nouveau fichier : siotp/sisr1/tp01-02/srv-dhcp/dhcpd.conf

nouveau fichier : siotp/sisr1/tp01-02/srv-dhcp/hosts nouveau fichier : siotp/sisr1/tp01-02/srv-dhcp/interfaces nouveau fichier : siotp/sisr1/tp01-02/srv-dhcp/isc-dhcp-server nouveau fichier : siotp/sisr1/tp01-02/srv-dhcp/nat.sh nouveau fichier : siotp/sisr1/tp01-02/srv-dns1/db.sio1lab.lan nouveau fichier : siotp/sisr1/tp01-02/srv-dns1/db.sio1lab.lan.rev nouveau fichier : siotp/sisr1/tp01-02/srv-dns1/named.conf nouveau fichier : siotp/sisr1/tp01-02/srv-dns1/named.conf.local nouveau fichier : siotp/sisr1/tp01-02/srv-dns1/named.conf.options nouveau fichier : siotp/sisr1/tp01-02/srv-dns2/db.sio1lab.lan nouveau fichier : siotp/sisr1/tp01-02/srv-dns2/db.sio1lab.lan.rev nouveau fichier : siotp/sisr1/tp01-02/srv-dns2/named.conf.default-zones nouveau fichier : siotp/sisr1/tp01-02/srv-dns2/named.conf.local nouveau fichier : siotp/sisr1/tp01-02/srv-dns2/named.conf.options
2024-01-30 16:09:09 +01:00
commit 2f917039b4
15 changed files with 400 additions and 0 deletions
--- a/siotp/sisr1/tp01-02/srv-dns2/db.sio1lab.lan
+++ b/siotp/sisr1/tp01-02/srv-dns2/db.sio1lab.lan
@@ -0,0 +1,20 @@
+$ORIGIN .
+$TTL 604800	; 1 week
+sio1lab.lan		IN SOA	dns1.sio1lab.lan. root.sio1lab.lan. (
+				2          ; serial
+				604800     ; refresh (1 week)
+				86400      ; retry (1 day)
+				2419200    ; expire (4 weeks)
+				604800     ; minimum (1 week)
+				)
+			NS	deb-dns-jp.sio1lab.lan.
+			NS	deb-dns2-jp.sio1lab.lan.
+			A	192.168.0.140
+			A	192.168.0.141
+$ORIGIN sio1lab.lan.
+deb-dhcp-jp		A	192.168.0.141
+deb-dns-jp		A	192.168.0.140
+deb-dns2-jp		A	192.168.0.142
+dhcp			CNAME	deb-dhcp-jp
+dns1			CNAME	deb-dns-jp
+dns2			CNAME	deb-dns2-jp
--- a/siotp/sisr1/tp01-02/srv-dns2/db.sio1lab.lan.rev
+++ b/siotp/sisr1/tp01-02/srv-dns2/db.sio1lab.lan.rev
@@ -0,0 +1,20 @@
+$ORIGIN .
+$TTL 604800	; 1 week
+0.168.192.in-addr.arpa	IN SOA	dns1.sio1lab.lan. root.sio1lab.lan. (
+				2          ; serial
+				604800     ; refresh (1 week)
+				86400      ; retry (1 day)
+				2419200    ; expire (4 weeks)
+				604800     ; minimum (1 week)
+				)
+			NS	deb-dns-jp.sio1lab.lan.
+			NS	deb-dns2-jp.sio1lab.lan.
+$ORIGIN 0.168.192.in-addr.arpa.
+140			PTR	deb-dns-jp.sio1lab.lan
+141			PTR	deb-dhcp-jp.sio1lab.lan
+deb-dhcp-jp		A	192.168.0.141
+deb-dns-jp		A	192.168.0.140
+deb-dns2-jp		A	192.168.0.142
+dhcp			CNAME	deb-dhcp-jp
+dns1			CNAME	deb-dns-jp
+dns2			CNAME	deb-dns2-jp
--- a/siotp/sisr1/tp01-02/srv-dns2/named.conf.default-zones
+++ b/siotp/sisr1/tp01-02/srv-dns2/named.conf.default-zones
@@ -0,0 +1,30 @@
+// prime the server with knowledge of the root servers
+zone "." {
+	type hint;
+	file "/usr/share/dns/root.hints";
+};
+
+// be authoritative for the localhost forward and reverse zones, and for
+// broadcast zones as per RFC 1912
+
+zone "localhost" {
+	type master;
+	file "/etc/bind/db.local";
+};
+
+zone "127.in-addr.arpa" {
+	type master;
+	file "/etc/bind/db.127";
+};
+
+zone "0.in-addr.arpa" {
+	type master;
+	file "/etc/bind/db.0";
+};
+
+zone "255.in-addr.arpa" {
+	type master;
+	file "/etc/bind/db.255";
+};
+
+
--- a/siotp/sisr1/tp01-02/srv-dns2/named.conf.local
+++ b/siotp/sisr1/tp01-02/srv-dns2/named.conf.local
@@ -0,0 +1,24 @@
+//
+// Do any local configuration here
+//
+
+// Consider adding the 1918 zones here, if they are not used in your
+// organization
+//include "/etc/bind/zones.rfc1918";
+
+// zone directe
+  zone "sio1lab.lan" {
+      type slave;
+      file "/etc/bind/db.sio1lab.lan";
+      masters { 192.168.0.140; };
+      masterfile-format text;
+};
+
+// zone inverse 
+	zone "0.168.192.in-addr.arpa" {
+      type slave;
+      notify no;
+      file "/etc/bind/db.sio1lab.lan.rev";
+      masters { 192.168.0.140; };
+      masterfile-format text;
+};
--- a/siotp/sisr1/tp01-02/srv-dns2/named.conf.options
+++ b/siotp/sisr1/tp01-02/srv-dns2/named.conf.options
@@ -0,0 +1,24 @@
+options {
+	directory "/var/cache/bind";
+
+	// If there is a firewall between you and nameservers you want
+	// to talk to, you may need to fix the firewall to allow multiple
+	// ports to talk.  See http://www.kb.cert.org/vuls/id/800113
+
+	// If your ISP provided one or more IP addresses for stable 
+	// nameservers, you probably want to use them as forwarders.  
+	// Uncomment the following block, and insert the addresses replacing 
+	// the all-0's placeholder.
+
+	// forwarders {
+	// 	0.0.0.0;
+	// };
+
+	//========================================================================
+	// If BIND logs error messages about the root key being expired,
+	// you will need to update your keys.  See https://www.isc.org/bind-keys
+	//========================================================================
+	dnssec-validation auto;
+
+	listen-on-v6 { any; };
+};