X-Git-Url: https://dehnerts.com/gitweb/?a=blobdiff_plain;f=named.conf.local;h=cffad2e4710a1cf15841c4d6460f6ea85f7b6604;hb=03c4635c97c1274df603bba7e027b4fde6122858;hp=fa852ca685f1ca25bc6e2f1de17fbf8e45adedd2;hpb=83e2d962eefda3b74bf242bfc1a6831326ed8022;p=sysconfig%2Fbind.git

diff --git a/named.conf.local b/named.conf.local
index fa852ca..cffad2e 100644
--- a/named.conf.local
+++ b/named.conf.local
@@ -21,12 +21,57 @@ acl "transfer-allowed" {
 	74.207.246.137; // arctic
 	66.92.29.156;   // copan
 	18.18.208.12;   // olinda
+	18.25.129.162;  // adehnert3.xvm
+	130.44.166.3;   // DD
+	// Linode
+	104.237.137.10;
+	45.79.109.10;
+	74.207.225.10;
+	207.192.70.10;
+	109.74.194.10;
+	2600:3c00::a;
+	2600:3c01::a;
+	2600:3c02::a;
+	2600:3c03::a;
+	2a01:7e00::a;
+};
+
+masters "primary-ns" {
+	18.18.208.12;   // olinda
+};
+
+masters "secondary-ns" {
+	18.25.129.162;  // adehnert3.xvm
+	// Linode
+	// https://www.linode.com/docs/products/networking/dns-manager/guides/incoming-dns-zone-transfers/#operate-as-a-secondary-read-only-dns-service
+	104.237.137.10;
+	45.79.109.10;
+	74.207.225.10;
+	207.192.70.10;
+	109.74.194.10;
+	2600:3c00::a;
+	2600:3c01::a;
+	2600:3c02::a;
+	2600:3c03::a;
+	2a01:7e00::a;
+};
+
+include "/etc/bind/named.conf.per-host";
+
+zone "dynamic.dehnert.arctic.org" IN {
+	// DNAME to the real, dynamic.dehnerts.com, zone
+	type master;
+	file "/etc/bind/pri/arctic-dynamic.zone";
+	allow-update { none; };
+	allow-transfer { "transfer-allowed"; };
+	allow-query { any; };
+	//notify no;
 };
 
 zone "dehnert.arctic.org" IN {
 	type master;
 	file "/etc/bind/pri/combined-dehnerts.zone";
-	allow-update { none; };
+        allow-update { none; };
 	allow-transfer { "transfer-allowed"; };
 	allow-query { any; };
 	//notify no;
@@ -34,7 +79,8 @@ zone "dehnert.arctic.org" IN {
 zone "dehnerts.com" IN {
 	type master;
 	file "/etc/bind/pri/combined-dehnerts.zone";
-	allow-update { none; };
+	#update-policy { grant * selfsub * A TXT;};
+        allow-update { none; };
 	allow-transfer { "transfer-allowed"; };
 	allow-query { any; };
 	//notify no;