good.conf revision baad8d9fd8dd054ce1edf350ff0c0f2038a1519e
2bc0da0cd874b15593d65338ba96e90ceed13072Mark Andrews/*
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews * Copyright (C) 2005, 2007, 2010-2014 Internet Systems Consortium, Inc. ("ISC")
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence *
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews * Permission to use, copy, modify, and/or distribute this software for any
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews * purpose with or without fee is hereby granted, provided that the above
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews * copyright notice and this permission notice appear in all copies.
2bc0da0cd874b15593d65338ba96e90ceed13072Mark Andrews *
2bc0da0cd874b15593d65338ba96e90ceed13072Mark Andrews * THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
4b6dc226f78862286daa69fba761eac9fd5da16aAutomatic Updater * REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
ecd3b66f8c4544a55dd44fddda7c7134b936cd3bJames Brister * AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
ecd3b66f8c4544a55dd44fddda7c7134b936cd3bJames Brister * INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
2bc0da0cd874b15593d65338ba96e90ceed13072Mark Andrews * LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
ab023a65562e62b85a824509d829b6fad87e00b1Rob Austein * OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
2bc0da0cd874b15593d65338ba96e90ceed13072Mark Andrews * PERFORMANCE OF THIS SOFTWARE.
854d0238dbc2908490197984b3b9d558008a53dfMark Andrews */
854d0238dbc2908490197984b3b9d558008a53dfMark Andrews
2bc0da0cd874b15593d65338ba96e90ceed13072Mark Andrews/*
59a6d9effd893036e39e14e775e1c98b0cd22388Andreas Gustafsson * This is just a random selection of configuration options.
59a6d9effd893036e39e14e775e1c98b0cd22388Andreas Gustafsson */
59a6d9effd893036e39e14e775e1c98b0cd22388Andreas Gustafsson
59a6d9effd893036e39e14e775e1c98b0cd22388Andreas Gustafsson/* cut here */
93d6dfaf66258337985427c86181f01fc51f0bb4Mark Andrewsoptions {
6324997211a5e2d82528dcde98e8981190a35faeMichael Graff avoid-v4-udp-ports {
3ddd814a97de1d152ba0913c592d6e6dc83d38a6Michael Graff 100;
6d12fdf96621801e80f3f4c2a8a569fe48766a20David Lawrence };
2bc0da0cd874b15593d65338ba96e90ceed13072Mark Andrews avoid-v6-udp-ports {
2bc0da0cd874b15593d65338ba96e90ceed13072Mark Andrews 100;
2bc0da0cd874b15593d65338ba96e90ceed13072Mark Andrews };
2bc0da0cd874b15593d65338ba96e90ceed13072Mark Andrews blackhole {
2bc0da0cd874b15593d65338ba96e90ceed13072Mark Andrews 10.0.0.0/8;
2bc0da0cd874b15593d65338ba96e90ceed13072Mark Andrews };
96594ea32eecb2b75dd0e588f5491079328ce339Andreas Gustafsson coresize 1073741824;
8d3e74b1683f714a484bbcf73249e8ee470e36d7Mark Andrews datasize 104857600;
6e482e595d2b04e65f17851626a61a82efc4bd12David Lawrence deallocate-on-exit yes;
2bc0da0cd874b15593d65338ba96e90ceed13072Mark Andrews directory ".";
b0ba1a6059b6d6c4b3aa77d8bc84cc443b981e01Mukund Sivaraman dscp 41;
2bc0da0cd874b15593d65338ba96e90ceed13072Mark Andrews dump-file "named_dumpdb";
ae114ded82e773a4d9058f833f964a17514712a8Brian Wellington fake-iquery yes;
ecd3b66f8c4544a55dd44fddda7c7134b936cd3bJames Brister files 1000;
bddfe77128b0f16af263ff149db40f0d885f43d0Mark Andrews has-old-clients no;
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence heartbeat-interval 30;
34b394b43e2207e8f8f3703f0402422121455638David Lawrence host-statistics yes;
34b394b43e2207e8f8f3703f0402422121455638David Lawrence host-statistics-max 100;
34b394b43e2207e8f8f3703f0402422121455638David Lawrence hostname none;
add4043305ca411202ed9cf1929a4179016515ceBrian Wellington interface-interval 30;
add4043305ca411202ed9cf1929a4179016515ceBrian Wellington listen-on port 90 {
2bc0da0cd874b15593d65338ba96e90ceed13072Mark Andrews "any";
6e49e91bd08778d7eae45a2229dcf41ed97cc636David Lawrence };
e0a30050c8516a3d54a4f8dcdd88435704a8a3edMark Andrews listen-on port 100 dscp 33 {
e0a30050c8516a3d54a4f8dcdd88435704a8a3edMark Andrews 127.0.0.1/32;
2047977ce2dfcfe3a0fa2d638c3242841310fad3Mark Andrews };
2bc0da0cd874b15593d65338ba96e90ceed13072Mark Andrews listen-on-v6 port 53 dscp 57 {
91cd0f93ad34d23e8b09dca337120f64fbe8f0a1Andreas Gustafsson "none";
19c5c23ef6e38965949c996592bd92478da0612cMark Andrews };
add4043305ca411202ed9cf1929a4179016515ceBrian Wellington match-mapped-addresses yes;
add4043305ca411202ed9cf1929a4179016515ceBrian Wellington memstatistics-file "named.memstats";
2bc0da0cd874b15593d65338ba96e90ceed13072Mark Andrews multiple-cnames no;
2bc0da0cd874b15593d65338ba96e90ceed13072Mark Andrews named-xfer "this is no longer needed";
c46f10e4a1702191b003cf8f8fc5059c15d29c48Mark Andrews pid-file none;
c46f10e4a1702191b003cf8f8fc5059c15d29c48Mark Andrews port 5300;
19c5c23ef6e38965949c996592bd92478da0612cMark Andrews querylog yes;
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence recursing-file "named.recursing";
2bc0da0cd874b15593d65338ba96e90ceed13072Mark Andrews random-device "/dev/random";
9ac7076ebad044afb15e9e2687e3696868778538Mark Andrews recursive-clients 3000;
19c5c23ef6e38965949c996592bd92478da0612cMark Andrews serial-queries 10;
19c5c23ef6e38965949c996592bd92478da0612cMark Andrews serial-query-rate 100;
19c5c23ef6e38965949c996592bd92478da0612cMark Andrews server-id none;
19c5c23ef6e38965949c996592bd92478da0612cMark Andrews max-cache-size 20000000000000;
34b394b43e2207e8f8f3703f0402422121455638David Lawrence transfer-source 0.0.0.0 dscp 63;
8d3e74b1683f714a484bbcf73249e8ee470e36d7Mark Andrews zone-statistics none;
2bc0da0cd874b15593d65338ba96e90ceed13072Mark Andrews};
8d3e74b1683f714a484bbcf73249e8ee470e36d7Mark Andrewsview "first" {
2bc0da0cd874b15593d65338ba96e90ceed13072Mark Andrews match-clients {
19c5c23ef6e38965949c996592bd92478da0612cMark Andrews "none";
2bc0da0cd874b15593d65338ba96e90ceed13072Mark Andrews };
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence zone "example1" {
419590499823ce15b5d2ad4fe71eaf04bd5a86c0Michael Graff type master;
2bc0da0cd874b15593d65338ba96e90ceed13072Mark Andrews file "xxx";
2bc0da0cd874b15593d65338ba96e90ceed13072Mark Andrews update-policy local;
2bc0da0cd874b15593d65338ba96e90ceed13072Mark Andrews notify-source 10.10.10.10 port 53 dscp 55;
2bc0da0cd874b15593d65338ba96e90ceed13072Mark Andrews };
3ddd814a97de1d152ba0913c592d6e6dc83d38a6Michael Graff zone "clone" {
6d12fdf96621801e80f3f4c2a8a569fe48766a20David Lawrence type master;
2bc0da0cd874b15593d65338ba96e90ceed13072Mark Andrews file "yyy";
2bc0da0cd874b15593d65338ba96e90ceed13072Mark Andrews };
2bc0da0cd874b15593d65338ba96e90ceed13072Mark Andrews dnssec-lookaside auto;
2bc0da0cd874b15593d65338ba96e90ceed13072Mark Andrews dnssec-validation auto;
2bc0da0cd874b15593d65338ba96e90ceed13072Mark Andrews zone-statistics terse;
2bc0da0cd874b15593d65338ba96e90ceed13072Mark Andrews};
b0ba1a6059b6d6c4b3aa77d8bc84cc443b981e01Mukund Sivaramanview "second" {
b589e90689c6e87bf9608424ca8d99571c18bc61Mark Andrews match-clients {
2bc0da0cd874b15593d65338ba96e90ceed13072Mark Andrews "any";
2bc0da0cd874b15593d65338ba96e90ceed13072Mark Andrews };
2bc0da0cd874b15593d65338ba96e90ceed13072Mark Andrews zone "example1" {
2bc0da0cd874b15593d65338ba96e90ceed13072Mark Andrews type master;
2bc0da0cd874b15593d65338ba96e90ceed13072Mark Andrews file "yyy";
2bc0da0cd874b15593d65338ba96e90ceed13072Mark Andrews update-policy local;
5fc7ba3e1ac5d72239e9971e0f469dd5796738f9Andreas Gustafsson zone-statistics yes;
2bc0da0cd874b15593d65338ba96e90ceed13072Mark Andrews };
2bc0da0cd874b15593d65338ba96e90ceed13072Mark Andrews zone "example2" {
f1b68725503ff3e46001eee5a1751e29a43a09d1Andreas Gustafsson type static-stub;
2bc0da0cd874b15593d65338ba96e90ceed13072Mark Andrews forward only;
2bc0da0cd874b15593d65338ba96e90ceed13072Mark Andrews forwarders {
6e482e595d2b04e65f17851626a61a82efc4bd12David Lawrence 10.53.0.4;
5436ac555325d888c822f6be8c4fe69d2343d827Andreas Gustafsson };
9f139761ca06977d1db8051842efc620c15b8199Andreas Gustafsson zone-statistics no;
5436ac555325d888c822f6be8c4fe69d2343d827Andreas Gustafsson };
a1f16c81a1e54f52745f64555e6affa0add44173David Lawrence zone "clone" {
a1f16c81a1e54f52745f64555e6affa0add44173David Lawrence in-view "first";
5436ac555325d888c822f6be8c4fe69d2343d827Andreas Gustafsson };
91cd0f93ad34d23e8b09dca337120f64fbe8f0a1Andreas Gustafsson zone "." {
ad1317338af79edad878c9c3e4361798503310baMark Andrews type redirect;
ad1317338af79edad878c9c3e4361798503310baMark Andrews masters {
a1f16c81a1e54f52745f64555e6affa0add44173David Lawrence 1.2.3.4 ;
a1f16c81a1e54f52745f64555e6affa0add44173David Lawrence };
2bc0da0cd874b15593d65338ba96e90ceed13072Mark Andrews };
2bc0da0cd874b15593d65338ba96e90ceed13072Mark Andrews dnssec-lookaside "." trust-anchor "dlv.isc.org.";
2bc0da0cd874b15593d65338ba96e90ceed13072Mark Andrews dnssec-validation auto;
9f139761ca06977d1db8051842efc620c15b8199Andreas Gustafsson zone-statistics full;
2bc0da0cd874b15593d65338ba96e90ceed13072Mark Andrews};
2bc0da0cd874b15593d65338ba96e90ceed13072Mark Andrewsview "third" {
3ddd814a97de1d152ba0913c592d6e6dc83d38a6Michael Graff match-clients {
6d12fdf96621801e80f3f4c2a8a569fe48766a20David Lawrence "none";
2bc0da0cd874b15593d65338ba96e90ceed13072Mark Andrews };
2bc0da0cd874b15593d65338ba96e90ceed13072Mark Andrews zone "clone" {
2bc0da0cd874b15593d65338ba96e90ceed13072Mark Andrews in-view "first";
b0ba1a6059b6d6c4b3aa77d8bc84cc443b981e01Mukund Sivaraman forward only;
2bc0da0cd874b15593d65338ba96e90ceed13072Mark Andrews forwarders {
ae114ded82e773a4d9058f833f964a17514712a8Brian Wellington 10.0.0.100;
ecd3b66f8c4544a55dd44fddda7c7134b936cd3bJames Brister };
2bc0da0cd874b15593d65338ba96e90ceed13072Mark Andrews };
94a08e09db3dc844b6ee4841c368a2d7074a9c3fAndreas Gustafsson zone "dnssec" {
1ef8965366d91e02a4672c35a187d30aa4a4c72cMark Andrews type master;
2bc0da0cd874b15593d65338ba96e90ceed13072Mark Andrews file "file";
2047977ce2dfcfe3a0fa2d638c3242841310fad3Mark Andrews auto-dnssec maintain;
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence };
6e49e91bd08778d7eae45a2229dcf41ed97cc636David Lawrence allow-update {
182a34004c7c48e2c1626f3ce7e787f413955126Mark Andrews "any";
182a34004c7c48e2c1626f3ce7e787f413955126Mark Andrews };
182a34004c7c48e2c1626f3ce7e787f413955126Mark Andrews};
2bc0da0cd874b15593d65338ba96e90ceed13072Mark Andrewsview "chaos" chaos {
2bc0da0cd874b15593d65338ba96e90ceed13072Mark Andrews zone "hostname.bind" chaos {
419590499823ce15b5d2ad4fe71eaf04bd5a86c0Michael Graff type master;
2bc0da0cd874b15593d65338ba96e90ceed13072Mark Andrews database "_builtin hostname";
2bc0da0cd874b15593d65338ba96e90ceed13072Mark Andrews };
3ddd814a97de1d152ba0913c592d6e6dc83d38a6Michael Graff};
6d12fdf96621801e80f3f4c2a8a569fe48766a20David Lawrencekey "mykey" {
2bc0da0cd874b15593d65338ba96e90ceed13072Mark Andrews algorithm "hmac-md5";
2bc0da0cd874b15593d65338ba96e90ceed13072Mark Andrews secret "qwertyuiopasdfgh";
cdc50af0bff41accc02c613b9c6d8cd41b171ffeBrian Wellington};
2bc0da0cd874b15593d65338ba96e90ceed13072Mark Andrews