DNS Manager Documentation

Page tree

In DNS Manager, the file dump format has changed. The major improvements are:

  • The zone type is preserved in the dump. Basically it's possible to have both slave and master zones in the same file, so it is no longer needed to have two types of update locations in DNS Manager.
  • The SOA parameters can be included in the dump. When these are not included, the client or server global parameters are used.
  • It is possible to include allow_transfer and masters parameters, according to the zone type.

Examples of zone dump

domain.ltd.|master {
	|REFRESH| |108002| || ||
	|RETRY| |36002| || ||
	|EXPIRE| |604802| || ||
	|MIN_TTL| |86402| || ||
	|DEFAULT_TTL| |86402| || ||
	|SERIAL| |1271668821| || ||
	|ALLOW_TRANSFER| |4.3.2.1| || ||
    |ALLOW_TRANSFER| |2001:db8:85a3:88:8a2e:370:7334:89| || ||
    |NS| |domain.ltd.| |ns1.test.ltd.| ||
	|NS| |aa.domain.ltd.| |ns.test.ltd.| ||
	|CAA| |domain.ltd.| |letsencrypt.org| |issue| |0|
	|CAA| |domain.ltd.| |comodoca.com| |issuewild| |10|
	|CAA| |domain.ltd.| |mailto:example@example.com| |iodef| |7|
	|CNAME| |cname.domain.ltd.| |canonical.name.| ||
	|CNAME| |somedir.domain.ltd.| |domain.ltd.| ||
	|CNAME| |ftp| |domain.ltd.| ||
    |CNAME| |k1._domainkey.domain.ltd.| |dkim.tryme.tst.| ||
    |A| |mail.domain.ltd.| |192.168.10.32| ||
	|AAAA| |sub.domain.ltd.| |2001:db8:85a3:88:8a2e:370:7334:89| ||
	|MX| |zone.domain.ltd.| |email.exchanger| |10|
	|TXT| |txt.domain.ltd.| |v=spf1 exists:%{ir}.%{v}.arpa -all | ||
	|TXT| |some-text.domain.ltd.| |any text| ||
	|TXT| |domain.ltd.| |sometext| ||
	|TXT| |private._domainkey.domain.ltd.| |k=rsa; p=MEwwDQYerwqEWwE| ||
	|TXT| |long-text.domain.ltd.| |AAAAB3NzaC1yc2EAAAADAQABAAACAQCdO8TtdCSwYZumg4y64sVsF6N4R16HzeJqUszduVqPc8qxtfV+GfUNPuMsW0LAEX63VpetMOKkdhOsjC72jDyHNhqbQpnNjo95FWwiRrgeDlPKxoaIQOqEypCY7/h3OGfzIZqnMGLA2qWolKtlCOT8HV4OAdUWZsAjKwLaUcGXaSKPJSqs7d2pSHofC7dQZLdTGldoS+p5FtxPugU7DqBMgqGD5NG4yQ5pf9pCZawaJhmPlWWlK/uPqLYWh5LYb7zm69ITTIwQaSgwGrUI61VwofOzD4lXaPl+YHBaZc211O/pffOzvySWpHeYaiQawg4OdNC4uPUa/1BwD4+XIl3E1GOyer48HdXV9VbIDjAj2Hoj9Uht/xuafjSsEpQT6+O3Fht0p5DLZB6An9GKgyGTl9bG+eZcomAIdL0kdVVJhDfJCl3I7EdRkX28pjLlgU1tZ5pZzXe5lGIBsnu8G9Ors1wxX/cu8P+f2DDOjx5rqyGQGmMsLVjrKabcT7tYitI1CZE4RnZC4xdUyxLHD7dJoM+yrjpVGpghQuMlSzq27SVomMq2QZLQlzAaR95RbjlxgYVC4SZEtaPGGHebHGsH2Sg/VWVjEA+SMbOz0pQnZo+UfPEDwKdAI9rp2ScY8aavHsiGiiyWi5vV/Xssw0wOK7CLRDGqJKGFJVy/GiibOw==| ||
	|SRV| |_sip._tcp.domain.ltd.| |.| |5| |25| |12345| ||
	|SRV| |_sip._tcp.domain.ltd.| |anotherdomain.com.| |10| |20| |5560| ||
	|SRV| |_h323._udp.domain.ltd.| |sub.domain.ltd.| |15| |25| |8550| ||
    |NAPTR| |myhostname.domain.ltd.| |!^.*$!mailto:info@example.com!i| |100| |200| || |3600| |E2U+email:mailto| |A| |fullreplacement.com.|
    |NAPTR| |mysrv.domain.ltd.| |!\^.*$!http://([^/:]+)!i| |10| |120| || || |E2U+voice:tel+sms:tel+asa:test| |A| ||
 }
testdomain.com.|master {
	|$ORIGIN| |com.| || ||
	|TXT| |testdomain| |v=spf1 a mx ptr mx:mail.testdomain.com ~all| ||
	|NS| || |ns1.test-web| ||
	|NS| || |ns2.test-web| ||
	|A| || |64.85.2.56| ||
}

If the zone type is missing, it is assumed to be a master zone definition.

domain.ltd.{
	|REFRESH| |108002| || ||
	|RETRY| |36002| || ||
	|EXPIRE| |604802| || ||
	|MIN_TTL| |86402| || ||
	|DEFAULT_TTL| |86402| || ||
	|SERIAL| |1271668821| || ||
	|ALLOW_TRANSFER| |4.3.2.1| || ||
	|NS| |domain.ltd.| |ns1.domaintest.ltd.| ||
	|NS| |aa.domain.ltd.| |ns.domaintest.ltd.| ||
	|CNAME| |cname.domain.ltd.| |canonical.name.| ||
	|CNAME| |somedir.domain.ltd.| |domain.ltd.| ||
	|CNAME| |ftp| |domain.ltd.| ||
    |CNAME| |k1._domainkey| |dkim.tryme.tst.| ||
    |A| |mail.domain.ltd.| |192.168.10.32| ||
	|AAAA| |sub.domain.ltd.| |2001:db8:85a3:88:8a2e:370:7334:89| ||
	|MX| |zone.domain.ltd.| |email.exchanger| |10|
	|TXT| |txt.domain.ltd.| |v=spf1 exists:%{ir}.%{v}.arpa -all | ||
	|TXT| |some-text.domain.ltd.| |any text| ||
	|TXT| |domain.ltd.| |sometext| ||
	|TXT| |private._domainkey.domain.ltd.| |k=rsa; p=MEwwDQYerwqEWwE| ||
	|SRV| |_sip._tcp.domain.ltd.| |.| |5| |25| |12345| ||
	|SRV| |_sip._tcp.domain.ltd.| |anotherdomain.com.| |10| |20| |5560| ||
	|SRV| |_h323._udp.domain.ltd.| |sub.domain.ltd.| |15| |25| |8550| ||
    |NAPTR| |myhostname.domain.ltd.| |!^.*$!mailto:info@example.com!i| |100| |200| || |3600| |E2U+email:mailto| |A| |fullreplacement.com.|
    |NAPTR| |mysrv.domain.ltd.| |!\^.*$!http://([^/:]+)!i| |10| |120| || || |E2U+voice:tel+sms:tel+asa:test| |A| ||
}


Slave zones are defined as shown below.

3.2.1.in-addr.arpa.|slave {
	|MASTER| |6.7.8.9| || || 
	|MASTER| |2001:db8:85a3:88:8a2e:370:7334:89| || ||
}
aa.com.|slave {
	|MASTER| |6.7.8.9| || ||
}

Slave zones can be masters for another zones:

aa.com.|slave {
	|MASTER| |6.7.8.9| || ||
	|MASTER| |2001:db8:85a3:88:8a2e:370:7334:89| || ||
	|ALLOW_TRANSFER| |4.3.2.1| || ||
	|ALLOW_TRANSFER| |2001:db8:10a3:8181:8a2e:370:7334:abcd| || ||
}


The above-mentioned rules also apply to the reverse DNS zones. Here are the full DNS zones with /24 /28 and /32 subnet mask.

4.3.2.in-addr.arpa.|master {
	|REFRESH| |10800| || ||
	|RETRY| |36000| || ||
	|EXPIRE| |604800| || ||
	|MIN_TTL| |86400| || ||
	|DEFAULT_TTL| |86400| || ||
	|SERIAL| |1271668821| || ||
	|NS| |4.3.2.in-addr.arpa.| |ns1.name.com.| ||
	|NS| |0/25.4.3.2.in-addr.arpa.| |ns.domain.com.| ||
	|PTR| |5.4.3.2.in-addr.arpa.| |zone.name.| ||
	|PTR| |5.4.3.2.in-addr.arpa.| |dom1.com.| ||
	|PTR| |5.4.3.2.in-addr.arpa.| |dom2.com.| ||
	|PTR| |5.4.3.2.in-addr.arpa.| |dom3.com.| ||
	|CNAME| |10.4.3.2.in-addr.arpa.| |10.0/25.4.3.2.in-addr.arpa.| ||
	|TXT| |host.4.3.2.in-addr.arpa.| |value| ||
	|TXT| |4.3.2.in-addr.arpa.| |sometext| ||
}
4/28.3.2.1.in-addr.arpa.|master {
	|REFRESH| |10800| || ||
	|RETRY| |3600| || ||
	|EXPIRE| |60480| || ||
	|MIN_TTL| |86400| || ||
	|SERIAL| |1271668821| || ||
	|DEFAULT_TTL| |86400| || ||
	|ALLOW_TRANSFER| |7.8.9.10| || ||
	|NS| |4/28.3.2.1.in-addr.arpa.| |aa.com.| ||
	|PTR| |6.4/28.3.2.1.in-addr.arpa.| |zone.c.om.| ||
	|PTR| |6.4/28.3.2.1.in-addr.arpa.| |dom1.com.| ||
	|PTR| |6.4/28.3.2.1.in-addr.arpa.| |dom2.com.| ||
	|TXT| |a.4/28.3.2.1.in-addr.arpa.| |text value| ||
	|TXT| |4/28.3.2.1.in-addr.arpa.| |sometext| ||
}
4.3.2.1.in-addr.arpa.|master {
	|REFRESH| |10800| || ||
	|RETRY| |3600| || ||
	|EXPIRE| |60480| || ||
	|MIN_TTL| |86400| || ||
	|SERIAL| |1271668821| || ||
	|DEFAULT_TTL| |86400| || ||
	|ALLOW_TRANSFER| |7.8.9.10| || ||
	|NS| |4.3.2.1.in-addr.arpa.| |aa.com.| ||
	|PTR| |4.3.2.1.in-addr.arpa.| |zone.c.om.| ||
	|TXT| |abc.4.3.2.1.in-addr.arpa.| |sometext| ||
}

The "@" character is accepted when defining zones.

testdomain.com.|master {
	|NS| |@| |ns.isdomain.com.| ||
	|NS| || |new| ||
	|MX| |@| |mail.testdomain.com.| |10|
	|MX| |test| |mail1.testdomain.com.| |15|
	|TXT| |@| |this is not a test| ||
	|CNAME| |*.new| |newtest.com.| ||
}

The "-" character is also accepted when defining reverse zones.

4-28.3.2.1.in-addr.arpa.|master {
	|REFRESH| |10800| || ||
	|RETRY| |3600| || ||
	|EXPIRE| |60480| || ||
	|MIN_TTL| |86400| || ||
	|SERIAL| |1271668821| || ||
	|DEFAULT_TTL| |86400| || ||
	|ALLOW_TRANSFER| |7.8.9.10| || ||
	|NS| |4-28.3.2.1.in-addr.arpa.| |aa.com.| ||
	|PTR| |6.4-28.3.2.1.in-addr.arpa.| |zone.com.| ||
	|PTR| |6.4-28.3.2.1.in-addr.arpa.| |dom1.com.| ||
	|PTR| |6.4-28.3.2.1.in-addr.arpa.| |dom2.com.| ||
	|TXT| |a.4-28.3.2.1.in-addr.arpa.| |text value| ||
	|TXT| |4-28.3.2.1.in-addr.arpa.| |sometext| ||
}

If the SOA records are not found in the zone definition, they are inherited from the client, if the client has SOA records defined. If the client has no SOA records defined, the system wide SOA settings defined by the administrator are used.

domain.ltd.|master {
	|ALLOW_TRANSFER| |4.3.2.1| || ||
	|NS| |domain.ltd.| |ns1.domaintest.ltd.| ||
	|NS| |aa.domain.ltd.| |ns.domaintest.ltd.| ||
	|CNAME| |cname.domain.ltd.| |canonical.name.| ||
	|CNAME| |somedir.domain.ltd.| |domain.ltd.| ||
	|CNAME| |ftp| |domain.ltd.| ||
	|A| |mail.domain.ltd.| |192.168.10.32| ||
	|MX| |zone.domain.ltd.| |email.exchanger| |10|
	|TXT| |txt.domain.ltd.| |v=spf1 exists:%{ir}.%{v}.arpa -all | ||
	|TXT| |some-text.domain.ltd.| |any text| ||
	|TXT| |private._domainkey.domain.ltd.| |k=rsa; p=MEwwDQYerwqEWwE| ||
	|TXT| |domain.ltd.| |text value| ||
}
	4/28.3.2.1.in-addr.arpa.|master {
	|NS| |4/28.3.2.1.in-addr.arpa.| |aa.com.| ||
	|PTR| |6.4/28.3.2.1.in-addr.arpa.| |zone.com.| ||
	|PTR| |6.4/28.3.2.1.in-addr.arpa.| |dom1.com.| ||
	|PTR| |6.4/28.3.2.1.in-addr.arpa.| |dom2.com.| ||
	|TXT| |a.4/28.3.2.1.in-addr.arpa.| |text value| ||
	|TXT| |4/28.3.2.1.in-addr.arpa.| |sometext| ||
}

To mark a primary nameserver, 1 is wrote on last position of the NS record from dump file, as ns2.server.ltd in the example below.

domain.ltd.|master{
	|NS| |domain.ltd.| |ns1.server.ltd.| ||
	|NS| |domain.ltd.| |ns2.server.ltd.| |1|
	|CNAME| |cname.domain.ltd.| |canonical.name.| ||
	|CNAME| |some_dir.domain.ltd.| |domain.ltd.| ||
	|CNAME| |ftp| |domain.ltd.| ||
	|A| |mail.domain.ltd.| |192.168.10.32| ||
	|MX| |zone.domain.ltd.| |email.exchanger| |10|
	|TXT| |txt.domain.ltd.| |v=spf1 exists:%{ir}.%{v}.arpa -all | ||
	|TXT| |some-text.domain.ltd.| |any text| ||
	|TXT| |domain.ltd.| |text value| ||
}

Also the closing bracket may be placed on the same line with an record, as shown below.

domain.ltd.|master{
	|NS| |@| |ns1.server.ltd.| ||
	|NS| |@| |ns2.server.ltd.| |1|
	|A| |mail.domain.ltd.| |192.168.10.32| ||
	|TXT| |domain.ltd.| |text value| ||}

Example for an E.164 reverse zone that contains both supported record types, NS and NAPTR:

1.2.3.1.E164.ARPA.|master {
    |REFRESH| |10800| || ||
    |RETRY| |3600| || ||
    |EXPIRE| |604800| || ||
    |MIN_TTL| |86400| || ||
    |DEFAULT_TTL| |86400| || ||
    |NS| |1.2.3.1.E164.ARPA.| |ns1.plesk.ro.| |1|
    |NS| |1.2.3.1.E164.ARPA.| |ns2.plesk.ro.| ||
    |NAPTR| |2.3.4.5.1.2.3.1.E164.ARPA.| |!regex!replacement!i| |10| |20| | | || |services| |S|
    |NAPTR| |9.1.2.3.1.E164.ARPA.| |!^.*$!mailto:info@example.com!i| |10| |20| | | || |email| |S|
}

Example for an IP6.ARPA reverse zone that contains both supported record types, NS and PTR:

1.2.3.IP6.ARPA.|master {
    |REFRESH| |10800| || ||
    |RETRY| |3600| || ||
    |EXPIRE| |604800| || ||
    |MIN_TTL| |86400| || ||
    |DEFAULT_TTL| |86400| || ||
    |NS| |1.2.3.IP6.ARPA.| |example.net.| ||
    |PTR| |*.1.1.1.1.1.1.1.1.1.1.1.1.1.1.1.1.1.2.3.IP6.ARPA.| |somedomain.test.com.| || 
    |PTR| |1.2.3.4.5.6.7.8.9.1.1.1.1.1.1.1.1.1.1.1.1.1.1.1.1.1.1.1.1.1.2.3.IP6.ARPA.| |test.com.| ||
 }



#trackbackRdf ($trackbackUtils.getContentIdentifier($page) $page.title $trackbackUtils.getPingUrl($page))
  • No labels

Except where otherwise noted, content in this space is licensed under a Creative Commons Attribution 4.0 International.