diff options
| author | Emil Renner Berthing <esmil@labitat.dk> | 2019-04-02 17:53:01 +0200 |
|---|---|---|
| committer | Emil Renner Berthing <esmil@labitat.dk> | 2019-04-02 18:07:25 +0200 |
| commit | 14d5cbd332a15a8438a458e8c4817d4458c2145b (patch) | |
| tree | c91b2692120bebd88273302ecb150284cde22874 /roles/space_server/files | |
| parent | 0c19892158609d1eb64015f84e53eb5685c97441 (diff) | |
| download | labitat-ansible-14d5cbd332a15a8438a458e8c4817d4458c2145b.tar.gz labitat-ansible-14d5cbd332a15a8438a458e8c4817d4458c2145b.tar.xz labitat-ansible-14d5cbd332a15a8438a458e8c4817d4458c2145b.zip | |
space_server: named: create reverse ipv4 zone
Diffstat (limited to 'roles/space_server/files')
| -rw-r--r-- | roles/space_server/files/named.conf | 35 |
1 files changed, 21 insertions, 14 deletions
diff --git a/roles/space_server/files/named.conf b/roles/space_server/files/named.conf index 81c4969..0659a3b 100644 --- a/roles/space_server/files/named.conf +++ b/roles/space_server/files/named.conf @@ -75,6 +75,18 @@ logging { }; }; +acl local { + 127.0.0.1; + 10.42.0.0/24; // infrastructure + 10.42.1.0/24; // member wired + 10.42.2.0/24; // member wireless + ::1; + 2a01:4262:1ab:a::/64; // infrastructure + 2a01:4262:1ab:b::/64; // member wired + 2a01:4262:1ab:c::/64; // member wireless + 2a01:4262:1ab:f::/64; // member nat64 +}; + zone "." IN { type hint; file "named.ca"; @@ -83,20 +95,15 @@ zone "." IN { zone "s" IN { type master; file "/etc/named/s.zone"; - allow-query { - 127.0.0.1; - 10.42.0.0/24; # infrastructure - 10.42.1.0/24; # member wired - 10.42.2.0/24; # member wireless - ::1; - 2a01:4262:1ab:a::/64; # infrastructure - 2a01:4262:1ab:b::/64; # member wired - 2a01:4262:1ab:c::/64; # member wireless - 2a01:4262:1ab:f::/64; # member nat64 - }; - allow-transfer { - none; - }; + allow-query { local; }; + allow-transfer { none; }; +}; + +zone "42.10.in-addr.arpa" IN { + type master; + file "/etc/named/ipv4.rev.zone"; + allow-query { local; }; + allow-transfer { none; }; }; include "/etc/named.rfc1912.zones"; |