FGHIGate на GaNJa NeTWoRK ST@Ti0N - Просмотр сообщения в эхоконференции IPV6
Присутствуют сообщения из эхоконференции IPV6 с датами от 31 Jul 11 14:37:00 до 03 Oct 24 21:46:09, всего сообщений: 7440
= Сообщение: 1098 из 7440 ============================================= IPV6 =
От : Markus Reschke 2:240/1661 06 Dec 14 11:29:30
Кому : Alexey Vissarionov 06 Dec 14 11:29:30
Тема : DNS
FGHI : area://IPV6?msgid=2:240/1661+54770d36
На : area://IPV6?msgid=2:5020/545+5482d37f
= Кодировка сообщения определена как: LATIN-1 ================================
==============================================================================
Hello Alexey!
Dec 06 12:00 2014, Alexey Vissarionov wrote to BjFrn Felten:
AV> About configuring BIND? I ever doubt whether it worth quoting
AV> configuration files...
AV> acl "clients"
AV> {
AV> 127.0.0.1;
AV> 192.168.0.0/16;
AV> 172.16.32.0/12;
AV> 10.0.0.0/8;
AV> };
No IPv6 clients? ;)
AV> options
AV> {
AV> version "unknown";
AV> directory "/etc/named";
AV> listen-on { 192.0.2.123; 2001:0DB8:1:2::123; };
AV> allow-transfer { secondaries; };
AV> allow-recursion { clients; };
AV> };
I'd recommend to set up DNSsec and to add some query limits.
And for the paranoid to prevent fingerprinting:
view "chaosnet" CHAOS {
match-clients { any; };
recursion no;
allow-recursion { none; };
dnssec-lookaside auto;
zone "." {
type hint;
file "/dev/null";
};
zone "bind" {
type master;
file "local/bind";
allow-query { my-clients; };
allow-transfer { none; };
allow-update { none; };
};
};
local/bind:
$ORIGIN bind.
$TTL 1D
@ 1D CH SOA @ root (
42 ; serial
3H ; refresh
15M ; retry
1W ; expiry
1D ) ; minimum
CH NS localhost.
version CH TXT "None of your business!"
authors CH TXT "are better coders than I am. :)"
Regards,
Markus
---
* Origin: *** theca tabellaria *** (2:240/1661)
|
К главной странице гейта
| 
