From 96db769e8d708e7e776d7be33502a864c5a3fb8b Mon Sep 17 00:00:00 2001 From: Martin Mares Date: Sat, 15 Oct 2011 20:55:37 +0200 Subject: [PATCH] Updated blackhole domains in cf.ucw --- cf.ucw/0 | 5 ----- cf.ucw/255 | 5 ----- cf.ucw/domains | 24 ++++++++++++++++++++++-- 3 files changed, 22 insertions(+), 12 deletions(-) delete mode 100644 cf.ucw/0 delete mode 100644 cf.ucw/255 diff --git a/cf.ucw/0 b/cf.ucw/0 deleted file mode 100644 index 1c59fa0..0000000 --- a/cf.ucw/0 +++ /dev/null @@ -1,5 +0,0 @@ -; RFC 1912 tells us to provide an empty 0.in-addr.arpa zone - -SOA(REV(0)) -NS(NSNAME) -REVERSE(0) diff --git a/cf.ucw/255 b/cf.ucw/255 deleted file mode 100644 index 3e93075..0000000 --- a/cf.ucw/255 +++ /dev/null @@ -1,5 +0,0 @@ -; RFC 1912 tells us to provide an empty 255.in-addr.arpa zone - -SOA(REV(255)) -NS(NSNAME) -REVERSE(255) diff --git a/cf.ucw/domains b/cf.ucw/domains index de805cd..a19999c 100644 --- a/cf.ucw/domains +++ b/cf.ucw/domains @@ -2,10 +2,30 @@ ; Various mandatory things required by RFC 1912, section 4.1 PRIMARY(localhost) -REVERSE(0) -REVERSE(255) REVERSE(127.0.0, localhost) +; Blackhole zones recommended by RFC 6303 +BLACKHOLE(REV(0)) ; IPv4 reserved net +BLACKHOLE(REV(127)) ; IPv4 loopback net +BLACKHOLE(REV(169.254)) ; IPv4 link-local +BLACKHOLE(REV(192.0.2)) ; IPv4 test +BLACKHOLE(REV(198.51.100)) ; IPv4 test +BLACKHOLE(REV(203.0.113)) ; IPv4 test +BLACKHOLE(REV(255.255.255.255)) ; IPv4 broadcast +BLACKHOLE(REV(::1/128)) ; IPv6 loopback +BLACKHOLE(REV(::0/128)) ; IPv6 unspecified +BLACKHOLE(REV(fd00::/8)) ; IPv6 locally assigned +BLACKHOLE(REV(fe80::/12)) ; IPv6 link-local +BLACKHOLE(REV(fe90::/12)) +BLACKHOLE(REV(fea0::/12)) +BLACKHOLE(REV(feb0::/12)) +BLACKHOLE(REV(2001:0db8::/32)) ; IPv6 example prefix + +; Blackhole zones for site-local addresses recommended by RFC 6303 +BLACKHOLE(REV(10)) +nsc_forloop(`i', 16, 31, `BLACKHOLE(REV(172.i))') +BLACKHOLE(REV(192.168)) + PRIMARY(ucw.cz) REVERSE(89.250.246.0-15, ucw.cz) PRIMARY(id.ucw.cz) -- 2.39.5