SKSP DNS

From SkullSpace Wiki
Revision as of 14:50, 22 October 2014 by Sean (talk | contribs) (Created page with " = Skullspace DNS = == System Details == * Soekris NET4501 * Running OpenBSD (5.5 as of initial deploy, subject to change with maintenance). * IPv4: 206.220.196.51 * IPv6: 26...")
(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)
Jump to navigation Jump to search

Skullspace DNS

System Details

  • Soekris NET4501
  • Running OpenBSD (5.5 as of initial deploy, subject to change with maintenance).
  • IPv4: 206.220.196.51
  • IPv6: 2604:4280:1:c0de::53

DNS Service Configuration

Using OpenBSD 5.5 base DNS server service named nsd(8).

= Stop/Start Procedures

System/Service Level

Start
sudo /etc/rc.d/nsd start
Stop
sudo /etc/rc.d/nsd stop
Restart
sudo /etc/rc.d/nsd restart

Application Level

Stop
sudo nsd-control start
Stop
sudo nsd-control stop
Reload Configuration
sudo nsd-control reconfig
Force Notify To Configured Slaves
sudo nsd-control notify
sudo nsd-control notify <zonename>

Configuration =

Configuration file is in /var/nsd/etc/nsd.conf Zone locations: /var/nsd/zones

When editing the configuration it is RECOMMENDED to check the configuration syntax before restarting (via sudo nsd-checkconf /var/nsd/etc/nsd.conf) and RECOMMENDED to use the nsd-control reconfig instead of service restart restart.

Configured Zones

Forward Zones

* skullspace.ca 
** /var/nsd/zones/skullspace.ca

Reverse Zones

* 193.220.206.in-addr-arpa
** /var/nsd/zones/reverse-sksp-ipv4-a.sksp
* e.d.0.c.0.8.2.4.4.0.6.2.ip6.arpa
** /var/nsd/zones/reverse-sksp-ipv6-a.sksp

NOTE THERE ARE TWO MORE REVERSE ZONES THAT NEED TO BE CONFIGURED

Slave Delegation =

NS2

ns2.skullspace.ca A  104.131.53.85
ns2.skullspace.ca AAAA  2604:a880:800:10::8:7001

Run By: Theo Baschak

NS3

ns3.skullspace.ca A 198.98.120.171
ns3.skullspace.ca AAAA 2605:f700:c0:1::3782:2f74

Run By: Mark Jenkins

System Access

Email it AT skullspace.ca with your request, the more detail the better and the higher the probability of getting said access. Note requires also sending an SSH public key.