o.open/Office_Networks
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Initial commit

Browse Source
This commit is contained in:
Christoph
2018-05-08 03:01:03 +02:00
commit 1c4c595cd6
3256 changed files with 417972 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

69
AK/bind/bind.keys Normal file
View File

@ -0,0 +1,69 @@
# The bind.keys file is used to override the built-in DNSSEC trust anchors
# which are included as part of BIND 9. As of the current release, the only
# trust anchors it contains are those for the DNS root zone ("."), and for
# the ISC DNSSEC Lookaside Validation zone ("dlv.isc.org"). Trust anchors
# for any other zones MUST be configured elsewhere; if they are configured
# here, they will not be recognized or used by named.
#
# The built-in trust anchors are provided for convenience of configuration.
# They are not activated within named.conf unless specifically switched on.
# To use the built-in root key, set "dnssec-validation auto;" in
# named.conf options. To use the built-in DLV key, set
# "dnssec-lookaside auto;". Without these options being set,
# the keys in this file are ignored.
#
# This file is NOT expected to be user-configured.
#
# These keys are current as of Feburary 2017. If any key fails to
# initialize correctly, it may have expired. In that event you should
# replace this file with a current version. The latest version of
# bind.keys can always be obtained from ISC at https://www.isc.org/bind-keys.
managed-keys {
# ISC DLV: See https://www.isc.org/solutions/dlv for details.
#
# NOTE: The ISC DLV zone is being phased out as of February 2017;
# the key will remain in place but the zone will be otherwise empty.
# Configuring "dnssec-lookaside auto;" to activate this key is
# harmless, but is no longer useful and is not recommended.
dlv.isc.org. initial-key 257 3 5 "BEAAAAPHMu/5onzrEE7z1egmhg/WPO0+juoZrW3euWEn4MxDCE1+lLy2
brhQv5rN32RKtMzX6Mj70jdzeND4XknW58dnJNPCxn8+jAGl2FZLK8t+
1uq4W+nnA3qO2+DL+k6BD4mewMLbIYFwe0PG73Te9fZ2kJb56dhgMde5
ymX4BI/oQ+cAK50/xvJv00Frf8kw6ucMTwFlgPe+jnGxPPEmHAte/URk
Y62ZfkLoBAADLHQ9IrS2tryAe7mbBZVcOwIeU/Rw/mRx/vwwMCTgNboM
QKtUdvNXDrYJDSHZws3xiRXF1Rf+al9UmZfSav/4NWLKjHzpT59k/VSt
TDN0YUuWrBNh";
# ROOT KEYS: See https://data.iana.org/root-anchors/root-anchors.xml
# for current trust anchor information.
#
# These keys are activated by setting "dnssec-validation auto;"
# in named.conf.
#
# This key (19036) is to be phased out starting in 2017. It will
# remain in the root zone for some time after its successor key
# has been added. It will remain this file until it is removed from
# the root zone.
. initial-key 257 3 8 "AwEAAagAIKlVZrpC6Ia7gEzahOR+9W29euxhJhVVLOyQbSEW0O8gcCjF
FVQUTf6v58fLjwBd0YI0EzrAcQqBGCzh/RStIoO8g0NfnfL2MTJRkxoX
bfDaUeVPQuYEhg37NZWAJQ9VnMVDxP/VHL496M/QZxkjf5/Efucp2gaD
X6RS6CXpoY68LsvPVjR0ZSwzz1apAzvN9dlzEheX7ICJBBtuA6G3LQpz
W5hOA2hzCTMjJPJ8LbqF6dsV6DoBQzgul0sGIcGOYl7OyQdXfZ57relS
Qageu+ipAdTTJ25AsRTAoub8ONGcLmqrAmRLKBP1dfwhYB4N7knNnulq
QxA+Uk1ihz0=";
# This key (20326) is to be published in the root zone in 2017.
# Servers which were already using the old key (19036) should
# roll seamlessly to this new one via RFC 5011 rollover. Servers
# being set up for the first time can use the contents of this
# file as initializing keys; thereafter, the keys in the
# managed key database will be trusted and maintained
# automatically.
. initial-key 257 3 8 "AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3
+/4RgWOq7HrxRixHlFlExOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kv
ArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgCmr3EgVLrjyBxWezF
0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+e
oZG+SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfd
RUfhHdY6+cn8HFRm+2hM8AnXGXws9555KrUB5qihylGa8subX2Nn6UwN
R1AkUTV74bU=";
};

12
AK/bind/db.0 Normal file
View File

@ -0,0 +1,12 @@
;
; BIND reverse data file for broadcast zone
;
$TTL 604800
@ IN SOA localhost. root.localhost. (
1 ; Serial
604800 ; Refresh
86400 ; Retry
2419200 ; Expire
604800 ) ; Negative Cache TTL
;
@ IN NS localhost.

13
AK/bind/db.127 Normal file
View File

@ -0,0 +1,13 @@
;
; BIND reverse data file for local loopback interface
;
$TTL 604800
@ IN SOA localhost. root.localhost. (
1 ; Serial
604800 ; Refresh
86400 ; Retry
2419200 ; Expire
604800 ) ; Negative Cache TTL
;
@ IN NS localhost.
1.0.0 IN PTR localhost.

23
AK/bind/db.172.16.0.0 Normal file
View File

@ -0,0 +1,23 @@
;
; BIND reverse data file for local ak.netz zone
;
$TTL 43600
@ IN SOA ns-ak.ak.netz. ckubu.oopen.de. (
2014121401 ; Serial
604800 ; Refresh
86400 ; Retry
2419200 ; Expire
604800 ) ; Negative Cache TTL
;
IN NS ns-ak.ak.netz.
; - Fritz! Box Accesspoint
1 IN PTR gw-ak.ak.netz.
; - (Caching ) Nameserver
254 IN PTR gw-fritz.ak.netz.

103
AK/bind/db.192.168.0.0 Normal file
View File

@ -0,0 +1,103 @@
;
; BIND reverse data file for local ak.netz zone
;
$TTL 43600
@ IN SOA ns-ak.ak.netz. ckubu.oopen.de. (
2016022601 ; Serial
604800 ; Refresh
86400 ; Retry
2419200 ; Expire
604800 ) ; Negative Cache TTL
;
IN NS ns-ak.ak.netz.
; - Alter Server
1 IN PTR at-1.ak.netz.
; - Frankiermaschine
5 IN PTR at-5.ak.netz.
; - Fileserver (neu)
10 IN PTR at-10.ak.netz.
; IPMI
11 IN PTR ipmi-at-10.ak.netz.
12 IN PTR ipmi-at-44.ak.netz.
; - w2k-Server
14 IN PTR at-14.ak.netz.
15 IN PTR at-15.ak.netz.
16 IN PTR at-16.ak.netz.
17 IN PTR at-17.ak.netz.
18 IN PTR at-18.ak.netz.
19 IN PTR at-19.ak.netz.
; - Renate ALT
20 IN PTR at-20.ak.netz.
22 IN PTR at-22.ak.netz.
; - Anke
21 IN PTR at-21.ak.netz.
; - Renate NEU
22 IN PTR at-22.ak.netz.
; - fibu
23 IN PTR at-23.ak.netz.
24 IN PTR at-24.ak.netz.
25 IN PTR at-25.ak.netz.
; - Redaktion/Technik
26 IN PTR at-26.ak.netz.
27 IN PTR at-27.ak.netz.
28 IN PTR at-28.ak.netz.
30 IN PTR at-30.ak.netz.
31 IN PTR at-31.ak.netz.
32 IN PTR at-32.ak.netz.
40 IN PTR at-40.ak.netz.
41 IN PTR at-41.ak.netz.
; - Neuer server
;44 IN PTR at-44.ak.netz.
44 IN PTR at-44.ak.netz.
; - Server LAN 2
45 IN PTR at-45.ak.netz.
; - VPN, CMS Backup
48 IN PTR at-48.ak.netz.
; - Hans Hermann (Vertrieb)
49 IN PTR at-49.ak.netz.
; - Redaktionsrechner (einer von 4) Jens
50 IN PTR at-50.ak.netz.
; - dialin-adresse
100 IN PTR at-100.ak.netz.
; - reserviert fuer Notebook Martin
101 IN PTR at-101.ak.netz.
; - lancom-1
102 IN PTR at-102.ak.netz.
; - nas
103 IN PTR at-103.ak.netz.
; - Drucker
249 IN PTR hp-lj5000.ak.netz.
252 IN PTR canon-ir.ak.netz.
253 IN PTR canon-c5030i.ak.netz.
; - (Caching ) Nameserver
254 IN PTR ns-ak.ak.netz.

23
AK/bind/db.192.168.128.0 Normal file
View File

@ -0,0 +1,23 @@
;
; BIND reverse data file for local ak.netz zone
;
$TTL 43600
@ IN SOA ns-ak.ak.netz. ckubu.oopen.de. (
2014121401 ; Serial
604800 ; Refresh
86400 ; Retry
2419200 ; Expire
604800 ) ; Negative Cache TTL
;
IN NS ns-ak.ak.netz.
; - Fritz! Box Accesspoint
103 IN PTR ap-fritz.ak.netz.
; - (Caching ) Nameserver
254 IN PTR ns-ak.ak.netz.

12
AK/bind/db.255 Normal file
View File

@ -0,0 +1,12 @@
;
; BIND reverse data file for broadcast zone
;
$TTL 604800
@ IN SOA localhost. root.localhost. (
1 ; Serial
604800 ; Refresh
86400 ; Retry
2419200 ; Expire
604800 ) ; Negative Cache TTL
;
@ IN NS localhost.

135
AK/bind/db.ak.local Normal file
View File

@ -0,0 +1,135 @@
;
; BIND data file for local ak.local zone
;
$TTL 43600
@ IN SOA ns-ak.ak.local. ckubu.oopen.de. (
2016051601 ; Serial
604800 ; Refresh
86400 ; Retry
2419200 ; Expire
604800 ) ; Negative Cache TTL
;
IN NS ns-ak.ak.local.
; - Alter Server
at-1 IN A 192.168.0.1
; - Frankiermaschine
at-5 IN A 192.168.0.5
; - Fileserver (neu)
at-10 IN A 192.168.0.10
at-server IN CNAME at-10
ldap IN CNAME at-10
git IN CNAME at-10
web IN CNAME at-10
wiki IN CNAME at-10
; IPMI
ipmi-at-10 IN A 192.168.0.11
ipmi-at-44 IN A 192.168.0.12
ipmi IN CNAME ipmi-at-44
; - w2k-Server
at-14 IN A 192.168.0.14
wsus IN CNAME at-14
at-15 IN A 192.168.0.15
at-16 IN A 192.168.0.16
at-17 IN A 192.168.0.17
at-18 IN A 192.168.0.18
at-19 IN A 192.168.0.19
; - Renate ALT
at-20 IN A 192.168.0.20
at-22 IN A 192.168.0.22
renate IN CNAME at-22
; - Anke
at-21 IN A 192.168.0.21
anke IN CNAME at-21
; - Renate NEU
at-22 IN A 192.168.0.22
; - fibu
at-23 IN A 192.168.0.23
fibu IN CNAME at-23
at-24 IN A 192.168.0.24
at-25 IN A 192.168.0.25
; - Redaktion/Technik
at-26 IN A 192.168.0.26
at-27 IN A 192.168.0.27
at-28 IN A 192.168.0.28
at-30 IN A 192.168.0.30
at-31 IN A 192.168.0.31
at-32 IN A 192.168.0.32
at-40 IN A 192.168.0.40
at-41 IN A 192.168.0.41
; - Vertrieb
at-42 IN A 192.168.0.42
at-43 IN A 192.168.0.43
; - Neuer server
;at-44 IN A 192.168.0.44
at-44 IN A 192.168.0.44
imap IN CNAME at-44
smtp IN CNAME at-44
; - Server LAN 2
at-45 IN A 192.168.0.45
; - VPN, CMS Backup
at-48 IN A 192.168.0.48
; - Hans Hermann (Vertrieb)
at-49 IN A 192.168.0.49
; - Redaktionsrechner (einer von 4) Jens
at-50 IN A 192.168.0.50
at-51 IN A 192.168.0.51
at-52 IN A 192.168.0.52
; - dialin-adresse
at-100 IN A 192.168.0.100
; - reserviert fuer Notebook Martin
at-101 IN A 192.168.0.101
; - lancom-1
lancom-1 IN A 192.168.0.102
; - nas
nas-1 IN A 192.168.0.103
; - Drucker
hp-lj5000 IN A 192.168.0.249
canon-ir IN A 192.168.0.252
canon-c5030i IN A 192.168.0.253
; (Caching ) Nameserver
ns-ak IN A 192.168.0.254
ns IN CNAME ns-ak
nscache IN CNAME ns-ak
resolver IN CNAME ns-ak
at-254 IN CNAME ns-ak
; - 192.168.128.0/24
ap-fritz IN A 192.168.128.103
accesspoint IN CNAME ap-fritz
; - 172.16.0.0/24
; - Fritz! Box 7390
gw-fritz IN A 172.16.0.254
fritz.box IN CNAME gw-fritz
gw-ak IN A 172.16.0.1

136
AK/bind/db.ak.netz Normal file
View File

@ -0,0 +1,136 @@
;
; BIND data file for local ak.netz zone
;
$TTL 43600
@ IN SOA ns-ak.ak.netz. ckubu.oopen.de. (
2016051601 ; Serial
604800 ; Refresh
86400 ; Retry
2419200 ; Expire
604800 ) ; Negative Cache TTL
;
IN NS ns-ak.ak.netz.
; - Alter Server
at-1 IN A 192.168.0.1
; - Frankiermaschine
at-5 IN A 192.168.0.5
; - Fileserver (neu)
at-10 IN A 192.168.0.10
at-server IN CNAME at-10
ldap IN CNAME at-10
git IN CNAME at-10
web IN CNAME at-10
wiki IN CNAME at-10
; IPMI
ipmi-at-10 IN A 192.168.0.11
ipmi-at-44 IN A 192.168.0.12
ipmi IN CNAME ipmi-at-44
; - w2k-Server
at-14 IN A 192.168.0.14
wsus IN CNAME at-14
at-15 IN A 192.168.0.15
at-16 IN A 192.168.0.16
at-17 IN A 192.168.0.17
at-18 IN A 192.168.0.18
at-19 IN A 192.168.0.19
; - Renate ALT
at-20 IN A 192.168.0.20
at-22 IN A 192.168.0.22
renate IN CNAME at-22
; - Anke
at-21 IN A 192.168.0.21
anke IN CNAME at-21
; - Renate NEU
at-22 IN A 192.168.0.22
; - fibu
at-23 IN A 192.168.0.23
fibu IN CNAME at-23
at-24 IN A 192.168.0.24
at-25 IN A 192.168.0.25
; - Redaktion/Technik
at-26 IN A 192.168.0.26
at-27 IN A 192.168.0.27
at-28 IN A 192.168.0.28
at-30 IN A 192.168.0.30
at-31 IN A 192.168.0.31
at-32 IN A 192.168.0.32
at-40 IN A 192.168.0.40
at-41 IN A 192.168.0.41
; - Vertrieb
at-42 IN A 192.168.0.42
at-43 IN A 192.168.0.43
; - Neuer server
;at-44 IN A 192.168.0.44
at-44 IN A 192.168.0.44
imap IN CNAME at-44
smtp IN CNAME at-44
; - Server LAN 2
at-45 IN A 192.168.0.45
; - VPN, CMS Backup
at-48 IN A 192.168.0.48
; - Hans Hermann (Vertrieb)
at-49 IN A 192.168.0.49
; - Redaktionsrechner (einer von 4) Jens
at-50 IN A 192.168.0.50
at-51 IN A 192.168.0.51
at-52 IN A 192.168.0.52
; - dialin-adresse
at-100 IN A 192.168.0.100
; - reserviert fuer Notebook Martin
at-101 IN A 192.168.0.101
; - lancom-1
lancom-1 IN A 192.168.0.102
; - nas
nas-1 IN A 192.168.0.103
; - Drucker
hp-lj5000 IN A 192.168.0.249
canon-ir IN A 192.168.0.252
canon-c5030i IN A 192.168.0.253
; (Caching ) Nameserver
ns-ak IN A 192.168.0.254
ns IN CNAME ns-ak
nscache IN CNAME ns-ak
resolver IN CNAME ns-ak
at-254 IN CNAME ns-ak
; - 192.168.128.0/24
ap-fritz IN A 192.168.128.103
accesspoint IN CNAME ap-fritz
; - 172.16.0.0/24
; - Fritz! Box 7390
gw-fritz IN A 172.16.0.254
fritz.box IN CNAME gw-fritz
gw-ak IN A 172.16.0.1

14
AK/bind/db.empty Normal file
View File

@ -0,0 +1,14 @@
; BIND reverse data file for empty rfc1918 zone
;
; DO NOT EDIT THIS FILE - it is used for multiple zones.
; Instead, copy it, edit named.conf, and use that copy.
;
$TTL 86400
@ IN SOA localhost. root.localhost. (
1 ; Serial
604800 ; Refresh
86400 ; Retry
2419200 ; Expire
86400 ) ; Negative Cache TTL
;
@ IN NS localhost.

17
AK/bind/db.k1371.dyndns.org Normal file
View File

@ -0,0 +1,17 @@
;
; BIND data file for k1371.dyndns.org zone
;
$TTL 43600
@ IN SOA ns-ak.ak.netz. ckubu.oopen.de. (
2016051601 ; Serial
604800 ; Refresh
86400 ; Retry
2419200 ; Expire
604800 ) ; Negative Cache TTL
;
IN NS ns-ak.ak.netz.
;@ IN A 192.168.0.44
@ IN A 192.168.0.10

14
AK/bind/db.local Normal file
View File

@ -0,0 +1,14 @@
;
; BIND data file for local loopback interface
;
$TTL 604800
@ IN SOA localhost. root.localhost. (
2 ; Serial
604800 ; Refresh
86400 ; Retry
2419200 ; Expire
604800 ) ; Negative Cache TTL
;
@ IN NS localhost.
@ IN A 127.0.0.1
@ IN AAAA ::1

90
AK/bind/db.root Normal file
View File

@ -0,0 +1,90 @@
; This file holds the information on root name servers needed to
; initialize cache of Internet domain name servers
; (e.g. reference this file in the "cache . <file>"
; configuration file of BIND domain name servers).
;
; This file is made available by InterNIC
; under anonymous FTP as
; file /domain/named.cache
; on server FTP.INTERNIC.NET
; -OR- RS.INTERNIC.NET
;
; last update: February 17, 2016
; related version of root zone: 2016021701
;
; formerly NS.INTERNIC.NET
;
. 3600000 NS A.ROOT-SERVERS.NET.
A.ROOT-SERVERS.NET. 3600000 A 198.41.0.4
A.ROOT-SERVERS.NET. 3600000 AAAA 2001:503:ba3e::2:30
;
; FORMERLY NS1.ISI.EDU
;
. 3600000 NS B.ROOT-SERVERS.NET.
B.ROOT-SERVERS.NET. 3600000 A 192.228.79.201
B.ROOT-SERVERS.NET. 3600000 AAAA 2001:500:84::b
;
; FORMERLY C.PSI.NET
;
. 3600000 NS C.ROOT-SERVERS.NET.
C.ROOT-SERVERS.NET. 3600000 A 192.33.4.12
C.ROOT-SERVERS.NET. 3600000 AAAA 2001:500:2::c
;
; FORMERLY TERP.UMD.EDU
;
. 3600000 NS D.ROOT-SERVERS.NET.
D.ROOT-SERVERS.NET. 3600000 A 199.7.91.13
D.ROOT-SERVERS.NET. 3600000 AAAA 2001:500:2d::d
;
; FORMERLY NS.NASA.GOV
;
. 3600000 NS E.ROOT-SERVERS.NET.
E.ROOT-SERVERS.NET. 3600000 A 192.203.230.10
;
; FORMERLY NS.ISC.ORG
;
. 3600000 NS F.ROOT-SERVERS.NET.
F.ROOT-SERVERS.NET. 3600000 A 192.5.5.241
F.ROOT-SERVERS.NET. 3600000 AAAA 2001:500:2f::f
;
; FORMERLY NS.NIC.DDN.MIL
;
. 3600000 NS G.ROOT-SERVERS.NET.
G.ROOT-SERVERS.NET. 3600000 A 192.112.36.4
;
; FORMERLY AOS.ARL.ARMY.MIL
;
. 3600000 NS H.ROOT-SERVERS.NET.
H.ROOT-SERVERS.NET. 3600000 A 198.97.190.53
H.ROOT-SERVERS.NET. 3600000 AAAA 2001:500:1::53
;
; FORMERLY NIC.NORDU.NET
;
. 3600000 NS I.ROOT-SERVERS.NET.
I.ROOT-SERVERS.NET. 3600000 A 192.36.148.17
I.ROOT-SERVERS.NET. 3600000 AAAA 2001:7fe::53
;
; OPERATED BY VERISIGN, INC.
;
. 3600000 NS J.ROOT-SERVERS.NET.
J.ROOT-SERVERS.NET. 3600000 A 192.58.128.30
J.ROOT-SERVERS.NET. 3600000 AAAA 2001:503:c27::2:30
;
; OPERATED BY RIPE NCC
;
. 3600000 NS K.ROOT-SERVERS.NET.
K.ROOT-SERVERS.NET. 3600000 A 193.0.14.129
K.ROOT-SERVERS.NET. 3600000 AAAA 2001:7fd::1
;
; OPERATED BY ICANN
;
. 3600000 NS L.ROOT-SERVERS.NET.
L.ROOT-SERVERS.NET. 3600000 A 199.7.83.42
L.ROOT-SERVERS.NET. 3600000 AAAA 2001:500:3::42
;
; OPERATED BY WIDE
;
. 3600000 NS M.ROOT-SERVERS.NET.
M.ROOT-SERVERS.NET. 3600000 A 202.12.27.33
M.ROOT-SERVERS.NET. 3600000 AAAA 2001:dc3::35
; End of file

11
AK/bind/named.conf Normal file
View File

@ -0,0 +1,11 @@
// This is the primary configuration file for the BIND DNS server named.
//
// Please read /usr/share/doc/bind9/README.Debian.gz for information on the
// structure of BIND configuration files in Debian, *BEFORE* you customize
// this configuration file.
//
// If you are just adding zones, please do that in /etc/bind/named.conf.local
include "/etc/bind/named.conf.options";
include "/etc/bind/named.conf.local";
include "/etc/bind/named.conf.default-zones";

30
AK/bind/named.conf.default-zones Normal file
View File

@ -0,0 +1,30 @@
// prime the server with knowledge of the root servers
zone "." {
type hint;
file "/etc/bind/db.root";
};
// be authoritative for the localhost forward and reverse zones, and for
// broadcast zones as per RFC 1912
zone "localhost" {
type master;
file "/etc/bind/db.local";
};
zone "127.in-addr.arpa" {
type master;
file "/etc/bind/db.127";
};
zone "0.in-addr.arpa" {
type master;
file "/etc/bind/db.0";
};
zone "255.in-addr.arpa" {
type master;
file "/etc/bind/db.255";
};

38
AK/bind/named.conf.local Normal file
View File

@ -0,0 +1,38 @@
//
// Do any local configuration here
//
// Consider adding the 1918 zones here, if they are not used in your
// organization
//include "/etc/bind/zones.rfc1918";
zone "ak.local" {
type master;
file "/etc/bind/db.ak.local";
};
zone "ak.netz" {
type master;
file "/etc/bind/db.ak.netz";
};
zone "0.168.192.in-addr.arpa" {
type master;
file "/etc/bind/db.192.168.0.0";
};
zone "128.168.192.in-addr.arpa" {
type master;
file "/etc/bind/db.192.168.128.0";
};
zone "0.16.172.in-addr.arpa" {
type master;
file "/etc/bind/db.172.16.0.0";
};
zone "k1371.dyndns.org" {
type master;
file "/etc/bind/db.k1371.dyndns.org";
};

8
AK/bind/named.conf.local.ORIG Normal file
View File

@ -0,0 +1,8 @@
//
// Do any local configuration here
//
// Consider adding the 1918 zones here, if they are not used in your
// organization
//include "/etc/bind/zones.rfc1918";

110
AK/bind/named.conf.options Normal file
View File

@ -0,0 +1,110 @@
options {
directory "/var/cache/bind";
// If there is a firewall between you and nameservers you want
// to talk to, you may need to fix the firewall to allow multiple
// ports to talk. See http://www.kb.cert.org/vuls/id/800113
// If your ISP provided one or more IP addresses for stable
// nameservers, you probably want to use them as forwarders.
// Uncomment the following block, and insert the addresses replacing
// the all-0's placeholder.
// forwarders {
// 0.0.0.0;
// };
/*
forwarders {
// OpenDNS servers
208.67.222.222;
208.67.220.220;
// DNS-Cache des CCC
213.73.91.35;
// ISP DNS Servers
217.0.43.193;
194.25.2.129;
};
*/
// Security options
listen-on port 53 {
127.0.0.1;
192.168.0.254;
172.16.0.1;
};
allow-query {
127.0.0.1;
192.168.0.0/16;
172.16.0.0/16;
10.0.0.0/8;
#fe80::/8;
#::1/128;
};
allow-recursion {
127.0.0.1;
192.168.0.0/16;
172.16.0.0/16;
10.0.0.0/16;
#fe80::/8;
#::1/128;
};
allow-transfer { none; };
auth-nxdomain no; # conform to RFC1035
// turns off IPv6
listen-on-v6 { none; };
// turns on IPv6 for port 53
/*
listen-on-v6 {
::1;
};
*/
};
logging {
channel simple_log {
file "/var/log/named/bind.log" versions 3 size 5m;
severity warning;
print-time yes;
print-severity yes;
print-category yes;
};
channel queries_log {
file "/var/log/named/query.log" versions 5 size 2m;
severity info;
print-time yes;
print-severity yes;
print-category no;
};
channel log_zone_transfers {
file "/var/log/named/axfr.log" versions 3 size 2m;
//severity info;
severity debug 4;
print-time yes;
print-severity yes;
print-category yes;
};
category resolver {
queries_log;
};
category queries {
queries_log;
};
category xfer-in {
log_zone_transfers;
};
category xfer-out {
log_zone_transfers;
};
category notify {
log_zone_transfers;
};
category default{
simple_log;
};
};

26
AK/bind/named.conf.options.ORIG Normal file
View File

@ -0,0 +1,26 @@
options {
directory "/var/cache/bind";
// If there is a firewall between you and nameservers you want
// to talk to, you may need to fix the firewall to allow multiple
// ports to talk. See http://www.kb.cert.org/vuls/id/800113
// If your ISP provided one or more IP addresses for stable
// nameservers, you probably want to use them as forwarders.
// Uncomment the following block, and insert the addresses replacing
// the all-0's placeholder.
// forwarders {
// 0.0.0.0;
// };
//========================================================================
// If BIND logs error messages about the root key being expired,
// you will need to update your keys. See https://www.isc.org/bind-keys
//========================================================================
dnssec-validation auto;
auth-nxdomain no; # conform to RFC1035
listen-on-v6 { any; };
};

4
AK/bind/rndc.key Normal file
View File

@ -0,0 +1,4 @@
key "rndc-key" {
algorithm hmac-md5;
secret "ckecWIFiA+MZIA/mQdCjxQ==";
};

20
AK/bind/zones.rfc1918 Normal file
View File

@ -0,0 +1,20 @@
zone "10.in-addr.arpa" { type master; file "/etc/bind/db.empty"; };
zone "16.172.in-addr.arpa" { type master; file "/etc/bind/db.empty"; };
zone "17.172.in-addr.arpa" { type master; file "/etc/bind/db.empty"; };
zone "18.172.in-addr.arpa" { type master; file "/etc/bind/db.empty"; };
zone "19.172.in-addr.arpa" { type master; file "/etc/bind/db.empty"; };
zone "20.172.in-addr.arpa" { type master; file "/etc/bind/db.empty"; };
zone "21.172.in-addr.arpa" { type master; file "/etc/bind/db.empty"; };
zone "22.172.in-addr.arpa" { type master; file "/etc/bind/db.empty"; };
zone "23.172.in-addr.arpa" { type master; file "/etc/bind/db.empty"; };
zone "24.172.in-addr.arpa" { type master; file "/etc/bind/db.empty"; };
zone "25.172.in-addr.arpa" { type master; file "/etc/bind/db.empty"; };
zone "26.172.in-addr.arpa" { type master; file "/etc/bind/db.empty"; };
zone "27.172.in-addr.arpa" { type master; file "/etc/bind/db.empty"; };
zone "28.172.in-addr.arpa" { type master; file "/etc/bind/db.empty"; };
zone "29.172.in-addr.arpa" { type master; file "/etc/bind/db.empty"; };
zone "30.172.in-addr.arpa" { type master; file "/etc/bind/db.empty"; };
zone "31.172.in-addr.arpa" { type master; file "/etc/bind/db.empty"; };
zone "168.192.in-addr.arpa" { type master; file "/etc/bind/db.empty"; };