From 1ef32c2da53881e0d2e32f1013d639c76f2683d0 Mon Sep 17 00:00:00 2001 From: Stephen Smoogen Date: Mon, 8 Jun 2020 14:41:33 -0400 Subject: [PATCH] put the forwarders in the right zone --- roles/dns/files/named.conf | 64 ++++++++++++++++++++++++++++++++++++++ 1 file changed, 64 insertions(+) diff --git a/roles/dns/files/named.conf b/roles/dns/files/named.conf index 6bb8a21ee0..23b769765d 100644 --- a/roles/dns/files/named.conf +++ b/roles/dns/files/named.conf @@ -125,6 +125,12 @@ view "QA" { forwarders { 10.5.26.20; 10.5.26.21; }; }; + zone "3.10.in-addr.arpa" { + type forward; + forward only; + forwarders { 10.5.26.20; 10.5.26.21; }; + }; + zone "4.10.in-addr.arpa" { type forward; forward only; @@ -930,6 +936,64 @@ view "IAD2" { exempt-clients { iad2net; }; }; + # make sure we forward only for redhat.com lookups + zone "redhat.com" { + type forward; + forward only; + forwarders { 10.5.26.20; 10.5.26.21; }; + }; + + + zone "beaker-project.org" { + type forward; + forward only; + forwarders { 10.39.144.11; 10.5.19.1; 10.11.191.1; }; + }; + + # We can't access the softwarefactory-project.io. because ns1/ns2 give unroutable ips. Need to use external + zone "softwarefactory-project.io" { + type forward; + forward only; + forwarders { 10.39.144.11; 10.5.19.1; 10.11.191.1; }; + }; + + + zone "88.5.10.in-addr.arpa" { + type forward; + forward only; + forwarders { 10.5.26.20; 10.5.26.21; }; + }; + + zone "3.10.in-addr.arpa" { + type forward; + forward only; + forwarders { 10.5.26.20; 10.5.26.21; }; + }; + + zone "4.10.in-addr.arpa" { + type forward; + forward only; + forwarders { 10.5.26.20; 10.5.26.21; }; + }; + + zone "5.10.in-addr.arpa" { + type forward; + forward only; + forwarders { 10.5.26.20; 10.5.26.21; }; + }; + + zone "10.in-addr.arpa" { + type forward; + forward only; + forwarders { 10.5.26.20; 10.5.26.21; }; + }; + + zone "186.132.209.in-addr.arpa." { + type forward; + forward only; + forwarders { 10.5.26.20; 10.5.26.21; }; + }; + zone "iad2.fedoraproject.org" { type master; file "/var/named/master/built/iad2.fedoraproject.org";