Skip to content
Snippets Groups Projects
Commit 977fcbdd authored by Christian Elberfeld's avatar Christian Elberfeld
Browse files

add reverse dns auflösung

parent 6e3b2635
No related branches found
No related tags found
No related merge requests found
......@@ -27,6 +27,10 @@
src: "{{ item }}"
dest: "/etc/bind/{{ item }}"
with_items:
- db.0.0.10.rev
- db.1.0.10.rev
- db.2.0.10.rev
- db.3.0.10.rev
- db.warpzone.lan
- named.conf.local
- named.conf.options
......@@ -34,8 +38,14 @@
- name: "Purge DDNS Updates"
ansible.builtin.file:
path: /etc/bind/db.warpzone.lan.jnl
path: /etc/bind/{{ item }}
state: absent
with_items:
- db.0.0.10.rev.jnl
- db.1.0.10.rev.jnl
- db.2.0.10.rev.jnl
- db.3.0.10.rev.jnl
- db.warpzone.lan.jnl
- name: "Enable and restart named.service"
......
$TTL 604800
@ IN SOA ns.warpzone.lan. webmaster.warpzone.lan. (
2 ; Serial
604800 ; Refresh
86400 ; Retry
2419200 ; Expire
604800 ) ; Negative Cache TTL
;
@ IN NS ns.warpzone.lan.
; PTR records for 10.0.0.x will be dynamically updated by Kea
$TTL 604800
@ IN SOA ns.warpzone.lan. webmaster.warpzone.lan. (
2 ; Serial
604800 ; Refresh
86400 ; Retry
2419200 ; Expire
604800 ) ; Negative Cache TTL
;
@ IN NS ns.warpzone.lan.
; PTR records for 10.0.1.x will be dynamically updated by Kea
$TTL 604800
@ IN SOA ns.warpzone.lan. webmaster.warpzone.lan. (
2 ; Serial
604800 ; Refresh
86400 ; Retry
2419200 ; Expire
604800 ) ; Negative Cache TTL
;
@ IN NS ns.warpzone.lan.
; PTR records for 10.0.2.x will be dynamically updated by Kea
$TTL 604800
@ IN SOA ns.warpzone.lan. webmaster.warpzone.lan. (
2 ; Serial
604800 ; Refresh
86400 ; Retry
2419200 ; Expire
604800 ) ; Negative Cache TTL
;
@ IN NS ns.warpzone.lan.
; PTR records for 10.0.3.x will be dynamically updated by Kea
; zonefile for warpzone.lan.1200
; TTL min. 300
$TTL 300
@ IN SOA dhcpdns.warpzone.lan. webmaster.warpzone.ms. (
@ IN SOA ns.warpzone.lan. webmaster.warpzone.ms. (
{{ ansible_date_time.epoch }} ; Serial
1200 ; Refresh 1200 - 43200
120 ; Retry 120 -7200
......@@ -12,7 +12,8 @@ $TTL 300
@ IN AAAA {{ ext_ip6 }}
; Nameserver
@ IN NS dhcpdns.warpzone.lan.
@ IN NS ns.warpzone.lan.
ns IN A {{ int_ip4 }}
; Manual Static entries
......
......@@ -16,11 +16,35 @@ zone "warpzone.lan" {
allow-update { key "kea-ddns-key"; };
};
// Reverse-Lookup
//zone "2.168.192.in-addr.arpa" {
// type master;
// file "/etc/bind/zones/db.2.168.192.inv";
//};
// Reverse-Lookup für 10.0.0.0/22 (jeweils /24-Zonen)
zone "0.0.10.in-addr.arpa" {
type master;
file "/etc/bind/db.0.0.10.rev";
check-names ignore;
allow-query { any; };
allow-update { key "kea-ddns-key"; };
};
zone "1.0.10.in-addr.arpa" {
type master;
file "/etc/bind/db.1.0.10.rev";
check-names ignore;
allow-query { any; };
allow-update { key "kea-ddns-key"; };
};
zone "2.0.10.in-addr.arpa" {
type master;
file "/etc/bind/db.2.0.10.rev";
check-names ignore;
allow-query { any; };
allow-update { key "kea-ddns-key"; };
};
zone "3.0.10.in-addr.arpa" {
type master;
file "/etc/bind/db.3.0.10.rev";
check-names ignore;
allow-query { any; };
allow-update { key "kea-ddns-key"; };
};
// ----------------------- Zones -----------------------
......
......@@ -26,35 +26,32 @@
},
]
},
# // ----------------- Reverse DDNS ------------------
# // We will update Reverse DNS for one zone "2.0.192.in-addr-arpa". It
# // uses TSIG with key "d2.sha1.key" and is served by two DNS servers:
# // one listening at "172.16.1.1" on 53001 and the other at "192.168.2.10".
# "reverse-ddns":
# {
# "ddns-domains":
# [
# {
# "name": "2.0.192.in-addr.arpa.",
# "key-name": "d2.sha1.key",
# "dns-servers":
# [
# {
# "ip-address": "172.16.1.1",
# "port": 53001
# },
# {
# "ip-address": "192.168.2.10"
# }
# ]
# }
# ]
# },
"reverse-ddns":
{
"ddns-domains":
[
{
"name": "0.0.10.in-addr.arpa.",
"key-name": "kea-ddns-key",
"dns-servers": [ { "ip-address": "127.0.0.1" } ]
},
{
"name": "1.0.10.in-addr.arpa.",
"key-name": "kea-ddns-key",
"dns-servers": [ { "ip-address": "127.0.0.1" } ]
},
{
"name": "2.0.10.in-addr.arpa.",
"key-name": "kea-ddns-key",
"dns-servers": [ { "ip-address": "127.0.0.1" } ]
},
{
"name": "3.0.10.in-addr.arpa.",
"key-name": "kea-ddns-key",
"dns-servers": [ { "ip-address": "127.0.0.1" } ]
}
]
},
"tsig-keys": [
{
"name": "kea-ddns-key",
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment