diff options
author | Andreas Baumann <mail@andreasbaumann.cc> | 2016-01-24 17:25:14 +0100 |
---|---|---|
committer | Andreas Baumann <mail@andreasbaumann.cc> | 2016-01-24 17:25:14 +0100 |
commit | 2509dfb2b4455536649fc9e3090f602fc1d3d21e (patch) | |
tree | 6c47da261b2ba466f6b4a4f01b49c0f5d5c32d93 /build.sh | |
parent | 0f0878e6820f8fd04fa4f06290e6ed2f061ed6e9 (diff) | |
download | OpenBSD-firewall-2509dfb2b4455536649fc9e3090f602fc1d3d21e.tar.gz OpenBSD-firewall-2509dfb2b4455536649fc9e3090f602fc1d3d21e.tar.bz2 |
added two nsd's for handling the split horizon
Diffstat (limited to 'build.sh')
-rwxr-xr-x | build.sh | 22 |
1 files changed, 18 insertions, 4 deletions
@@ -321,12 +321,24 @@ if test -d config/$HOSTNAME/joe/; then cp -R /usr/local/bin/joe $MOUNTPOINT/usr/bin/jstar fi -# when we run an authorative name server -if test -d config/$HOSTNAME/nsd/; then - cp -R config/$HOSTNAME/nsd $MOUNTPOINT/etc/. +# when we run an authorative name server for local DNS spoofing, +# split horizon entries and we don't like to stuff data from +# zone files into unbound's configuration as local data +if test -d config/$HOSTNAME/nsd-internal/; then + cp -R config/$HOSTNAME/nsd-internal $MOUNTPOINT/etc/. cp -R /usr/sbin/nsd $MOUNTPOINT/usr/sbin/. cp -R /usr/sbin/nsd-{checkconf,checkzone,control,control-setup} $MOUNTPOINT/usr/sbin/. - nsd-control-setup -d $MOUNTPOINT/etc/nsd/etc + nsd-control-setup -d $MOUNTPOINT/etc/nsd-internal/etc + cp -R template/usr/sbin/restart_dns $MOUNTPOINT/usr/sbin/. +fi + +# when we run an authorative name server for public zones (in this +# case one DNS master and buddyns as public slaves) +if test -d config/$HOSTNAME/nsd-external/; then + cp -R config/$HOSTNAME/nsd-external $MOUNTPOINT/etc/. + cp -R /usr/sbin/nsd $MOUNTPOINT/usr/sbin/. + cp -R /usr/sbin/nsd-{checkconf,checkzone,control,control-setup} $MOUNTPOINT/usr/sbin/. + nsd-control-setup -d $MOUNTPOINT/etc/nsd-external/etc cp -R template/usr/sbin/restart_dns $MOUNTPOINT/usr/sbin/. fi @@ -362,6 +374,8 @@ chmod 400 $MOUNTPOINT/etc/ssh/ssh_host_rsa_key echo "Cleaning up." +find $MOUNTPOINT -name .gitkeep -exec rm {} \; + sync sleep 2 umount $MOUNTPOINT |