1,760
edits
Changes
→Assignment Deliverables
**Provide the administrator for your top domain (The root name server operator(s)) with a copy of the DS key for your domain. If you have not already done so, include the glue record as well.
**Configure a DNSSEC Trust Anchor so that your co-nfs server considers your primary DNS server (the one with the <yourname>.ops zone) to already be authenticated.
== Supporting Services ==
You need the following services and network infrastructure to support your Internet Email System (some of which should have been configured in assignment 1):
* pri-dns must be the primary DNS name server for your domain with the proper MX record(s), SPF record(s), A record(s), and PTR record(s). It must be queriable by any machines in the 192.168.0.0/16 network.
**Provide the root name server operator(s) of the <yourname>.ops domain with glue records for your domain.
* co-nfs must be a caching DNS server, accessible only to machines in your networks, that will start its query with the root name server(s) in the virtual lab (e.g. rns-ldap.rdu6.ops (192.168.6.4), rns-ldap.wsu15.ops (192.168.35.4)), and then the appropriate primary DNS server.
* if you are one of the root name server operators, your rns-ldap must provide authoritative responses to any valid DNS queries.
** All authorized root name servers in the virtual lab must be queriable by any network devices from the 192.168.0.0/16 network.
** It must have a copy of the root zone data of the virtual lab.
<!--
== BONUS ==
# Optional: Use LDAP authentication to secure your web mail server or Access Agent. (Bonus item +10%)
# Optional: Implement dynamic firewall rules to block black-listed IP addresses of email spammer. (Bonus item +10%) -->
= Completing the Assignment =
* On the assignment due date on Apr 12, 2021, please attend the online assessment meeting to complete the final task and demonstrate the assignment deliverables as prescribed.
