ASL-Corp members, Bureaucrats, Check users, Structured Discussions bots, oversight, Suppressors, Administrators, Upload Wizard campaign editors
1,714
edits
Changes
Jump to navigation
Jump to search
mLine 14:
Line 14: − + Line 32:
Line 32: − == recovery of a down server == − − Need to fill this out, right now it's a manual verification, db edit and reset. Line 45:
Line 42: − _iax._udp.50000.nodes.allstarlink.org. 30 IN SRV 10 10 4569 50000.nodes.allstarlink.org.+ − + − + Line 75:
Line 72: − + − + − +
→SRV record
DNSSEC was enabled on all domains and trust is expanded to all sub servers. This is currently broken.
DNSSEC was enabled on all domains and trust is expanded to all sub servers. This is currently broken.
Secondary DNS is very important as provided several DNS servers. This is very important as if the database is hard down in SEA, the primary DNS will be offline. With the secondary servers online DNS will continue to work, and NMS requires DNS for the allstarlink.org zone.
Secondary DNS is very important and is provided by several DNS servers. This is very important as if the database is hard down in SEA, the primary DNS will be offline. With the secondary servers online DNS will continue to work, and NMS requires DNS for the allstarlink.org zone.
= regsvcs.allstarlink.org =
= regsvcs.allstarlink.org =
'''register.allstarlink.org''' is a CNAME to '''register.regscvs.allstarlink.org''' under this. The node list servers are under this as well as '''node[1-4].allstarllink.org''' CNAME '''nodes.regsvcs.allstarlink.org
'''register.allstarlink.org''' is a CNAME to '''register.regscvs.allstarlink.org''' under this. The node list servers are under this as well as '''node[1-4].allstarllink.org''' CNAME '''nodes.regsvcs.allstarlink.org
'''
'''
= DNS node lookup =
= DNS node lookup =
_iax._srv.<nodenumber>.allstarlink.org. will return for a node as follows:
_iax._srv.<nodenumber>.allstarlink.org. will return for a node as follows:
_iax._udp.50000.nodes.allstarlink.org. 30 IN SRV 10 10 4569 50000.nodes.allstarlink.org.
where 4569 is the IAX port and then it will do a A lookup on 50000.nodes.allstarlink.org. for the IP.
where 4569 is the IAX port and then it will do an A lookup on 50000.nodes.allstarlink.org. for the IP.
A remote base will be returned like:
A remote base will be returned like:
_iax._udp.50000.nodes.allstarlink.org. 30 IN SRV 10 10 4569 50000.remotebase.nodes.allstarlink.org.
_iax._udp.50000.nodes.allstarlink.org. 30 IN SRV 10 10 4569 50000.remotebase.nodes.allstarlink.org.
== A record ==
== A record ==
== Miscellaneous ==
== Miscellaneous ==
Until very recently the powerdns servers were configured as a joke to return '''Microsoft DNS 6.1.7600 (1DB04228)''' for their version.
Until very recently some of the ASL powerdns servers were configured (as a joke) to return '''Microsoft DNS 6.1.7600 (1DB04228)''' for their version.
If you are a research organization, registrar, ISP, or other individual or entity looking for server vulnerable to CVE-2020-1350 --
If you are a research organization, registrar, ISP, or other individual or entity looking for servers vulnerable to CVE-2020-1350 --
'''''please stop contacting us about how you think DNS servers may be vulnerable to this CVE.''''' Thank you.
'''''please stop contacting us about how you think our DNS servers may be vulnerable to this CVE.''''' They are not.