Created
September 25, 2015 14:21
-
-
Save pulecp/1dff18446c8058b3313b to your computer and use it in GitHub Desktop.
bind configuration with tsig keys
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
key "external" { | |
algorithm hmac-md5; | |
secret "TW97YPZWWdSJXd/yYisrrQ=="; | |
}; | |
key "internal" { | |
algorithm hmac-md5; | |
secret "msSGPzPfX8fAE3I4nE7pcw=="; | |
}; | |
view "external" { | |
allow-notify { 172.88.4.44; key internal; key external; }; | |
allow-recursion { internal; }; | |
allow-transfer { none; }; | |
match-clients { key external; !key internal; !internal; any; }; | |
include "/etc/named/named.external.conf"; | |
server 10.99.64.32 { keys external; }; | |
server 10.99.32.1 { keys external; }; | |
server 10.99.64.1 { keys external; }; | |
server 10.99.49.42 { keys external; }; | |
server 10.99.128.15 { keys external; }; | |
server 172.88.5.15 { keys external; }; | |
server 10.99.33.9 { keys external; }; | |
server 10.99.64.45 { keys external; }; | |
server 10.99.128.43 { keys external; }; | |
server 10.99.160.10 { keys external; }; | |
}; | |
view "internal" { | |
allow-notify { 172.88.4.44; key internal; key external; }; | |
allow-recursion { internal; }; | |
allow-transfer { internal; }; | |
match-clients { key internal; !key external; internal; !any; }; | |
include "/etc/named/named.internal.conf"; | |
server 10.99.64.32 { keys internal; }; | |
server 10.99.32.1 { keys internal; }; | |
server 10.99.64.1 { keys internal; }; | |
server 10.99.49.42 { keys internal; }; | |
server 10.99.128.15 { keys internal; }; | |
server 172.88.5.15 { keys internal; }; | |
server 10.99.33.9 { keys internal; }; | |
server 10.99.64.45 { keys internal; }; | |
server 10.99.128.43 { keys internal; }; | |
server 10.99.160.10 { keys internal; }; | |
}; |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
key "external" { | |
algorithm hmac-md5; | |
secret "TW97YPZWWdSJXd/yYisrrQ=="; | |
}; | |
key "internal" { | |
algorithm hmac-md5; | |
secret "msSGPzPfX8fAE3I4nE7pcw=="; | |
}; | |
view "external" { | |
allow-notify { 172.88.4.44; key internal; key external; }; | |
allow-recursion { internal; }; | |
allow-transfer { none; }; | |
match-clients { key external; !key internal; !internal; any; }; | |
include "/etc/named/named.external.conf"; | |
server 172.88.4.44 { keys external; }; | |
}; | |
view "internal" { | |
allow-notify { 172.88.4.44; key internal; key external; }; | |
allow-recursion { internal; }; | |
allow-transfer { internal; }; | |
match-clients { key internal; !key external; internal; !any; }; | |
include "/etc/named/named.internal.conf"; | |
server 172.88.4.44 { keys internal; }; | |
}; |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment