remove obsolete option "dnssec-enable"

Also edns-udp-size.

Set max-udp-size as per DNS flag day 2020, see
https://www.isc.org/blogs/dns-flag-day-2020-2/ .

remove obsolete option

branches: 1.7.22; 1.7.30; 1.7.32;
- read the root keys from our file
- explain what happens if we get clock skew

branches: 1.6.6; 1.6.12;
Enable dnssec, and populate managed-keys.bind

branches: 1.5.2; 1.5.6; 1.5.10;
The default named.conf should not contain a query-source statement.
Comment it out and describe what it's for and why not to use it.

branches: 1.4.4; 1.4.6; 1.4.14; 1.4.20; 1.4.24;
disable recursion by attackers (yes, attackers do use recursion to perform DoS).

set the query source address to 53; with this setup, the vanilla config
file will work in most situations.

branches: 1.2.2;
Remove the localhost ip6.int example since, as per RFC 4159, ip6.int is
now depreciated.

Discussedon tech-net.

Move "named.conf" example configuration to "/etc" because that is where
named(8) looks for it. You can now really get a caching name server
by simply setting "named=yes" in "/etc/rc.conf" as documented in
The NetBSD Guide. This fixes PR bin/30662 by Christian Hattemer.

Also edns-udp-size.

Set max-udp-size as per DNS flag day 2020, see
https://www.isc.org/blogs/dns-flag-day-2020-2/ .

remove obsolete option

branches: 1.7.22; 1.7.30; 1.7.32;
- read the root keys from our file
- explain what happens if we get clock skew

branches: 1.6.6; 1.6.12;
Enable dnssec, and populate managed-keys.bind

branches: 1.5.2; 1.5.6; 1.5.10;
The default named.conf should not contain a query-source statement.
Comment it out and describe what it's for and why not to use it.

branches: 1.4.4; 1.4.6; 1.4.14; 1.4.20; 1.4.24;
disable recursion by attackers (yes, attackers do use recursion to perform DoS).

set the query source address to 53; with this setup, the vanilla config
file will work in most situations.

branches: 1.2.2;
Remove the localhost ip6.int example since, as per RFC 4159, ip6.int is
now depreciated.

Discussedon tech-net.

Move "named.conf" example configuration to "/etc" because that is where
named(8) looks for it. You can now really get a caching name server
by simply setting "named=yes" in "/etc/rc.conf" as documented in
The NetBSD Guide. This fixes PR bin/30662 by Christian Hattemer.

remove obsolete option

- read the root keys from our file
- explain what happens if we get clock skew

branches: 1.6.6; 1.6.12;
Enable dnssec, and populate managed-keys.bind

branches: 1.5.2; 1.5.6; 1.5.10;
The default named.conf should not contain a query-source statement.
Comment it out and describe what it's for and why not to use it.

branches: 1.4.4; 1.4.6; 1.4.14; 1.4.20; 1.4.24;
disable recursion by attackers (yes, attackers do use recursion to perform DoS).

set the query source address to 53; with this setup, the vanilla config
file will work in most situations.

branches: 1.2.2;
Remove the localhost ip6.int example since, as per RFC 4159, ip6.int is
now depreciated.

Discussedon tech-net.

Move "named.conf" example configuration to "/etc" because that is where
named(8) looks for it. You can now really get a caching name server
by simply setting "named=yes" in "/etc/rc.conf" as documented in
The NetBSD Guide. This fixes PR bin/30662 by Christian Hattemer.

- read the root keys from our file
- explain what happens if we get clock skew

branches: 1.6.6; 1.6.12;
Enable dnssec, and populate managed-keys.bind

branches: 1.5.2; 1.5.6; 1.5.10;
The default named.conf should not contain a query-source statement.
Comment it out and describe what it's for and why not to use it.

branches: 1.4.4; 1.4.6; 1.4.14; 1.4.20; 1.4.24;
disable recursion by attackers (yes, attackers do use recursion to perform DoS).

set the query source address to 53; with this setup, the vanilla config
file will work in most situations.

branches: 1.2.2;
Remove the localhost ip6.int example since, as per RFC 4159, ip6.int is
now depreciated.

Discussedon tech-net.

Move "named.conf" example configuration to "/etc" because that is where
named(8) looks for it. You can now really get a caching name server
by simply setting "named=yes" in "/etc/rc.conf" as documented in
The NetBSD Guide. This fixes PR bin/30662 by Christian Hattemer.

Pull up following revision(s) (requested by jwise in ticket #725):
etc/named.conf: revision 1.1
etc/namedb/named.conf: file removal
etc/namedb/Makefile: revision 1.2
etc/Makefile: revision 1.314
distrib/sets/lists/etc/mi: revision 1.159
Move "named.conf" example configuration to "/etc" because that is where
named(8) looks for it. You can now really get a caching name server
by simply setting "named=yes" in "/etc/rc.conf" as documented in
The NetBSD Guide. This fixes PR bin/30662 by Christian Hattemer.

file named.conf was added on branch netbsd-3 on 2005-09-04 19:57:50 +0000

Sync with wrstuden-revivesa-base-2.

Sync with HEAD.

Pull up following revision(s) (requested by dholland in ticket #1169):
etc/named.conf: revision 1.5
The default named.conf should not contain a query-source statement.
Comment it out and describe what it's for and why not to use it.

Sync with netbsd-4.

Pull up following revision(s) (requested by dholland in ticket #1169):
etc/named.conf: revision 1.5
The default named.conf should not contain a query-source statement.
Comment it out and describe what it's for and why not to use it.

Pull up following revision(s) (requested by spz in ticket #1528):
etc/named.conf: revision 1.6
etc/mtree/special: revision 1.133
Enable dnssec, and populate managed-keys.bind
Add directory for bind's managed keys.

Pull up following revision(s) (requested by spz in ticket #1528):
etc/named.conf: revision 1.6
etc/mtree/special: revision 1.133
Enable dnssec, and populate managed-keys.bind
Add directory for bind's managed keys.

Pull up following revision(s) (requested by spz in ticket #1528):
etc/named.conf: revision 1.6
etc/mtree/special: revision 1.133
Enable dnssec, and populate managed-keys.bind
Add directory for bind's managed keys.

resync from head

sync with head.

for a reference, the tree before this commit was tagged
as yamt-pagecache-tag8.

this commit was splitted into small chunks to avoid
a limitation of cvs. ("Protocol error: too many arguments")