Difference between revisions of "SKSP DNS"
m (→Configuration) |
(→System Details) |
||
| Line 10: | Line 10: | ||
* IPv4: 206.220.196.51 | * IPv4: 206.220.196.51 | ||
* IPv6: 2604:4280:1:c0de::53 | * IPv6: 2604:4280:1:c0de::53 | ||
| + | |||
| + | * SSH: ECDSA key fingerprint is 3f:33:d3:9e:7f:ac:7b:a0:d1:c5:1f:eb:98:3d:61:02. | ||
| + | * SSH (known_hosts format): 206.220.196.51 ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBOpHXeGEVR6AoqXK/1/rgQpE6/aQl5OXQ80NGalSjn+n00XOTjWHaPjmOsKRDiMSHUX/zpo6s+ydMIXpFBfchNw= | ||
System is setup to only allow SSH with key based authentication. | System is setup to only allow SSH with key based authentication. | ||
Revision as of 00:16, 23 October 2014
Skullspace DNS
Domain registered with GoDaddy and owned/controlled by Ron Bowes.
System Details
- Soekris NET4501
- Running OpenBSD (5.5 as of initial deploy, subject to change with maintenance).
- Initially setup and maintained by Sean Cody
- IPv4: 206.220.196.51
- IPv6: 2604:4280:1:c0de::53
- SSH: ECDSA key fingerprint is 3f:33:d3:9e:7f:ac:7b:a0:d1:c5:1f:eb:98:3d:61:02.
- SSH (known_hosts format): 206.220.196.51 ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBOpHXeGEVR6AoqXK/1/rgQpE6/aQl5OXQ80NGalSjn+n00XOTjWHaPjmOsKRDiMSHUX/zpo6s+ydMIXpFBfchNw=
System is setup to only allow SSH with key based authentication. Elevated access is given by means of using sudo(8) with allowance for those in the wheel group.
DNS Service Configuration
Using OpenBSD 5.5 base DNS server service named nsd(8).
Stop/Start Procedures
System/Service Level
- Start
- sudo /etc/rc.d/nsd start
- Stop
- sudo /etc/rc.d/nsd stop
- Restart
- sudo /etc/rc.d/nsd restart
Application Level
- Stop
- sudo nsd-control start
- Stop
- sudo nsd-control stop
- Reload Configuration
- sudo nsd-control reconfig
- Force Notify To Configured Slaves
- sudo nsd-control notify
- sudo nsd-control notify <zonename>
Configuration
Configuration file is in /var/nsd/etc/nsd.conf
Zone locations: /var/nsd/zones
When editing the configuration it is RECOMMENDED to check the configuration syntax before restarting (via sudo nsd-checkconf /var/nsd/etc/nsd.conf) and RECOMMENDED to use the nsd-control reconfig instead of service restart restart.
Configured Zones
Forward Zones
- skullspace.ca
- /var/nsd/zones/skullspace.ca
Reverse Zones
- 193.220.206.in-addr-arpa
- /var/nsd/zones/reverse-sksp-ipv4-a.sksp
- e.d.0.c.0.8.2.4.4.0.6.2.ip6.arpa
- /var/nsd/zones/reverse-sksp-ipv6-a.sksp
NOTE THERE ARE TWO MORE REVERSE ZONES THAT NEED TO BE CONFIGURED
Slave Delegation
NS2
ns2.skullspace.ca A 104.131.53.85 ns2.skullspace.ca AAAA 2604:a880:800:10::8:7001
Run By: Theo Baschak
NS3
ns3.skullspace.ca A 198.98.120.171 ns3.skullspace.ca AAAA 2605:f700:c0:1::3782:2f74
Run By: Mark Jenkins
Relevant Man Pages
- nsd(8)
- nsd.conf(5)
- nsd-control(8)
- nsd-checkconf(8)
- sudo(8)
System Access
Email it AT skullspace.ca with your request, the more detail the better and the higher the probability of getting said access. Note requires also sending an SSH public key.
