/[adm]/puppet/modules/bind/templates/named_base.conf
ViewVC logotype

Contents of /puppet/modules/bind/templates/named_base.conf

Parent Directory Parent Directory | Revision Log Revision Log


Revision 27 - (show annotations) (download)
Tue Oct 26 23:54:17 2010 UTC (10 years, 1 month ago) by misc
File size: 3106 byte(s)
- add bind module

1 include "/etc/rndc.key";
2
3 controls {
4 inet 127.0.0.1 port 953
5 allow { 127.0.0.1; } keys { key; };
6 };
7
8
9
10 logging {
11 channel "default" {
12 syslog local1;
13 severity info;
14 };
15 category "default" { "default"; };
16 };
17
18 acl "trusted_networks" {
19 127.0.0.1;
20 212.85.158.144/28;
21 };
22 // Enable statistics at http://127.0.0.1:5380/
23 statistics-channels {
24 inet 127.0.0.1 port 5380 allow { 127.0.0.1; };
25 };
26
27 options {
28 version "";
29 directory "/var/named";
30 dump-file "/var/tmp/named_dump.db";
31 pid-file "/var/run/named.pid";
32 statistics-file "/var/tmp/named.stats";
33 zone-statistics yes;
34 // datasize 256M;
35 coresize 100M;
36 // fetch-glue no;
37 // recursion no;
38 // recursive-clients 10000;
39 auth-nxdomain yes;
40 query-source address * port *;
41 listen-on port 53 { any; };
42 cleaning-interval 120;
43 transfers-in 20;
44 transfers-per-ns 2;
45 lame-ttl 0;
46 max-ncache-ttl 10800;
47
48 // forwarders { first_public_nameserver_ip; second_public_nameserver_ip; };
49
50 // allow-update { none; };
51 // allow-transfer { any; };
52
53 // Prevent DoS attacks by generating bogus zone transfer
54 // requests. This will result in slower updates to the
55 // slave servers (e.g. they will await the poll interval
56 // before checking for updates).
57 notify no;
58 // notify explicit;
59 // also-notify { secondary_name_server };
60
61 // Generate more efficient zone transfers. This will place
62 // multiple DNS records in a DNS message, instead of one per
63 // DNS message.
64 transfer-format many-answers;
65
66 // Set the maximum zone transfer time to something more
67 // reasonable. In this case, we state that any zone transfer
68 // that takes longer than 60 minutes is unlikely to ever
69 // complete. WARNING: If you have very large zone files,
70 // adjust this to fit your requirements.
71 max-transfer-time-in 60;
72
73 // We have no dynamic interfaces, so BIND shouldn't need to
74 // poll for interface state {UP|DOWN}.
75 interface-interval 0;
76
77 // Uncoment these to enable IPv6 connections support
78 // IPv4 will still work
79 // listen-on { none; };
80 // listen-on-v6 { any; };
81
82 auth-nxdomain yes;
83 // allow-query { trusted_networks; };
84
85 allow-transfer {"none";};
86
87 allow-recursion { trusted_networks; };
88
89 // Deny anything from the bogon networks as
90 // detailed in the "bogon" ACL.
91 // blackhole { bogon; };
92 };
93
94 zone "." IN {
95 type hint;
96 file "named.ca";
97 };
98
99 zone "localdomain" IN {
100 type master;
101 file "master/localdomain.zone";
102 allow-update { none; };
103 };
104
105 zone "localhost" IN {
106 type master;
107 file "master/localhost.zone";
108 allow-update { none; };
109 };
110
111 zone "0.0.127.in-addr.arpa" IN {
112 type master;
113 file "reverse/named.local";
114 allow-update { none; };
115 };
116
117 zone "0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ip6.arpa" IN {
118 type master;
119 file "reverse/named.ip6.local";
120 allow-update { none; };
121 };
122
123 zone "255.in-addr.arpa" IN {
124 type master;
125 file "reverse/named.broadcast";
126 allow-update { none; };
127 };
128
129 zone "0.in-addr.arpa" IN {
130 type master;
131 file "reverse/named.zero";
132 allow-update { none; };
133 };
134

  ViewVC Help
Powered by ViewVC 1.1.28