Add GA-Schloss. Renew WF.

This commit is contained in:
Christoph 2018-06-25 01:57:21 +02:00
parent a7d5b9623d
commit 938a94cc3b
658 changed files with 23335 additions and 1902 deletions

28
GA-Schloss/README.txt Normal file
View File

@ -0,0 +1,28 @@
-------
Notice:
-------
You have to change some configuration files becaus the because
the configuration of network interfaces must not be equal.
!! Take care, to use the right device names !!
Maybe they are called i.e. 'enp0sXX', but you can rename it.
See also : README.rename.netdevices
For the backup gateway host:
eth1 --> LAN
eth2 --> WAN or ppp0 (DSL device)
eth0 --> WLAN or second LAN or what ever
or
br0 --> WLAN or second LAN or what ever
So you have to change the following files
dsl-provider.GA-Schloss: ppp0 comes over eth2
interfaces.GA-Schloss: see above
default_isc-dhcp-server.GA-Schloss
ipt-firewall.GA-Schloss: LAN device (mostly ) = eth1
second LAN WLAN or what ever (if present) = eth0

Binary file not shown.

Binary file not shown.

Binary file not shown.

Binary file not shown.

Binary file not shown.

Binary file not shown.

View File

@ -0,0 +1,96 @@
-m Show IP and MAC.
-m IP Set IP (format: ###.###.###.###).
-a MAC Set MAC (format: ##:##:##:##:##:##).
-k Show Subnet Mask.
-k Mask Set Subnet Mask (format: ###.###.###.###).
-dhcp Get the DHCP status.
-dhcp on Enable the DHCP.
-dhcp off Disable the DHCP.
-g Show Gateway IP.
-g IP Set Gateway IP (format: ###.###.###.###).
-r BMC cold reset.
option: -d | Detected IPMI device for BMC reset.
-garp on Enable the Gratuitous ARP.
-garp off Disable the Gratuitous ARP.
-fd Reset to the factory default.
option: -d | Detected IPMI device for BMC reset.
-fdl Reset to the factory default. (Clean LAN)
option: -d | Detected IPMI device for BMC reset.
-fde Reset to the factory default. (Clean FRU & LAN)
option: -d | Detected IPMI device for BMC reset.
-ver Get Firmware revision.
-vlan Get VLAN status.
-vlan on <vlan tag> Enable the VLAN and set the VLAN tag.
If VLANtag is not given it uses previously saved value.
-vlan off Disable the VLAN.
-selftest Checking and reporting on the basic health of BMC.
-raw Send a RAW IPMI request and print response.
Format: NetFn Cmd [Data1 ... DataN]
-fru info Show FRU inventory area Info.
-fru list Show all FRU values.
-fru cthelp Show chassis type code.
-fru help Show help of FRU Write.
-fru <field> Show FRU field value.
-fru <field> <value> Write FRU.
-fru 1m Update Product-Manufacturer from DMITable to IPMI FRU.
-fru 1p Update Product-Product Name from DMITable to IPMI FRU.
-fru 1s Update Product-S/N from DMITable to IPMI FRU.
-fru 2m Update Board-Manufacturer from DMITable to IPMI FRU.
-fru 2p Update Board-Product Name from DMITable to IPMI FRU.
-fru 2s Update Board-S/N from DMITable to IPMI FRU.
-fru 3s Update Chassis-S/N from DMITable to IPMI FRU.
-fru backup <file> Backup FRU to file <Binary format>.
-fru restore <file> Restore FRU from file <Binary format>.
-fru tbackup <file> Backup FRU to file <Text format>.
-fru trestore <file> Restore FRU from file <Text format>.
-fru ver <v1> <v2> Get/Set FRU version. (v1 v2 are BCD format)
-sel info Show SEL info.
-sel list Show SEL records.
-sel del Delete all SEL records.
-sel raw Show SEL raw data.
-sdr [full] Show SDR records and reading.
-sdr del <sdr id> Delete SDR record.
-sdr ver <v1> <v2> Get/Set SDR version. (v1 v2 are BCD format)
-nm nmsdr Display NM SDR.
-nm seltime Get SEL time.
-nm deviceid Get ME Device ID.
-nm reset Reboots ME.
-nm reset2default Force ME reset to Default.
-nm updatemode Force ME to Update Mode.
-nm selftest Get Self Test Results.
-nm listimagesinfo List ME Images information.
-nm oemgetpower OEM Power command for ME.
-nm oemgettemp OEM Temp. command for ME.
-nm pstate Get Max allowed CPU P-State.
-nm tstate Get Max allowed CPU T-State.
-nm cpumemtemp Get CPU/Memory temperature.
-nm hostcpudata Get host CPU data.
-fan Get Fan Mode.
-fan <mode> Set Fan Mode.
-pminfo [full] Power supply PMBus health.
-psfruinfo Power supply FRU health.
-psbbpinfo Battery backup power status.
-autodischarge Set auto discharge by days.
<module> <day>.
-discharge <module> Manually discharge battery.
-user list List user privilege information.
-user help Show user privilege code.
-user add <user id> Add user.
<name> <password>
<privilege>
-user del <user id> Delete user.
-user level <user id> Update user privilege.
<privilege>
-user setpwd Update user password.
<user id> <password>
-conf upload <file> Upload IPMI configuration form binary file.
<option> option: -p | Bypass warning message.
-conf download <file> Download IPMI configuration to binary file.
-conf tupload <file> Upload IPMI configuration from text file.
<option> option: -p | Bypass warning message.
-conf tdownload Download IPMI configuration to text file.
<file>
-clrint Clear chassis intrusion.
-reset <index> Reset System and force to boot from device.
-soft <index> Initiate a soft-shutdown for OS and force to boot from
device.

Binary file not shown.

Binary file not shown.

Binary file not shown.

Binary file not shown.

Binary file not shown.

Binary file not shown.

View File

@ -0,0 +1,96 @@
-m Show IP and MAC.
-m IP Set IP (format: ###.###.###.###).
-a MAC Set MAC (format: ##:##:##:##:##:##).
-k Show Subnet Mask.
-k Mask Set Subnet Mask (format: ###.###.###.###).
-dhcp Get the DHCP status.
-dhcp on Enable the DHCP.
-dhcp off Disable the DHCP.
-g Show Gateway IP.
-g IP Set Gateway IP (format: ###.###.###.###).
-r BMC cold reset.
option: -d | Detected IPMI device for BMC reset.
-garp on Enable the Gratuitous ARP.
-garp off Disable the Gratuitous ARP.
-fd Reset to the factory default.
option: -d | Detected IPMI device for BMC reset.
-fdl Reset to the factory default. (Clean LAN)
option: -d | Detected IPMI device for BMC reset.
-fde Reset to the factory default. (Clean FRU & LAN)
option: -d | Detected IPMI device for BMC reset.
-ver Get Firmware revision.
-vlan Get VLAN status.
-vlan on <vlan tag> Enable the VLAN and set the VLAN tag.
If VLANtag is not given it uses previously saved value.
-vlan off Disable the VLAN.
-selftest Checking and reporting on the basic health of BMC.
-raw Send a RAW IPMI request and print response.
Format: NetFn Cmd [Data1 ... DataN]
-fru info Show FRU inventory area Info.
-fru list Show all FRU values.
-fru cthelp Show chassis type code.
-fru help Show help of FRU Write.
-fru <field> Show FRU field value.
-fru <field> <value> Write FRU.
-fru 1m Update Product-Manufacturer from DMITable to IPMI FRU.
-fru 1p Update Product-Product Name from DMITable to IPMI FRU.
-fru 1s Update Product-S/N from DMITable to IPMI FRU.
-fru 2m Update Board-Manufacturer from DMITable to IPMI FRU.
-fru 2p Update Board-Product Name from DMITable to IPMI FRU.
-fru 2s Update Board-S/N from DMITable to IPMI FRU.
-fru 3s Update Chassis-S/N from DMITable to IPMI FRU.
-fru backup <file> Backup FRU to file <Binary format>.
-fru restore <file> Restore FRU from file <Binary format>.
-fru tbackup <file> Backup FRU to file <Text format>.
-fru trestore <file> Restore FRU from file <Text format>.
-fru ver <v1> <v2> Get/Set FRU version. (v1 v2 are BCD format)
-sel info Show SEL info.
-sel list Show SEL records.
-sel del Delete all SEL records.
-sel raw Show SEL raw data.
-sdr [full] Show SDR records and reading.
-sdr del <sdr id> Delete SDR record.
-sdr ver <v1> <v2> Get/Set SDR version. (v1 v2 are BCD format)
-nm nmsdr Display NM SDR.
-nm seltime Get SEL time.
-nm deviceid Get ME Device ID.
-nm reset Reboots ME.
-nm reset2default Force ME reset to Default.
-nm updatemode Force ME to Update Mode.
-nm selftest Get Self Test Results.
-nm listimagesinfo List ME Images information.
-nm oemgetpower OEM Power command for ME.
-nm oemgettemp OEM Temp. command for ME.
-nm pstate Get Max allowed CPU P-State.
-nm tstate Get Max allowed CPU T-State.
-nm cpumemtemp Get CPU/Memory temperature.
-nm hostcpudata Get host CPU data.
-fan Get Fan Mode.
-fan <mode> Set Fan Mode.
-pminfo [full] Power supply PMBus health.
-psfruinfo Power supply FRU health.
-psbbpinfo Battery backup power status.
-autodischarge Set auto discharge by days.
<module> <day>.
-discharge <module> Manually discharge battery.
-user list List user privilege information.
-user help Show user privilege code.
-user add <user id> Add user.
<name> <password>
<privilege>
-user del <user id> Delete user.
-user level <user id> Update user privilege.
<privilege>
-user setpwd Update user password.
<user id> <password>
-conf upload <file> Upload IPMI configuration form binary file.
<option> option: -p | Bypass warning message.
-conf download <file> Download IPMI configuration to binary file.
-conf tupload <file> Upload IPMI configuration from text file.
<option> option: -p | Bypass warning message.
-conf tdownload Download IPMI configuration to text file.
<file>
-clrint Clear chassis intrusion.
-reset <index> Reset System and force to boot from device.
-soft <index> Initiate a soft-shutdown for OS and force to boot from
device.

View File

@ -0,0 +1,96 @@
-m Show IP and MAC.
-m IP Set IP (format: ###.###.###.###).
-a MAC Set MAC (format: ##:##:##:##:##:##).
-k Show Subnet Mask.
-k Mask Set Subnet Mask (format: ###.###.###.###).
-dhcp Get the DHCP status.
-dhcp on Enable the DHCP.
-dhcp off Disable the DHCP.
-g Show Gateway IP.
-g IP Set Gateway IP (format: ###.###.###.###).
-r BMC cold reset.
option: -d | Detected IPMI device for BMC reset.
-garp on Enable the Gratuitous ARP.
-garp off Disable the Gratuitous ARP.
-fd Reset to the factory default.
option: -d | Detected IPMI device for BMC reset.
-fdl Reset to the factory default. (Clean LAN)
option: -d | Detected IPMI device for BMC reset.
-fde Reset to the factory default. (Clean FRU & LAN)
option: -d | Detected IPMI device for BMC reset.
-ver Get Firmware revision.
-vlan Get VLAN status.
-vlan on <vlan tag> Enable the VLAN and set the VLAN tag.
If VLANtag is not given it uses previously saved value.
-vlan off Disable the VLAN.
-selftest Checking and reporting on the basic health of BMC.
-raw Send a RAW IPMI request and print response.
Format: NetFn Cmd [Data1 ... DataN]
-fru info Show FRU inventory area Info.
-fru list Show all FRU values.
-fru cthelp Show chassis type code.
-fru help Show help of FRU Write.
-fru <field> Show FRU field value.
-fru <field> <value> Write FRU.
-fru 1m Update Product-Manufacturer from DMITable to IPMI FRU.
-fru 1p Update Product-Product Name from DMITable to IPMI FRU.
-fru 1s Update Product-S/N from DMITable to IPMI FRU.
-fru 2m Update Board-Manufacturer from DMITable to IPMI FRU.
-fru 2p Update Board-Product Name from DMITable to IPMI FRU.
-fru 2s Update Board-S/N from DMITable to IPMI FRU.
-fru 3s Update Chassis-S/N from DMITable to IPMI FRU.
-fru backup <file> Backup FRU to file <Binary format>.
-fru restore <file> Restore FRU from file <Binary format>.
-fru tbackup <file> Backup FRU to file <Text format>.
-fru trestore <file> Restore FRU from file <Text format>.
-fru ver <v1> <v2> Get/Set FRU version. (v1 v2 are BCD format)
-sel info Show SEL info.
-sel list Show SEL records.
-sel del Delete all SEL records.
-sel raw Show SEL raw data.
-sdr [full] Show SDR records and reading.
-sdr del <sdr id> Delete SDR record.
-sdr ver <v1> <v2> Get/Set SDR version. (v1 v2 are BCD format)
-nm nmsdr Display NM SDR.
-nm seltime Get SEL time.
-nm deviceid Get ME Device ID.
-nm reset Reboots ME.
-nm reset2default Force ME reset to Default.
-nm updatemode Force ME to Update Mode.
-nm selftest Get Self Test Results.
-nm listimagesinfo List ME Images information.
-nm oemgetpower OEM Power command for ME.
-nm oemgettemp OEM Temp. command for ME.
-nm pstate Get Max allowed CPU P-State.
-nm tstate Get Max allowed CPU T-State.
-nm cpumemtemp Get CPU/Memory temperature.
-nm hostcpudata Get host CPU data.
-fan Get Fan Mode.
-fan <mode> Set Fan Mode.
-pminfo [full] Power supply PMBus health.
-psfruinfo Power supply FRU health.
-psbbpinfo Battery backup power status.
-autodischarge Set auto discharge by days.
<module> <day>.
-discharge <module> Manually discharge battery.
-user list List user privilege information.
-user help Show user privilege code.
-user add <user id> Add user.
<name> <password>
<privilege>
-user del <user id> Delete user.
-user level <user id> Update user privilege.
<privilege>
-user setpwd Update user password.
<user id> <password>
-conf upload <file> Upload IPMI configuration form binary file.
<option> option: -p | Bypass warning message.
-conf download <file> Download IPMI configuration to binary file.
-conf tupload <file> Upload IPMI configuration from text file.
<option> option: -p | Bypass warning message.
-conf tdownload Download IPMI configuration to text file.
<file>
-clrint Clear chassis intrusion.
-reset <index> Reset System and force to boot from device.
-soft <index> Initiate a soft-shutdown for OS and force to boot from
device.

View File

@ -0,0 +1,246 @@
-------------------------------------------------------------------------------
Supermicro IPMICFG Release Notes
Copyright(c) 2017 by Super Micro Computer, Inc. http://supermicro.com/
-------------------------------------------------------------------------------
-------------------------------------------------------------------------------
Introduction
-------------------------------------------------------------------------------
IPMICFG is a command line tool that let user set IPMI command through keyboard
controller style (KCS) to the device that support Intelligent Platform
Management Interface (IPMI) version 2.0 specifications.
-------------------------------------------------------------------------------
Requirements
-------------------------------------------------------------------------------
- Operating system:
* Microsoft DOS 5.0 or later version
* Windows Server 2003, 2008, 2012 (32/64bit), 2016
- Operating system must be pre-installed Microsoft Visual C++ 2008 SP1
Redistributable Package
Download Link:
http://www.microsoft.com/en-us/download/details.aspx?id=29
- Windows 2008 R2 x64 must be pre-installed KB3033929 patch
Download Link:
https://www.microsoft.com/en-us/download/details.aspx?id=46083
Windows 7/8/8.1/10:
- Need disabled UAC(User Account Control) or open a command prompt
with a run as administrator.
- Windows 7 x64 must be pre-installed KB3033929 patch
Download Link:
https://www.microsoft.com/en-us/download/details.aspx?id=46148
* Linux Kernel version 2.6.x or higher.
ex: Red Hat Enterprise Linux (RHEL) 6.8 and 7.2,
SUSE Linux Enterprise Server (SLES) 11 SP4 and 12 SP1
Ubuntu Server 14.04 LTS and 16.04 LTS
* Free Disk Space: 200 MB (Linux, Windows)
* Available RAM: 64 MB
- Hardware:
* Baseboard Management Controller (BMC) must support Intelligent Platform
Management Interface (IPMI) version 2.0 specifications.
- Software:
* -tas, -nvme commands must be installed Thin-Agent Service. The TAS
minimum required version is 1.4.0.
-------------------------------------------------------------------------------
Installation and Upgrade Instructions
-------------------------------------------------------------------------------
- DOS
Execute IPMICFG.exe
- Windows
Execute IMPICFG-Win.exe
- Linux
If your system has installed OpenIPMI driver, you can enabled Linux IPMI
driver:
# /etc/init.d/ipmi start
or
# modprobe ipmi_msghandler
# modprobe ipmi_devintf
# modprobe ipmi_si
Then execute IPMICFG-Linux.x86 or IPMICFG-Linux.x86_64
-------------------------------------------------------------------------------
Third Party Software
-------------------------------------------------------------------------------
- Phymem
Please refer to
http://www.codeproject.com/Articles/35378/Access-Physical-Memory-Port-and-PC
I-Configuration for more information.
- IPMITool
Please refer to
http://sourceforge.net/projects/ipmitool for more information.
-------------------------------------------------------------------------------
IPMICFG 1.27.0 build 170620
-------------------------------------------------------------------------------
1. Add DCMI commands.
2. Add MCU ID support for 0xA5, 0xA6, 0xA7 and 0xA8 on IPMICFG with the "tp"
command.
3. Disabled Microblade "VBAT" sensor all the upper threshold value.
4. Fix getting PMBus's detail status has duplicate information.
5. Update NM commands to Node Manager 4.0.
6. Support ATEN 8U Superblade firmware.
7. Update board ID.
8. Update KCS driver.
9. Modify PMBus Revision info.
-------------------------------------------------------------------------------
IPMICFG 1.26.0 build 161123
-------------------------------------------------------------------------------
1. Support MultiNode config ID = 6 and 12.
2. Support MultiNode MCU ID = 0xA7.
3. Support TAS 1.4.0.
4. Update event log description in SEL command.
5. Presenting power module full status information in -pminfo command.
6. Improve NVME firmware information in "-nvme info" command.
7. Support the watchdog sensor in "-sdr" command.
-------------------------------------------------------------------------------
IPMICFG 1.25.0 build 160823
-------------------------------------------------------------------------------
1. Support discrete sensor.
2. Support NVME 48 nodes.
3. Update FRU chassis type.
4. Update board id.
5. Modify parameter list format.
6. Fix FRU fields too many characters lead to FRU wrong issue.
7. Add Get/Set host name command.
8. Update Windows KCS driver.
9. Fix can't boot from UEFI device issue.
-------------------------------------------------------------------------------
IPMICFG 1.24.2 build 160517
-------------------------------------------------------------------------------
1. Fix power reading is incorrect with command nm oem power.
-------------------------------------------------------------------------------
IPMICFG 1.24.1 build 160222
-------------------------------------------------------------------------------
1. Update Windows KCS driver.
-------------------------------------------------------------------------------
IPMICFG 1.24.0 build 160105
-------------------------------------------------------------------------------
1. Add TAS commands. (Not supported DOS)
2. Update NVME commands. (Not supported DOS)
3. Add summary command.
4. Update board id.
5. Update MRC Code for SEL.
6. Update SEL description.
7. Fix MCU Version value wrong issue.
-------------------------------------------------------------------------------
IPMICFG 1.23.0 build 151106
-------------------------------------------------------------------------------
1. Support MicroCloud device in tp commands.
2. Fix temperature sensor reading can't display negative issue.
3. Fix TJmax value wrong issue.
-------------------------------------------------------------------------------
IPMICFG 1.22.0 build 150814
-------------------------------------------------------------------------------
1. Update board id.
2. Update GUID.
3. When impicfg failed, error message will store to stderr variable.
4. When input wrong parameter, ipmicfg will print all the parameters
explaination and cancel pause screen mechanism. (Not supported DOS)
5. When use not root permission account to launch ipmicfg, ipmicfg will show
tip message.
6. Fix -sdr hang issue at SuperBlade.
-------------------------------------------------------------------------------
IPMICFG 1.21.0 build 150615
-------------------------------------------------------------------------------
1. Add BIOS MRC Code for SEL.
2. Add support power consumption sensor(SDR record type = 0x0b).
3. Add SDR Type 2 to support PS Status Compact SDR.
4. Update Fan mode.
5. Udpate SEL description and board id.
6. Modify FatTwin Right side node ID.
7. Modify TwinPro commands.
8. Replace KCS driver.
9. Update length of PWS Module Number from 12 bytes to 13 bytes.
10. Fix memory ECC error description.
-------------------------------------------------------------------------------
Known Issues, Limitations & Restrictions
-------------------------------------------------------------------------------
1. 'Destination IP address' in the first entry under alerts subsection is
volatile as per the IPMI spec. So, this field will not be saved if restored
to factory defaults.
2. Some parameters need IPMI OEM commands support. If not, the execute result
will response error message or information. The parameters include:
-fd Reset to the factory default.
option: -d | Detected IPMI device for BMC reset.
-fdl Reset to the factory default. (Clean LAN)
option: -d | Detected IPMI device for BMC reset.
-fde Reset to the factory default. (Clean FRU & LAN)
option: -d | Detected IPMI device for BMC reset.
-nm nmsdr Display NM SDR.
-nm seltime Get SEL time.
-nm deviceid Get ME Device ID.
-nm reset Reboots ME.
-nm reset2default Force ME reset to Default.
-nm updatemode Force ME to Update Mode.
-nm selftest Get Self Test Results.
-nm listimagesinfo List ME Images information.
-nm oemgetpower OEM Power command for ME.
-nm oemgettemp OEM Temp. command for ME.
-nm pstate Get Max allowed CPU P-State.
-nm tstate Get Max allowed CPU T-State.
-nm cpumemtemp Get CPU/Memory temperature.
-nm hostcpudata Get host CPU data.
-fan Get Fan Mode.
-fan <mode> Set Fan Mode.
-pminfo Power supply PMBus health.
-psfruinfo Power supply FRU health.
-psbbpinfo Battery backup power status.
-autodischarge <module> <day> Set auto discharge by days.
-discharge <module> Manually discharge battery.
-conf upload <file> <option> Upload IPMI configuration form binary file.
option: -p | Bypass warning message.
-conf download <file> Download IPMI configuration to binary file.
-conf tupload <file> <option> Upload IPMI configuration from text file.
option: -p | Bypass warning message.
-conf tdownload <file> Download IPMI configuration to text file.
-clrint Clear chassis intrusion.
-reset <index> Reset System and force to boot from device.
-soft <index> Initiate a soft-shutdown for OS and force
to boot from device.
-recoverbiosinfo Get recovery BIOS information.
-reset <index> Reset System and force to boot from device.
-soft <index> Initiate a soft-shutdown for OS and force
to boot from device.
-recoverbiosinfo Get recovery BIOS information.
-nvme list Display the existing NVME SSD list.
-nvme info NVME SSD information.
-nvme rescan Rescan all devices by in band.
-nvme insert <aoc> <group> <slot> Insert SSD by out of band.
-nvme locate <HDD Name> Locate SSD. (in band)
-nvme locate <aoc> <group> <slot> Locate SSD. (out of band)
-nvme stoplocate <HDD Name> Stop Locate SSD. (in band)
-nvme stoplocate <aoc> <group> <slot> Stop Locate SSD. (out of band)
-nvme remove <HDD Name> [option] Remove NVME device. (in band)
Usage: option 0: Do eject after remove (Default).
option 1: Do not eject after remove.
-nvme remove <aoc> <group> <slot> Remove NVME device. (out of band)
-nvme smartdata [HDD Name] NVME SMART data.
-tp info Get MCU Info.
-tp info <type> Get MCU Type Info. (type: 1 - 3)
-tp nodeid Get Node ID.
-tas info Get TAS Information.
-tas pause Pause TAS Service.
-tas resume Resume TAS Service.
-tas refresh Trigger TAS to recollect data.
-tas clear Clear TAS collected data in BMC.
-tas period <sec> Set TAS update period <limit 5 to 60 sec>.
-tas exec <cmd> Execute a user's specified command.
-------------------------------------------------------------------------------
Technical Support
-------------------------------------------------------------------------------
Web Site: www.supermicro.com
Headquarters: support@supermicro.com
European Branch: support@supermicro.nl
Asian Branch: support@supermicro.com.tw

View File

@ -0,0 +1,96 @@
-m Show IP and MAC.
-m IP Set IP (format: ###.###.###.###).
-a MAC Set MAC (format: ##:##:##:##:##:##).
-k Show Subnet Mask.
-k Mask Set Subnet Mask (format: ###.###.###.###).
-dhcp Get the DHCP status.
-dhcp on Enable the DHCP.
-dhcp off Disable the DHCP.
-g Show Gateway IP.
-g IP Set Gateway IP (format: ###.###.###.###).
-r BMC cold reset.
option: -d | Detected IPMI device for BMC reset.
-garp on Enable the Gratuitous ARP.
-garp off Disable the Gratuitous ARP.
-fd Reset to the factory default.
option: -d | Detected IPMI device for BMC reset.
-fdl Reset to the factory default. (Clean LAN)
option: -d | Detected IPMI device for BMC reset.
-fde Reset to the factory default. (Clean FRU & LAN)
option: -d | Detected IPMI device for BMC reset.
-ver Get Firmware revision.
-vlan Get VLAN status.
-vlan on <vlan tag> Enable the VLAN and set the VLAN tag.
If VLANtag is not given it uses previously saved value.
-vlan off Disable the VLAN.
-selftest Checking and reporting on the basic health of BMC.
-raw Send a RAW IPMI request and print response.
Format: NetFn Cmd [Data1 ... DataN]
-fru info Show FRU inventory area Info.
-fru list Show all FRU values.
-fru cthelp Show chassis type code.
-fru help Show help of FRU Write.
-fru <field> Show FRU field value.
-fru <field> <value> Write FRU.
-fru 1m Update Product-Manufacturer from DMITable to IPMI FRU.
-fru 1p Update Product-Product Name from DMITable to IPMI FRU.
-fru 1s Update Product-S/N from DMITable to IPMI FRU.
-fru 2m Update Board-Manufacturer from DMITable to IPMI FRU.
-fru 2p Update Board-Product Name from DMITable to IPMI FRU.
-fru 2s Update Board-S/N from DMITable to IPMI FRU.
-fru 3s Update Chassis-S/N from DMITable to IPMI FRU.
-fru backup <file> Backup FRU to file <Binary format>.
-fru restore <file> Restore FRU from file <Binary format>.
-fru tbackup <file> Backup FRU to file <Text format>.
-fru trestore <file> Restore FRU from file <Text format>.
-fru ver <v1> <v2> Get/Set FRU version. (v1 v2 are BCD format)
-sel info Show SEL info.
-sel list Show SEL records.
-sel del Delete all SEL records.
-sel raw Show SEL raw data.
-sdr [full] Show SDR records and reading.
-sdr del <sdr id> Delete SDR record.
-sdr ver <v1> <v2> Get/Set SDR version. (v1 v2 are BCD format)
-nm nmsdr Display NM SDR.
-nm seltime Get SEL time.
-nm deviceid Get ME Device ID.
-nm reset Reboots ME.
-nm reset2default Force ME reset to Default.
-nm updatemode Force ME to Update Mode.
-nm selftest Get Self Test Results.
-nm listimagesinfo List ME Images information.
-nm oemgetpower OEM Power command for ME.
-nm oemgettemp OEM Temp. command for ME.
-nm pstate Get Max allowed CPU P-State.
-nm tstate Get Max allowed CPU T-State.
-nm cpumemtemp Get CPU/Memory temperature.
-nm hostcpudata Get host CPU data.
-fan Get Fan Mode.
-fan <mode> Set Fan Mode.
-pminfo [full] Power supply PMBus health.
-psfruinfo Power supply FRU health.
-psbbpinfo Battery backup power status.
-autodischarge Set auto discharge by days.
<module> <day>.
-discharge <module> Manually discharge battery.
-user list List user privilege information.
-user help Show user privilege code.
-user add <user id> Add user.
<name> <password>
<privilege>
-user del <user id> Delete user.
-user level <user id> Update user privilege.
<privilege>
-user setpwd Update user password.
<user id> <password>
-conf upload <file> Upload IPMI configuration form binary file.
<option> option: -p | Bypass warning message.
-conf download <file> Download IPMI configuration to binary file.
-conf tupload <file> Upload IPMI configuration from text file.
<option> option: -p | Bypass warning message.
-conf tdownload Download IPMI configuration to text file.
<file>
-clrint Clear chassis intrusion.
-reset <index> Reset System and force to boot from device.
-soft <index> Initiate a soft-shutdown for OS and force to boot from
device.

View File

@ -0,0 +1,96 @@
-m Show IP and MAC.
-m IP Set IP (format: ###.###.###.###).
-a MAC Set MAC (format: ##:##:##:##:##:##).
-k Show Subnet Mask.
-k Mask Set Subnet Mask (format: ###.###.###.###).
-dhcp Get the DHCP status.
-dhcp on Enable the DHCP.
-dhcp off Disable the DHCP.
-g Show Gateway IP.
-g IP Set Gateway IP (format: ###.###.###.###).
-r BMC cold reset.
option: -d | Detected IPMI device for BMC reset.
-garp on Enable the Gratuitous ARP.
-garp off Disable the Gratuitous ARP.
-fd Reset to the factory default.
option: -d | Detected IPMI device for BMC reset.
-fdl Reset to the factory default. (Clean LAN)
option: -d | Detected IPMI device for BMC reset.
-fde Reset to the factory default. (Clean FRU & LAN)
option: -d | Detected IPMI device for BMC reset.
-ver Get Firmware revision.
-vlan Get VLAN status.
-vlan on <vlan tag> Enable the VLAN and set the VLAN tag.
If VLANtag is not given it uses previously saved value.
-vlan off Disable the VLAN.
-selftest Checking and reporting on the basic health of BMC.
-raw Send a RAW IPMI request and print response.
Format: NetFn Cmd [Data1 ... DataN]
-fru info Show FRU inventory area Info.
-fru list Show all FRU values.
-fru cthelp Show chassis type code.
-fru help Show help of FRU Write.
-fru <field> Show FRU field value.
-fru <field> <value> Write FRU.
-fru 1m Update Product-Manufacturer from DMITable to IPMI FRU.
-fru 1p Update Product-Product Name from DMITable to IPMI FRU.
-fru 1s Update Product-S/N from DMITable to IPMI FRU.
-fru 2m Update Board-Manufacturer from DMITable to IPMI FRU.
-fru 2p Update Board-Product Name from DMITable to IPMI FRU.
-fru 2s Update Board-S/N from DMITable to IPMI FRU.
-fru 3s Update Chassis-S/N from DMITable to IPMI FRU.
-fru backup <file> Backup FRU to file <Binary format>.
-fru restore <file> Restore FRU from file <Binary format>.
-fru tbackup <file> Backup FRU to file <Text format>.
-fru trestore <file> Restore FRU from file <Text format>.
-fru ver <v1> <v2> Get/Set FRU version. (v1 v2 are BCD format)
-sel info Show SEL info.
-sel list Show SEL records.
-sel del Delete all SEL records.
-sel raw Show SEL raw data.
-sdr [full] Show SDR records and reading.
-sdr del <sdr id> Delete SDR record.
-sdr ver <v1> <v2> Get/Set SDR version. (v1 v2 are BCD format)
-nm nmsdr Display NM SDR.
-nm seltime Get SEL time.
-nm deviceid Get ME Device ID.
-nm reset Reboots ME.
-nm reset2default Force ME reset to Default.
-nm updatemode Force ME to Update Mode.
-nm selftest Get Self Test Results.
-nm listimagesinfo List ME Images information.
-nm oemgetpower OEM Power command for ME.
-nm oemgettemp OEM Temp. command for ME.
-nm pstate Get Max allowed CPU P-State.
-nm tstate Get Max allowed CPU T-State.
-nm cpumemtemp Get CPU/Memory temperature.
-nm hostcpudata Get host CPU data.
-fan Get Fan Mode.
-fan <mode> Set Fan Mode.
-pminfo [full] Power supply PMBus health.
-psfruinfo Power supply FRU health.
-psbbpinfo Battery backup power status.
-autodischarge Set auto discharge by days.
<module> <day>.
-discharge <module> Manually discharge battery.
-user list List user privilege information.
-user help Show user privilege code.
-user add <user id> Add user.
<name> <password>
<privilege>
-user del <user id> Delete user.
-user level <user id> Update user privilege.
<privilege>
-user setpwd Update user password.
<user id> <password>
-conf upload <file> Upload IPMI configuration form binary file.
<option> option: -p | Bypass warning message.
-conf download <file> Download IPMI configuration to binary file.
-conf tupload <file> Upload IPMI configuration from text file.
<option> option: -p | Bypass warning message.
-conf tdownload Download IPMI configuration to text file.
<file>
-clrint Clear chassis intrusion.
-reset <index> Reset System and force to boot from device.
-soft <index> Initiate a soft-shutdown for OS and force to boot from
device.

@ -0,0 +1 @@
Subproject commit 414ae04eada0ebc45643e82d8742de795e5c5a70

@ -0,0 +1 @@
Subproject commit e0e37c21b77b5876fb9b5b66204cfcb7eba3cffc

@ -0,0 +1 @@
Subproject commit 9a02312bda7beec1b6d6f63d197f2dfd39254680

View File

@ -0,0 +1 @@
admin-stuff/os-upgrade.sh

@ -0,0 +1 @@
Subproject commit c1934d5bdeee88e6f5b868c7d0bdb955539d34d4

View File

@ -0,0 +1 @@
admin-stuff/test_email.sh

69
GA-Schloss/bind/bind.keys Normal file
View File

@ -0,0 +1,69 @@
# The bind.keys file is used to override the built-in DNSSEC trust anchors
# which are included as part of BIND 9. As of the current release, the only
# trust anchors it contains are those for the DNS root zone ("."), and for
# the ISC DNSSEC Lookaside Validation zone ("dlv.isc.org"). Trust anchors
# for any other zones MUST be configured elsewhere; if they are configured
# here, they will not be recognized or used by named.
#
# The built-in trust anchors are provided for convenience of configuration.
# They are not activated within named.conf unless specifically switched on.
# To use the built-in root key, set "dnssec-validation auto;" in
# named.conf options. To use the built-in DLV key, set
# "dnssec-lookaside auto;". Without these options being set,
# the keys in this file are ignored.
#
# This file is NOT expected to be user-configured.
#
# These keys are current as of Feburary 2017. If any key fails to
# initialize correctly, it may have expired. In that event you should
# replace this file with a current version. The latest version of
# bind.keys can always be obtained from ISC at https://www.isc.org/bind-keys.
managed-keys {
# ISC DLV: See https://www.isc.org/solutions/dlv for details.
#
# NOTE: The ISC DLV zone is being phased out as of February 2017;
# the key will remain in place but the zone will be otherwise empty.
# Configuring "dnssec-lookaside auto;" to activate this key is
# harmless, but is no longer useful and is not recommended.
dlv.isc.org. initial-key 257 3 5 "BEAAAAPHMu/5onzrEE7z1egmhg/WPO0+juoZrW3euWEn4MxDCE1+lLy2
brhQv5rN32RKtMzX6Mj70jdzeND4XknW58dnJNPCxn8+jAGl2FZLK8t+
1uq4W+nnA3qO2+DL+k6BD4mewMLbIYFwe0PG73Te9fZ2kJb56dhgMde5
ymX4BI/oQ+cAK50/xvJv00Frf8kw6ucMTwFlgPe+jnGxPPEmHAte/URk
Y62ZfkLoBAADLHQ9IrS2tryAe7mbBZVcOwIeU/Rw/mRx/vwwMCTgNboM
QKtUdvNXDrYJDSHZws3xiRXF1Rf+al9UmZfSav/4NWLKjHzpT59k/VSt
TDN0YUuWrBNh";
# ROOT KEYS: See https://data.iana.org/root-anchors/root-anchors.xml
# for current trust anchor information.
#
# These keys are activated by setting "dnssec-validation auto;"
# in named.conf.
#
# This key (19036) is to be phased out starting in 2017. It will
# remain in the root zone for some time after its successor key
# has been added. It will remain this file until it is removed from
# the root zone.
. initial-key 257 3 8 "AwEAAagAIKlVZrpC6Ia7gEzahOR+9W29euxhJhVVLOyQbSEW0O8gcCjF
FVQUTf6v58fLjwBd0YI0EzrAcQqBGCzh/RStIoO8g0NfnfL2MTJRkxoX
bfDaUeVPQuYEhg37NZWAJQ9VnMVDxP/VHL496M/QZxkjf5/Efucp2gaD
X6RS6CXpoY68LsvPVjR0ZSwzz1apAzvN9dlzEheX7ICJBBtuA6G3LQpz
W5hOA2hzCTMjJPJ8LbqF6dsV6DoBQzgul0sGIcGOYl7OyQdXfZ57relS
Qageu+ipAdTTJ25AsRTAoub8ONGcLmqrAmRLKBP1dfwhYB4N7knNnulq
QxA+Uk1ihz0=";
# This key (20326) is to be published in the root zone in 2017.
# Servers which were already using the old key (19036) should
# roll seamlessly to this new one via RFC 5011 rollover. Servers
# being set up for the first time can use the contents of this
# file as initializing keys; thereafter, the keys in the
# managed key database will be trusted and maintained
# automatically.
. initial-key 257 3 8 "AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3
+/4RgWOq7HrxRixHlFlExOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kv
ArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgCmr3EgVLrjyBxWezF
0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+e
oZG+SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfd
RUfhHdY6+cn8HFRm+2hM8AnXGXws9555KrUB5qihylGa8subX2Nn6UwN
R1AkUTV74bU=";
};

12
GA-Schloss/bind/db.0 Normal file
View File

@ -0,0 +1,12 @@
;
; BIND reverse data file for broadcast zone
;
$TTL 604800
@ IN SOA localhost. root.localhost. (
1 ; Serial
604800 ; Refresh
86400 ; Retry
2419200 ; Expire
604800 ) ; Negative Cache TTL
;
@ IN NS localhost.

13
GA-Schloss/bind/db.127 Normal file
View File

@ -0,0 +1,13 @@
;
; BIND reverse data file for local loopback interface
;
$TTL 604800
@ IN SOA localhost. root.localhost. (
1 ; Serial
604800 ; Refresh
86400 ; Retry
2419200 ; Expire
604800 ) ; Negative Cache TTL
;
@ IN NS localhost.
1.0.0 IN PTR localhost.

12
GA-Schloss/bind/db.255 Normal file
View File

@ -0,0 +1,12 @@
;
; BIND reverse data file for broadcast zone
;
$TTL 604800
@ IN SOA localhost. root.localhost. (
1 ; Serial
604800 ; Refresh
86400 ; Retry
2419200 ; Expire
604800 ) ; Negative Cache TTL
;
@ IN NS localhost.

14
GA-Schloss/bind/db.empty Normal file
View File

@ -0,0 +1,14 @@
; BIND reverse data file for empty rfc1918 zone
;
; DO NOT EDIT THIS FILE - it is used for multiple zones.
; Instead, copy it, edit named.conf, and use that copy.
;
$TTL 86400
@ IN SOA localhost. root.localhost. (
1 ; Serial
604800 ; Refresh
86400 ; Retry
2419200 ; Expire
86400 ) ; Negative Cache TTL
;
@ IN NS localhost.

14
GA-Schloss/bind/db.local Normal file
View File

@ -0,0 +1,14 @@
;
; BIND data file for local loopback interface
;
$TTL 604800
@ IN SOA localhost. root.localhost. (
2 ; Serial
604800 ; Refresh
86400 ; Retry
2419200 ; Expire
604800 ) ; Negative Cache TTL
;
@ IN NS localhost.
@ IN A 127.0.0.1
@ IN AAAA ::1

90
GA-Schloss/bind/db.root Normal file
View File

@ -0,0 +1,90 @@
; This file holds the information on root name servers needed to
; initialize cache of Internet domain name servers
; (e.g. reference this file in the "cache . <file>"
; configuration file of BIND domain name servers).
;
; This file is made available by InterNIC
; under anonymous FTP as
; file /domain/named.cache
; on server FTP.INTERNIC.NET
; -OR- RS.INTERNIC.NET
;
; last update: February 17, 2016
; related version of root zone: 2016021701
;
; formerly NS.INTERNIC.NET
;
. 3600000 NS A.ROOT-SERVERS.NET.
A.ROOT-SERVERS.NET. 3600000 A 198.41.0.4
A.ROOT-SERVERS.NET. 3600000 AAAA 2001:503:ba3e::2:30
;
; FORMERLY NS1.ISI.EDU
;
. 3600000 NS B.ROOT-SERVERS.NET.
B.ROOT-SERVERS.NET. 3600000 A 192.228.79.201
B.ROOT-SERVERS.NET. 3600000 AAAA 2001:500:84::b
;
; FORMERLY C.PSI.NET
;
. 3600000 NS C.ROOT-SERVERS.NET.
C.ROOT-SERVERS.NET. 3600000 A 192.33.4.12
C.ROOT-SERVERS.NET. 3600000 AAAA 2001:500:2::c
;
; FORMERLY TERP.UMD.EDU
;
. 3600000 NS D.ROOT-SERVERS.NET.
D.ROOT-SERVERS.NET. 3600000 A 199.7.91.13
D.ROOT-SERVERS.NET. 3600000 AAAA 2001:500:2d::d
;
; FORMERLY NS.NASA.GOV
;
. 3600000 NS E.ROOT-SERVERS.NET.
E.ROOT-SERVERS.NET. 3600000 A 192.203.230.10
;
; FORMERLY NS.ISC.ORG
;
. 3600000 NS F.ROOT-SERVERS.NET.
F.ROOT-SERVERS.NET. 3600000 A 192.5.5.241
F.ROOT-SERVERS.NET. 3600000 AAAA 2001:500:2f::f
;
; FORMERLY NS.NIC.DDN.MIL
;
. 3600000 NS G.ROOT-SERVERS.NET.
G.ROOT-SERVERS.NET. 3600000 A 192.112.36.4
;
; FORMERLY AOS.ARL.ARMY.MIL
;
. 3600000 NS H.ROOT-SERVERS.NET.
H.ROOT-SERVERS.NET. 3600000 A 198.97.190.53
H.ROOT-SERVERS.NET. 3600000 AAAA 2001:500:1::53
;
; FORMERLY NIC.NORDU.NET
;
. 3600000 NS I.ROOT-SERVERS.NET.
I.ROOT-SERVERS.NET. 3600000 A 192.36.148.17
I.ROOT-SERVERS.NET. 3600000 AAAA 2001:7fe::53
;
; OPERATED BY VERISIGN, INC.
;
. 3600000 NS J.ROOT-SERVERS.NET.
J.ROOT-SERVERS.NET. 3600000 A 192.58.128.30
J.ROOT-SERVERS.NET. 3600000 AAAA 2001:503:c27::2:30
;
; OPERATED BY RIPE NCC
;
. 3600000 NS K.ROOT-SERVERS.NET.
K.ROOT-SERVERS.NET. 3600000 A 193.0.14.129
K.ROOT-SERVERS.NET. 3600000 AAAA 2001:7fd::1
;
; OPERATED BY ICANN
;
. 3600000 NS L.ROOT-SERVERS.NET.
L.ROOT-SERVERS.NET. 3600000 A 199.7.83.42
L.ROOT-SERVERS.NET. 3600000 AAAA 2001:500:3::42
;
; OPERATED BY WIDE
;
. 3600000 NS M.ROOT-SERVERS.NET.
M.ROOT-SERVERS.NET. 3600000 A 202.12.27.33
M.ROOT-SERVERS.NET. 3600000 AAAA 2001:dc3::35
; End of file

View File

@ -0,0 +1,119 @@
;
; BIND data file for local ga.netz zone
;
$TTL 43200
@ IN SOA ns.local.netz. ckubu.oopen.de. (
2018032901 ; Serial
604800 ; Refresh
86400 ; Retry
2419200 ; Expire
604800 ) ; Negative Cache TTL
;
IN NS ns1.ga.netz.
IN NS ns2.ga.netz.
IN NS ns3.ga.netz.
IN NS ga-st-dc.ga.intra.
IN NS gaasdc01.ga.intra.
; Gateway/Firewall Server
ga-st-gw IN A 192.168.11.254
st-gw IN CNAME ga-st-gw
gw-schloss IN CNAME ga-st-gw
ga-st-gw-ipmi IN A 10.11.11.15
st-gw-ipmi IN CNAME ga-st-gw-ipmi
ga-schloss-ipmi IN CNAME ga-st-gw-ipmi
ga-nh-gw IN A 192.168.81.254
nh-gw IN CNAME ga-nh-gw
gw-nh IN CNAME ga-nh-gw
ga-nh-gw-ipmi IN A 192.168.81.15
nh-gw-ipmi IN CNAME ga-nh-gw-ipmi
gw-nh-ipmi IN CNAME ga-nh-gw-ipmi
ga-al-gw IN A 192.168.10.254
al-gw IN CNAME ga-al-gw
gw-altenschlirf IN CNAME ga-al-gw
gw-al-gw-ipmi IN A 172.17.0.15
al-gw-ipmi IN CNAME gw-al-gw-ipmi
ga-st-gw-ersatz IN A 192.168.11.19
st-gw-ersatz IN CNAME ga-st-gw-ersatz
gw-ersatz IN CNAME ga-st-gw-ersatz
ga-st-gw-ersatz-ipmi IN A 10.11.11.16
st-gw-ersatz-ipmi IN CNAME ga-st-gw-ersatz-ipmi
gw-ersatz-ipmi IN CNAME ga-st-gw-ersatz-ipmi
; Controller for Unifi AP's
ga-st-ctl-unifi IN A 10.121.15.254
st-ctl-unifi IN CNAME ga-st-ctl-unifi
; Unifi Accesspoints
ap-unifi001 IN A 10.121.1.1
ap-unifi002 IN A 10.121.1.2
ap-unifi003 IN A 10.121.1.3
ap-unifi004 IN A 10.121.1.4
ap-unifi004 IN A 10.121.1.5
; KVM Hostsysteme
ga-st-kvm1 IN A 10.10.11.1
st-kvm1 IN CNAME ga-st-kvm1
ga-st-kvm1-ipmi IN A 10.10.10.115
st-kvm1-ipmi IN CNAME ga-st-kvm1-ipmi
ga-al-kvm2 IN A 10.10.10.3
al-kvm2 IN CNAME ga-al-kvm2
ga-al-kvm2-ipmi IN A 10.10.10.115
al-kvm2-ipmi IN CNAME ga-al-kvm2-ipmi
; Nameserver
ns1 IN A 192.168.11.1
ns IN CNAME ns1
ga-st-ns1 IN CNAME ns1
st-ns1 IN CNAME ns1
ns2 IN A 192.168.10.254
ga-al-ns2 IN CNAME ns2
al-ns2 IN CNAME ns2
ns3 IN A 192.168.81.1
ga-nh-ns3 IN CNAME ns3
nh-ns3 IN CNAME ns3
ns.wolle IN A 10.113.12.3
; Linux Dienste Server
ga-st-lsx1 IN A 192.168.11.2
st-lsx1 IN CNAME ga-st-lsx1
lsx1 IN CNAME ga-st-lsx1
; Tech wiki
ga-st-twiki IN A 192.168.11.5
st-twiki IN CNAME ga-st-twiki
dokuwiki IN CNAME ga-st-twiki
techwiki IN CNAME ga-st-twiki
wiki IN CNAME ga-st-twiki
; Backup Server Stockhausen
ga-st-rsync1 IN A 10.10.11.7
st-rsync1 IN CNAME ga-st-rsync1
rsync1 IN CNAME ga-st-rsync1
; Backup Server Altenschlirf
ga-al-rsync2 IN A 10.10.10.7
al-rsync2 IN CNAME ga-al-rsync2
rsync2 IN CNAME ga-al-rsync2
; Xymon Server Altenschlirf
ga-al-xymon IN A 192.168.10.16
al-xymon IN CNAME ga-al-xymon
xymon IN CNAME ga-al-xymon
; Webserver 1 (Altenschlirf)
ga-al-ws1 IN A 192.168.10.17
al-ws1 IN CNAME ga-al-ws1

View File

@ -0,0 +1,11 @@
// This is the primary configuration file for the BIND DNS server named.
//
// Please read /usr/share/doc/bind9/README.Debian.gz for information on the
// structure of BIND configuration files in Debian, *BEFORE* you customize
// this configuration file.
//
// If you are just adding zones, please do that in /etc/bind/named.conf.local
include "/etc/bind/named.conf.options";
include "/etc/bind/named.conf.local";
include "/etc/bind/named.conf.default-zones";

View File

@ -0,0 +1,30 @@
// prime the server with knowledge of the root servers
zone "." {
type hint;
file "/etc/bind/db.root";
};
// be authoritative for the localhost forward and reverse zones, and for
// broadcast zones as per RFC 1912
zone "localhost" {
type master;
file "/etc/bind/db.local";
};
zone "127.in-addr.arpa" {
type master;
file "/etc/bind/db.127";
};
zone "0.in-addr.arpa" {
type master;
file "/etc/bind/db.0";
};
zone "255.in-addr.arpa" {
type master;
file "/etc/bind/db.255";
};

View File

@ -0,0 +1,125 @@
//
// Do any local configuration here
//
// Consider adding the 1918 zones here, if they are not used in your
// organization
//include "/etc/bind/zones.rfc1918";
/* ------------ MASTER ZONES ------------- */
zone "ga.netz" {
type master;
file "/etc/bind/master/ga.netz.zone";
allow-transfer {
internaldns;
};
};
/* ------------ SLAVE ZONES ------------- */
zone "_msdcs.ga.intra" {
type slave;
file "/etc/bind/slave/_msdcs.ga.intra";
allow-query { any; };
allow-transfer {
internaldns;
};
masters {
192.168.10.3;
};
// Use this sender IPv4 for zone transfers
transfer-source 192.168.11.1 ;
};
zone "autodiscover.gemeinschaft-altenschlirf.de" {
type slave;
file "/etc/bind/slave/autodiscover.gemeinschaft-altenschlirf.de.zone";
allow-query { any; };
allow-transfer {
internaldns;
};
masters {
192.168.10.3;
};
// Use this sender IPv4 for zone transfers
transfer-source 192.168.11.1 ;
};
zone "ga.intra" {
type slave;
file "/etc/bind/slave/ga.intra.zone";
allow-query { any; };
allow-transfer {
internaldns;
};
masters {
192.168.10.3;
};
// Use this sender IPv4 for zone transfers
transfer-source 192.168.11.1 ;
};
zone "citrix.gemeinschaft-altenschlirf.de" {
type slave;
file "/etc/bind/slave/citrix.gemeinschaft-altenschlirf.de.zone";
allow-query { any; };
allow-transfer {
internaldns;
};
masters {
192.168.10.3;
};
// Use this sender IPv4 for zone transfers
transfer-source 192.168.11.1 ;
};
zone "mail.gemeinschaft-altenschlirf.de" {
type slave;
file "/etc/bind/slave/mail.gemeinschaft-altenschlirf.de.zone";
allow-query { any; };
allow-transfer {
internaldns;
};
masters {
192.168.10.3;
};
// Use this sender IPv4 for zone transfers
transfer-source 192.168.11.1 ;
};
zone "11.168.192.in-addr.arpa" {
type slave;
file "/etc/bind/slave/db.11.168.192.in-addr.arpa";
allow-query { any; };
allow-transfer {
internaldns;
};
masters {
192.168.10.3;
};
// Use this sender IPv4 for zone transfers
transfer-source 192.168.11.1 ;
};
zone "10.168.192.in-addr.arpa" {
type slave;
file "/etc/bind/slave/db.10.168.192.in-addr.arpa";
allow-query { any; };
allow-transfer {
internaldns;
};
masters {
192.168.10.3;
};
// Use this sender IPv4 for zone transfers
transfer-source 192.168.11.1 ;
};

View File

@ -0,0 +1,8 @@
//
// Do any local configuration here
//
// Consider adding the 1918 zones here, if they are not used in your
// organization
//include "/etc/bind/zones.rfc1918";

View File

@ -0,0 +1,133 @@
acl internaldns {
192.168.11.3;
192.168.10.3;
192.168.10.6;
# Nameserver Gateway Altenschlirf
192.168.10.254;
172.16.0.1;
# Nameserver Gateway Novalishaus
192.168.81.1;
10.2.11.2;
# Nameserver wolle
10.113.12.3;
};
options {
directory "/var/cache/bind";
// If there is a firewall between you and nameservers you want
// to talk to, you may need to fix the firewall to allow multiple
// ports to talk. See http://www.kb.cert.org/vuls/id/800113
// If your ISP provided one or more IP addresses for stable
// nameservers, you probably want to use them as forwarders.
// Uncomment the following block, and insert the addresses replacing
// the all-0's placeholder.
// forwarders {
// 0.0.0.0;
// };
//========================================================================
// If BIND logs error messages about the root key being expired,
// you will need to update your keys. See https://www.isc.org/bind-keys
//========================================================================
dnssec-validation auto;
// Security options
listen-on port 53 {
127.0.0.1;
10.10.11.254;
192.168.11.1;
192.168.11.254;
};
// Use this sender IPv4 for zone transfers
//transfer-source 192.168.11.1 ;
allow-query {
127.0.0.1;
192.168.0.0/16;
10.0.0.0/8;
172.16.0.0/12;
2001:6f8:107e::/48;
fe80::/8;
::1/128;
};
// caching name services
recursion yes;
allow-recursion {
127.0.0.1;
192.168.0.0/16;
172.16.0.0/12;
10.0.0.0/8;
fe80::/8;
::1/128;
};
allow-transfer {
internaldns;
};
transfer-source 192.168.11.1;
notify-source 192.168.11.1;
auth-nxdomain no; # conform to RFC1035
listen-on-v6 { none; };
## - If zone-statistics is "yes", statistic file will be written.
## -
## - Notice:
## - The named.stats file may grow very large over the time use some logrotate to keep it
## - small, this may result in graphs being reset ( something I don't care about here )
## -
zone-statistics yes;
statistics-file "/var/log/named/named.stats";
};
logging {
channel simple_log {
file "/var/log/named/bind.log" versions 3 size 5m;
//severity warning;
severity info;
print-time yes;
print-severity yes;
print-category yes;
};
channel queries_log {
file "/var/log/named/query.log" versions 10 size 5m;
severity debug;
//severity notice;
print-time yes;
print-severity yes;
print-category no;
};
channel log_zone_transfers {
file "/var/log/named/axfr.log" versions 5 size 2m;
severity info;
print-time yes;
print-severity yes;
print-category yes;
};
category resolver {
queries_log;
};
category queries {
queries_log;
};
category xfer-in {
log_zone_transfers;
};
category xfer-out {
log_zone_transfers;
};
category notify {
log_zone_transfers;
};
category default{
simple_log;
};
};

4
GA-Schloss/bind/rndc.key Normal file
View File

@ -0,0 +1,4 @@
key "rndc-key" {
algorithm hmac-md5;
secret "R/ilz2UjdXokWgxVai2qYw==";
};

Binary file not shown.

Binary file not shown.

Binary file not shown.

Binary file not shown.

Binary file not shown.

Some files were not shown because too many files have changed in this diff Show More