1/* 2 * Copyright (C) 2010, 2011, 2013 Internet Systems Consortium, Inc. ("ISC") 3 * 4 * Permission to use, copy, modify, and/or distribute this software for any 5 * purpose with or without fee is hereby granted, provided that the above 6 * copyright notice and this permission notice appear in all copies. 7 * 8 * THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH 9 * REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY 10 * AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT, 11 * INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM 12 * LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE 13 * OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR 14 * PERFORMANCE OF THIS SOFTWARE. 15 */ 16 17/* Id: named.conf,v 1.4 2011/01/07 23:47:07 tbox Exp */ 18 19// NS2 20 21controls { /* empty */ }; 22 23acl rfc1918 { 10/8; 192.168/16; 172.16/12; }; 24 25options { 26 query-source address 10.53.0.2; 27 notify-source 10.53.0.2; 28 transfer-source 10.53.0.2; 29 port 5300; 30 pid-file "named.pid"; 31 listen-on { 10.53.0.2; }; 32 listen-on-v6 { none; }; 33 recursion yes; 34 notify yes; 35 dnssec-enable yes; 36 dnssec-validation yes; 37 38 dns64 2001:aaaa::/96 { 39 clients { 10.53.0.2; }; 40 mapped { !rfc1918; any; }; 41 exclude { 2001:eeee::/32; 64:FF9B::/96; ::ffff:0000:0000/96; }; 42 suffix ::; 43 }; 44 45 dns64 64:FF9B::/96 { 46 clients { 10.53.0.1; }; 47 mapped { !192.228.79.201; !rfc1918; any; }; 48 exclude { 64:FF9B::/96; ::ffff:0000:0000/96; }; 49 suffix ::; 50 }; 51 52 dns64-server "dns64.example.net."; 53 dns64-contact "hostmaster.example.net."; 54 dns64 2001:32::/32 { clients { 10.53.0.6; }; }; 55 dns64 2001:40::/40 { clients { 10.53.0.6; }; }; 56 dns64 2001:48::/48 { clients { 10.53.0.6; }; }; 57 dns64 2001:56::/56 { clients { 10.53.0.6; }; }; 58 dns64 2001:64::/64 { clients { 10.53.0.6; }; }; 59 60 dns64 2001:96::/96 { clients { 10.53.0.7; }; }; 61 62 response-policy { zone "rpz"; }; 63}; 64 65zone "." { 66 type hint; 67 file "../../common/root.hint"; 68}; 69 70zone "rpz" { 71 type master; 72 file "rpz.db"; 73}; 74