1*00b67f09SDavid van Moolenbroek/* 2*00b67f09SDavid van Moolenbroek * Copyright (C) 2014, 2015 Internet Systems Consortium, Inc. ("ISC") 3*00b67f09SDavid van Moolenbroek * 4*00b67f09SDavid van Moolenbroek * Permission to use, copy, modify, and/or distribute this software for any 5*00b67f09SDavid van Moolenbroek * purpose with or without fee is hereby granted, provided that the above 6*00b67f09SDavid van Moolenbroek * copyright notice and this permission notice appear in all copies. 7*00b67f09SDavid van Moolenbroek * 8*00b67f09SDavid van Moolenbroek * THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH 9*00b67f09SDavid van Moolenbroek * REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY 10*00b67f09SDavid van Moolenbroek * AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT, 11*00b67f09SDavid van Moolenbroek * INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM 12*00b67f09SDavid van Moolenbroek * LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE 13*00b67f09SDavid van Moolenbroek * OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR 14*00b67f09SDavid van Moolenbroek * PERFORMANCE OF THIS SOFTWARE. 15*00b67f09SDavid van Moolenbroek */ 16*00b67f09SDavid van Moolenbroek 17*00b67f09SDavid van Moolenbroek/* Id: named.conf,v 1.15 2009/05/29 23:47:49 tbox Exp */ 18*00b67f09SDavid van Moolenbroek 19*00b67f09SDavid van Moolenbroekkey rndc_key { 20*00b67f09SDavid van Moolenbroek algorithm hmac-sha256; 21*00b67f09SDavid van Moolenbroek secret "1234abcd8765"; 22*00b67f09SDavid van Moolenbroek}; 23*00b67f09SDavid van Moolenbroek 24*00b67f09SDavid van Moolenbroekcontrols { 25*00b67f09SDavid van Moolenbroek inet 10.53.0.1 port 9953 allow { any; } keys { rndc_key; }; 26*00b67f09SDavid van Moolenbroek}; 27*00b67f09SDavid van Moolenbroek 28*00b67f09SDavid van Moolenbroekoptions { 29*00b67f09SDavid van Moolenbroek query-source address 10.53.0.1 dscp 1; 30*00b67f09SDavid van Moolenbroek notify-source 10.53.0.1 dscp 2; 31*00b67f09SDavid van Moolenbroek transfer-source 10.53.0.1 dscp 3; 32*00b67f09SDavid van Moolenbroek port 5300; 33*00b67f09SDavid van Moolenbroek pid-file "named.pid"; 34*00b67f09SDavid van Moolenbroek listen-on { 10.53.0.1; }; 35*00b67f09SDavid van Moolenbroek listen-on-v6 { none; }; 36*00b67f09SDavid van Moolenbroek recursion yes; 37*00b67f09SDavid van Moolenbroek acache-enable yes; 38*00b67f09SDavid van Moolenbroek deny-answer-addresses { 192.0.2.0/24; 2001:db8:beef::/48; } 39*00b67f09SDavid van Moolenbroek except-from { "example.org"; }; 40*00b67f09SDavid van Moolenbroek deny-answer-aliases { "example.org"; } 41*00b67f09SDavid van Moolenbroek except-from { "goodcname.example.net"; 42*00b67f09SDavid van Moolenbroek "gooddname.example.net"; }; 43*00b67f09SDavid van Moolenbroek allow-query {!10.53.0.8; any; }; 44*00b67f09SDavid van Moolenbroek allow-transfer { none; }; 45*00b67f09SDavid van Moolenbroek}; 46*00b67f09SDavid van Moolenbroek 47*00b67f09SDavid van Moolenbroekzone "." { 48*00b67f09SDavid van Moolenbroek type hint; 49*00b67f09SDavid van Moolenbroek file "root.hint"; 50*00b67f09SDavid van Moolenbroek}; 51*00b67f09SDavid van Moolenbroek 52*00b67f09SDavid van Moolenbroekzone "1.10.in-addr.arpa" { 53*00b67f09SDavid van Moolenbroek type master; file "empty.db"; 54*00b67f09SDavid van Moolenbroek}; 55