summaryrefslogtreecommitdiff
path: root/build.sh
diff options
context:
space:
mode:
authorAndreas Baumann <mail@andreasbaumann.cc>2016-01-24 17:25:14 +0100
committerAndreas Baumann <mail@andreasbaumann.cc>2016-01-24 17:25:14 +0100
commit2509dfb2b4455536649fc9e3090f602fc1d3d21e (patch)
tree6c47da261b2ba466f6b4a4f01b49c0f5d5c32d93 /build.sh
parent0f0878e6820f8fd04fa4f06290e6ed2f061ed6e9 (diff)
downloadOpenBSD-firewall-2509dfb2b4455536649fc9e3090f602fc1d3d21e.tar.gz
OpenBSD-firewall-2509dfb2b4455536649fc9e3090f602fc1d3d21e.tar.bz2
added two nsd's for handling the split horizon
Diffstat (limited to 'build.sh')
-rwxr-xr-xbuild.sh22
1 files changed, 18 insertions, 4 deletions
diff --git a/build.sh b/build.sh
index 38273bf..381dc06 100755
--- a/build.sh
+++ b/build.sh
@@ -321,12 +321,24 @@ if test -d config/$HOSTNAME/joe/; then
cp -R /usr/local/bin/joe $MOUNTPOINT/usr/bin/jstar
fi
-# when we run an authorative name server
-if test -d config/$HOSTNAME/nsd/; then
- cp -R config/$HOSTNAME/nsd $MOUNTPOINT/etc/.
+# when we run an authorative name server for local DNS spoofing,
+# split horizon entries and we don't like to stuff data from
+# zone files into unbound's configuration as local data
+if test -d config/$HOSTNAME/nsd-internal/; then
+ cp -R config/$HOSTNAME/nsd-internal $MOUNTPOINT/etc/.
cp -R /usr/sbin/nsd $MOUNTPOINT/usr/sbin/.
cp -R /usr/sbin/nsd-{checkconf,checkzone,control,control-setup} $MOUNTPOINT/usr/sbin/.
- nsd-control-setup -d $MOUNTPOINT/etc/nsd/etc
+ nsd-control-setup -d $MOUNTPOINT/etc/nsd-internal/etc
+ cp -R template/usr/sbin/restart_dns $MOUNTPOINT/usr/sbin/.
+fi
+
+# when we run an authorative name server for public zones (in this
+# case one DNS master and buddyns as public slaves)
+if test -d config/$HOSTNAME/nsd-external/; then
+ cp -R config/$HOSTNAME/nsd-external $MOUNTPOINT/etc/.
+ cp -R /usr/sbin/nsd $MOUNTPOINT/usr/sbin/.
+ cp -R /usr/sbin/nsd-{checkconf,checkzone,control,control-setup} $MOUNTPOINT/usr/sbin/.
+ nsd-control-setup -d $MOUNTPOINT/etc/nsd-external/etc
cp -R template/usr/sbin/restart_dns $MOUNTPOINT/usr/sbin/.
fi
@@ -362,6 +374,8 @@ chmod 400 $MOUNTPOINT/etc/ssh/ssh_host_rsa_key
echo "Cleaning up."
+find $MOUNTPOINT -name .gitkeep -exec rm {} \;
+
sync
sleep 2
umount $MOUNTPOINT