//
// named.conf for Red Hat caching-nameserver
//
options {
// forwarders is a list of DNS servers at iLand that will answer requests for zones
// not configured on this server. Basicly, the internet
forwarders { 65.57.248.5; };
forward first;
directory "/var/named";
dump-file "/var/named/data/cache_dump.db";
statistics-file "/var/named/data/named_stats.txt";
/*
* If there is a firewall between you and nameservers you want
* to talk to, you might need to uncomment the query-source
* directive below. Previous versions of BIND always asked
* questions using port 53, but BIND 8.1 uses an unprivileged
* port by default.
*/
// Functions that can be performed by acl defined groups
allow-query { flg; };
allow-recursion { flg; };
// Define this for compatablity
query-source address * port 53;
};
//
// a caching only nameserver config - before it was eddited.
//
// ACL
// The IP's and networks that are allowed to use this nameserver
acl flg { 192.168.100.0/24; 192.168.102.0/24; 127.0.0.1; 192.168.99.0/24; 70.34.23.245; 192.168.105.0/24; 67.125.106.120;};
// I haven't done anything with this section of the server yet.
// Should do it though soon.
controls {
inet 127.0.0.1 allow { localhost; } keys { rndckey; };
};
zone "." IN {
type hint;
file "named.ca";
};
zone "localdomain" IN {
type master;
file "localdomain.zone";
allow-update { none; };
};
// Here is our domain. All development and testing machines
// are part of devel.local.
zone "devel.local" IN {
type master;
file "zone.devel.local";
};
// Here is our reverse records for 192.168.100.0
zone "100.168.192.in-addr.arpa" {
type master;
file "rev.192.168.100";
};
// Heere is our reverse records for 192.168.99.0
zone "99.168.192.in-addr.arpa" {
type master;
file "rev.192.168.99";
};
zone "localhost" IN {
type master;
file "localhost.zone";
allow-update { none; };
};
zone "0.0.127.in-addr.arpa" IN {
type master;
file "named.local";
allow-update { none; };
};
zone "0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ip6.arpa" IN {
type master;
file "named.ip6.local";
allow-update { none; };
};
zone "255.in-addr.arpa" IN {
type master;
file "named.broadcast";
allow-update { none; };
};
zone "0.in-addr.arpa" IN {
type master;
file "named.zero";
allow-update { none; };
};
include "/etc/rndc.key";
// Logging
// I turned this on to watch debug output. To watch uncommnet and
// tail -f /var/named/chroot/var/named/data/info
/* logging {
channel simple_log {
file "data/info" versions 2 size 20m;
severity debug;
print-severity yes;
print-time yes;
print-category yes;
};
category default{
simple_log;
};
category queries{
simple_log;
};
};
*/