1/* 2 * Copyright (C) Internet Systems Consortium, Inc. ("ISC") 3 * 4 * SPDX-License-Identifier: MPL-2.0 5 * 6 * This Source Code Form is subject to the terms of the Mozilla Public 7 * License, v. 2.0. If a copy of the MPL was not distributed with this 8 * file, you can obtain one at https://mozilla.org/MPL/2.0/. 9 * 10 * See the COPYRIGHT file distributed with this work for additional 11 * information regarding copyright ownership. 12 */ 13 14include "../../_common/rndc.key"; 15 16controls { 17 inet 10.53.0.2 port @CONTROLPORT@ allow { any; } keys { rndc_key; }; 18}; 19 20options { 21 port @PORT@; 22 pid-file "named.pid"; 23 listen-on { 10.53.0.2; 10.53.0.4; 10.53.0.5; }; 24 listen-on-v6 { none; }; 25 recursion no; 26 new-zones-directory "new-zones"; 27 dnssec-validation no; 28}; 29 30view internal { 31 match-clients { 10.53.0.2; }; 32 allow-new-zones no; 33 recursion yes; 34 35 response-policy { zone "policy"; }; 36 37 zone "." { 38 type hint; 39 file "../../_common/root.hint"; 40 }; 41 42 zone "policy" { 43 type primary; 44 file "normal.db"; 45 }; 46}; 47 48view directory { 49 match-clients { 10.53.0.5; }; 50 allow-new-zones yes; 51 52 zone "." { 53 type hint; 54 file "../../_common/root.hint"; 55 }; 56}; 57 58view external { 59 match-clients { any; }; 60 allow-new-zones yes; 61 62 zone "." { 63 type hint; 64 file "../../_common/root.hint"; 65 }; 66}; 67 68# This view is only here to test that configuration context is cleaned 69# up correctly when using multiple named ACLs (regression test for RT #22739) 70acl match { none; }; 71acl nobody { none; }; 72view extra { 73 match-clients { match; }; 74 allow-new-zones yes; 75 allow-transfer { nobody; }; 76 allow-query { nobody; }; 77 allow-recursion { nobody; }; 78}; 79