This commit is contained in:
anthony.boillot 2025-02-03 11:12:26 +01:00
parent 647e9c5555
commit 28d6879ee8
7 changed files with 94 additions and 0 deletions

1
sisr1/tp02-dns/.: Normal file
View File

@ -0,0 +1 @@
dns2-ab

View File

@ -0,0 +1,20 @@
;
; BIND data file for local loopback interface
;
$TTL 604800
@ IN SOA dns1-ab.sio-ab.lan. root.dns1-ab.sio-ab.lan. (
2 ; Serial
604800 ; Refresh
86400 ; Retry
2419200 ; Expire
604800 ) ; Negative Cache TTL
NS dns1-ab.sio-ab.lan.
NS dns2-ab.sio-ab.lan.
dns2-ab.sio-ab.lan. A 192.168.0.162
dns1-ab.sio-ab.lan. A 192.168.0.161
;
@ IN NS localhost.
;@ IN A 127.0.0.1
deb-dhcp-ab IN A 192.168.0.160
;@ IN AAAA ::1
;

View File

@ -0,0 +1,16 @@
;
; BIND data file for local loopback interface
;
$TTL 604800
@ IN SOA dns1-ab.sio-ab.lan. root (
2 ; Serial
604800 ; Refresh
86400 ; Retry
2419200 ; Expire
604800 ) ; Negative Cache TTL
;
IN NS dns1-ab.sio.lan.
IN NS dns2-ab.sio-.lan.
160 IN PTR deb-dhcp-ab.sio-ab.lan.
161 IN PTR dns1-ab.sio-ab.lan.
162 IN PTR dns2-ab.sio-ab.lan.

1
sisr1/tp02-dns/hostname Normal file
View File

@ -0,0 +1 @@
dns2-ab

7
sisr1/tp02-dns/hosts Normal file
View File

@ -0,0 +1,7 @@
127.0.0.1 localhost
127.0.1.1 dns2-ab.sio.lan dns2-ab
# The following lines are desirable for IPv6 capable hosts
::1 localhost ip6-localhost ip6-loopback
ff02::1 ip6-allnodes
ff02::2 ip6-allrouters

View File

@ -0,0 +1,24 @@
//
// Do any local configuration here
//
// Consider adding the 1918 zones here, if they are not used in your
// organization
//include "/etc/bind/zones.rfc1918";
// zone directe
zone "sio-ab.lan" {
type slave;
file "/etc/bind/db.sio-ab.lan";
masters { 192.168.0.161; };
masterfile-format text;
};
// zone inverse
zone "0.168.192.in-addr.arpa" {
type slave;
notify no;
file "/etc/bind/db.sio-ab.lan.rev";
masters { 192.168.0.161; };
masterfile-format text;
};

View File

@ -0,0 +1,25 @@
options {
directory "/var/cache/bind";
// If there is a firewall between you and nameservers you want
// to talk to, you may need to fix the firewall to allow multiple
// ports to talk. See http://www.kb.cert.org/vuls/id/800113
// If your ISP provided one or more IP addresses for stable
// nameservers, you probably want to use them as forwarders.
// Uncomment the following block, and insert the addresses replacing
// the all-0's placeholder.
forwarders {
10.121.38.7; // ici forwarder 1
};
//========================================================================
// If BIND logs error messages about the root key being expired,
// you will need to update your keys. See https://www.isc.org/bind-keys
//========================================================================
dnssec-validation no;
listen-on-v6 { any; };
};