https://github.com/annttu/dns-manager

Manage dynamic and static DNS-records from web frontend including simple DynDNS support.
https://github.com/annttu/dns-manager

dns dns-manager dnsmanager dynamic-dns dyndns tsig

Last synced: 2 months ago
JSON representation

Manage dynamic and static DNS-records from web frontend including simple DynDNS support.

• Host: GitHub
• URL: https://github.com/annttu/dns-manager
• Owner: annttu
• Created: 2015-03-08T02:06:31.000Z (almost 10 years ago)
• Default Branch: master
• Last Pushed: 2022-05-15T12:36:56.000Z (over 2 years ago)
• Last Synced: 2024-04-17T06:20:52.732Z (9 months ago)
• Topics: dns, dns-manager, dnsmanager, dynamic-dns, dyndns, tsig
• Language: Python
• Homepage:
• Size: 72.3 KB
• Stars: 6
• Watchers: 5
• Forks: 3
• Open Issues: 1
• Metadata Files:
  • Readme: README.md

Awesome Lists containing this project

README

        
DNSManager

==========

DNSManager uses TSIG-key to add, update and delete DNS-records. DNSmanager works with all DNS-servers which support Dynamic updates [(RFC2136)](http://tools.ietf.org/html/rfc2136) using secure transport [(RFC3007)](http://tools.ietf.org/html/rfc3007). For example Bind9 and PowerDNS are supported.

Installation

============

Prerequisites

 * Running postgresql server

 * Some packages

   * sudo apt-get install libpq-dev python3-dev ( debian, ubuntu, etc. )

   * sudo yum install postgresql-devel ( centos, redhat, etc. )

Install packages etc.

    virtualenv env --python=python3.4

    . env/bin/activate

    pip install -r requirements.txt

    cd DNSManager

    vi manager/settings.py

    ./manage.py syncdb

    # Create admin account for yourself

    ./manage.py createsuperuser

Usage

=====

    ./manage.py runserver

Go to http://127.0.0.1:8000

I strongly recommend to setup a reverse proxy with a SSL-support for

connections over Internet. Nginx or Apache is fine for this.

Zone config for Bind9

=====================

Configuration for bind9 to allow dynamic updates using TSIG-key.

Create first TSIG-key.

    dnssec-keygen -a HMAC-SHA256 -b 256 -n HOST domain.tld.tsigkey

    cat domain.tld.tsigkey.*.key

Copy the bas64 encoded key and use to replace secret in key row below. Full row is also needed later when domain is added to the frontend.

Update zone config with following

    key "domain.tld.tsigkey." { algorithm hmac-sha256; secret "XC+/XU45WGC6ycCT9uORuqs+cPWqoyMl98F63Cw2czo="; };

    zone "domain.tld" { type master; file "/etc/bind/domain.tld"; allow-transfer { my-master-server-here; key "domain.tld.tsigkey."; }; allow-update { key "domain.tld.tsigkey."; }; };

Note to use exactly same name for key in config than in dnssec-keygen command. Otherwise it does not work.

Finally reload config

    rndc reload

License

=======

The MIT License (MIT)

Copyright (c) 2015 Antti Jaakkola

Permission is hereby granted, free of charge, to any person obtaining a copy

of this software and associated documentation files (the "Software"), to deal

in the Software without restriction, including without limitation the rights

to use, copy, modify, merge, publish, distribute, sublicense, and/or sell

copies of the Software, and to permit persons to whom the Software is

furnished to do so, subject to the following conditions:

The above copyright notice and this permission notice shall be included in

all copies or substantial portions of the Software.

THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR

IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,

FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE

AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER

LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,

OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN

THE SOFTWARE.