Skip to content

Instantly share code, notes, and snippets.

@pulecp
Created September 25, 2015 14:21
Show Gist options
  • Save pulecp/1dff18446c8058b3313b to your computer and use it in GitHub Desktop.
Save pulecp/1dff18446c8058b3313b to your computer and use it in GitHub Desktop.
bind configuration with tsig keys
key "external" {
algorithm hmac-md5;
secret "TW97YPZWWdSJXd/yYisrrQ==";
};
key "internal" {
algorithm hmac-md5;
secret "msSGPzPfX8fAE3I4nE7pcw==";
};
view "external" {
allow-notify { 172.88.4.44; key internal; key external; };
allow-recursion { internal; };
allow-transfer { none; };
match-clients { key external; !key internal; !internal; any; };
include "/etc/named/named.external.conf";
server 10.99.64.32 { keys external; };
server 10.99.32.1 { keys external; };
server 10.99.64.1 { keys external; };
server 10.99.49.42 { keys external; };
server 10.99.128.15 { keys external; };
server 172.88.5.15 { keys external; };
server 10.99.33.9 { keys external; };
server 10.99.64.45 { keys external; };
server 10.99.128.43 { keys external; };
server 10.99.160.10 { keys external; };
};
view "internal" {
allow-notify { 172.88.4.44; key internal; key external; };
allow-recursion { internal; };
allow-transfer { internal; };
match-clients { key internal; !key external; internal; !any; };
include "/etc/named/named.internal.conf";
server 10.99.64.32 { keys internal; };
server 10.99.32.1 { keys internal; };
server 10.99.64.1 { keys internal; };
server 10.99.49.42 { keys internal; };
server 10.99.128.15 { keys internal; };
server 172.88.5.15 { keys internal; };
server 10.99.33.9 { keys internal; };
server 10.99.64.45 { keys internal; };
server 10.99.128.43 { keys internal; };
server 10.99.160.10 { keys internal; };
};
key "external" {
algorithm hmac-md5;
secret "TW97YPZWWdSJXd/yYisrrQ==";
};
key "internal" {
algorithm hmac-md5;
secret "msSGPzPfX8fAE3I4nE7pcw==";
};
view "external" {
allow-notify { 172.88.4.44; key internal; key external; };
allow-recursion { internal; };
allow-transfer { none; };
match-clients { key external; !key internal; !internal; any; };
include "/etc/named/named.external.conf";
server 172.88.4.44 { keys external; };
};
view "internal" {
allow-notify { 172.88.4.44; key internal; key external; };
allow-recursion { internal; };
allow-transfer { internal; };
match-clients { key internal; !key external; internal; !any; };
include "/etc/named/named.internal.conf";
server 172.88.4.44 { keys internal; };
};
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment