diff --git a/roles/dns/files/named.conf b/roles/dns/files/named.conf index 5ea9982eec..83b2eb1a65 100644 --- a/roles/dns/files/named.conf +++ b/roles/dns/files/named.conf @@ -13,9 +13,7 @@ include "/var/named/GeoIP.acl"; //include rndckey include "/etc/rndc.key"; -// dns1.j2solutions.net - run by Jesse Keating -acl "slaves" { 209.124.61.35; }; -// +// general acls acl "everyone-v4" { 0.0.0.0/0; }; acl "everyone-v6" { ::0/0; }; acl "everyone" { 0.0.0.0/0; ::0/0; }; @@ -23,7 +21,7 @@ acl "everyone" { 0.0.0.0/0; ::0/0; }; acl "ns_redhat" { 66.187.233.210; 209.132.183.22; 209.132.183.30; 209.132.183.2; 66.187.229.10; }; // acl "phx2net" { 10.5.124.128/25; 10.5.78.0/24; 10.5.79.0/24; 10.5.125.0/24; 10.5.126.0/24; 10.5.127.0/24; 10.5.128.0/24; 10.5.129.0/24; 10.5.130.0/24; 10.16.0.0/24; }; -acl "iad2net" { 10.3.160.0/24; 10.3.161.0/24; 10.3.162.0/24; 10.3.163.0/24; 10.3.164.0/24; 10.3.165.0/24; 10.3.166.0/24; 10.3.167.0/24; 10.3.168.0/24; 10.3.169.0/24; 10.3.170.0/24; 10.3.171.0/24; 10.3.172.0/24; 10.3.173.0/24; 10.3.174.0/24; 10.3.175.0/24; 10.3.176.0/24; }; +acl "iad2net" { 10.3.160.0/19; }; acl "rdu2net" { 172.31.1.0/24; 172.31.2.0/24; }; acl "qanet" { 10.5.124.128/25; 10.5.131.0/24; }; acl "rh-slaves" { 10.5.30.78; 10.11.5.70; }; @@ -36,7 +34,7 @@ options { dnssec-enable yes; query-source address * port *; query-source-v6 address * port *; - allow-transfer { localhost; slaves; rh-slaves; rh;}; + allow-transfer { localhost; rh-slaves; rh;}; transfer-source * port 53; pid-file "/var/run/named/named.pid"; statistics-file "/var/log/named.stats";