saltstack-formulas/bind-formula
1
0
Fork 0
mirror of https://github.com/saltstack-formulas/bind-formula.git synced 2025-04-17 02:00:23 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

Add allow-transfer statement which disallows zone transfer by default.

Browse source
This commit is contained in:
Florian Bittner 2015-04-02 18:11:01 +02:00
parent 6f4292c3cf
commit 47e0fc62d3
2 changed files with 8 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

5
bind/files/debian/named.conf.local
View file

@ -25,6 +25,11 @@ zone "{{ key }}" {
{%- endfor %} {%- endfor %}
}; };
{%- endif %} {%- endif %}
allow-transfer {
{% for remote in args.get('allow-transfer', {}) %}
{{ remote }};
{% endfor %}
};
{% if args['type'] == "master" -%} {% if args['type'] == "master" -%}
{% if args['notify'] -%} {% if args['notify'] -%}
notify yes; notify yes;

3
pillar.example
View file

@ -25,6 +25,9 @@ bind:
1.168.192.in-addr.arpa: 1.168.192.in-addr.arpa:
type: master type: master
notify: False notify: False
allow-transfer:
- 1.1.1.1
- 2.2.2.2
dynamic.domain.com: dynamic.domain.com:
type: master type: master
allow-update: "key core_dhcp" allow-update: "key core_dhcp"