named.conf revision bf459d24a117ae2c54c37016430b41cd6d73491c
9198ab377b1cbf07d6d0c6eec25296c135bd66bdMark Andrews/*
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews * Copyright (C) 2011-2013, 2015, 2016 Internet Systems Consortium, Inc. ("ISC")
9198ab377b1cbf07d6d0c6eec25296c135bd66bdMark Andrews *
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews * This Source Code Form is subject to the terms of the Mozilla Public
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews * License, v. 2.0. If a copy of the MPL was not distributed with this
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews * file, You can obtain one at http://mozilla.org/MPL/2.0/.
9198ab377b1cbf07d6d0c6eec25296c135bd66bdMark Andrews */
9198ab377b1cbf07d6d0c6eec25296c135bd66bdMark Andrews
1864400107f7dc21e1797d602ab1f8523f599df9Mark Andrews/* $Id: named.conf,v 1.8 2012/02/23 06:53:15 marka Exp $ */
9198ab377b1cbf07d6d0c6eec25296c135bd66bdMark Andrews
b1c6de5456a5287b442de5620282902da39a4968Mark Andrews// NS3
9198ab377b1cbf07d6d0c6eec25296c135bd66bdMark Andrews
b1c6de5456a5287b442de5620282902da39a4968Mark Andrewsinclude "../../common/rndc.key";
b1c6de5456a5287b442de5620282902da39a4968Mark Andrews
b1c6de5456a5287b442de5620282902da39a4968Mark Andrewscontrols { inet 10.53.0.3 port 9953 allow { any; } keys { rndc_key; }; };
9198ab377b1cbf07d6d0c6eec25296c135bd66bdMark Andrews
9198ab377b1cbf07d6d0c6eec25296c135bd66bdMark Andrewsoptions {
9198ab377b1cbf07d6d0c6eec25296c135bd66bdMark Andrews query-source address 10.53.0.3;
9198ab377b1cbf07d6d0c6eec25296c135bd66bdMark Andrews notify-source 10.53.0.3;
9198ab377b1cbf07d6d0c6eec25296c135bd66bdMark Andrews transfer-source 10.53.0.3;
9198ab377b1cbf07d6d0c6eec25296c135bd66bdMark Andrews port 5300;
9198ab377b1cbf07d6d0c6eec25296c135bd66bdMark Andrews pid-file "named.pid";
9198ab377b1cbf07d6d0c6eec25296c135bd66bdMark Andrews listen-on { 10.53.0.3; };
9198ab377b1cbf07d6d0c6eec25296c135bd66bdMark Andrews listen-on-v6 { none; };
9198ab377b1cbf07d6d0c6eec25296c135bd66bdMark Andrews recursion no;
9198ab377b1cbf07d6d0c6eec25296c135bd66bdMark Andrews notify yes;
9198ab377b1cbf07d6d0c6eec25296c135bd66bdMark Andrews try-tcp-refresh no;
9198ab377b1cbf07d6d0c6eec25296c135bd66bdMark Andrews notify-delay 0;
927e4c9fecf448bf3894c68fcaf9dc2f89557f3aEvan Hunt allow-new-zones yes;
9198ab377b1cbf07d6d0c6eec25296c135bd66bdMark Andrews};
9198ab377b1cbf07d6d0c6eec25296c135bd66bdMark Andrews
9198ab377b1cbf07d6d0c6eec25296c135bd66bdMark Andrewszone "bits" {
9198ab377b1cbf07d6d0c6eec25296c135bd66bdMark Andrews type slave;
9198ab377b1cbf07d6d0c6eec25296c135bd66bdMark Andrews masters { 10.53.0.2; };
9198ab377b1cbf07d6d0c6eec25296c135bd66bdMark Andrews inline-signing yes;
9198ab377b1cbf07d6d0c6eec25296c135bd66bdMark Andrews auto-dnssec maintain;
9198ab377b1cbf07d6d0c6eec25296c135bd66bdMark Andrews allow-update-forwarding { any; };
9198ab377b1cbf07d6d0c6eec25296c135bd66bdMark Andrews file "bits.bk";
1b05d22789fd9a17aca4f459639bc2b6848c3160Mark Andrews sig-signing-signatures 1; // force incremental processing
9198ab377b1cbf07d6d0c6eec25296c135bd66bdMark Andrews};
9198ab377b1cbf07d6d0c6eec25296c135bd66bdMark Andrews
9198ab377b1cbf07d6d0c6eec25296c135bd66bdMark Andrewsserver 10.53.0.4 { request-ixfr no; };
9198ab377b1cbf07d6d0c6eec25296c135bd66bdMark Andrews
9198ab377b1cbf07d6d0c6eec25296c135bd66bdMark Andrewszone "noixfr" {
9198ab377b1cbf07d6d0c6eec25296c135bd66bdMark Andrews type slave;
9198ab377b1cbf07d6d0c6eec25296c135bd66bdMark Andrews masters { 10.53.0.4; };
9198ab377b1cbf07d6d0c6eec25296c135bd66bdMark Andrews inline-signing yes;
9198ab377b1cbf07d6d0c6eec25296c135bd66bdMark Andrews auto-dnssec maintain;
9198ab377b1cbf07d6d0c6eec25296c135bd66bdMark Andrews allow-update-forwarding { any; };
9198ab377b1cbf07d6d0c6eec25296c135bd66bdMark Andrews file "noixfr.bk";
9198ab377b1cbf07d6d0c6eec25296c135bd66bdMark Andrews};
24ef32426d91c5140d75031b6443397c6d24006cMark Andrews
24ef32426d91c5140d75031b6443397c6d24006cMark Andrewszone "master" {
24ef32426d91c5140d75031b6443397c6d24006cMark Andrews type master;
24ef32426d91c5140d75031b6443397c6d24006cMark Andrews inline-signing yes;
24ef32426d91c5140d75031b6443397c6d24006cMark Andrews auto-dnssec maintain;
24ef32426d91c5140d75031b6443397c6d24006cMark Andrews file "master.db";
24ef32426d91c5140d75031b6443397c6d24006cMark Andrews};
24ef32426d91c5140d75031b6443397c6d24006cMark Andrews
24ef32426d91c5140d75031b6443397c6d24006cMark Andrewszone "dynamic" {
24ef32426d91c5140d75031b6443397c6d24006cMark Andrews type master;
24ef32426d91c5140d75031b6443397c6d24006cMark Andrews inline-signing yes;
24ef32426d91c5140d75031b6443397c6d24006cMark Andrews auto-dnssec maintain;
24ef32426d91c5140d75031b6443397c6d24006cMark Andrews allow-update { any; };
24ef32426d91c5140d75031b6443397c6d24006cMark Andrews file "dynamic.db";
24ef32426d91c5140d75031b6443397c6d24006cMark Andrews};
f30785f506a522ed6a5e394af2bb13b6f883927eEvan Hunt
f30785f506a522ed6a5e394af2bb13b6f883927eEvan Huntzone "updated" {
f30785f506a522ed6a5e394af2bb13b6f883927eEvan Hunt type master;
f30785f506a522ed6a5e394af2bb13b6f883927eEvan Hunt inline-signing yes;
f30785f506a522ed6a5e394af2bb13b6f883927eEvan Hunt auto-dnssec maintain;
f30785f506a522ed6a5e394af2bb13b6f883927eEvan Hunt allow-update { none; };
f30785f506a522ed6a5e394af2bb13b6f883927eEvan Hunt file "updated.db";
f30785f506a522ed6a5e394af2bb13b6f883927eEvan Hunt};
9a020198893d8389f1f3172d88ba6b16d7da3c04Evan Hunt
9a020198893d8389f1f3172d88ba6b16d7da3c04Evan Huntzone "expired" {
9a020198893d8389f1f3172d88ba6b16d7da3c04Evan Hunt type master;
9a020198893d8389f1f3172d88ba6b16d7da3c04Evan Hunt inline-signing yes;
9a020198893d8389f1f3172d88ba6b16d7da3c04Evan Hunt auto-dnssec maintain;
9a020198893d8389f1f3172d88ba6b16d7da3c04Evan Hunt allow-update { any; };
9a020198893d8389f1f3172d88ba6b16d7da3c04Evan Hunt file "expired.db";
9a020198893d8389f1f3172d88ba6b16d7da3c04Evan Hunt};
1864400107f7dc21e1797d602ab1f8523f599df9Mark Andrews
1864400107f7dc21e1797d602ab1f8523f599df9Mark Andrewszone "retransfer" {
1864400107f7dc21e1797d602ab1f8523f599df9Mark Andrews type slave;
1864400107f7dc21e1797d602ab1f8523f599df9Mark Andrews masters { 10.53.0.2; };
1864400107f7dc21e1797d602ab1f8523f599df9Mark Andrews inline-signing yes;
1864400107f7dc21e1797d602ab1f8523f599df9Mark Andrews auto-dnssec maintain;
1864400107f7dc21e1797d602ab1f8523f599df9Mark Andrews file "retransfer.bk";
1864400107f7dc21e1797d602ab1f8523f599df9Mark Andrews};
d1e22676de16e6dee54c58b27cca11c5fb8f1ff5Mark Andrews
d1e22676de16e6dee54c58b27cca11c5fb8f1ff5Mark Andrewszone "nsec3" {
d1e22676de16e6dee54c58b27cca11c5fb8f1ff5Mark Andrews type master;
d1e22676de16e6dee54c58b27cca11c5fb8f1ff5Mark Andrews inline-signing yes;
d1e22676de16e6dee54c58b27cca11c5fb8f1ff5Mark Andrews auto-dnssec maintain;
d1e22676de16e6dee54c58b27cca11c5fb8f1ff5Mark Andrews allow-update { any; };
d1e22676de16e6dee54c58b27cca11c5fb8f1ff5Mark Andrews file "nsec3.db";
d1e22676de16e6dee54c58b27cca11c5fb8f1ff5Mark Andrews};
0c91911b4d1e872b87eaf6431ed47fe24d18dd43Mark Andrews
0c91911b4d1e872b87eaf6431ed47fe24d18dd43Mark Andrewszone "externalkey" {
0c91911b4d1e872b87eaf6431ed47fe24d18dd43Mark Andrews type master;
0c91911b4d1e872b87eaf6431ed47fe24d18dd43Mark Andrews inline-signing yes;
0c91911b4d1e872b87eaf6431ed47fe24d18dd43Mark Andrews auto-dnssec maintain;
0c91911b4d1e872b87eaf6431ed47fe24d18dd43Mark Andrews allow-update { any; };
0c91911b4d1e872b87eaf6431ed47fe24d18dd43Mark Andrews file "externalkey.db";
0c91911b4d1e872b87eaf6431ed47fe24d18dd43Mark Andrews};
8009525601d946805fae58b037cf7dad0da516f8Curtis Blackburn
8009525601d946805fae58b037cf7dad0da516f8Curtis Blackburnzone "retransfer3" {
8009525601d946805fae58b037cf7dad0da516f8Curtis Blackburn type slave;
8009525601d946805fae58b037cf7dad0da516f8Curtis Blackburn masters { 10.53.0.2; };
8009525601d946805fae58b037cf7dad0da516f8Curtis Blackburn inline-signing yes;
8009525601d946805fae58b037cf7dad0da516f8Curtis Blackburn auto-dnssec maintain;
8009525601d946805fae58b037cf7dad0da516f8Curtis Blackburn file "retransfer3.bk";
8009525601d946805fae58b037cf7dad0da516f8Curtis Blackburn};
bf459d24a117ae2c54c37016430b41cd6d73491cMark Andrews
bf459d24a117ae2c54c37016430b41cd6d73491cMark Andrewszone "inactivezsk" {
bf459d24a117ae2c54c37016430b41cd6d73491cMark Andrews type slave;
bf459d24a117ae2c54c37016430b41cd6d73491cMark Andrews masters { 10.53.0.2; };
bf459d24a117ae2c54c37016430b41cd6d73491cMark Andrews inline-signing yes;
bf459d24a117ae2c54c37016430b41cd6d73491cMark Andrews auto-dnssec maintain;
bf459d24a117ae2c54c37016430b41cd6d73491cMark Andrews file "inactivezsk.bk";
bf459d24a117ae2c54c37016430b41cd6d73491cMark Andrews};