Commit ad2fbe8c authored by nimrod's avatar nimrod
Browse files

Router: Implement recommendations from zonemaster. 

Per https://zonemaster.net/en/result/472d8d42df31e2d8, implement _some_
of the recommendations:
- Limit AXFR availability.
- Raise some of the SOA values.
parent 0a02966a

Ansible/roles/router/files/nsd/shore.co.il

+2 −2
Original line number Diff line number Diff line
@@ -2,9 +2,9 @@ 
$TTL 1h

$ORIGIN shore.co.il.

@               IN      SOA     ns1     hostmaster (

        2022041003

        2023040801

        4h

        1h

        5m

        4w

        3h )

Ansible/roles/router/files/nsd/shore.co.il.conf

+1 −1
Original line number Diff line number Diff line
@@ -2,4 +2,4 @@ zone: 
        name: "shore.co.il"

        zonefile: "shore.co.il"

        notify: 163.172.74.36 NOKEY #ns4.shore.co.il

        provide-xfr: 0.0.0.0/0 NOKEY
 
        provide-xfr: 163.172.74.36/32 NOKEY #ns4.shore.co.il