Nsd

1- doas nano /var/nsd/etc/nsd.conf

```text
server:
hide-version: yes
verbosity: 2
database: "" # disable database
username: _nsd
logfile: "/var/log/nsd.log"

## bind to a specific address/port
ip-address: 38.87.162.30
# ip-address: 192.0.2.53@5678
ip-address: 2602:fccf:1:1030::

## make packets as small as possible, on by default
# minimal-responses: yes

## respond with truncation for ANY queries over UDP and allow ANY over TCP,
## on by default
# refuse-any: yes

remote-control:
control-enable: yes
control-interface: /var/run/nsd.sock

## tsig key example
#key:
# name: "tsig1.example.com."
# algorithm: hmac-sha256
# secret: "bWVrbWl0YXNkaWdvYXQ="

## master zone example
zone:
name: "domain-name"
zonefile:"master/domain-name"

zone:
name: "*.ip6.arpa"
zonefile:"master/*.ip6.arpa"

zone:
name: "*.in-addr.arpa"
zonefile:"master/*.in-addr.arpa"
```

3- start nsd:
 doas rcctl enable nsd
 doas rcctl start nsd

4- dig -x 2602:fccf:1:1030
 in-addr.arpa. 300 IN SOA b.in-addr-servers.arpa. nstld.iana.org. 2021071524 1800 900 604800 3600

5-
 doas nano /var/nsd/zones/master/domain-name
 doas cat /var/nsd/zones/master/domain-name | nc paste.ircnow.org 7777

```text
$ORIGIN domain-name. domain-name. 3600 SOA ns1.domain-name. admin.domain-name. (

2021082004 1800 900 604800 3600 )
domain-name. IN NS ns1.domain-name. domain-name. IN NS ns2.domain-name.

3600    IN      MX      10 mail.domain-name.
        3600    IN      A       38.87.162.30
        3600    IN      AAAA    2602:fccf:1:1030::
ipv6 3600 IN AAAA 2602:fccf:1:1030:: ip6 3600 IN AAAA 2602:fccf:1:1030:: irc6 3600 IN AAAA 2602:fccf:1:1030:: ns1 3600 IN A 38.87.162.30

3600    IN      AAAA    2602:fccf:1:1030::
ns2 3600 IN A 38.87.162.30

3600    IN      AAAA    2602:fccf:1:1030::
www 3600 IN A 38.87.162.30

3600    IN      AAAA    2602:fccf:1:1030::
irc 3600 IN A 38.87.162.30

3600    IN      AAAA    2602:fccf:1:1030::
imap 3600 IN A 38.87.162.30

3600    IN      AAAA    2602:fccf:1:1030::
smtp 3600 IN A 38.87.162.30

3600    IN      AAAA    2602:fccf:1:1030::
pop 3600 IN A 38.87.162.30

3600    IN      AAAA    2602:fccf:1:1030::
pop3 3600 IN A 38.87.162.30

3600    IN      AAAA    2602:fccf:1:1030::
MX 3600 IN A 38.87.162.30

3600    IN      AAAA    2602:fccf:1:1030::
mail 3600 IN A 38.87.162.30

3600    IN      AAAA    2602:fccf:1:1030::
bnc 3600 IN A 38.87.162.30

3600 IN AAAA 2602:fccf:1:1030::
_adsp._domainkey 86400 IN TXT "dkim=discardable;" mail._domainkey 86400 IN TXT "k=rsa; t=s; p=<encrypted password>"

zone domain-name is ok
```

6-
 doas nano /var/nsd/zones/master/*.ip6.arpa
 doas cat /var/nsd/zones/master/*.arpa | nc paste.ircnow.org 7777
| nc termbin.com 9999

```text
$ORIGIN *.ip6.arpa.
@ 3600 IN SOA ns1.domain-name. admin.domain-name. (

2021082001 1800 900 604800 3600 )
        3600    IN      NS      ns1.domain-name.
        3600    IN      NS      ns2.domain-name.
0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0 3600 IN PTR domain-name.
1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0 3600 IN PTR domain-name.

doas nano /var/nsd/zones/master/*.in-addr.arpa
doas cat /var/nsd/zones/master/30.162.87.38.in-addr.arpa | nc paste.ircnow.org 7777

30.162.87.38.in-addr.arpa. 3600 IN SOA ns1.domain-name. admin.domain-name. (

2021082001 1800 900 604800 3600 )

3600          IN          NS       ns1.domain-name. 
               3600          IN          NS       ns2.domain-name.
```

7-
 doas nano /etc/hostname.vio0
 doas cat /etc/hostname.vio0 | nc paste.ircnow.org 7777

```text
inet 38.81.163.154 0xffffff00
inet6 2602:fccf:1:154:: 48
inet6 2602:fccf:1:1030::1 48
inet6 2602:fccf:1:1030::2 48
inet6 2602:fccf:1:1030::3 48
ipv4 = "38.87.162.30"
ipv6 = "2602:fccf:1:1030::"
check = "pki domain-name filter { check_rdns check_fcrdns } hostname domain-name"
authcheck = "pki domain-name auth <passwd> filter { check_rdns check_fcrdns dkimsign } hostname domain-name"

# listeners
listen on socket filter "dkimsign"
listen on lo0 filter "dkimsign"
listen on $ipv4 port 25 tls $check
listen on $ipv6 port 25 tls $check
listen on $ipv4 port 465 tls-require $authcheck
listen on $ipv6 port 465 tls-require $authcheck
listen on $ipv4 port 587 tls-require $authcheck
listen on $ipv6 port 587 tls-require $authcheck
```

**Note:**

```text
<Error> sh /etc/netstart
<Error> thats the mother of networking
```

doas nsd-checkzone domain-name /var/nsd/zones/master/domain-name
 doas nsd-checkconf /var/nsd/etc/nsd.conf
 doas cat /var/log/nsd.log | nc paste.ircnow.org 7777
 doas cat /var/nsd/etc/nsd.conf | nc paste.ircnow.org 7777
 doas cat /var/nsd/zones/master/domain-name | nc paste.ircnow.org 7777
 doas cat /var/nsd/zones/master/*.arpa | nc paste.ircnow.org 7777