda210c8ef9ea2c5
git.cacert.org 43200 IN SSHFP 2 1 8509db491902fe10ab84c8f24b02f10c1adf0e7f
git.cacert.org 43200 IN SSHFP 2 2 00c20c26b6b9a026bbb11b5c45cbec5d3ab44a039dc0f097cad88374d3567d01
git.cacert.org 43200 IN SSHFP 3 1 60de5788bd83abc7f315b667f634bda5da8502ed
git.cacert.org 43200 IN SSHFP 3 2 132bd98483440124f6b8117148b02a66645477f53c18f974e4decb32a7495644
git.cacert.org 43200 IN SSHFP 4 1 13d611007b43d073cf4d89784510398116623eb7
git.cacert.org 43200 IN SSHFP 4 2 40a61a25488fe01c056eaaff703ef0ff9c6b01bee00580a91b95741dfaa59751
; hopper for critical systems
; need to clarify https://nextcloud.cacert.org/apps/deck/#/board/10/card/64
hopper.cacert.org 43200 IN A 213.136.19.144
hopper.cacert.org 43200 IN AAAA 2001:7b8:616:163::100
hopper.cacert.org 43200 IN SSHFP 1 1 0632f537b79c8c7216a56b5da37aadfca3ff2b0c
hopper.cacert.org 43200 IN SSHFP 1 2 ddf6635ae5d9136d249a6ec55dc14dedc80ed68af5916c4b479eabdacb4d9fb7
hopper.cacert.org 43200 IN SSHFP 2 1 592affda35b209147e17d6a3b2c38c37371061e1
hopper.cacert.org 43200 IN SSHFP 2 2 de43b28a103b0afa685dd4918515f0b8ddbc4422b476a5af3374af63831ae22a
hopper.cacert.org 43200 IN SSHFP 3 1 f450a0cb1816e519b3f03e9ea9c8a54a94955071
hopper.cacert.org 43200 IN SSHFP 3 2 cc1b07f5bc75760dbb98a5bc515bf9cf7f3559bff032d56ba37b32bc38031375
; infrastructure host infra02
infra02.cacert.org 43200 IN A 213.154.225.230
infra02.cacert.org 43200 IN AAAA 2001:7b8:616:162:1::10
infra02.cacert.org 43200 IN SSHFP 1 1 5a82d3c150af002c05784f73250a067053aeed63
infra02.cacert.org 43200 IN SSHFP 1 2 63b0d74a3f1ce61865a5eb0497ef05243bc4067ec983c69ab8e62f3cb940cc82
infra02.cacert.org 43200 IN SSHFP 2 1 af8d8e3386eaa72997709632adf2b457e6fef0dc
infra02.cacert.org 43200 IN SSHFP 2 2 3a0188fc47d1fdd14d70a2fb78f51792d06ba11eae6ab16e73cb7bb8dd6a0dc8
infra02.cacert.org 43200 IN SSHFP 3 1 3e1b9ebf85b726cf831c76ecb8c17786aedf40e8
infra02.cacert.org 43200 IN SSHFP 3 2 3ae7f0035c2172977e99bfe312c7a8299650dea16a975ea13eece8fda426062a
; infrastructure host infra03
infra03.cacert.org 43200 IN A 213.154.225.249
infra03.cacert.org 43200 IN AAAA 2001:7b8:616:162:1::9
infra03.cacert.org 43200 IN SSHFP 1 1 a059afe0477b474deed1544724cdc559fc2f4fe0
infra03.cacert.org 43200 IN SSHFP 1 2 cdd148d8dfd1ff24f99fe29b79087ea97277a7f6e3a7e03c04ec9378df848778
infra03.cacert.org 43200 IN SSHFP 3 1 948540f6318c7dcc91f6620d70ce50c37dd5e455
infra03.cacert.org 43200 IN SSHFP 3 2 227d766e4b98e8992d20ea6c070e41cbcf62a7aa2f5a18b812bf06690cec6eb2
infra03.cacert.org 43200 IN SSHFP 4 1 37ea2d8a5faf0f14cc4b4c79c2a554620105765b
infra03.cacert.org 43200 IN SSHFP 4 2 9b6081c212ea3b8ec7e62884a12ed82bb9808285cb788123984761ccd2264cf4
; incoming traffic SNI proxy on infra03
ingress03.cacert.org 43200 IN A 213.154.225.249
ingress03.cacert.org 43200 IN AAAA 2001:7b8:616:162:3::10
ingress03.cacert.org 43200 IN SSHFP 1 1 244bbca474c91548e245da702428dc4d44ecd66b
ingress03.cacert.org 43200 IN SSHFP 1 2 121a46c4db82362acffc8fdef40f39a7b335c5eecfb907a3e23acd2414ac4c08
ingress03.cacert.org 43200 IN SSHFP 3 1 58ccf651d3d5a7e515fcee3a2e0f63e473245b13
ingress03.cacert.org 43200 IN SSHFP 3 2 a3b002c65d219226286d5fa09a7ad5dde685d3d76db5d87af4ad93e9b90eee31
ingress03.cacert.org 43200 IN SSHFP 4 1 e6bd4af384ab9b10c3e4549970727e243d5fe1cf
ingress03.cacert.org 43200 IN SSHFP 4 2 1c0f2acc2f13eb65a98801ede880a55b1c21a7686983d0a326e70f3cac8fbd4c
; IRC service
irc.cacert.org 43200 IN A 213.154.225.233
irc.cacert.org 43200 IN AAAA 2001:7b8:616:162:2::14
irc.cacert.org 43200 IN SSHFP 1 1 39b6c81b9fe76bd3c112f891ad3198f7a6102f4c
irc.cacert.org 43200 IN SSHFP 1 2 30c1fce412955bb4947bbcb25a395d8e5820403eddb5746ecced578d97f46567
irc.cacert.org 43200 IN SSHFP 2 1 90fcff63476f93d5e4f5d634ba1407445323d3fe
irc.cacert.org 43200 IN SSHFP 2 2 734a6729a077d77c79af0e8f45187f88c25d7cd102c34aee1e753d9644c965bc
irc.cacert.org 43200 IN SSHFP 3 1 5b9191613e743082fd4aa64e1f3a4601ed77f366
irc.cacert.org 43200 IN SSHFP 3 2 b88f898cd5251b2b6e315a2e266873747b7cd237c0f92458916af938e4694f96
irc.cacert.org 43200 IN SSHFP 4 1 866a42ee920b7f38a86ca9f3b07af808aae9768c
irc.cacert.org 43200 IN SSHFP 4 2 68d44bc21d05550c8aab62163b9257c85b9bcf0a4cab1c96ad2ca674b803601c
; support issue tracker
issue.cacert.org 43200 IN A 213.154.225.244
issue.cacert.org 43200 IN AAAA 2001:7b8:616:162:2::28
issue.cacert.org 43200 IN SSHFP 1 1 3f55e52b51d142ef9d15eeaa9ca25b3aa30c7c6e
issue.cacert.org 43200 IN SSHFP 2 1 fd9a5c79c4a9057b87ae8e639fd223b386af4bdb
; Jenkins CI/CD service
jenkins.cacert.org 43200 IN A 213.154.225.242
jenkins.cacert.org 43200 IN AAAA 2001:7b8:616:162:2::115
jenkins.cacert.org 43200 IN SSHFP 1 1 2caebe197c0f1c25404890adfedabb371fb05650
jenkins.cacert.org 43200 IN SSHFP 1 2 6110a42530a5197ab1180417ee32b2eb581813ca773498177481b11d969bb529
jenkins.cacert.org 43200 IN SSHFP 2 1 4ce4eef515bdee033d68b92419f71679880b2fd5
jenkins.cacert.org 43200 IN SSHFP 2 2 7e76d01b8dc48178535f3f6164c07ef35d3436f352db8c62ffacd5b8e3c106a7
jenkins.cacert.org 43200 IN SSHFP 3 1 1ce55a42b27bf42a78e281440f146da17255a97d
jenkins.cacert.org 43200 IN SSHFP 3 2 20763231fecf9518c2cecab05ac76e4483f563c0853f8b8a53e469316da75381
jenkins.cacert.org 43200 IN SSHFP 4 1 157ca8b4329dd78f2f83a6cdc0fc11009387c47f
jenkins.cacert.org 43200 IN SSHFP 4 2 db988ff234a4948bbcb1a61ff21c080efed454825141b0a1d041921f78573562
; mailing list service
lists.cacert.org 43200 IN A 213.154.225.231
lists.cacert.org 43200 IN AAAA 2001:7b8:616:162:2::17
lists.cacert.org 43200 IN MX 10 email.cacert.org.
lists.cacert.org 43200 IN SSHFP 1 1 87f75b9124326b566ed22dcf65a9740eede8f0ff
lists.cacert.org 43200 IN SSHFP 2 1 8d79e68e731ed72667f3d286c477245df653083b
lists.cacert.org 43200 IN TXT "v=spf1 ip4:213.154.225.231 ip6:2001:7b8:616:162:2::17 -all"
cert.lists.cacert.org 43200 IN CNAME lists.cacert.org.
nocert.lists.cacert.org 43200 IN CNAME lists.cacert.org.
_adsp._domainkey.lists.cacert.org 43200 IN TXT "dkim=all"
lists._domainkey.lists.cacert.org 43200 IN TXT "v=DKIM1;g=*;k=rsa;t=y;p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCs2Hu5HQpT5FWj2TrqHZwFM/h0Tc35idlBviaArkdp5fRPx402ID+pMYZZW6lVM/IJlmeTqPGO73oQyl/tFlnXWj/X8p809IFqWnKWzGKJLhnxMAZW7bmzyjR8siK3It93+s5mu9r/4pwHCW3bEbdtKartd7cud84JO15cLJYA+QIDAQAB"
; internal MariaDB service
mariadb.cacert.org 43200 IN AAAA 2001:7b8:616:162:3::11
mariadb.cacert.org 43200 IN SSHFP 1 1 adaa9a3d2effffac9ae6dad83848ad48c1386e02
mariadb.cacert.org 43200 IN SSHFP 1 2 040a0a486739ae2e78feea6e3300802196d268ea801939cb3c06af31c34ea110
mariadb.cacert.org 43200 IN SSHFP 3 1 77fedbfba8727b84589e3fc3250f7c74c80c6b8d
mariadb.cacert.org 43200 IN SSHFP 3 2 ab677f8f4814dbf6a409da98cfaa35752e603f5821e89308e66b086de47c9374
mariadb.cacert.org 43200 IN SSHFP 4 1 57130ae9b976b7d9f7473a690784a22cd94f4d56
mariadb.cacert.org 43200 IN SSHFP 4 2 ea3a52ceab2728e37c5ab8229b399105e3213a3db759f4c7741f4d87d142af92
; Icinga monitoring for infrastructure
monitor.cacert.org 43200 IN A 213.154.225.230
monitor.cacert.org 43200 IN AAAA 2001:7b8:616:162:2::18
monitor.cacert.org 43200 IN SSHFP 1 1 1128972fb54f927477a781718e2f9c114e9ca383
monitor.cacert.org 43200 IN SSHFP 1 2 f223904069aeaa2e0eac5d9092ab7debae70f06ec3c25e94f49f1b15f633ed5d
monitor.cacert.org 43200 IN SSHFP 2 1 3a36e5df06304c481f01fc723fd88a086e82d986
monitor.cacert.org 43200 IN SSHFP 2 2 4a1ff7396ae874559cf196d54d5d7f6890dba6de73b46af049258b1024cdace2
monitor.cacert.org 43200 IN SSHFP 3 1 f2178de365fc5539681c4c1a8d4111688a7403d6
monitor.cacert.org 43200 IN SSHFP 3 2 196bd8aa1414b7d20d87fed5455bba67660e468cbf633801c4d0665fe66f32c9
monitor.cacert.org 43200 IN SSHFP 4 1 442f4f28905fc6a58bfe12c3f2eafe2938f25573
monitor.cacert.org 43200 IN SSHFP 4 2 2f9ae80bcebb6efc432747246e12103add80f4d875450055b882455b0acf2c60
; Board motion system
motion.cacert.org 43200 IN A 213.154.225.241
motion.cacert.org 43200 IN AAAA 2001:7b8:616:162:2::117
motion.cacert.org 43200 IN SSHFP 2 2 53dedfd2c566011db80311528eba15fd000b0a5092ab1fc8104ca5804490cd18
motion.cacert.org 43200 IN SSHFP 3 1 6d4a9ec30f30aa0634b8879cded8ce884498e290
motion.cacert.org 43200 IN SSHFP 3 2 325ee301da21844adb8f12c0011b8d73709be8b2b9f375829224ac79c8fdfa6e
motion.cacert.org 43200 IN SSHFP 4 1 78e1edee04907de6b56d9c0d4900178f9426c02d
motion.cacert.org 43200 IN SSHFP 4 2 ca108fc298cb08406fe02454d9245ee1cf26c7241691da9a5b6bc69c56afd5c1
motion.cacert.org 43200 IN SSHFP 1 1 f018202c72749af5f48d45d5d536422f9c364fbb
motion.cacert.org 43200 IN SSHFP 1 2 0d17bbfe2efa97edbb13ffe3e6bfd3b4b9be5117f3c831a2f1a55b6c50e92fd4
motion.cacert.org 43200 IN SSHFP 2 1 ee6f2e346a5d5164100721f99765a4d3d08c6dce
; Community nextcloud
nextcloud.cacert.org 43200 IN A 213.154.225.249
nextcloud.cacert.org 43200 IN AAAA 2001:7b8:616:162:3::12
nextcloud.cacert.org 43200 IN SSHFP 1 1 5f7f6b6fbb86c469ca52b4705bb034aae6ea0dc9
nextcloud.cacert.org 43200 IN SSHFP 1 2 14b734ae965bf216749019b727084d70952dbbc83bd93d049f6567bd571e09b2
nextcloud.cacert.org 43200 IN SSHFP 3 1 abd6257bfc4e47909e4d41b06914a196b8b2b4f1
nextcloud.cacert.org 43200 IN SSHFP 3 2 c6f857e69cf509443ff011505b3a774bfa3a149926a7818cd37167c211bec55b
nextcloud.cacert.org 43200 IN SSHFP 4 1 dc1c48fd2e62a98672ea70126b2209d604cbc758
nextcloud.cacert.org 43200 IN SSHFP 4 2 5563549548d8be620aab5b609f2b48a15be0d80986f79e3a5b28c1f4a974617b
; Name servers
ns1.cacert.org 43200 IN A 213.154.225.251
ns1.cacert.org 43200 IN AAAA 2001:7b8:616:163::102
ns2.cacert.org 43200 IN A 213.154.225.237
ns2.cacert.org 43200 IN AAAA 2001:7b8:616:163::202
ns3.cacert.org 43200 IN A 46.249.47.169
ns3.cacert.org 43200 IN AAAA 2001:19f0:4400:407d::1313
ns4.cacert.org 43200 IN A 45.77.40.159
ns4.cacert.org 43200 IN AAAA 2a00:1ca8:2a::31
ns5.cacert.org 43200 IN A 167.86.117.119
ns5.cacert.org 43200 IN AAAA 2a02:c207:3004:6195::1
; public OCSP
ocsp.cacert.org 43200 IN A 213.154.225.237
ocsp.cacert.org 43200 IN AAAA 2001:7b8:616:163::103
; internal PostgreSQL service
pgsql.cacert.org 43200 IN AAAA 2001:7b8:616:162:3::13
pgsql.cacert.org 43200 IN SSHFP 1 1 9f6405d67eab3da7b19c9decfd1df73908800cdb
pgsql.cacert.org 43200 IN SSHFP 1 2 b4ca5a545a6801e23c2f75193ac3bda65e3524750cd588ef8a3a709104ee01f5
pgsql.cacert.org 43200 IN SSHFP 3 1 be1c6266a7bc9c85c60505475ca834d1edb50a05
pgsql.cacert.org 43200 IN SSHFP 3 2 90e6efd10d99e08e6d200261cdb8b3e6798921cb7e8d44a0fffa2aabe5f31e81
pgsql.cacert.org 43200 IN SSHFP 4 1 a90a3d944b848ffda49b1c814b07d0a4368a6195
pgsql.cacert.org 43200 IN SSHFP 4 2 4319929ff7c2dd0edcc69d1fec2b8f660737dbd1ba8d49f719daddaceb4d08d1
; email ping for users
; needs to be referenced in the SPF record for cacert.org
ping.cacert.org 43200 IN AAAA 2001:7b8:616:28:50::11
; incoming proxy on infra02
proxyin.cacert.org 43200 IN A 213.154.225.241
proxyin.cacert.org 43200 IN AAAA 2001:7b8:616:162:2::35
proxyin.cacert.org 43200 IN SSHFP 1 1 c7c559bc06d236b4128e6d720a573d805a27727a
proxyin.cacert.org 43200 IN SSHFP 1 2 affa8cc26dffa7f0803db2d027ab23f013aeabfb3b2d1b1a16659e38dba14528
proxyin.cacert.org 43200 IN SSHFP 2 1 19bb944a917067131f02be4e9a709ade68c260f8
proxyin.cacert.org 43200 IN SSHFP 2 2 b9b5860f3427ea9c3460c62a880527a41470c77000e5083ffffb7defa0d42e4e
proxyin.cacert.org 43200 IN SSHFP 3 1 b9581a544ca96fe071341acb450a2cf74b1b7c9f
proxyin.cacert.org 43200 IN SSHFP 3 2 be3dd21fde37042659a25143cb5171b39d22ea2c846745af9c098003a9004185
proxyin.cacert.org 43200 IN SSHFP 4 1 9b4ba8c78b6585abaf2b46bce78a6f366f1e9bac
proxyin.cacert.org 43200 IN SSHFP 4 2 59125e8706a208fa8eed2b5994ec60f7ba8e31b1c26d90ce909d78a0027359ef
; outgoing proxy and APT repository cache
proxyout.cacert.org 43200 IN A 213.154.225.230
proxyout.cacert.org 43200 IN AAAA 2001:7b8:616:162:2::201
proxyout.cacert.org 43200 IN SSHFP 1 1 9666fa7a0850e1ba358bb4a7ff701ba66d81a0d9
proxyout.cacert.org 43200 IN SSHFP 1 2 4dfb03b90dadb969d39692e71482f19596be20ea42f7b426c430251a009ad3f2
proxyout.cacert.org 43200 IN SSHFP 3 1 abc0a160b7b7e1b33e6d5857514e3fbcaf112ef9
proxyout.cacert.org 43200 IN SSHFP 3 2 77bf57015934a6ca4856823b8b87dfa2133b3e3681309761d49e32bfee19e66b
proxyout.cacert.org 43200 IN SSHFP 4 1 89d5470cfccd0bacb292a74c824ffa40433ef28a
proxyout.cacert.org 43200 IN SSHFP 4 2 dbaca22544f735faa91432e00205d2b112fba6932222936a2a67c388cc6902a7
; secure part of webdb providing client certificate login
secure.cacert.org 43200 IN A 213.154.225.246
secure.cacert.org 43200 IN AAAA 2001:7b8:3:9c::246
_443._tcp.secure.cacert.org 43200 IN TLSA 2 1 1 6f2851409d710504a35115abcb9a6dd3f2577ec937c9ef1938926fa82fd6ff5d
; community self service
selfservice.cacert.org 43200 IN A 213.154.225.241
selfservice.cacert.org 43200 IN AAAA 2001:7b8:616:162:2::35
; subversion scm service
svn.cacert.org 43200 IN A 213.154.225.238
svn.cacert.org 43200 IN AAAA 2001:7b8:616:162:2::15
svn.cacert.org 43200 IN SSHFP 1 1 1128972fb54f927477a781718e2f9c114e9ca383
svn.cacert.org 43200 IN SSHFP 2 1 3a36e5df06304c481f01fc723fd88a086e82d986
svn.cacert.org 43200 IN SSHFP 1 2 f223904069aeaa2e0eac5d9092ab7debae70f06ec3c25e94f49f1b15f633ed5d
svn.cacert.org 43200 IN SSHFP 2 2 4a1ff7396ae874559cf196d54d5d7f6890dba6de73b46af049258b1024cdace2
svn.cacert.org 43200 IN SSHFP 3 1 ea3eeac6cb50f9bbd2e2bb7d5fc39c13348d4a23
svn.cacert.org 43200 IN SSHFP 3 2 56fb13ba24d88b3dcfd7de0c33d6f0b5e65c2b0c8b8bf44c5877746b74c49986
svn.cacert.org 43200 IN SSHFP 4 1 537d0496fd72a5dfcbc196aac7b02ad7d02896bb
svn.cacert.org 43200 IN SSHFP 4 2 3a06b4ea07382dab0dfe54dbe926739587e0e8715e327e518279be1bd847b73c
cert.svn.cacert.org 43200 IN CNAME svn.cacert.org.
nocert.svn.cacert.org 43200 IN CNAME svn.cacert.org.
; test system 1
test.cacert.org 43200 IN A 213.154.225.241
test.cacert.org 43200 IN AAAA 2001:7b8:616:162:2::248
test.cacert.org 43200 IN SSHFP 1 1 11bcb0ab4d1fd39547426d9527b88afb8ff85209
test.cacert.org 43200 IN SSHFP 1 2 e7022da53893a72d85f0bffdec46db6c1cc09bd8c612d0db2bb5648185f67225
test.cacert.org 43200 IN SSHFP 3 1 eb64aefef0c8544bdebf15f71c6651e90b454ad0
test.cacert.org 43200 IN SSHFP 3 2 988ec0793d7339e1216694351a8dd3830027cf2a86120cbc78f14689826ccb39
cats.test.cacert.org 43200 IN CNAME test.cacert.org.
mgr.test.cacert.org 43200 IN CNAME test.cacert.org.
secure.test.cacert.org 43200 IN CNAME test.cacert.org.
www.test.cacert.org 43200 IN CNAME test.cacert.org.
; test system 2
test2.cacert.org 43200 IN A 213.154.225.241
test2.cacert.org 43200 IN AAAA 2001:7b8:616:162:2::249
test2.cacert.org 43200 IN SSHFP 1 1 6cf47397afd468336dc07a27f7fc00797693fe12
test2.cacert.org 43200 IN SSHFP 1 2 c008e67b906af92df0c9cf30a1c5df998d2b47cb518698fb2974193c07ce7f40
test2.cacert.org 43200 IN SSHFP 2 1 666df52c894aafa85fb3a890077bc29046df9b96
test2.cacert.org 43200 IN SSHFP 2 2 e5794cff631facb7c294cc6727a5335e15bd39041df3e73e3440db3a995ea43a
cats.test2.cacert.org 43200 IN CNAME test2.cacert.org.
mgr.test2.cacert.org 43200 IN CNAME test2.cacert.org.
secure.test2.cacert.org 43200 IN CNAME test2.cacert.org.
www.test2.cacert.org 43200 IN CNAME test2.cacert.org.
; test system 3
test3.cacert.org 43200 IN A 213.154.225.241
test3.cacert.org 43200 IN AAAA 2001:7b8:616:162:2::149
test3.cacert.org 43200 IN SSHFP 1 1 39fd3b77396529f83e095ff09c59994c47d9e0d3
test3.cacert.org 43200 IN SSHFP 1 2 680fe134289e79678f7eaa5689fdce3db5efed9f6ebefd5bcfadce04a96475c1
test3.cacert.org 43200 IN SSHFP 3 1 e4d81b532dc90ebb6d087ae732ce016b87945ebd
test3.cacert.org 43200 IN SSHFP 3 2 71b5aedcc999e6ffc0f90eeb9254c8771ddaa6a4981cf55e8e2228f6bdee64ce
test3.cacert.org 43200 IN SSHFP 4 1 50b22453f5c8d845895bacccbc1fc325d033f65d
test3.cacert.org 43200 IN SSHFP 4 2 a928b84465769480d70dfc5ecd3af2e4cdb192ee11d1cffc4f31ea1fbed09d41
cats.test3.cacert.org 43200 IN CNAME test3.cacert.org.
mgr.test3.cacert.org 43200 IN CNAME test3.cacert.org.
secure.test3.cacert.org 43200 IN CNAME test3.cacert.org.
www.test3.cacert.org 43200 IN CNAME test3.cacert.org.
; Translation service
translations.cacert.org 43200 IN A 213.154.225.240
translations.cacert.org 43200 IN AAAA 2001:7b8:616:162:2::31
translations.cacert.org 43200 IN SSHFP 1 1 1128972fb54f927477a781718e2f9c114e9ca383
translations.cacert.org 43200 IN SSHFP 2 1 3a36e5df06304c481f01fc723fd88a086e82d986
translations.cacert.org 43200 IN SSHFP 1 2 f223904069aeaa2e0eac5d9092ab7debae70f06ec3c25e94f49f1b15f633ed5d
translations.cacert.org 43200 IN SSHFP 2 2 4a1ff7396ae874559cf196d54d5d7f6890dba6de73b46af049258b1024cdace2
translations.cacert.org 43200 IN SSHFP 3 1 0f0cbd9c188d619d743859a249238f684d6cca5f
translations.cacert.org 43200 IN SSHFP 3 2 441d76eb651022a8c5810c6946cbdec47504e97ad669b073ec9d6e27791a7c4d
translations.cacert.org 43200 IN SSHFP 4 1 a4102e1fbf1be1acd53f2e7653dd8898e567c437
translations.cacert.org 43200 IN SSHFP 4 2 6fe3334b51e68f9f650b00d13f504306029b71a76c5aff54873d72b24ed19dd5
l10n.cacert.org 43200 IN CNAME translations.cacert.org.
; community web site hosting
web.cacert.org 43200 IN A 213.154.225.242
web.cacert.org 43200 IN AAAA 2001:7b8:616:162:2::26
web.cacert.org 43200 IN SSHFP 1 1 85f5338d90930200cbbfce1aab56988b4c8f0f22
web.cacert.org 43200 IN SSHFP 1 2 d39cbd51588f322f7b4384274cf0166f25b10f54a6cd153ed7251ff30b5b516e
web.cacert.org 43200 IN SSHFP 2 1 906f0c17bb0e233b0f52ce33cfe64038d45ac4f2
web.cacert.org 43200 IN SSHFP 2 2 dbf6221a8a403b4c9f537b676305fdae07ff45a1c18d88b1141031402af0250f
web.cacert.org 43200 IN SSHFP 3 1 7b62d8d1e093c28cda0f3d2444846128b41c10de
web.cacert.org 43200 IN SSHFP 3 2 0917da677c9e6caf1818c1151ec2a813623a2b2955a1a850f260d64ef041400b
web.cacert.org 43200 IN SSHFP 4 1 e835735157ee3f75663b9c18adbe12b49b28ca96
web.cacert.org 43200 IN SSHFP 4 2 2079bd1a37f4bbbe770033be58360b16e1f03cadd17807b5d35c46fcd782c189
codedocs.cacert.org 43200 IN CNAME web.cacert.org.
funding.cacert.org 43200 IN CNAME web.cacert.org.
infradocs.cacert.org 43200 IN CNAME web.cacert.org.
; community webmail -- vm-community on infra02
webmail.cacert.org 43200 IN A 213.154.225.239
webmail.cacert.org 43200 IN AAAA 2001:7b8:616:162:2::118
webmail.cacert.org 43200 IN SSHFP 1 1 b56a68f3c30c5d5b7854c615cb0f20b6807c7aef
webmail.cacert.org 43200 IN SSHFP 1 2 6dbd39cba7569cec6b2ae08b50500f6a3b47f46b2fbb21660d239e0db8f9c598
webmail.cacert.org 43200 IN SSHFP 3 1 e0bfb3bcf37c22caf5ae6a6216abe82d0ccad329
webmail.cacert.org 43200 IN SSHFP 3 2 b9c7f264f9327ca62c5678255d716b5a6f05be783cbdb7c44ef278f3053370ef
webmail.cacert.org 43200 IN SSHFP 4 1 bf7d5531a2daba84171b8706217897b1c7a8f16d
webmail.cacert.org 43200 IN SSHFP 4 2 4411a6a0820eb811474bcd71e82f00c007030b79bff11df971d1c1bf1a5cc8ff
; static websites
webstatic.cacert.org 43200 IN A 213.154.225.242
webstatic.cacert.org 43200 IN AAAA 2001:7b8:616:162:2::116
webstatic.cacert.org 43200 IN SSHFP 1 1 30897a7a984d8350495946d54c6374e9331237ef
webstatic.cacert.org 43200 IN SSHFP 1 2 32bb10c5cf48532d077066e012230058ddf3cce731c561f228e310eb7a546e3f
webstatic.cacert.org 43200 IN SSHFP 2 1 868361a51ec60607bfd964d0f8f3e4ee5e803fc6
webstatic.cacert.org 43200 IN SSHFP 2 2 a173bb85ec19f63ecb273bca130ef63501fe1b89fd55b62997195e6816cab547
webstatic.cacert.org 43200 IN SSHFP 3 1 7fc847cec20b9d65296d4a0edafba22a14ee9dc4
webstatic.cacert.org 43200 IN SSHFP 3 2 68879264e0ed5d0914797bf2292436fb32cca24683dcf5d927a53589c1bfb6d7
webstatic.cacert.org 43200 IN SSHFP 4 1 a087ef97f4d014b4281a9e462ddc080354231873
webstatic.cacert.org 43200 IN SSHFP 4 2 342df8975a92b9fac1763c63264ef9a0e9e686b416d5590b20bb0e84995eefb0
; wiki
wiki.cacert.org 43200 IN A 213.154.225.235
wiki.cacert.org 43200 IN AAAA 2001:7b8:616:162:2::12
wiki.cacert.org 43200 IN SSHFP 1 1 5c3e0d3265782405e0141c47bf0e16ec14b12e08
wiki.cacert.org 43200 IN SSHFP 1 2 69101872cb629e30a78ca4aac781720e1217c3733f6bb8d659034e9c23c890df
wiki.cacert.org 43200 IN SSHFP 3 2 88d73c828d56d3cccac530558bf0a1b2678c238f285c3ef6b61fa05ea782fd60
wiki.cacert.org 43200 IN SSHFP 4 1 c1d79ceb8986b02b6b477f8c9e50b2623a15cfe8
wiki.cacert.org 43200 IN SSHFP 4 2 6cfa531e0eebbb01b226444d33c238b83c96cc134d23662f95a36c095c4dfbdf
; main CAcert website
www.cacert.org 43200 IN A 213.154.225.245
www.cacert.org 43200 IN AAAA 2001:7b8:3:9c::245
_443._tcp.www.cacert.org 43200 IN TLSA 2 1 1 6f2851409d710504a35115abcb9a6dd3f2577ec937c9ef1938926fa82fd6ff5d
www1.cacert.org 43200 IN A 213.154.225.247
www1.cacert.org 43200 IN AAAA 2001:7b8:3:9c::247
View git blame Copy permalink