diff --git a/Cfg/etc/bind/generated/zones_crans/info.xml b/Cfg/etc/bind/generated/zones_crans/info.xml new file mode 100644 index 0000000..2ad4214 --- /dev/null +++ b/Cfg/etc/bind/generated/zones_crans/info.xml @@ -0,0 +1,3 @@ + + + diff --git a/Cfg/etc/bind/named.conf.local/info.xml b/Cfg/etc/bind/named.conf.local/info.xml new file mode 100644 index 0000000..2ad4214 --- /dev/null +++ b/Cfg/etc/bind/named.conf.local/info.xml @@ -0,0 +1,3 @@ + + + diff --git a/Cfg/etc/bind/named.conf.local/named.conf.local b/Cfg/etc/bind/named.conf.local/named.conf.local new file mode 100644 index 0000000..6bc54d1 --- /dev/null +++ b/Cfg/etc/bind/named.conf.local/named.conf.local @@ -0,0 +1,36 @@ +// Fichier gere par BCfg2 (plugin Cfg) +// +// A ne modifier que sur vert + +include "/etc/bind/zones.rfc1918"; + +// zones crans +include "/etc/bind/generated/zones_crans"; + +// anti SPAM +// Rajout pour générer le forward vers ariane pour la zone rbl-plus.mail-abuse.org --Nico 21/04/02 +zone "rbl-plus.mail-abuse.org" { + type forward; + forward only; + forwarders { 138.231.176.4 ; }; +}; + +// la télé +zone "tv.crans.org" { + type slave; + file "/etc/bind/generated/db.tv.crans.org"; + masters { 138.231.136.193; }; +}; + +zone "239.in-addr.arpa" { + type slave; + file "/etc/bind/generated/db.239.in-addr.arpa"; + masters { 138.231.136.193; }; +}; + +// bricoles de config en plus +include "/etc/bind/rndc.key"; + +controls { + inet 127.0.0.1 allow { 127.0.0.1; } keys { "key"; }; +}; diff --git a/Cfg/etc/bind/named.conf.notify/info.xml b/Cfg/etc/bind/named.conf.notify/info.xml new file mode 100644 index 0000000..2ad4214 --- /dev/null +++ b/Cfg/etc/bind/named.conf.notify/info.xml @@ -0,0 +1,3 @@ + + + diff --git a/Cfg/etc/bind/named.conf.notify/named.conf.notify b/Cfg/etc/bind/named.conf.notify/named.conf.notify new file mode 100644 index 0000000..3bb543b --- /dev/null +++ b/Cfg/etc/bind/named.conf.notify/named.conf.notify @@ -0,0 +1,11 @@ +// Fichier gere par BCfg2 (Plugin Cfg) +// +// A ne modifier que sur vert + + also-notify { + 10.231.136.9; // ultra-adsl + 10.231.136.11; // ragnarok + 10.231.136.2; // vert + 10.231.136.10; // sila + 10.231.136.8; // ovh + }; diff --git a/Python/etc/bind/named.conf.options b/Python/etc/bind/named.conf.options new file mode 100644 index 0000000..8061c0e --- /dev/null +++ b/Python/etc/bind/named.conf.options @@ -0,0 +1,39 @@ +info = {"owner":"root", + "group":"bind", + "perms":0644, +} + +@// Fichier gere par BCfg2 (Plugin Python) +@// +@// A ne modifier que sur vert +@ +@options { +@ directory "/var/cache/bind"; +@ recursive-clients 5000; +@ + +if has("dns-primary"): + @ include "/etc/bind/named.conf.notify"; + +@ +@ allow-transfer { +@ 127.0.0.1; +@ 138.231.136.0/21; // fixes +@ 82.225.39.54; // freebox +@ 138.231.148.0/22; // wifi +@ 10.231.136.0/24; // adm +@ 138.231.176.4; // ariane +@ }; +@ auth-nxdomain no; # conform to RFC1035 +@ + +if not has("dns-secondary-no-forward"): + @ //ne pas modifier le commentaire de fin de ligne suivant + @ //traitement automatique pour la connexion de secours + @ //(ligne décommentée en mode secours) + @// forwarders { 138.231.136.9; } ; #POUR SECOURS + +@ +@ allow-recursion {127.0.0.1; 10.231.136.0/24; 138.231.136.0/21; 138.231.144.0/21;}; +@}; + diff --git a/Python/etc/bind/rndc.key b/Python/etc/bind/rndc.key new file mode 100644 index 0000000..e345c6c --- /dev/null +++ b/Python/etc/bind/rndc.key @@ -0,0 +1,16 @@ +import("secrets") + +info = {"owner": "root", + "group": "bind", + "perms": 0640, +} + +@// Fichier gere par BCfg2 (plugin Python) +@// +@// A ne modifier que sur vert +@ +@key "key" { +@ algorithm hmac-md5; +print ' secret "%s";' % secrets.rndc_key +@}; +