named.conf.in revision 1.1.1.7
1/* 2 * Copyright (C) Internet Systems Consortium, Inc. ("ISC") 3 * 4 * SPDX-License-Identifier: MPL-2.0 5 * 6 * This Source Code Form is subject to the terms of the Mozilla Public 7 * License, v. 2.0. If a copy of the MPL was not distributed with this 8 * file, you can obtain one at https://mozilla.org/MPL/2.0/. 9 * 10 * See the COPYRIGHT file distributed with this work for additional 11 * information regarding copyright ownership. 12 */ 13 14options { 15 query-source address 10.53.0.1; 16 notify-source 10.53.0.1; 17 transfer-source 10.53.0.1; 18 port @PORT@; 19 pid-file "named.pid"; 20 listen-on { 10.53.0.1; }; 21 listen-on-v6 { none; }; 22 recursion yes; 23 dnssec-validation yes; 24 deny-answer-addresses { 192.0.2.0/24; 2001:db8:beef::/48; } 25 except-from { "example.org"; }; 26 deny-answer-aliases { "example.org"; } 27 except-from { "goodcname.example.net"; 28 "gooddname.example.net"; }; 29 allow-query {!10.53.0.8; any; }; 30 max-zone-ttl unlimited; 31 attach-cache "globalcache"; 32}; 33 34server 10.53.0.3 { 35 tcp-only yes; 36}; 37 38server 10.42.23.3/32 { 39 notify-source 10.42.22.1; 40 query-source address 10.42.22.1 port 0; 41 transfer-source 10.42.22.1; 42}; 43 44server fd92:7065:b8e:ffff::1000 { 45 notify-source-v6 fd92:7065:b8e:ffff::1001; 46 query-source-v6 address fd92:7065:b8e:ffff::1001 port 0; 47 transfer-source-v6 fd92:7065:b8e:ffff::1001; 48}; 49 50/* 51 * Must be first view so that there is a CH cache with name 52 * "globalcache" before the recursive "default"/IN view is configured. 53 */ 54view "class" chaos { 55 zone "chaostest" CHAOS { 56 type primary; 57 file "chaostest.db"; 58 }; 59}; 60 61/* 62 * Must be second view so that so that we can check we don't attach to the 63 * "globalcache"/CH cache. 64 */ 65view "default" { 66 zone "." { 67 type hint; 68 file "root.hint"; 69 }; 70}; 71 72key rndc_key { 73 secret "1234abcd8765"; 74 algorithm @DEFAULT_HMAC@; 75}; 76 77controls { 78 inet 10.53.0.1 port @CONTROLPORT@ allow { any; } keys { rndc_key; }; 79}; 80