Added zone dd-ix.net #44

2024-01-10T21:53:38+01:00

MarcelCoding commented

2024-01-10 21:53:38 +01:00

(Migrated from github.com)

No description provided.

tanneberger (Migrated from github.com) reviewed

2024-01-10 21:53:38 +01:00

tanneberger (Migrated from github.com) approved these changes

2024-01-10 22:11:33 +01:00

tanneberger (Migrated from github.com) left a comment

Dont see any glaring mistakes.

I guess before we update the NS Records then lets first test with dig if it works.

Dont see any glaring mistakes. I guess before we update the NS Records then lets first test with `dig` if it works.

liske (Migrated from github.com) requested changes

2024-01-10 22:48:51 +01:00

modules/management/bind9.nix

					
				@ -1,22 +1,24 @@

				{ pkgs, config, lib, ... }:

				{ self, ... }:

keep them already enabled (used for ACLs, only)

these are public DNS zones, no need to have a query acl

(this might break internal DNS lookups if the host is used for recursive lookups from "inside" networks)

these are public DNS zones, no need to have a query acl (this might break internal DNS lookups if the host is used for recursive lookups from "inside" networks)

we can already add the reverse for our PA addresses (0.b.0.8.0.0.7.7.1.0.a.2.ip6.arpa)

we can already add the reverse for our PA addresses (`0.b.0.8.0.0.7.7.1.0.a.2.ip6.arpa`)

modules/management/bind9.nix

					
				@ -33,4 +35,3 @@

				        slaves = ibh_ans_ip;

				        allowQuery = ibh_ans_ip ++ [ "127.0.0.0/8" "::1/128" ];

				      };

this assignment is depreciated, should be dropped

modules/management/bind9.nix

depreciated, too

resources/dd-ix.net.zone

					
				@ -0,0 +1,52 @@

				; Check me with (abs. path required....)

please drop any superfluous TTLs == $TTL

please drop any superfluous IN class fields, too

(IN is the default class: https://bind9.readthedocs.io/en/v9.18.14/chapter3.html#textual-expression-of-rrs)

please drop any superfluous `IN` class fields, too (`IN` is the default class: https://bind9.readthedocs.io/en/v9.18.14/chapter3.html#textual-expression-of-rrs)

I would drop the $ORIGIN as it is set to the zone name by default (this makes the zone also reusable)

I would drop the `$ORIGIN` as it is set to the zone name by default (this makes the zone also reusable)

I prefer to keep the zone content sorted by the owner name => move the @ up to the SOA RR

I prefer to keep the zone content sorted by the owner name => move the `@` up to the SOA RR

the owner name can (read: I prefer) to be omitted for the related lines

liske (Migrated from github.com) requested changes

2024-01-10 22:53:28 +01:00

resources/dd-ix.net.zone

					
				@ -0,0 +1,52 @@

				; Check me with (abs. path required....)

Do we keep the usual serial schema (YYYYMMDDnn)? Please bump ;)

Do we keep the usual serial schema (`YYYYMMDDnn`)? Please bump ;)

MarcelCoding (Migrated from github.com) reviewed

2024-01-10 22:56:25 +01:00

resources/dd-ix.net.zone

					
				@ -0,0 +1,52 @@

				; Check me with (abs. path required....)

Just Copy Pasted and forgot to change

liske (Migrated from github.com) reviewed

2024-01-11 18:33:30 +01:00

modules/management/bind9.nix

					
				@ -29,3 +32,2 @@

				      # reverse zone for IX IPv4

				      "120.36.193.in-addr.arpa" = {

				      "dd-ix.net" = {

				        master = true;

Is this required at all?

liske (Migrated from github.com) approved these changes

2024-01-11 18:35:28 +01:00

MarcelCoding (Migrated from github.com) reviewed

2024-01-11 18:37:49 +01:00

modules/management/bind9.nix

					
				@ -29,3 +32,2 @@

				      # reverse zone for IX IPv4

				      "120.36.193.in-addr.arpa" = {

				      "dd-ix.net" = {

				        master = true;

Bind opens the ports on a great amount of processes, so ss -tulpn is not very readable. I am just trying to decrease the amount of open ports to make ss -tulpn readable again.

Sign in to join this conversation.

No reviewers

tanneberger

liske