davidb
/
docker_bind
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

comment out "dead" zones; tweaks

This commit is contained in:
David Blacka 2023-02-25 14:48:21 -05:00
parent 217a5b7d29
commit 6092f80cb2
4 changed files with 155 additions and 140 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
.gitignore vendored
View File

@ -1,6 +1,8 @@
cache
log
zones/secondary
zones/*.signed
zones/*.jnl
# these were local development things
reference

4
cfg/named.options.conf
View File

@ -5,9 +5,9 @@ options {
pid-file "/var/cache/bind/named.pid";
lock-file "/var/cache/bind/named.lock";
listen-on { 127.0.0.1; 70.164.19.155; 70.164.19.156; };
listen-on { any; };
listen-on-v6 { ::1; };
allow-recursion { 127.0.0.1; ::1; };
allow-recursion { 127.0.0.1; ::1; host.docker.internal; };
dnssec-validation yes;
};

287
cfg/named.primary.conf
View File

@ -29,88 +29,96 @@ zone "ecotroph.net" {
};
};
zone "nortonbertram.com" {
type primary;
file "/var/lib/bind/nortonbertram.com";
notify yes;
allow-transfer {
127.0.0.1;
202.157.185.115;
202.157.182.142;
64.151.105.12;
};
};
# Note: No longer registered
# zone "nortonbertram.com" {
# type primary;
# file "/var/lib/bind/nortonbertram.com";
# notify yes;
# allow-transfer {
# 127.0.0.1;
# 202.157.185.115;
# 202.157.182.142;
# 64.151.105.12;
# };
# };
zone "hxr.us" {
type primary;
file "/var/lib/bind/hxr.us";
notify yes;
allow-transfer {
127.0.0.1;
66.92.146.115;
204.109.61.194;
66.92.146.160;
64.151.105.12;
};
};
# Note: hosted by directnic.com
# zone "hxr.us" {
# type primary;
# file "/var/lib/bind/hxr.us";
# notify yes;
# allow-transfer {
# 127.0.0.1;
# 66.92.146.115;
# 204.109.61.194;
# 66.92.146.160;
# 64.151.105.12;
# };
# };
zone "fcdissident.us" {
type primary;
file "/var/lib/bind/fcdissident.us";
notify yes;
allow-transfer {
127.0.0.1;
66.92.146.115;
204.109.61.194;
66.92.146.160;
64.151.105.12;
};
};
# Note: no longer registered
# zone "fcdissident.us" {
# type primary;
# file "/var/lib/bind/fcdissident.us";
# notify yes;
# allow-transfer {
# 127.0.0.1;
# 66.92.146.115;
# 204.109.61.194;
# 66.92.146.160;
# 64.151.105.12;
# };
# };
# Note: no longer registered
zone "fallschurchdissident.us" {
type primary;
file "/var/lib/bind/fallschurchdissident.us";
notify yes;
allow-transfer {
127.0.0.1;
66.92.146.115;
204.109.61.194;
66.92.146.160;
64.151.105.12;
};
};
# type primary;
# file "/var/lib/bind/fallschurchdissident.us";
# notify yes;
# allow-transfer {
# 127.0.0.1;
# 66.92.146.115;
# 204.109.61.194;
# 66.92.146.160;
# 64.151.105.12;
# };
# };
# Note: no longer registered
zone "fallschurchdissident.com" {
type primary;
file "/var/lib/bind/fallschurchdissident.com";
notify yes;
allow-transfer {
127.0.0.1;
66.92.146.115;
204.109.61.194;
66.92.146.160;
64.151.105.12;
};
};
# type primary;
# file "/var/lib/bind/fallschurchdissident.com";
# notify yes;
# allow-transfer {
# 127.0.0.1;
# 66.92.146.115;
# 204.109.61.194;
# 66.92.146.160;
# 64.151.105.12;
# };
# };
zone "t.hxr.us" {
type primary;
file "/var/lib/bind/t.hxr.us";
allow-transfer {
127.0.0.1;
64.151.105.12;
};
};
# Note: not registered
# zone "t.hxr.us" {
# type primary;
# file "/var/lib/bind/t.hxr.us";
# allow-transfer {
# 127.0.0.1;
# 64.151.105.12;
# };
# };
# Note: not registered
# zone "dyn.hxr.us" {
# type primary;
# file "/var/lib/bind/dyn/dyn.hxr.us";
# allow-transfer {
# 127.0.0.1;
# 64.151.105.12;
# };
# update-policy { grant * self * A; };
# };
zone "dyn.hxr.us" {
type primary;
file "/var/lib/bind/dyn/dyn.hxr.us";
allow-transfer {
127.0.0.1;
64.151.105.12;
};
update-policy { grant * self * A; };
};
zone "kosters.net" {
type primary;
@ -160,70 +168,75 @@ zone "bjmk.com" {
};
};
zone "gracecrc.org" {
type primary;
file "/var/lib/bind/gracecrc.org";
notify yes;
also-notify {
65.201.175.12;
66.92.146.115;
204.109.61.194;
};
allow-transfer {
127.0.0.1;
65.201.175.11;
65.201.175.12;
64.151.105.12;
64.22.125.99;
70.164.18.40;
70.164.18.41;
70.164.18.42;
207.234.133.162;
key zeke-ogud2.;
key zeke-ogud3.;
};
};
# Note: hosted elsewhere
# zone "gracecrc.org" {
# type primary;
# file "/var/lib/bind/gracecrc.org";
# notify yes;
# also-notify {
# 65.201.175.12;
# 66.92.146.115;
# 204.109.61.194;
# };
# allow-transfer {
# 127.0.0.1;
# 65.201.175.11;
# 65.201.175.12;
# 64.151.105.12;
# 64.22.125.99;
# 70.164.18.40;
# 70.164.18.41;
# 70.164.18.42;
# 207.234.133.162;
# key zeke-ogud2.;
# key zeke-ogud3.;
# };
# };
zone "toscano.org" {
type primary;
file "/var/lib/bind/toscano.org";
notify yes;
allow-transfer {
127.0.0.1;
202.157.185.115;
202.157.182.142;
};
};
# Note: hosted by gkg.net
# zone "toscano.org" {
# type primary;
# file "/var/lib/bind/toscano.org";
# notify yes;
# allow-transfer {
# 127.0.0.1;
# 202.157.185.115;
# 202.157.182.142;
# };
# };
zone "prevelige.org" {
type primary;
file "/var/lib/bind/prevelige.org";
notify yes;
allow-transfer {
127.0.0.1;
202.157.185.115;
202.157.182.142;
};
};
# Note: hosted by gkg.net
# zone "prevelige.org" {
# type primary;
# file "/var/lib/bind/prevelige.org";
# notify yes;
# allow-transfer {
# 127.0.0.1;
# 202.157.185.115;
# 202.157.182.142;
# };
# };
zone "duffyfamily.me" {
type primary;
file "/var/lib/bind/duffyfamily.me";
notify yes;
allow-transfer {
127.0.0.1;
202.157.185.115;
202.157.182.142;
};
};
# Note: expired/directnic.com
# zone "duffyfamily.me" {
# type primary;
# file "/var/lib/bind/duffyfamily.me";
# notify yes;
# allow-transfer {
# 127.0.0.1;
# 202.157.185.115;
# 202.157.182.142;
# };
# };
zone "littlebit.us" {
type primary;
file "/var/lib/bind/littlebit.us";
notify yes;
allow-transfer {
127.0.0.1;
202.157.185.115;
202.157.182.142;
};
};
# Note: hosted by worldnic(!).com
# zone "littlebit.us" {
# type primary;
# file "/var/lib/bind/littlebit.us";
# notify yes;
# allow-transfer {
# 127.0.0.1;
# 202.157.185.115;
# 202.157.182.142;
# };
# };

2
run_bind.sh
View File

@ -7,9 +7,9 @@ BASE_CONF_DIR=/etc/bind
# shellcheck disable=SC2086
docker run $ARGS \
-ti --entrypoint=/bin/bash \
--rm \
--name=bind9 \
--add-host=host.docker.internal:host-gateway \
--publish "$RNDC_PORT:953/tcp" \
--publish "$DNS_PORT:53/udp" \
--publish "$DNS_PORT:53/tcp" \