All pastes #169452 Raw Edit

Someone

public text v1 · immutable
·published 2006-09-13 22:20 UTC
rendered paste body
//
// named.conf for Red Hat caching-nameserver
//

options {
// forwarders is a list of DNS servers at iLand that will answer requests for zones
// not configured on this server. Basicly, the internet
        forwarders { 65.57.248.5; };
        forward first;
        directory "/var/named";
        dump-file "/var/named/data/cache_dump.db";
        statistics-file "/var/named/data/named_stats.txt";
        /*
         * If there is a firewall between you and nameservers you want
         * to talk to, you might need to uncomment the query-source
         * directive below.  Previous versions of BIND always asked
         * questions using port 53, but BIND 8.1 uses an unprivileged
         * port by default.
         */
// Functions that can be performed by acl defined groups
        allow-query { flg; };
        allow-recursion { flg; };

// Define this for compatablity
          query-source address * port 53;
};
//
// a caching only nameserver config - before it was eddited.
//

// ACL
// The IP's and networks that are allowed to use this nameserver
acl flg { 192.168.100.0/24; 192.168.102.0/24; 127.0.0.1; 192.168.99.0/24; 70.34.23.245; 192.168.105.0/24; 67.125.106.120;};

// I haven't done anything with this section of the server yet.
// Should do it though soon.
controls {
        inet 127.0.0.1 allow { localhost; } keys { rndckey; };
};

zone "." IN {
        type hint;
        file "named.ca";
};
zone "localdomain" IN {
        type master;
        file "localdomain.zone";
        allow-update { none; };
};
// Here is our domain. All development and testing machines
// are part of devel.local.
zone "devel.local" IN {
        type master;
        file "zone.devel.local";
};
// Here is our reverse records for 192.168.100.0
zone "100.168.192.in-addr.arpa" {
        type master;
        file "rev.192.168.100";
};
// Heere is our reverse records for 192.168.99.0
zone "99.168.192.in-addr.arpa" {
        type master;
        file "rev.192.168.99";
};

zone "localhost" IN {
        type master;
        file "localhost.zone";
        allow-update { none; };
};

zone "0.0.127.in-addr.arpa" IN {
        type master;
        file "named.local";
        allow-update { none; };
};

zone "0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ip6.arpa" IN {
        type master;
        file "named.ip6.local";
        allow-update { none; };
};

zone "255.in-addr.arpa" IN {
        type master;
        file "named.broadcast";
        allow-update { none; };
};

zone "0.in-addr.arpa" IN {
        type master;
        file "named.zero";
        allow-update { none; };
};

include "/etc/rndc.key";

// Logging
// I turned this on to watch debug output. To watch uncommnet and
// tail -f /var/named/chroot/var/named/data/info

/* logging {
channel simple_log {
file "data/info" versions 2 size 20m;
        severity debug;
        print-severity yes;
        print-time yes;
    print-category yes;
  };
category default{
simple_log;
};
category queries{
simple_log;
};
};
*/