allow_query/ns2/named40.conf

0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews/*
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews * Copyright (C) 2010, 2016  Internet Systems Consortium, Inc. ("ISC")
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews *
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews * This Source Code Form is subject to the terms of the Mozilla Public
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews * License, v. 2.0. If a copy of the MPL was not distributed with this
8e15d5eb3a000f1341e6bea0ddbc28d6dd2a0591Mark Andrews * file, You can obtain one at http://mozilla.org/MPL/2.0/.
8e15d5eb3a000f1341e6bea0ddbc28d6dd2a0591Mark Andrews */
8e15d5eb3a000f1341e6bea0ddbc28d6dd2a0591Mark Andrews
8e15d5eb3a000f1341e6bea0ddbc28d6dd2a0591Mark Andrews/* $Id: named40.conf,v 1.2 2010/11/16 01:37:39 sar Exp $ */
8e15d5eb3a000f1341e6bea0ddbc28d6dd2a0591Mark Andrews
8e15d5eb3a000f1341e6bea0ddbc28d6dd2a0591Mark Andrewscontrols { /* empty */ };
8e15d5eb3a000f1341e6bea0ddbc28d6dd2a0591Mark Andrews
8e15d5eb3a000f1341e6bea0ddbc28d6dd2a0591Mark Andrewsacl accept { 10.53.0.2; };
8e15d5eb3a000f1341e6bea0ddbc28d6dd2a0591Mark Andrews
8e15d5eb3a000f1341e6bea0ddbc28d6dd2a0591Mark Andrewsacl badaccept { 10.53.0.1; };
8e15d5eb3a000f1341e6bea0ddbc28d6dd2a0591Mark Andrews
8e15d5eb3a000f1341e6bea0ddbc28d6dd2a0591Mark Andrewskey one {
8e15d5eb3a000f1341e6bea0ddbc28d6dd2a0591Mark Andrews    algorithm hmac-md5;
8e15d5eb3a000f1341e6bea0ddbc28d6dd2a0591Mark Andrews    secret "1234abcd8765";
8e15d5eb3a000f1341e6bea0ddbc28d6dd2a0591Mark Andrews};

key two {
    algorithm hmac-md5;
    secret "1234efgh8765";
};

options {
    port 5300;
    pid-file "named.pid";
    listen-on { 10.53.0.2; };
    listen-on-v6 { none; };
    recursion no;
};

include "../../common/controls.conf";

zone "." {
    type hint;
    file "../../common/root.hint";
};

zone "normal.example" {
    type master;
    file "normal.db";
};

zone "any.example" {
    type master;
    file "any.db";
    allow-query { any; };
};

zone "none.example" {
    type master;
    file "none.db";
    allow-query { none; };
};

zone "addrallow.example" {
    type master;
    file "addrallow.db";
    allow-query { 10.53.0.2; };
};

zone "addrnotallow.example" {
    type master;
    file "addrnotallow.db";
    allow-query { 10.53.0.1; };
};

zone "addrdisallow.example" {
    type master;
    file "addrdisallow.db";
    allow-query { ! 10.53.0.2; };
};

zone "aclallow.example" {
    type master;
    file "aclallow.db";
    allow-query { accept; };
};

zone "aclnotallow.example" {
    type master;
    file "aclnotallow.db";
    allow-query { badaccept; };
};

zone "acldisallow.example" {
    type master;
    file "acldisallow.db";
    allow-query { ! accept; };
};

/* Also usable for testing key not allowed */
zone "keyallow.example" {
    type master;
    file "keyallow.db";
    allow-query { key one; };
};

zone "keydisallow.example" {
    type master;
    file "keydisallow.db";
    allow-query { ! key one; };
};