rendered paste bodyacl "main_xfer" {
$SECONDARY_NAMESERVER_IP;
$TERTIARY_NAMESERVER_IP;
};
acl "vhost_xfer" {
$SECONDARY_NAMESERVER_IP;
};
acl "our_hosts" {
$PRIMARY_NAMESERVER_IP;
$SECONDARY_NAMESERVER_IP;
$ANOTHER_HOST;
$ANOTHER_HOST_2;
};
acl "bogons" {
$OUR_FIRST_THREE.0/32;
$OUR_FIRST_THREE.255/32;
0.0.0.0/8;
1.0.0.0/8;
2.0.0.0/8;
5.0.0.0/8;
10.0.0.0/8;
14.0.0.0/8;
23.0.0.0/8;
27.0.0.0/8;
31.0.0.0/8;
36.0.0.0/8;
37.0.0.0/8;
39.0.0.0/8;
42.0.0.0/8;
46.0.0.0/8;
100.0.0.0/8;
101.0.0.0/8;
102.0.0.0/8;
103.0.0.0/8;
104.0.0.0/8;
105.0.0.0/8;
106.0.0.0/8;
107.0.0.0/8;
108.0.0.0/8;
109.0.0.0/8;
110.0.0.0/8;
111.0.0.0/8;
112.0.0.0/8;
113.0.0.0/8;
114.0.0.0/8;
115.0.0.0/8;
127.0.0.0/8;
169.254.0.0/16;
172.16.0.0/12;
175.0.0.0/8;
176.0.0.0/8;
177.0.0.0/8;
178.0.0.0/8;
179.0.0.0/8;
180.0.0.0/8;
181.0.0.0/8;
182.0.0.0/8;
183.0.0.0/8;
184.0.0.0/8;
185.0.0.0/8;
192.0.2.0/24;
192.168.0.0/16;
197.0.0.0/8;
204.152.64.0/23;
223.0.0.0/8;
224.0.0.0/3;
};
logging {
channel main_syslog {
syslog local2;
severity debug;
};
channel audit_log {
file "/var/log/named.log";
severity debug;
print-time yes;
};
category default { main_syslog; };
category general { main_syslog; };
category security { audit_log; main_syslog; };
category config { main_syslog; };
category resolver { audit_log; };
category xfer-in { audit_log; };
category xfer-out { audit_log; };
category notify { audit_log; };
category client { audit_log; };
category network { audit_log; };
category update { audit_log; };
category queries { audit_log; };
category lame-servers { audit_log; };
};
options {
directory "/etc/namedb";
dnssec-enable no;
listen-on { $PRIMARY_NAMESERVER; };
pid-file "/var/run/named.pid";
version "OUR DNS";
statistics-file "/var/log/named.stats";
memstatistics-file "/var/log/named.memstats";
dump-file "/var/adm/named.dump";
zone-statistics yes;
notify no;
transfer-format many-answers;
max-transfer-time-in 60;
interface-interval 0;
allow-transfer {
main_xfer;
};
allow-query {
our_hosts;
};
blackhole {
bogons;
};
};
controls {
inet $PRIMARY_NAMESERVER
allow { $PRIMARY_NAMESERVER; };
};
view "internal-in" in {
match-clients { our_hosts; };
recursion yes;
additional-from-auth yes;
additional-from-cache yes;
zone "." {
type hint;
file "root.cache";
};
zone "localhost" {
type master;
file "localhost";
allow-query {
any;
};
allow-transfer {
none;
};
};
zone "127.IN-ADDR.ARPA" {
type master;
file "127";
allow-query {
any;
};
allow-transfer {
none;
};
};
zone "1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ip
6.int" {
type master;
file "loopback.v6";
allow-query {
any;
};
allow-transfer {
none;
};
};
zone "1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ip
6.arpa" {
type master;
file "loopback.v6";
allow-query {
any;
};
allow-transfer {
none;
};
};
zone "$OUR_MAIN_DOMAIN" {
type master;
file "$OUR_MAIN_DOMAIN";
allow-transfer {
main_xfer;
};
};
zone "$A_HOSTED_DOMAIN" {
type master;
file "$A_HOSTED_DOMAIN";
allow-transfer {
vhost_xfer;
};
};
zone "$A_HOSTED_DOMAIN" {
type master;
file "$A_HOSTED_DOMAIN";
allow-transfer {
vhost_xfer;
};
};
zone "$A_HOSTED_DOMAIN" {
type master;
file "$A_HOSTED_DOMAIN";
allow-transfer {
vhost_xfer;
};
};
};
#view "external-chaos" chaos {
# match-clients { any; };
# recursion no;
# zone "." {
# type hint;
# file "/dev/null";
# };
#};
% sudo named-checkconf -z ~named/etc/named.conf
zone localhost/IN: loaded serial 1999012100
zone 127.IN-ADDR.ARPA/IN: loaded serial 1999012100
zone 1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ip6.int/IN: loaded serial 1999012100
zone 1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ip6.arpa/IN: loaded serial 1999012100
zone $OUR_MAIN_DOMAIN/IN: loading from master file $OUR_MAIN_DOMAIN failed: file not found
internal-in/$OUR_MAIN_DOMAIN/in: file not found
zone $HOSTED_DOMAIN_1/IN: loaded serial 2006111501
zone $HOSTED_DOMAIN_2/IN: loaded serial 2006111501
zone $HOSTED_DOMAIN_3/IN: loaded serial 2006111501
====
view "external" {
match-clients { any; };
recursion no;
};
====
Mar 20 08:08:03 asche named[7696]: starting $BIND_VERSION -u named -t /var/chroo
t/named
Mar 20 08:08:03 asche named[7696]: found 2 CPUs, using 2 worker threads
Mar 20 08:08:03 asche named[7696]: loading configuration from '/etc/named.conf'
Mar 20 08:08:03 asche named[7696]: listening on IPv4 interface tlp1, $OUR_IP#53
Mar 20 08:08:03 asche named[7696]: automatic empty zone: view internal-in: 254.1
69.IN-ADDR.ARPA
Mar 20 08:08:03 asche named[7696]: automatic empty zone: view internal-in: 2.0.1
92.IN-ADDR.ARPA
Mar 20 08:08:03 asche named[7696]: automatic empty zone: view internal-in: 255.2
55.255.255.IN-ADDR.ARPA
Mar 20 08:08:03 asche named[7696]: automatic empty zone: view internal-in: 0.0.0
.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.IP6.ARPA
Mar 20 08:08:03 asche named[7696]: automatic empty zone: view internal-in: D.F.I
P6.ARPA
Mar 20 08:08:03 asche named[7696]: automatic empty zone: view internal-in: 8.E.F
.IP6.ARPA
Mar 20 08:08:03 asche named[7696]: automatic empty zone: view internal-in: 9.E.F
.IP6.ARPA
Mar 20 08:08:03 asche named[7696]: automatic empty zone: view internal-in: A.E.F
.IP6.ARPA
Mar 20 08:08:03 asche named[7696]: automatic empty zone: view internal-in: B.E.F.IP6.ARPA
Mar 20 08:08:03 asche named[7696]: command channel listening on $OUR_IP#95
3