瀏覽代碼

feat(dnssec): increase number of NSEC3 iterations to 300

Peter Thomassen 8 年之前
父節點
當前提交
a134474203
共有 1 個文件被更改,包括 1 次插入1 次删除
  1. 1 1
      nslord/cronhook/secure-zones.sh

+ 1 - 1
nslord/cronhook/secure-zones.sh

@@ -9,7 +9,7 @@ for ZONE in `echo "SELECT name FROM domains WHERE type = 'NATIVE' && id NOT IN(S
 
 	PARENT=${ZONE#*.}
 	SALT=`head -c300 /dev/urandom | sha512sum | cut -b 1-16`
-	pdnsutil secure-zone $ZONE && pdnsutil set-nsec3 $ZONE "1 0 10 $SALT" && pdnsutil set-kind $ZONE MASTER
+	pdnsutil secure-zone $ZONE && pdnsutil set-nsec3 $ZONE "1 0 300 $SALT" && pdnsutil set-kind $ZONE MASTER
 
 	if [ "$PARENT" == "dedyn.io" ]; then
 		filename=/tmp/`date -Ins`_$ZONE.log