diff options
Diffstat (limited to 'roles/space_server/files')
| -rw-r--r-- | roles/space_server/files/named.conf | 35 |
1 files changed, 21 insertions, 14 deletions
diff --git a/roles/space_server/files/named.conf b/roles/space_server/files/named.conf index 81c4969..0659a3b 100644 --- a/roles/space_server/files/named.conf +++ b/roles/space_server/files/named.conf @@ -75,6 +75,18 @@ logging { }; }; +acl local { + 127.0.0.1; + 10.42.0.0/24; // infrastructure + 10.42.1.0/24; // member wired + 10.42.2.0/24; // member wireless + ::1; + 2a01:4262:1ab:a::/64; // infrastructure + 2a01:4262:1ab:b::/64; // member wired + 2a01:4262:1ab:c::/64; // member wireless + 2a01:4262:1ab:f::/64; // member nat64 +}; + zone "." IN { type hint; file "named.ca"; @@ -83,20 +95,15 @@ zone "." IN { zone "s" IN { type master; file "/etc/named/s.zone"; - allow-query { - 127.0.0.1; - 10.42.0.0/24; # infrastructure - 10.42.1.0/24; # member wired - 10.42.2.0/24; # member wireless - ::1; - 2a01:4262:1ab:a::/64; # infrastructure - 2a01:4262:1ab:b::/64; # member wired - 2a01:4262:1ab:c::/64; # member wireless - 2a01:4262:1ab:f::/64; # member nat64 - }; - allow-transfer { - none; - }; + allow-query { local; }; + allow-transfer { none; }; +}; + +zone "42.10.in-addr.arpa" IN { + type master; + file "/etc/named/ipv4.rev.zone"; + allow-query { local; }; + allow-transfer { none; }; }; include "/etc/named.rfc1912.zones"; |