envs
/
DNS
mirror of https://git.envs.net/envs/DNS.git
1
0
Fork 0
Code Releases Activity

makeup and optimitions

This commit is contained in:
creme 2019-08-19 12:33:54 +02:00
parent 3c0ebebc26
commit 0238cb4cfd
Signed by: creme
GPG Key ID: C147C3B7FBDF08D0
4 changed files with 8 additions and 13 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
make_perms.sh
View File

@ -16,9 +16,8 @@ chmod 400 envs_msT.key tilde_msT.key letsencrypt_U.key
chmod 600 Kenvs_mst.* Ktilde_mst.* Kletsencrypt_u.* chmod 600 Kenvs_mst.* Ktilde_mst.* Kletsencrypt_u.*
chown root:bind "$BINDIR"/slave_tilde chown root:bind "$BINDIR"/slave_tilde
chmod 644 "$BINDIR"/slave_tilde
test ! -d "$BINDIR"/keys && mkdir -p "$BINDIR"/keys
test ! -d "$BINDIR"/zones && mkdir -p "$BINDIR"/zones
test ! -d "$BINDIR"/slaves && mkdir -p "$BINDIR"/slaves test ! -d "$BINDIR"/slaves && mkdir -p "$BINDIR"/slaves
chown -R bind:bind "$BINDIR"/zones "$BINDIR"/slaves chown -R bind:bind "$BINDIR"/zones "$BINDIR"/slaves
chmod 755 "$BINDIR"/zones chmod 755 "$BINDIR"/zones

1
named.conf.forward
View File

@ -1,7 +1,6 @@
// //
// Forward Zones // Forward Zones
zone "tilde." IN { zone "tilde." IN {
type forward; type forward;
forward only; forward only;

16
named.conf.options
View File

@ -2,7 +2,7 @@ options {
directory "/var/cache/bind"; directory "/var/cache/bind";
managed-keys-directory "/var/cache/bind"; managed-keys-directory "/var/cache/bind";
dump-file "/var/cache/bind/cache_dump.db"; dump-file "/var/cache/bind/cache_dump.db";
statistics-file "/var/cache/bind/bind_stats.txt"; statistics-file "/var/cache/bind/bind_stats.txt";
memstatistics-file "/var/cache/bind/bind_mem_stats.txt"; memstatistics-file "/var/cache/bind/bind_mem_stats.txt";
@ -21,31 +21,29 @@ options {
//======================================================================== //========================================================================
// If BIND logs error messages about the root key being expired, // If BIND logs error messages about the root key being expired,
// you will need to update your keys. See https://www.isc.org/bind-keys // you will need to update your keys. See https://www.isc.org/bind-keys
//======================================================================== //========================================================================
dnssec-enable yes; dnssec-enable yes;
dnssec-validation auto; dnssec-validation auto;
dnssec-lookaside auto;
key-directory "/etc/bind/keys/"; key-directory "/etc/bind/keys/";
// Do not make public version of BIND // Do not make public version of BIND
version none; version none;
auth-nxdomain no; # conform to RFC1035 auth-nxdomain no; // conform to RFC1035
recursive-clients 4096; recursive-clients 4096;
// edns-udp-size 4096;
// max-udp-size 512;
listen-on-v6 { none; };
listen-on { any; }; listen-on { any; };
listen-on-v6 { none; };
allow-transfer { none; };
allow-update { none; }; allow-update { none; };
allow-transfer { none; };
allow-query { any; }; allow-query { any; };
allow-query-cache { internals; }; allow-query-cache { internals; };
allow-recursion { internals; }; allow-recursion { internals; };
}; };

1
named.conf.slaves
View File

@ -1,6 +1,5 @@
// //
// Slave Zones // Slave Zones
// Tilde Zones - ( ben@tilde.team ) // Tilde Zones - ( ben@tilde.team )
include "/etc/bind/slave_tilde"; include "/etc/bind/slave_tilde";