Skip to content

Instantly share code, notes, and snippets.

@pulecp
Last active September 25, 2015 14:23
Show Gist options
  • Save pulecp/0b650a40b7c32b0436b5 to your computer and use it in GitHub Desktop.
Save pulecp/0b650a40b7c32b0436b5 to your computer and use it in GitHub Desktop.
bind configuration with notifications by tsig keys
/etc/named.conf
key "external" {
algorithm hmac-md5;
secret "TW97YPZWWdSJXd/yYisrrQ==";
};
key "internal" {
algorithm hmac-md5;
secret "msSGPzPfX8fAE3I4nE7pcw==";
};
view "external" {
allow-notify { 172.88.4.44; key internal; key external; };
allow-recursion { internal; };
allow-transfer { none; };
match-clients { key external; !key internal; !internal; any; };
include "/etc/named/named.external.conf";
server 10.99.64.32 { keys external; };
server 10.99.32.1 { keys external; };
server 10.99.64.1 { keys external; };
server 10.99.49.42 { keys external; };
server 10.99.128.15 { keys external; };
server 172.88.5.15 { keys external; };
server 10.99.33.9 { keys external; };
server 10.99.64.45 { keys external; };
server 10.99.128.43 { keys external; };
server 10.99.160.10 { keys external; };
};
view "internal" {
allow-notify { 172.88.4.44; key internal; key external; };
allow-recursion { internal; };
allow-transfer { internal; };
match-clients { key internal; !key external; internal; !any; };
include "/etc/named/named.internal.conf";
server 10.99.64.32 { keys internal; };
server 10.99.32.1 { keys internal; };
server 10.99.64.1 { keys internal; };
server 10.99.49.42 { keys internal; };
server 10.99.128.15 { keys internal; };
server 172.88.5.15 { keys internal; };
server 10.99.33.9 { keys internal; };
server 10.99.64.45 { keys internal; };
server 10.99.128.43 { keys internal; };
server 10.99.160.10 { keys internal; };
};
/etc/named/named.external.conf
zone "example.com" IN {
type master;
file "data/named.hakka";
also-notify { 10.99.64.32; 10.99.32.1; 10.99.64.1; 10.99.49.42; 10.99.128.15; 172.88.5.15; 10.99.33.9; 10.99.64.45; 10.99.128.43; 10.99.160.10; };
allow-transfer { internal; 217.33.11.252; };
};
/etc/named.conf
key "external" {
algorithm hmac-md5;
secret "TW97YPZWWdSJXd/yYisrrQ==";
};
key "internal" {
algorithm hmac-md5;
secret "msSGPzPfX8fAE3I4nE7pcw==";
};
view "external" {
allow-notify { 172.88.4.44; key internal; key external; };
allow-recursion { internal; };
allow-transfer { none; };
match-clients { key external; !key internal; !internal; any; };
include "/etc/named/named.external.conf";
server 172.88.4.44 { keys external; };
};
view "internal" {
allow-notify { 172.88.4.44; key internal; key external; };
allow-recursion { internal; };
allow-transfer { internal; };
match-clients { key internal; !key external; internal; !any; };
include "/etc/named/named.internal.conf";
server 172.88.4.44 { keys internal; };
};
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment