Adding ACLs for BIND configuration

diff --git a/customer/pixelpark-dns/common.yaml b/customer/pixelpark-dns/common.yaml
index c3b959d2e1a7a42ce01f9c8e808e45aa05c48cc7..67357794071bbd08befc3dbf1a86d4bfaf333878 100644 (file)
--- a/customer/pixelpark-dns/common.yaml
+++ b/customer/pixelpark-dns/common.yaml
@@ -47,5 +47,49 @@ infra::profile::logrotate::rules:
 
 # BIND configuration
 bind::version2show: 'none'
+bind::allowed_notifying:
+  # systemshare.pixelpark.com
+  - 217.66.53.86
+  # dnsmaster-local.pixelpark.com
+  - 217.66.53.87
+  # dnsmaster-public.pixelpark.com
+  - 217.66.53.97
+  # dnsmaster.pixelpark.com
+  - 217.66.51.144
+  # dnsmaster01.pixelpark.com
+  - 217.66.51.53
+  - 93.188.110.60
+  # dnsmaster02.pixelpark.com
+  - 217.66.51.54
+  - 217.66.52.10
+  - 217.66.55.21
+  # ns3-local.pixelpark.com
+  - 217.66.55.22
+  # Admin-Netzwerk
+  - 217.66.51.0/24
+bind::allowed_recursion:
+  - 217.66.53.86
+  - 217.66.53.87
+  - 217.66.53.97
+  - 217.66.51.144
+  - 217.66.51.53
+  - 93.188.110.60
+  - 217.66.51.54
+  - 217.66.52.10
+  - 217.66.55.21
+  - 217.66.55.22
+  - 217.66.51.0/24
+bind::allowed_transfer:
+  - 217.66.53.86
+  - 217.66.53.87
+  - 217.66.53.97
+  - 217.66.51.144
+  - 217.66.51.53
+  - 93.188.110.60
+  - 217.66.51.54
+  - 217.66.52.10
+  - 217.66.55.21
+  - 217.66.55.22
+  - 217.66.51.0/24
 
 # vim: et list