{"id":33717,"date":"2019-10-31T21:54:20","date_gmt":"2019-10-31T18:54:20","guid":{"rendered":"https:\/\/prohoster.info\/blog\/delegirovanie-obratnoj-zony-podseti-menee-24-v-bind-kak-eto-rabotaet\/"},"modified":"2019-10-31T21:54:20","modified_gmt":"2019-10-31T18:54:20","slug":"delegirovanie-obratnoj-zony-podseti-menee-24-v-bind-kak-eto-rabotaet","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/delegirovanie-obratnoj-zony-podseti-menee-24-v-bind-kak-eto-rabotaet","title":{"rendered":"Delegov\u00e1n\u00ed zp\u011btn\u00e9 z\u00f3ny pods\u00edt\u011b m\u00e9n\u011b ne\u017e \/24 v BIND. Jak to funguje","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Jednou jsem \u010delil \u00fakolu poskytnout jednomu z klient\u016f pr\u00e1vo upravovat PTR z\u00e1znamy ve sv\u011b\u0159en\u00e9 pods\u00edti \/28. Nem\u00e1m automatizaci pro extern\u00ed \u00fapravy nastaven\u00ed BIND. Rozhodl jsem se proto j\u00edt jinou cestou \u2014 delegovat klientovi \u010d\u00e1st PTR z\u00f3ny pods\u00edt\u011b \/24.<\/p>\n

Na prvn\u00ed pohled by to m\u011blo b\u00fdt jednoduch\u00e9. Sta\u010d\u00ed spr\u00e1vn\u011b zapsat pods\u00ed\u0165 a sm\u011brovat na pot\u0159ebn\u00e9 NS, jak se to d\u011bl\u00e1 s poddom\u00e9nou. Ale nen\u00ed to tak jednoduch\u00e9 (i kdy\u017e ve skute\u010dnosti je to primitivn\u00ed, ale intuice nepom\u016f\u017ee), proto p\u00ed\u0161u tento \u010dl\u00e1nek.<\/p>\n

Kdo chce s\u00e1m pochopit, m\u016f\u017ee si p\u0159e\u010d\u00edst. RFC<\/a><\/noindex>
\nKdo chce hotov\u00e9 \u0159e\u0161en\u00ed, v\u00edt\u00e1n pod kat.
\n<\/a><\/noindex>
\nAbych nezdr\u017eoval ty, kte\u0159\u00ed maj\u00ed r\u00e1di metodu kop\u00edrov\u00e1n\u00ed a vkl\u00e1d\u00e1n\u00ed, nejprve zve\u0159ejn\u00edm praktickou \u010d\u00e1st, a po n\u00ed teoretickou.<\/p>\n

1. Praxe. Delegujeme z\u00f3nu \/28.<\/b><\/p>\n

P\u0159edpokl\u00e1dejme, \u017ee m\u00e1me pods\u00ed\u0165. 7.8.9.0\/24<\/b>. Mus\u00edme delegovat pods\u00ed\u0165 7.8.9.240\/28<\/b> na dns klienta. 7.8.7.8<\/b> (ns1.client.domain.<\/b>).<\/p>\n

Na poskytovatelsk\u00e9m DNS je t\u0159eba naj\u00edt soubor, kter\u00fd popisuje zp\u011btnou z\u00f3nu t\u00e9to pods\u00edt\u011b. P\u0159edpokl\u00e1dejme, \u017ee to bude 9.8.7.in-addr.arpa.<\/b>.
\nZ\u00e1znamy od 240 do 255 komentujeme, pokud existuj\u00ed. A na konec souboru zap\u00ed\u0161eme n\u00e1sleduj\u00edc\u00ed:<\/p>\n

255-240  IN  NS      7.8.7.8\n$GENERATE 240-255 $ CNAME $.255-240<\/code><\/pre>\n
\nnezapom\u00edn\u00e1me zv\u00fd\u0161it serial z\u00f3ny a prov\u00e9st <\/p>\n
rndc reload.<\/code><\/pre>\n
\nT\u00edm kon\u010d\u00ed \u010d\u00e1st poskytovatele. P\u0159ech\u00e1z\u00edme k z\u00e1kaznick\u00e9mu DNS.<\/p>\n
Nejprve vytvo\u0159\u00edme soubor \/etc\/bind\/master\/255-240.9.8.7.in-addr.arpa<\/b> n\u00e1sleduj\u00edc\u00edho obsahu:<\/p>\n
$ORIGIN 255-240.9.8.7.in-addr.arpa.\n$TTL 1W\n@                       1D IN SOA       ns1.client.domain. root.client.domain. (\n                        2008152607      ; serial\n                        3H              ; refresh\n                        15M             ; retry\n                        1W              ; expiry\n                        1D )            ; minimum\n@                       IN NS        ns1.client.domain.\n@                       IN NS        ns2.client.domain.\n241                     IN PTR          test.client.domain.\n242                     IN PTR          test2.client.domain.\n245                     IN PTR          test5.client.domain.\n<\/code><\/pre>\n
\nA do named.conf<\/b> p\u0159id\u00e1me popis na\u0161eho nov\u00e9ho souboru:<\/p>\n
zone \"255-240.9.8.7.in-addr.arpa.\" IN {\n        type master;\n        file \"master\/255-240.9.8.7.in-addr.arpa\";\n};<\/code><\/pre>\n
\nB restartujeme proces bind.<\/p>\n
\/etc\/init.d\/named restart<\/code><\/pre>\n
\nHotovo. Te\u010f m\u016f\u017eeme kontrolovat.<\/p>\n
#>  host 7.8.9.245 \n245.9.8.7.in-addr.arpa is an alias for 245.255-240.9.8.7.in-addr.arpa.\n245.255-240.9.8.7.in-addr.arpa domain name pointer test5.client.domain.<\/code><\/pre>\n
\nV\u0161imn\u011bte si, \u017ee se vrac\u00ed nejen PTR z\u00e1znam, ale i CNAME. Tak to m\u00e1 b\u00fdt. Pokud v\u00e1s zaj\u00edm\u00e1 pro\u010d, v\u00edt\u00e1ni do dal\u0161\u00ed kapitoly.<\/p>\n
2. Teorie. Jak to funguje.<\/b><\/p>\n
Je t\u011b\u017ek\u00e9 nastavovat a ladit \u010dernou sk\u0159\u00ed\u0148ku. Je mnohem snaz\u0161\u00ed, pokud rozum\u00edte tomu, co se uvnit\u0159 d\u011bje.<\/p>\n
Kdy\u017e delegujeme poddom\u00e9nu v dom\u00e9n\u011b domain<\/b>, zapisujeme n\u011bco takov\u00e9ho:<\/p>\n
client.domain.\tNS\tns1.client.domain.\nns1.client.domain.\tA\t7.8.7.8<\/code><\/pre>\n
\n\u0158\u00edk\u00e1me v\u0161em, kte\u0159\u00ed se ptaj\u00ed, \u017ee za tento \u00fasek neodpov\u00edd\u00e1me a \u0159\u00edk\u00e1me, kdo odpov\u00edd\u00e1. A v\u0161echny \u017e\u00e1dosti na client.domain<\/b> jsou p\u0159esm\u011brov\u00e1ny na 7.8.7.8. P\u0159i kontrole vid\u00edme n\u00e1sleduj\u00edc\u00ed obraz (nech\u00e1me stranou, co tam m\u00e1 klient. To nen\u00ed d\u016fle\u017eit\u00e9):<\/p>\n
# host test.client.domain\ntest.client.domain has address 7.8.9.241<\/code><\/pre>\n
\nTedy n\u00e1m bylo sd\u011bleno, \u017ee existuje takov\u00fd A z\u00e1znam a jeho IP je 7.8.9.241. \u017d\u00e1dn\u00e9 dal\u0161\u00ed informace.<\/p>\n
A jak by se to sam\u00e9 dalo ud\u011blat se subnetem?<\/b><\/p>\n
Jeliko\u017e n\u00e1\u0161 DNS server je zaps\u00e1n v RIPE, p\u0159i dotazu na PTR IP adresy z na\u0161\u00ed s\u00edt\u011b bude i tak prvn\u00ed dotaz u n\u00e1s. Logika je stejn\u00e1 jako u dom\u00e9n. Jen jak zapsat subnet do z\u00f3nov\u00e9ho souboru?<\/p>\n
Zkou\u0161\u00edme zapsat takto:<\/p>\n
255-240  IN  NS      7.8.7.8<\/code><\/pre>\n
\nA\u2026 a miracle did not happen. We are not receiving any request redirection. The fact is that bind is not aware at all that these records in the reverse zone file are IP addresses and certainly does not understand the range record. To it, this is just some symbolic subdomain. So, for bind, there will be no difference between «255-240<\/b>\u201e a \u201eoursuperclient<\/b>«. And for the request to go where it should, the address in the request must look like this: 241.255-240.9.8.7.in-addr.arpa<\/b>. Nebo takto, pokud pou\u017e\u00edv\u00e1me symbolick\u00fd subdom\u00e9n: 241.oursuperclient.9.8.7.in-addr.arpa<\/b>. To se li\u0161\u00ed od b\u011b\u017en\u00e9ho: 241.9.8.7.in-addr.arpa<\/b>.<\/p>\n
Takov\u00fd dotaz se ru\u010dn\u011b d\u011bl\u00e1 obt\u00ed\u017en\u011b. A i kdyby se to povedlo, nen\u00ed jasn\u00e9, jak to pou\u017e\u00edt v re\u00e1ln\u00e9m \u017eivot\u011b. V\u017edy\u0165 na dotaz 7.8.9.241<\/b> n\u00e1m st\u00e1le odpov\u00edd\u00e1 poskytovatel\u016fv DNS, a ne klientsk\u00fd.<\/p>\n
A tady vstupuje do hry CNAME<\/b>.<\/p>\n
Na stran\u011b poskytovatele je pot\u0159eba ud\u011blat pro v\u0161echny IP adresy subnetu alias v form\u00e1tu, kter\u00fd p\u0159ed\u00e1 dotaz klientsk\u00e9mu DNS.<\/p>\n
255-240  IN  NS      ns1.client.domain.\n241     IN  CNAME   241.255-240\n242     IN  CNAME   242.255-240\natd.\n<\/code><\/pre>\n
\nTo je pro piln\u00e9 =). <\/p>\n
A pro lenochy se v\u00edce hod\u00ed konstrukce n\u00ed\u017ee:<\/p>\n
255-240  IN  NS      ns1.client.domain.\n$GENERATE 240-255 $ CNAME $.255-240<\/code><\/pre>\n
\nNyn\u00ed bude dotaz na informace o adrese 7.8.9.241<\/b> z 241.9.8.7.in-addr.arpa<\/b> na DNS serveru poskytovatele p\u0159etvo\u0159en na 241.255-240.9.8.7.in-addr.arpa<\/b> a odejde na DNS klienta. <\/p>\n
Ze strany klienta bude pot\u0159eba zpracov\u00e1vat takov\u00e9 dotazy. V souladu s t\u00edm vytv\u00e1\u0159\u00edme z\u00f3nu 255-240.9.8.7.in-addr.arpa<\/b>. V n\u00ed m\u016f\u017eeme teoreticky um\u00edstit zp\u011btn\u00e9 z\u00e1znamy pro jak\u00e9koli IP cel\u00e9 pods\u00edt\u011b \/24, ale dotazovat se na n\u00e1s budou jen o t\u011bch, kter\u00e9 n\u00e1m poskytovatel p\u0159esm\u011bruje, tak\u017ee s t\u00edm si p\u0159\u00edli\u0161 nezahrajeme =).
\nPro ilustraci je\u0161t\u011b jednou uvedu p\u0159\u00edklad obsahu souboru obr\u00e1cen\u00e9 z\u00f3ny ze strany klienta:<\/p>\n
$ORIGIN 255-240.9.8.7.in-addr.arpa.\n$TTL 1W\n@                       1D IN SOA       ns1.client.domain. root.client.domain. (\n                        2008152607      ; serial\n                        3H              ; refresh\n                        15M             ; retry\n                        1W              ; expiry\n                        1D )            ; minimum\n@                       IN NS        ns1.client.domain.\n@                       IN NS        ns2.client.domain.\n241                     IN PTR          test.client.domain.\n242                     IN PTR          test2.client.domain.\n245                     IN PTR          test5.client.domain.\n<\/code><\/pre>\n
\nTohoto d\u016fvodu, \u017ee z na\u0161\u00ed strany poskytovatele pou\u017e\u00edv\u00e1me CNAME, dost\u00e1v\u00e1me na dotaz dat odpov\u011b\u010f IP adrese<\/a> ve form\u011b dvou z\u00e1znam\u016f, nikoli jednoho.<\/p>\n
#>  host 7.8.9.245 \n245.9.8.7.in-addr.arpa is an alias for 245.255-240.9.8.7.in-addr.arpa.\n245.255-240.9.8.7.in-addr.arpa domain name pointer test5.client.domain.<\/code><\/pre>\n
\nA nezapome\u0148te spr\u00e1vn\u011b nastavit ACL. Proto\u017ee nem\u00e1 smysl br\u00e1t si PTR z\u00f3nu a nikomu z vn\u011bj\u0161\u00ed strany neodpov\u00eddat =).<\/b><\/i>
\n
Zdroj: habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"
\u0412\u0441\u0442\u0430\u043b\u0430 \u043e\u0434\u043d\u0430\u0436\u0434\u044b \u043f\u0435\u0440\u0435\u0434\u043e \u043c\u043d\u043e\u0439 \u0437\u0430\u0434\u0430\u0447\u0430, \u043e\u0442\u0434\u0430\u0442\u044c \u043e\u0434\u043d\u043e\u043c\u0443 \u0438\u0437 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u043f\u0440\u0430\u0432\u043e \u043d\u0430 \u0440\u0435\u0434\u0430\u043a\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 PTR-\u0437\u0430\u043f\u0438\u0441\u0435\u0439 \u043e\u0442\u0434\u0430\u043d\u043d\u043e\u0439 \u0435\u043c\u0443 \u043f\u043e\u0434\u0441\u0435\u0442\u0438 \/28. \u0410\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0430\u0446\u0438\u0438 \u0434\u043b\u044f \u0440\u0435\u0434\u0430\u043a\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043a BIND \u0438\u0437\u0432\u043d\u0435 \u0443 \u043c\u0435\u043d\u044f \u043d\u0435\u0442. \u041f\u043e\u044d\u0442\u043e\u043c\u0443 \u044f \u0440\u0435\u0448\u0438\u043b \u043f\u043e\u0439\u0442\u0438 \u0434\u0440\u0443\u0433\u0438\u043c \u043f\u0443\u0442\u0435\u043c \u2014 \u0434\u0435\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043a\u043b\u0438\u0435\u043d\u0442\u0443 \u043a\u0443\u0441\u043e\u043a PTR-\u0437\u043e\u043d\u044b \u043f\u043e\u0434\u0441\u0435\u0442\u0438 \/24. \u041a\u0430\u0437\u0430\u043b\u043e\u0441\u044c \u0431\u044b \u2014 \u0447\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043f\u0440\u043e\u0449\u0435? \u041f\u0440\u043e\u0441\u0442\u043e \u043d\u0443\u0436\u043d\u044b\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c \u043f\u0440\u043e\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u043c \u043f\u043e\u0434\u0441\u0435\u0442\u044c \u0438 \u043d\u0430\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u043c \u043d\u0430 \u043d\u0443\u0436\u043d\u044b\u0439 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-33717","post","type-post","status-publish","format-standard","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Delegace zp\u011btn\u00e9 z\u00f3ny subnetu m\u00e9n\u011b ne\u017e \/24 v BIND. Jak to funguje | ProHoster","description":"Jednou se mi postavila p\u0159ed \u00fakol, poskytnout jednomu z klient\u016f pr\u00e1vo na \u00fapravu PTR z\u00e1znam\u016f pro jemu p\u0159id\u011blen\u00fd subnet \/28. Nem\u00e1m automatizaci pro \u00fapravu nastaven\u00ed BIND zven\u010d\u00ed.","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/delegirovanie-obratnoj-zony-podseti-menee-24-v-bind-kak-eto-rabotaet","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0414\u0435\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u043e\u0431\u0440\u0430\u0442\u043d\u043e\u0439 \u0437\u043e\u043d\u044b \u043f\u043e\u0434\u0441\u0435\u0442\u0438 \u043c\u0435\u043d\u0435\u0435 \/24 \u0432 BIND. \u041a\u0430\u043a \u044d\u0442\u043e \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 | ProHoster","og:description":"\u0412\u0441\u0442\u0430\u043b\u0430 \u043e\u0434\u043d\u0430\u0436\u0434\u044b \u043f\u0435\u0440\u0435\u0434\u043e \u043c\u043d\u043e\u0439 \u0437\u0430\u0434\u0430\u0447\u0430, \u043e\u0442\u0434\u0430\u0442\u044c \u043e\u0434\u043d\u043e\u043c\u0443 \u0438\u0437 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u043f\u0440\u0430\u0432\u043e \u043d\u0430 \u0440\u0435\u0434\u0430\u043a\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 PTR-\u0437\u0430\u043f\u0438\u0441\u0435\u0439 \u043e\u0442\u0434\u0430\u043d\u043d\u043e\u0439 \u0435\u043c\u0443 \u043f\u043e\u0434\u0441\u0435\u0442\u0438 \/28. \u0410\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0430\u0446\u0438\u0438 \u0434\u043b\u044f \u0440\u0435\u0434\u0430\u043a\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043a BIND \u0438\u0437\u0432\u043d\u0435 \u0443 \u043c\u0435\u043d\u044f \u043d\u0435\u0442.","og:url":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/delegirovanie-obratnoj-zony-podseti-menee-24-v-bind-kak-eto-rabotaet","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:54:20+00:00","article:modified_time":"2019-10-31T18:54:20+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"33717","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-08 20:27:18","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 02:35:31","updated":"2026-02-08 20:27:18","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/33717","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=33717"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/33717\/revisions"}],"predecessor-version":[{"id":157777,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/33717\/revisions\/157777"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=33717"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=33717"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=33717"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}