Feat: DNS
This commit is contained in:
parent
a98ccebe62
commit
dcdfdb658f
@ -2,7 +2,7 @@
|
|||||||
# GPL v3
|
# GPL v3
|
||||||
|
|
||||||
# SRV-01 ONLY
|
# SRV-01 ONLY
|
||||||
# asrbd.local domain
|
# asrc.local domain
|
||||||
|
|
||||||
# TODO: Delegation
|
# TODO: Delegation
|
||||||
|
|
||||||
@ -125,32 +125,33 @@ Get-DhcpServerv4Scope | Set-DhcpServerv4OptionValue -DnsServer 192.168.128.1,192
|
|||||||
|
|
||||||
Install-WindowsFeature -Name DNS -IncludeManagementTools -includeallsubfeature
|
Install-WindowsFeature -Name DNS -IncludeManagementTools -includeallsubfeature
|
||||||
|
|
||||||
#Create asrbd.local zone
|
#Create asrc.local zone
|
||||||
Set-DnsServerPrimaryZone -ComputerName SRV-01 -Name "asrbd.local" -SecureSecondaries "TransferToSecureServers" -SecondaryServers "192.168.128.1"
|
|
||||||
|
|
||||||
Add-DnsServerPrimaryZone -ResponsiblePerson bol@loc.ks -DynamicUpdate None -ZoneFile asrbd.local.dns -Name asrbd.local
|
Add-DnsServerPrimaryZone -ResponsiblePerson bol@loc.ks -DynamicUpdate None -ZoneFile asrc.local.dns -Name asrc.local
|
||||||
|
|
||||||
|
Set-DnsServerPrimaryZone -ComputerName SRV-01 -Name "asrc.local" -SecureSecondaries "TransferToSecureServers" -SecondaryServers "192.168.128.1"
|
||||||
|
|
||||||
#Rename SOA+NS Main Zone
|
#Rename SOA+NS Main Zone
|
||||||
$ns = Get-DnsServerResourceRecord -ZoneName "asrbd.local" -RRType NS
|
$ns = Get-DnsServerResourceRecord -ZoneName "asrc.local" -RRType NS
|
||||||
|
|
||||||
$nsnew = $ns.Clone()
|
$nsnew = $ns.Clone()
|
||||||
|
|
||||||
$nsnew.RecordData.NameServer = "srv-01.asrbd.local"
|
$nsnew.RecordData.NameServer = "srv-01.asrc.local"
|
||||||
|
|
||||||
Set-DnsServerResourceRecord -ZoneName asrbd.local -NewInputObject $nsnew -OldInputObject $ns
|
Set-DnsServerResourceRecord -ZoneName asrc.local -NewInputObject $nsnew -OldInputObject $ns
|
||||||
|
|
||||||
$soa = Get-DnsServerResourceRecord -ZoneName asrbd.local -RRType Soa
|
$soa = Get-DnsServerResourceRecord -ZoneName asrc.local -RRType Soa
|
||||||
|
|
||||||
$soanew = $soa.Clone()
|
$soanew = $soa.Clone()
|
||||||
|
|
||||||
$soanew.RecordData.PrimaryServer = "srv-01.asrbd.local"
|
$soanew.RecordData.PrimaryServer = "srv-01.asrc.local"
|
||||||
$soanew.RecordData.ExpireLimit = (New-TimeSpan -Days 4)
|
$soanew.RecordData.ExpireLimit = (New-TimeSpan -Days 4)
|
||||||
|
|
||||||
Set-DnsServerResourceRecord -ZoneName asrbd.local -NewInputObject $soanew -OldInputObject $soa
|
Set-DnsServerResourceRecord -ZoneName asrc.local -NewInputObject $soanew -OldInputObject $soa
|
||||||
|
|
||||||
#Set zone transfer
|
#Set zone transfer
|
||||||
|
|
||||||
Set-DnsServerPrimaryZone -ComputerName SRV-01 -Name asrbd.local -SecureSecondaries "TransferToSecureServers" -SecondaryServers "192.168.128.1"
|
Set-DnsServerPrimaryZone -ComputerName SRV-01 -Name asrc.local -SecureSecondaries "TransferToSecureServers" -SecondaryServers "192.168.128.1"
|
||||||
|
|
||||||
#Create reverse lookup Zone
|
#Create reverse lookup Zone
|
||||||
Add-DnsServerPrimaryZone -NetworkID "192.168.0.0/16" -Zonefile "168.192.in-addr.arpa.dns"
|
Add-DnsServerPrimaryZone -NetworkID "192.168.0.0/16" -Zonefile "168.192.in-addr.arpa.dns"
|
||||||
@ -160,7 +161,7 @@ $ns = Get-DnsServerResourceRecord -ZoneName 168.192.in-addr.arpa -RRType NS
|
|||||||
|
|
||||||
$nsnew = $ns.Clone()
|
$nsnew = $ns.Clone()
|
||||||
|
|
||||||
$nsnew.RecordData.NameServer = "srv-01.asrbd.local"
|
$nsnew.RecordData.NameServer = "srv-01.asrc.local"
|
||||||
|
|
||||||
Set-DnsServerResourceRecord -ZoneName 168.192.in-addr.arpa -NewInputObject $nsnew -OldInputObject $ns
|
Set-DnsServerResourceRecord -ZoneName 168.192.in-addr.arpa -NewInputObject $nsnew -OldInputObject $ns
|
||||||
|
|
||||||
@ -168,16 +169,28 @@ $soa = Get-DnsServerResourceRecord -ZoneName 168.192.in-addr.arpa -RRType Soa
|
|||||||
|
|
||||||
$soanew = $soa.Clone()
|
$soanew = $soa.Clone()
|
||||||
|
|
||||||
$soanew.RecordData.PrimaryServer = "srv-01.asrbd.local"
|
$soanew.RecordData.PrimaryServer = "srv-01.asrc.local"
|
||||||
$soanew.RecordData.ExpireLimit = (New-TimeSpan -Days 4)
|
$soanew.RecordData.ExpireLimit = (New-TimeSpan -Days 4)
|
||||||
|
|
||||||
Set-DnsServerResourceRecord -ZoneName asrbd.local -NewInputObject $soanew -OldInputObject $soa
|
Set-DnsServerResourceRecord -ZoneName asrc.local -NewInputObject $soanew -OldInputObject $soa
|
||||||
|
|
||||||
#Set DNS forwarder
|
# Set DNS SRV-03 forwarder
|
||||||
|
Add-DnsServerConditionalForwarderZone -Name "asrc.devs" -MasterServers 192.168.128.1 -PassThru
|
||||||
|
Add-DnsServerConditionalForwarderZone -Name "devs.asrc.devs" -MasterServers 192.168.128.1 -PassThru
|
||||||
|
|
||||||
|
# Set DNS net forwarder
|
||||||
Add-DnsServerForwarder -IPAddress 9.9.9.9 -PassThru # Forward
|
Add-DnsServerForwarder -IPAddress 9.9.9.9 -PassThru # Forward
|
||||||
|
|
||||||
Add-DnsServerResourceRecordA -Name "SRV-01" -ZoneName "asrbd.local" -IPv4Address "192.168.8.1" -TimeToLive 01:00:00
|
# Add records
|
||||||
Add-DnsServerResourceRecordA -Name "SRV-02" -ZoneName "asrbd.local" -IPv4Address "192.168.8.2" -TimeToLive 01:00:00
|
|
||||||
|
Add-DnsServerResourceRecordA -Name "srv-01" -ZoneName "asrc.local" -IPv4Address "192.168.8.1" -TimeToLive 01:00:00 -CreatePTR
|
||||||
|
Add-DnsServerResourceRecordA -Name "srv-02" -ZoneName "asrc.local" -IPv4Address "192.168.8.2" -TimeToLive 01:00:00 -CreatePTR
|
||||||
|
Add-DnsServerResourceRecordA -Name "srv-03" -ZoneName "asrc.local" -IPv4Address "192.168.128.1" -TimeToLive 01:00:00 -CreatePTR
|
||||||
|
Add-DnsServerResourceRecord -ZoneName "asrc.local" -NS -Name asrc.local -Nameserver "srv-03.asrc.local."
|
||||||
|
#Add-DnsServerResourceRecord -ZoneName "asrc.local" -A -Name dev.asrc.local -IPv4Address "192.168.128.1"
|
||||||
|
Add-DnsServerZoneTransferPolicy -Name "asrc.local" -Action IGNORE -ServerInterfaceIP "ne,192.168.128.1" -PassThru -ZoneName "asrc.local"
|
||||||
|
#Add-DnsServerZoneDelegation -Name "asrc.local" -ChildZoneName "dev" -NameServer "srv-03.asrc.local." -IPAddress 192.168.128.1 -PassThru -Verbose
|
||||||
|
|
||||||
|
|
||||||
# Add local DNS for all Hosts
|
# Add local DNS for all Hosts
|
||||||
|
|
||||||
|
@ -2,7 +2,7 @@
|
|||||||
# GPL v3
|
# GPL v3
|
||||||
|
|
||||||
# SRV-03 ONLY
|
# SRV-03 ONLY
|
||||||
# asrbd.dev,asrbd.local,dev.asrbd.local
|
# asrc.dev,asrc.local,dev.asrc.local
|
||||||
|
|
||||||
# TODO:
|
# TODO:
|
||||||
|
|
||||||
@ -76,35 +76,61 @@ Install-WindowsFeature -Name DNS -IncludeManagementTools -includeallsubfeature
|
|||||||
|
|
||||||
#Add-DnsServerPrimaryZone -NetworkID 192.168.128.0/24 -ZoneFile “192.168.128.1.in-addr.arpa.dns” # Zone secondaire
|
#Add-DnsServerPrimaryZone -NetworkID 192.168.128.0/24 -ZoneFile “192.168.128.1.in-addr.arpa.dns” # Zone secondaire
|
||||||
|
|
||||||
Set-DnsServerPrimaryZone -ComputerName SRV-03 -Name asrbd.dev -SecureSecondaries "TransferToSecureServers" -SecondaryServers "192.168.8.1"
|
#Create asrc.dev
|
||||||
|
|
||||||
Add-DnsServerPrimaryZone -ResponsiblePerson "bol@loc.ks" -DynamicUpdate None -ZoneFile asrbd.dev.dns -Name asrbd.dev
|
Set-DnsServerPrimaryZone -ComputerName SRV-03 -Name asrc.dev -SecureSecondaries "TransferToSecureServers" -SecondaryServers "192.168.8.1"
|
||||||
|
|
||||||
$ns = Get-DnsServerResourceRecord -ZoneName asrbd.dev -RRType NS
|
Add-DnsServerPrimaryZone -ResponsiblePerson "bol@loc.ks" -DynamicUpdate None -ZoneFile asrc.dev.dns -Name asrc.dev
|
||||||
|
|
||||||
|
$ns = Get-DnsServerResourceRecord -ZoneName asrc.dev -RRType NS
|
||||||
|
|
||||||
$nsnew = $ns.Clone()
|
$nsnew = $ns.Clone()
|
||||||
|
|
||||||
$nsnew.RecordData.NameServer = "srv-03.asrbd.dev"
|
$nsnew.RecordData.NameServer = "srv-03.asrc.dev"
|
||||||
|
|
||||||
# Get-DnsServerZone -Name asrbd.dev
|
Set-DnsServerResourceRecord -ZoneName asrc.dev -NewInputObject $nsnew -OldInputObject $ns
|
||||||
|
|
||||||
Set-DnsServerResourceRecord -ZoneName asrbd.dev -NewInputObject $nsnew -OldInputObject $ns
|
$soa = Get-DnsServerResourceRecord -ZoneName asrc.dev -RRType Soa
|
||||||
|
|
||||||
$soa = Get-DnsServerResourceRecord -ZoneName asrbd.dev -RRType Soa
|
|
||||||
|
|
||||||
$soanew = $soa.Clone()
|
$soanew = $soa.Clone()
|
||||||
|
|
||||||
$soanew.RecordData.PrimaryServer = "srv-03.asrbd.dev"
|
$soanew.RecordData.PrimaryServer = "srv-03.asrc.dev"
|
||||||
$soanew.RecordData.ExpireLimit = (New-TimeSpan -Days 4)
|
$soanew.RecordData.ExpireLimit = (New-TimeSpan -Days 4)
|
||||||
|
|
||||||
Set-DnsServerResourceRecord -ZoneName asrbd.dev -NewInputObject $soanew -OldInputObject $soa
|
Set-DnsServerResourceRecord -ZoneName asrc.dev -NewInputObject $soanew -OldInputObject $soa
|
||||||
|
|
||||||
|
#Create dev.asrc.local
|
||||||
|
|
||||||
|
Set-DnsServerPrimaryZone -ComputerName SRV-03 -Name asrc.dev -SecureSecondaries "TransferToSecureServers" -SecondaryServers "192.168.8.1"
|
||||||
|
|
||||||
|
Add-DnsServerPrimaryZone -ResponsiblePerson "bol@loc.ks" -DynamicUpdate None -ZoneFile asrc.dev.dns -Name asrc.dev
|
||||||
|
|
||||||
|
$ns = Get-DnsServerResourceRecord -ZoneName asrc.dev -RRType NS
|
||||||
|
|
||||||
|
$nsnew = $ns.Clone()
|
||||||
|
|
||||||
|
$nsnew.RecordData.NameServer = "srv-03.dev.asrc.local"
|
||||||
|
|
||||||
|
Set-DnsServerResourceRecord -ZoneName asrc.dev -NewInputObject $nsnew -OldInputObject $ns
|
||||||
|
|
||||||
|
$soa = Get-DnsServerResourceRecord -ZoneName dev.asrc.local -RRType Soa
|
||||||
|
|
||||||
|
$soanew = $soa.Clone()
|
||||||
|
|
||||||
|
$soanew.RecordData.PrimaryServer = "srv-03.dev.asrc.local"
|
||||||
|
$soanew.RecordData.ExpireLimit = (New-TimeSpan -Days 4)
|
||||||
|
|
||||||
|
Set-DnsServerResourceRecord -ZoneName dev.asrc.local -NewInputObject $soanew -OldInputObject $soa
|
||||||
|
|
||||||
Set-DnsServerPrimaryZone -ComputerName SRV-01 -Name asrbd.dev -SecureSecondaries "TransferToSecureServers" -SecondaryServers "192.168.128.1"
|
|
||||||
|
|
||||||
Add-DnsServerForwarder -IPAddress 9.9.9.9 -PassThru # Forward
|
Add-DnsServerForwarder -IPAddress 9.9.9.9 -PassThru # Forward
|
||||||
|
|
||||||
Add-DnsServerResourceRecordA -Name "SRV-01" -ZoneName "asrbd.dev" -IPv4Address "192.168.8.1" -TimeToLive 01:00:00
|
Add-DnsServerResourceRecordA -Name "SRV-03" -ZoneName "dev.asrc.local" -IPv4Address "192.168.128.1" -TimeToLive 01:00:00
|
||||||
Add-DnsServerResourceRecordA -Name "SRV-02" -ZoneName "asrbd.dev" -IPv4Address "192.168.8.2" -TimeToLive 01:00:00
|
|
||||||
|
#Add DNS secondary zone for asrc.local
|
||||||
|
|
||||||
|
Add-DnsServerSecondaryZone -Name "asrc.local" -ZoneFile "asrc.local.dns" -MasterServers 192.168.8.1
|
||||||
|
Start-DnsServerZoneTransfer -Name "asrc.local"
|
||||||
|
|
||||||
Read-Host "Finished?"
|
Read-Host "Finished?"
|
||||||
Restart-Computer
|
Restart-Computer
|
||||||
|
Loading…
Reference in New Issue
Block a user