1178784Skmacy/*
2178784Skmacy * Copyright (C) Internet Systems Consortium, Inc. ("ISC")
3178784Skmacy *
4178784Skmacy * SPDX-License-Identifier: MPL-2.0
5178784Skmacy *
6256829Snp * This Source Code Form is subject to the terms of the Mozilla Public
7256829Snp * License, v. 2.0.  If a copy of the MPL was not distributed with this
8256829Snp * file, you can obtain one at https://mozilla.org/MPL/2.0/.
9256829Snp *
10256829Snp * See the COPYRIGHT file distributed with this work for additional
11256829Snp * information regarding copyright ownership.
12256829Snp */
13256829Snp
14254735Snp// NS2
15178784Skmacy
16178784Skmacyoptions {
17256829Snp	query-source address 10.53.0.2;
18256829Snp	notify-source 10.53.0.2;
19178784Skmacy	transfer-source 10.53.0.2;
20256829Snp	port @PORT@;
21256829Snp	pid-file "named.pid";
22	listen-on { 10.53.0.2; };
23	listen-on-v6 { none; };
24	allow-transfer { any; };
25	recursion no;
26	dnssec-policy "none";
27	dnssec-validation no;
28};
29
30key rndc_key {
31	secret "1234abcd8765";
32	algorithm @DEFAULT_HMAC@;
33};
34
35controls {
36	inet 10.53.0.2 port @CONTROLPORT@ allow { any; } keys { rndc_key; };
37};
38
39/* Inherit dnssec-policy (which is none) */
40
41zone "unsigned.tld" {
42	type primary;
43	file "unsigned.tld.db";
44};
45
46/* Override dnssec-policy */
47
48zone "signed.tld" {
49	type primary;
50	file "signed.tld.db";
51	dnssec-policy "default";
52	inline-signing yes;
53};
54
55/* Primary service for ns3 */
56
57zone "secondary.kasp" {
58	type primary;
59	file "secondary.kasp.db";
60	allow-transfer { 10.53.0.3; };
61	notify yes;
62};
63