dns-zones/cacert.org
wytze@deboca.net be584cdb5e Add PTR records for the full infra and critical networks.
Add four new infrastructure systems.
Put the "real" infrastructure systems in a /80 subnet to simplify firewall rules.
Correct network addresses in comments.
Name changes per e-mail request from Mario Lipinski on 05.02.2014.


git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2542 14b1bab8-4ef6-0310-b690-991c95c89dfd
2014-02-06 13:51:52 +00:00

4.7 KiB

; DNS master zone file for cacert.org, under RCS control ; @(#)(CAcert) $Id: cacert.org,v 1.75 2014/02/06 13:43:11 root Exp $

$TTL 12h ; default TTL for zone data

@ IN SOA ns1.cacert.org. hostmaster.cacert.org. ( 2014020601 ; Serial 4h ; refresh time 1h ; retry interval 2d ; expire time 12h ) ; negative caching TTL

@ IN NS ns1.cacert.org. @ IN NS ns3.cacert.org. @ IN NS ns4.cacert.org. @ IN NS ns5.cacert.org.

@ IN A 213.154.225.245 @ IN AAAA 2001:7b8:3:9c::245 @ IN MX 10 email.cacert.org. ; TODO: Remove 'ip4:213.154.225.239' after transition @ IN TXT "v=spf1 ip4:213.154.225.245 ip4:213.154.225.246 ip4:213.154.225.247 ip6:2001:7b8:3:9c::245 ip6:2001:7b8:3:9c::246 ip6:2001:7b8:3:9c::247 ip4:213.154.225.228 ip4:213.154.225.230 ip4:213.154.225.239 -all"

arbitration IN A 213.154.225.241 audit IN A 78.46.255.66 blog IN A 213.154.225.234 board IN A 213.154.225.252 bugs IN A 213.154.225.232 cacert-fw IN A 213.154.225.229 cacert-fw IN AAAA 2001:7b8:3:9c::4 cacert-fw01 IN A 213.154.225.253 cacert-fw01 IN AAAA 2001:7b8:3:9c::5 cacert-fw01 IN SSHFP 2 1 6a5497e3e430425439fe849b47a6b5a5add22241 cacert-fw01 IN SSHFP 2 2 ce88f62b161af3d1f3f9c5a79a72608fed455340ff3609a51b73dc42232823c1 cacert-fw01 IN SSHFP 3 1 3e8acf86c3360992eea677a1154b6c3f20811c56 cacert-fw01 IN SSHFP 3 2 c51db0de0b5cd2096f8326e0252903cc06838c060a3689e2088c215e951ef82c cacert-fw01 IN SSHFP 1 1 2dd0073329ec5f4ff8ecb7667f10a1bfe65ef6f4 cacert-fw01 IN SSHFP 1 2 a508ec95e20a465a231f0d6b86afc46ab1486ca7a88272d4ccfdc4b260366885 cacert-fw02 IN A 213.154.225.254 cacert-fw02 IN AAAA 2001:7b8:3:9c::6 cacert-fw02 IN SSHFP 2 1 6e47b51da962818bdf884eb527252019397599ac cacert-fw02 IN SSHFP 2 2 50faa61404e7a6afb1a46b7224e7b0d609d7dad7d40e5f04d4df78b2a50e79d5 cacert-fw02 IN SSHFP 3 1 4b136c402acb26cb01a04de243f0c8412d211bbd cacert-fw02 IN SSHFP 3 2 9c4fc8f7cb81bd45a48313114e55ab261a6379abd6fcc7fd878d05b7206210d7 cacert-fw02 IN SSHFP 1 1 3bbc40993094812db7188fc01f3dc8b89536bd69 cacert-fw02 IN SSHFP 1 2 8e0cc3bcabfed1470f82f85c9726c2f002fb8dbc8f636601a7262c7b489b7d6e cats IN A 213.154.225.243 community IN CNAME email.cacert.org. community-vpn IN A 78.47.142.76 crl IN A 213.154.225.236 dev IN A 78.46.255.66 email IN A 213.154.225.228 emailout IN A 213.154.225.239 eu IN A 213.154.225.242 finance IN CNAME board.cacert.org. git IN A 213.154.225.250 hopper IN AAAA 2001:7b8:616:0162::100 hopper IN SSHFP 1 1 22f35bfddd356b119c1555c3bf4f86edd8ae8dfd hopper IN SSHFP 2 1 026d7dda6753c2d8810466336fe758d37aed899d infrastructure IN A 213.154.225.230 irc IN A 213.154.225.233 issue IN A 213.154.225.244 l10n IN CNAME translations.cacert.org. lists IN A 213.154.225.231 cert.lists IN CNAME lists.cacert.org. nocert.lists IN CNAME lists.cacert.org. lists IN MX 10 email.cacert.org. lists IN TXT "v=spf1 ip4:213.154.225.231 -all" _adsp._domainkey IN TXT "dkim=unknown" _adsp._domainkey.lists IN TXT "dkim=all" lists._domainkey.lists IN TXT "v=DKIM1\;g=*\;k=rsa\;t=y\;p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCs2Hu5HQpT5FWj2TrqHZwFM/h0Tc35idlBviaArkdp5fRPx402ID+pMYZZW6lVM/IJlmeTqPGO73oQyl/tFlnXWj/X8p809IFqWnKWzGKJLhnxMAZW7bmzyjR8siK3It93+s5mu9r/4pwHCW3bEbdtKartd7cud84JO15cLJYA+QIDAQAB" mail._domainkey IN TXT "v=DKIM1\;g=*\;k=rsa\;t=y\;p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDOZV5h3rm18QRiNfNnwXadX8jeSC3zjpU7GFNTfZk1ifjLxrlVrSsfAvlVfFvR2/uQXegwEkiNV5bd57d989T+VVLZZbSv+OAXX4ZwihsLkf3huDszKtJTvsybqUNh97OE00THSyJCrcowFDcLv5IN2ULCOlMjTqbZxZuaNW0S6wIDAQAB" auto._domainkey IN TXT "v=DKIM1\;g=*\;k=rsa\;t=y\;p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDDNFxiNr+NHJwih3OPhGr4iwLE+BBDu72YrMSzUnU1FF50CW7iOtuhg796UZ6xrZ5VuhAix6YmmzcvF2UxYzoD/XpfZ4MzBu0ND4/nkt9/YOTyIBzwQqn9uMNve0Y76Zsel89dIJtOI+y+lfnFExV0jKwe53gzmxMVpMSSCcZPGwIDAQAB" ; —– DKIM auto for cacert.org monitor IN CNAME infrastructure.cacert.org. ns IN A 213.154.225.251 ; master ns1 IN A 213.154.225.251 ; ns.cacert.org ns1 IN AAAA 2001:7b8:616:0163::102 ns3 IN A 46.249.47.169 ; mars.overmeer.net ns3 IN AAAA 2a00:1ca8:2a::31 ns4 IN A 213.154.224.4 ; ns-ext.nlnetlabs.nl ns4 IN AAAA 2001:7b8:206:1::4:53 ns5 IN A 192.5.4.1 ; sns-pb.isc.org ns5 IN AAAA 2001:500:2e::1 ocsp IN A 213.154.225.237 ocsp1 IN A 213.154.225.237 secure IN A 213.154.225.246 secure IN AAAA 2001:7b8:3:9c::246 svn IN A 213.154.225.238 cert.svn IN CNAME svn.cacert.org. nocert.svn IN CNAME svn.cacert.org. test IN A 213.154.225.248 secure.test IN CNAME test.cacert.org. cats.test IN CNAME test.cacert.org. mgr.test IN CNAME test.cacert.org. test2 IN A 213.154.225.249 secure.test2 IN CNAME test2.cacert.org. translations IN A 213.154.225.240 tverify IN A 213.154.225.247 tverify IN AAAA 2001:7b8:3:9c::247 wiki IN A 213.154.225.235 www IN A 213.154.225.245 www IN AAAA 2001:7b8:3:9c::245