From a70045ead7a29435898728c3ae83058ca3646774 Mon Sep 17 00:00:00 2001
From: sio <sio@debtest.sio.lan>
Date: Mon, 3 Feb 2025 11:12:16 +0100
Subject: [PATCH] dns1

---
 sisr1/tp02-dns/dns/db.sio-el.lan      | 20 ++++++++++++++++++++
 sisr1/tp02-dns/dns/db.sio-el.lan.rev  | 18 ++++++++++++++++++
 sisr1/tp02-dns/dns/named.conf         | 11 +++++++++++
 sisr1/tp02-dns/dns/named.conf.local   | 13 +++++++++++++
 sisr1/tp02-dns/dns/named.conf.options | 24 ++++++++++++++++++++++++
 5 files changed, 86 insertions(+)
 create mode 100644 sisr1/tp02-dns/dns/db.sio-el.lan
 create mode 100644 sisr1/tp02-dns/dns/db.sio-el.lan.rev
 create mode 100644 sisr1/tp02-dns/dns/named.conf
 create mode 100644 sisr1/tp02-dns/dns/named.conf.local
 create mode 100644 sisr1/tp02-dns/dns/named.conf.options

diff --git a/sisr1/tp02-dns/dns/db.sio-el.lan b/sisr1/tp02-dns/dns/db.sio-el.lan
new file mode 100644
index 0000000..67229eb
--- /dev/null
+++ b/sisr1/tp02-dns/dns/db.sio-el.lan
@@ -0,0 +1,20 @@
+;
+; BIND data file for local loopback interface
+;
+$TTL	604800
+@		IN SOA	dns-el.sio-el.lan.  root.dns-el.sio-el.lan. (
+			      2		; Serial
+			 604800		; Refresh
+			  86400		; Retry
+			2419200		; Expire
+			 604800 )	; Negative Cache TTL
+@		NS      dns-el.sio-el.lan.
+@		NS	dns2-el.sio-el.lan
+dns-el.sio-el.lan.     A 192.168.0.141
+deb-dhcp-el.sio-el.lan.   A 192.168.0.140
+
+;
+
+@	IN	NS	localhost.
+dns2-el		A	192.168.0.142
+	
diff --git a/sisr1/tp02-dns/dns/db.sio-el.lan.rev b/sisr1/tp02-dns/dns/db.sio-el.lan.rev
new file mode 100644
index 0000000..8093149
--- /dev/null
+++ b/sisr1/tp02-dns/dns/db.sio-el.lan.rev
@@ -0,0 +1,18 @@
+;
+; BIND data file for local loopback interface
+;
+$TTL	604800
+@		IN SOA	dns-el.sio-el.lan.  root.dns-el.sio-el.lan. (
+			      2		; Serial
+			 604800		; Refresh
+			  86400		; Retry
+			2419200		; Expire
+			 604800 )	; Negative Cache TTL
+		NS      dns-el.sio-el.lan.
+
+;
+
+140	IN	PTR 	deb-dhcp-el.sio-el.lan.
+141	IN	PTR	dns-el.sio-el.lan.
+
+	
diff --git a/sisr1/tp02-dns/dns/named.conf b/sisr1/tp02-dns/dns/named.conf
new file mode 100644
index 0000000..bc71baa
--- /dev/null
+++ b/sisr1/tp02-dns/dns/named.conf
@@ -0,0 +1,11 @@
+// This is the primary configuration file for the BIND DNS server named.
+//
+// Please read /usr/share/doc/bind9/README.Debian for information on the
+// structure of BIND configuration files in Debian, *BEFORE* you customize
+// this configuration file.
+//
+// If you are just adding zones, please do that in /etc/bind/named.conf.local
+
+include "/etc/bind/named.conf.options";
+include "/etc/bind/named.conf.local";
+include "/etc/bind/named.conf.default-zones";
diff --git a/sisr1/tp02-dns/dns/named.conf.local b/sisr1/tp02-dns/dns/named.conf.local
new file mode 100644
index 0000000..118e416
--- /dev/null
+++ b/sisr1/tp02-dns/dns/named.conf.local
@@ -0,0 +1,13 @@
+// zone directe
+        zone "sio-el.lan" {
+             type master;
+             file "/etc/bind/db.sio-el.lan";
+        };
+
+	// zone inverse 
+	zone "0.168.192.in-addr.arpa" {
+	     type master;
+             notify no;
+             file "/etc/bind/db.sio-el.lan.rev";
+	};
+
diff --git a/sisr1/tp02-dns/dns/named.conf.options b/sisr1/tp02-dns/dns/named.conf.options
new file mode 100644
index 0000000..99a6349
--- /dev/null
+++ b/sisr1/tp02-dns/dns/named.conf.options
@@ -0,0 +1,24 @@
+options {
+	directory "/var/cache/bind";
+
+	// If there is a firewall between you and nameservers you want
+	// to talk to, you may need to fix the firewall to allow multiple
+	// ports to talk.  See http://www.kb.cert.org/vuls/id/800113
+
+	// If your ISP provided one or more IP addresses for stable 
+	// nameservers, you probably want to use them as forwarders.  
+	// Uncomment the following block, and insert the addresses replacing 
+	// the all-0's placeholder.
+
+	// forwarders {
+	// 	10.121.38.7;
+	// };
+
+	//========================================================================
+	// If BIND logs error messages about the root key being expired,
+	// you will need to update your keys.  See https://www.isc.org/bind-keys
+	//========================================================================
+	dnssec-validation no;
+
+	listen-on-v6 { any; };
+};