From eb22fed538b0e2e390f7c52c8166fc5fd7d52e59 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?aboula=C3=AF=2Ebayo?= Date: Mon, 17 Feb 2025 09:14:30 +0100 Subject: [PATCH] srv-service --- .../srv-service/db.monlabo.lan | 23 ++++ .../srv-service/db.monlabo.lan.rev | 25 ++++ .../tp03-reseau-prive/srv-service/dhcpd.conf | 109 ++++++++++++++++++ .../srv-service/isc-dhcp-server | 18 +++ .../srv-service/named.conf.local | 19 +++ .../srv-service/named.conf.options | 24 ++++ 6 files changed, 218 insertions(+) create mode 100644 sisr1/tp03-reseau-prive/srv-service/db.monlabo.lan create mode 100644 sisr1/tp03-reseau-prive/srv-service/db.monlabo.lan.rev create mode 100644 sisr1/tp03-reseau-prive/srv-service/dhcpd.conf create mode 100644 sisr1/tp03-reseau-prive/srv-service/isc-dhcp-server create mode 100644 sisr1/tp03-reseau-prive/srv-service/named.conf.local create mode 100644 sisr1/tp03-reseau-prive/srv-service/named.conf.options diff --git a/sisr1/tp03-reseau-prive/srv-service/db.monlabo.lan b/sisr1/tp03-reseau-prive/srv-service/db.monlabo.lan new file mode 100644 index 0000000..cb0087f --- /dev/null +++ b/sisr1/tp03-reseau-prive/srv-service/db.monlabo.lan @@ -0,0 +1,23 @@ +; +; BIND data file for local loopback interface +; +$TTL 604800 +@ IN SOA srv-service.monlabo.lan. root.srv-service.monlabo.lan. ( + 2 ; Serial + 604800 ; Refresh + 86400 ; Retry + 2419200 ; Expire + 604800 ) ; Negative Cache TTL +; + IN NS srv-service.monlabo.lan. +srv-service IN A 172.16.0.254 +srv-admin IN A 172.16.0.1 +srvdns CNAME srv-service +srvdns1 CNAME srv-service +srvdhcp CNAME srv-service +dhcp CNAME srv-service +dns1 CNAME srv-service +dns CNAME srv-service +srvadmin CNAME srv-admin +router CNAME srv-admin +gateway CNAME srv-admin diff --git a/sisr1/tp03-reseau-prive/srv-service/db.monlabo.lan.rev b/sisr1/tp03-reseau-prive/srv-service/db.monlabo.lan.rev new file mode 100644 index 0000000..a903e86 --- /dev/null +++ b/sisr1/tp03-reseau-prive/srv-service/db.monlabo.lan.rev @@ -0,0 +1,25 @@ +; +; BIND data file for local loopback interface +; +$TTL 604800 +@ IN SOA srv-service.monlabo.lan. root.srv-service.monlabo.lan. ( + 2 ; Serial + 604800 ; Refresh + 86400 ; Retry + 2419200 ; Expire + 604800 ) ; Negative Cache TTL +; + IN NS srv-service.monlabo.lan. +srv-service IN A 172.16.0.254 + + +srv-admin IN A 172.16.0.1 +srvdns CNAME srv-service +srvdns1 CNAME srv-service +srvdhcp CNAME srv-service +dhcp CNAME srv-service +dns1 CNAME srv-service +dns CNAME srv-service +srvadmin CNAME srv-admin +router CNAME srv-admin +gateway CNAME srv-admin diff --git a/sisr1/tp03-reseau-prive/srv-service/dhcpd.conf b/sisr1/tp03-reseau-prive/srv-service/dhcpd.conf new file mode 100644 index 0000000..490d316 --- /dev/null +++ b/sisr1/tp03-reseau-prive/srv-service/dhcpd.conf @@ -0,0 +1,109 @@ +# dhcpd.conf +# +# Sample configuration file for ISC dhcpd +# + +# option definitions common to all supported networks... +option domain-name "example.org"; +option domain-name-servers ns1.example.org, ns2.example.org; + +default-lease-time 600; +max-lease-time 7200; + +# The ddns-updates-style parameter controls whether or not the server will +# attempt to do a DNS update when a lease is confirmed. We default to the +# behavior of the version 2 packages ('none', since DHCP v2 didn't +# have support for DDNS.) +ddns-update-style none; + +# If this DHCP server is the official DHCP server for the local +# network, the authoritative directive should be uncommented. +#authoritative; + +# Use this to send dhcp log messages to a different log file (you also +# have to hack syslog.conf to complete the redirection). +#log-facility local7; + +# No service will be given on this subnet, but declaring it helps the +# DHCP server to understand the network topology. + +#subnet 10.152.187.0 netmask 255.255.255.0 { +#} + +# This is a very basic subnet declaration. + +subnet 172.16.0.0 netmask 255.255.255.0 { + range 172.16.0.10 172.16.0.109; + option routers 172.16.0.1; + option domain-name "monlabo.lan"; + option domain-name-servers 172.16.0.254; +} + +# This declaration allows BOOTP clients to get dynamic addresses, +# which we don't really recommend. + +#subnet 10.254.239.32 netmask 255.255.255.224 { +# range dynamic-bootp 10.254.239.40 10.254.239.60; +# option broadcast-address 10.254.239.31; +# option routers rtr-239-32-1.example.org; +#} + +# A slightly different configuration for an internal subnet. +#subnet 10.5.5.0 netmask 255.255.255.224 { +# range 10.5.5.26 10.5.5.30; +# option domain-name-servers ns1.internal.example.org; +# option domain-name "internal.example.org"; +# option routers 10.5.5.1; +# option broadcast-address 10.5.5.31; +# default-lease-time 600; +# max-lease-time 7200; +#} + +# Hosts which require special configuration options can be listed in +# host statements. If no address is specified, the address will be +# allocated dynamically (if possible), but the host-specific information +# will still come from the host declaration. + +#host passacaglia { +# hardware ethernet 0:0:c0:5d:bd:95; +# filename "vmunix.passacaglia"; +# server-name "toccata.example.com"; +#} + +# Fixed IP addresses can also be specified for hosts. These addresses +# should not also be listed as being available for dynamic assignment. +# Hosts for which fixed IP addresses have been specified can boot using +# BOOTP or DHCP. Hosts for which no fixed address is specified can only +# be booted with DHCP, unless there is an address range on the subnet +# to which a BOOTP client is connected which has the dynamic-bootp flag +# set. +host server-admin-ab { + hardware ethernet 08:00:27:13:07:91; + fixed-address 172.16.0.1; +} + +# You can declare a class of clients and then do address allocation +# based on that. The example below shows a case where all clients +# in a certain class get addresses on the 10.17.224/24 subnet, and all +# other clients get addresses on the 10.0.29/24 subnet. + +#class "foo" { +# match if substring (option vendor-class-identifier, 0, 4) = "SUNW"; +#} + +#shared-network 224-29 { +# subnet 10.17.224.0 netmask 255.255.255.0 { +# option routers rtr-224.example.org; +# } +# subnet 10.0.29.0 netmask 255.255.255.0 { +# option routers rtr-29.example.org; +# } +# pool { +# allow members of "foo"; +# range 10.17.224.10 10.17.224.250; +# } +# pool { +# deny members of "foo"; +# range 10.0.29.10 10.0.29.230; +# } +#} diff --git a/sisr1/tp03-reseau-prive/srv-service/isc-dhcp-server b/sisr1/tp03-reseau-prive/srv-service/isc-dhcp-server new file mode 100644 index 0000000..35a4bf9 --- /dev/null +++ b/sisr1/tp03-reseau-prive/srv-service/isc-dhcp-server @@ -0,0 +1,18 @@ +# Defaults for isc-dhcp-server (sourced by /etc/init.d/isc-dhcp-server) + +# Path to dhcpd's config file (default: /etc/dhcp/dhcpd.conf). +#DHCPDv4_CONF=/etc/dhcp/dhcpd.conf +#DHCPDv6_CONF=/etc/dhcp/dhcpd6.conf + +# Path to dhcpd's PID file (default: /var/run/dhcpd.pid). +#DHCPDv4_PID=/var/run/dhcpd.pid +#DHCPDv6_PID=/var/run/dhcpd6.pid + +# Additional options to start dhcpd with. +# Don't use options -cf or -pf here; use DHCPD_CONF/ DHCPD_PID instead +#OPTIONS="" + +# On what interfaces should the DHCP server (dhcpd) serve DHCP requests? +# Separate multiple interfaces with spaces, e.g. "eth0 eth1". +INTERFACESv4="enp0s3" +INTERFACESv6="" diff --git a/sisr1/tp03-reseau-prive/srv-service/named.conf.local b/sisr1/tp03-reseau-prive/srv-service/named.conf.local new file mode 100644 index 0000000..45f5db4 --- /dev/null +++ b/sisr1/tp03-reseau-prive/srv-service/named.conf.local @@ -0,0 +1,19 @@ +// +// Do any local configuration here +// zone directe + zone "monlabo.lan" { + type master; + file "/etc/bind/db.monlabo.lan"; + }; + + // zone inverse + zone "0.16.172.in-addr.arpa" { + type master; + notify no; + file "/etc/bind/db.monlabo.lan.rev"; + }; + +// Consider adding the 1918 zones here, if they are not used in your +// organization +//include "/etc/bind/zones.rfc1918"; + diff --git a/sisr1/tp03-reseau-prive/srv-service/named.conf.options b/sisr1/tp03-reseau-prive/srv-service/named.conf.options new file mode 100644 index 0000000..2a4ca91 --- /dev/null +++ b/sisr1/tp03-reseau-prive/srv-service/named.conf.options @@ -0,0 +1,24 @@ +options { + directory "/var/cache/bind"; + + // If there is a firewall between you and nameservers you want + // to talk to, you may need to fix the firewall to allow multiple + // ports to talk. See http://www.kb.cert.org/vuls/id/800113 + + // If your ISP provided one or more IP addresses for stable + // nameservers, you probably want to use them as forwarders. + // Uncomment the following block, and insert the addresses replacing + // the all-0's placeholder. + + forwarders { + 10.121.38.7; //DNS du lycée lecastel + }; + + //======================================================================== + // If BIND logs error messages about the root key being expired, + // you will need to update your keys. See https://www.isc.org/bind-keys + //======================================================================== + dnssec-validation auto; + + listen-on-v6 { any; }; +};