Secondary DNS: Difference between revisions

(6 intermediate revisions by one other user not shown)

Line 10:

The process for setting up A&A as your Authoritative Secondary DNS server(s).

# Configure required ACLs on your Firewall,

# Configure required ACLs on your Firewall, remember to open TCP as well as UDP

# Configure required access ACLs on your Primary DNS for zone transfers and queries,

# Contact <code>support@aa.net.uk</code> to request your domain to be configured on A&A's Secondary DNS,

Line 19:

You need to configure your Authoritative Primary DNS to:

# Set your Primary DNS to send NOTIFY to <code>secondary-dns.co.uk</code>. Required for your Primary DNS to notify A&A's Secondary that you've changed or reloaded your domain files.

* Set your Primary DNS to send NOTIFY to <code>secondary-dns.co.uk</code>. Required for your Primary DNS to notify A&A's Secondary that you've changed or reloaded your domain files.

<pre>

⚫

# Allow <code>*.secondary-dns.co.uk</code>; & <code>*-nameless.aa.net.uk</code>; & <code>*.primary-dns.co.uk</code>; to request AXFR/IXFR zone transfers from your Primary DNS. Required to allow A&A's secondary DNS to copy your domains from your Primary DNS.

194.4.173.1; 2001:8b0:0:81::51bb:5120; //secondary-dns.co.uk **NOTIFY**

⚫

# Allow <code>*.secondary-dns.co.uk</code>; & <code>*-nameless.aa.net.uk</code>; & <code>*.primary-dns.co.uk</code>; to send queries to your Primary DNS. Required as some of A&A's secondaries send regular SOA query requests, to check the Serial. Also helpful if Support needs to query your Primary DNS.

</pre>

⚫

* Allow <code>*.secondary-dns.co.uk</code>; & <code>*-nameless.aa.net.uk</code>; & <code>*.primary-dns.co.uk</code>; to request AXFR/IXFR zone transfers from your Primary DNS. Required to allow A&A's secondary DNS to copy your domains from your Primary DNS.

⚫

* Allow <code>*.secondary-dns.co.uk</code>; & <code>*-nameless.aa.net.uk</code>; & <code>*.primary-dns.co.uk</code>; to send queries to your Primary DNS. Required as some of A&A's secondaries send regular SOA query requests, to check the Serial. Also helpful if Support needs to query your Primary DNS.

==IP addresses required for Firewall and Primary DNS ACLs==

Line 29:

Line 32:

<pre>

81.187.81.32; //secondary-dns.co.uk **legacy**

194.4.173.1; 2001:8b0:0:81::51bb:5120; //secondary-dns.co.uk ~~**legacy**~~

194.4.173.1; 2001:8b0:0:81::51bb:5120; //secondary-dns.co.uk

194.4.173.3; 2001:8b6:2:0:194:4:173:3; //zonetransfers-a.secondary-dns.co.uk **NEW**

194.4.173.4; 2001:8b6:2:0:194:4:173:4; //zonetransfers-b.secondary-dns.co.uk **NEW**