From c4ad107010bd01efd6cc57d655bbb9378b7e2937 Mon Sep 17 00:00:00 2001 From: Tom Hughes Date: Tue, 17 Apr 2018 00:46:36 +0100 Subject: [PATCH] Add CAA records --- src/opengeodata | 4 ++++ src/openstreetmap | 8 ++++++-- src/openstreetmap-uk | 4 ++++ src/openstreetmap-za | 4 ++++ src/osmfoundation | 4 ++++ src/stateofthemap | 4 ++++ src/stateofthemap-eu | 4 ++++ src/switch2osm | 4 ++++ 8 files changed, 34 insertions(+), 2 deletions(-) diff --git a/src/opengeodata b/src/opengeodata index 07e0094..9969e8a 100644 --- a/src/opengeodata +++ b/src/opengeodata @@ -8,6 +8,10 @@ .opengeodata::b.ns.bytemark.co.uk .opengeodata::c.ns.bytemark.co.uk +# Publish a CAA record indicating that only letsencrypt should issue certificates + +:opengeodata:257:\000\005\151\163\163\165\145\154\145\164\163\145\156\143\162\171\160\164\056\157\162\147 + # Main web server and it's aliases +opengeodata:193.60.236.19:600 diff --git a/src/openstreetmap b/src/openstreetmap index 952d4eb..bab0228 100644 --- a/src/openstreetmap +++ b/src/openstreetmap @@ -11,6 +11,10 @@ Zopenstreetmap:a.ns.bytemark.co.uk:hostmaster.openstreetmap.org:::::300 .openstreetmap::b.ns.bytemark.co.uk .openstreetmap::c.ns.bytemark.co.uk +# Publish a CAA record indicating that only letsencrypt should issue certificates + +:openstreetmap:257:\000\005\151\163\163\165\145\154\145\164\163\145\156\143\162\171\160\164\056\157\162\147 + # Make the virtual machine the primary MX with Bytemark as backup @openstreetmap:212.110.172.32:a:10 @@ -24,8 +28,8 @@ Zopenstreetmap:a.ns.bytemark.co.uk:hostmaster.openstreetmap.org:::::300 'openstreetmap:v=spf1 ip4\07289.16.179.150 ip4\072212.110.172.32 ip6\0722001\07241c8\07210\072996\07221d\0727dff\072fec3\072df70 ip6\0722001\07241c9\0721\072400\072\07232 ~all -# Add Google Postmaster Tools Verification -# Grant +# Google postmaster tools verification + Caf323lytato5.openstreetmap:gv-o4v3qh5pfayqex.dv.googlehosted.com # Delegate geo.openstreetmap.org to PowerDNS diff --git a/src/openstreetmap-uk b/src/openstreetmap-uk index 185bfb5..bed64e5 100644 --- a/src/openstreetmap-uk +++ b/src/openstreetmap-uk @@ -8,6 +8,10 @@ .openstreetmap-uk::b.ns.bytemark.co.uk .openstreetmap-uk::c.ns.bytemark.co.uk +# Publish a CAA record indicating that only letsencrypt should issue certificates + +:openstreetmap-uk:257:\000\005\151\163\163\165\145\154\145\164\163\145\156\143\162\171\160\164\056\157\162\147 + # Make the virtual machine the primary MX with Bytemark as backup @openstreetmap-uk::a.mx.openstreetmap.org:10 diff --git a/src/openstreetmap-za b/src/openstreetmap-za index 0781d89..aa93b72 100644 --- a/src/openstreetmap-za +++ b/src/openstreetmap-za @@ -8,6 +8,10 @@ .openstreetmap-za::b.ns.bytemark.co.uk .openstreetmap-za::c.ns.bytemark.co.uk +# Publish a CAA record indicating that only letsencrypt should issue certificates + +:openstreetmap-za:257:\000\005\151\163\163\165\145\154\145\164\163\145\156\143\162\171\160\164\056\157\162\147 + # Make the virtual machine the primary MX with Bytemark as backup @openstreetmap-za::a.mx.openstreetmap.org:10 diff --git a/src/osmfoundation b/src/osmfoundation index d11a775..8f24f05 100644 --- a/src/osmfoundation +++ b/src/osmfoundation @@ -8,6 +8,10 @@ .osmfoundation::b.ns.bytemark.co.uk .osmfoundation::c.ns.bytemark.co.uk +# Publish a CAA record indicating that only letsencrypt should issue certificates + +:osmfoundation:257:\000\005\151\163\163\165\145\154\145\164\163\145\156\143\162\171\160\164\056\157\162\147 + # SPF Record 'osmfoundation:v=spf1 a\072shenron.openstreetmap.org include\072_spf.google.com ~all:3600 diff --git a/src/stateofthemap b/src/stateofthemap index a5815a4..b9d5bd5 100644 --- a/src/stateofthemap +++ b/src/stateofthemap @@ -8,6 +8,10 @@ .stateofthemap::b.ns.bytemark.co.uk .stateofthemap::c.ns.bytemark.co.uk +# Publish a CAA record indicating that only letsencrypt should issue certificates + +:stateofthemap:257:\000\005\151\163\163\165\145\154\145\164\163\145\156\143\162\171\160\164\056\157\162\147 + # Let google handle email @stateofthemap::aspmx.l.google.com:1:3600 diff --git a/src/stateofthemap-eu b/src/stateofthemap-eu index 15a78fa..8bdf20d 100644 --- a/src/stateofthemap-eu +++ b/src/stateofthemap-eu @@ -8,6 +8,10 @@ .stateofthemap-eu::b.ns.bytemark.co.uk .stateofthemap-eu::c.ns.bytemark.co.uk +# Publish a CAA record indicating that only letsencrypt should issue certificates + +:stateofthemap-eu:257:\000\005\151\163\163\165\145\154\145\164\163\145\156\143\162\171\160\164\056\157\162\147 + # Let openstreetmap.at handle email for the moment @stateofthemap-eu::openstreetmap.at:1:3600 diff --git a/src/switch2osm b/src/switch2osm index 747ce73..3195e79 100644 --- a/src/switch2osm +++ b/src/switch2osm @@ -8,6 +8,10 @@ .switch2osm::b.ns.bytemark.co.uk .switch2osm::c.ns.bytemark.co.uk +# Publish a CAA record indicating that only letsencrypt should issue certificates + +:switch2osm:257:\000\005\151\163\163\165\145\154\145\164\163\145\156\143\162\171\160\164\056\157\162\147 + # Main web server and it's aliases +switch2osm:193.60.236.19:600 -- 2.43.2