c3c6770e537ea916265c78d0294ad108233e17c1Michael Sawyer/*
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews * Copyright (C) 2000, 2001, 2004, 2005, 2007, 2009, 2011-2014, 2016 Internet Systems Consortium, Inc. ("ISC")
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence *
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews * This Source Code Form is subject to the terms of the Mozilla Public
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews * License, v. 2.0. If a copy of the MPL was not distributed with this
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews * file, You can obtain one at http://mozilla.org/MPL/2.0/.
c3c6770e537ea916265c78d0294ad108233e17c1Michael Sawyer */
c3c6770e537ea916265c78d0294ad108233e17c1Michael Sawyer
a69070d8fab55dbc63ba9f96c9d3e34f0ea9119aMark Andrews/* $Id: named.conf,v 1.22 2011/07/01 02:25:47 marka Exp $ */
821644d49b73b49f2abc5463bc53a3132f612478Mark Andrews
821644d49b73b49f2abc5463bc53a3132f612478Mark Andrewscontrols { /* empty */ };
c3c6770e537ea916265c78d0294ad108233e17c1Michael Sawyer
c3c6770e537ea916265c78d0294ad108233e17c1Michael Sawyeroptions {
67adc03ef81fb610f8df093b17f55275ee816754Evan Hunt query-source address 10.53.0.1 dscp 1;
67adc03ef81fb610f8df093b17f55275ee816754Evan Hunt notify-source 10.53.0.1 dscp 22;
67adc03ef81fb610f8df093b17f55275ee816754Evan Hunt transfer-source 10.53.0.1 dscp 3;
c3c6770e537ea916265c78d0294ad108233e17c1Michael Sawyer port 5300;
c3c6770e537ea916265c78d0294ad108233e17c1Michael Sawyer pid-file "named.pid";
9069215eac23e32f4ef1c8e44ad7ff2865cfcdacEvan Hunt session-keyfile "session.key";
9069215eac23e32f4ef1c8e44ad7ff2865cfcdacEvan Hunt listen-on { 10.53.0.1; 127.0.0.1; };
5a77e9620a0b2f7417469c98be374de49d0eccc6Andreas Gustafsson listen-on-v6 { none; };
c3c6770e537ea916265c78d0294ad108233e17c1Michael Sawyer recursion no;
c3c6770e537ea916265c78d0294ad108233e17c1Michael Sawyer notify yes;
c3c6770e537ea916265c78d0294ad108233e17c1Michael Sawyer};
c3c6770e537ea916265c78d0294ad108233e17c1Michael Sawyer
e2f470bebb3a0c107bc4ac86c6920c21e50e83e0Brian Wellingtonkey rndc_key {
e2f470bebb3a0c107bc4ac86c6920c21e50e83e0Brian Wellington secret "1234abcd8765";
4eb998928b9aef0ceda42d7529980d658138698aEvan Hunt algorithm hmac-sha256;
e2f470bebb3a0c107bc4ac86c6920c21e50e83e0Brian Wellington};
e2f470bebb3a0c107bc4ac86c6920c21e50e83e0Brian Wellington
e2f470bebb3a0c107bc4ac86c6920c21e50e83e0Brian Wellingtoncontrols {
e2f470bebb3a0c107bc4ac86c6920c21e50e83e0Brian Wellington inet 10.53.0.1 port 9953 allow { any; } keys { rndc_key; };
e2f470bebb3a0c107bc4ac86c6920c21e50e83e0Brian Wellington};
e2f470bebb3a0c107bc4ac86c6920c21e50e83e0Brian Wellington
ac21f918f23ce95fd5be807428ee9e2c42319878Evan Huntkey altkey {
2c089bf6d24936de631a57b4958ba6b8b5e3b23dMark Andrews algorithm hmac-md5;
2c089bf6d24936de631a57b4958ba6b8b5e3b23dMark Andrews secret "1234abcd8765";
ac21f918f23ce95fd5be807428ee9e2c42319878Evan Hunt};
ac21f918f23ce95fd5be807428ee9e2c42319878Evan Hunt
9069215eac23e32f4ef1c8e44ad7ff2865cfcdacEvan Huntinclude "ddns.key";
9069215eac23e32f4ef1c8e44ad7ff2865cfcdacEvan Hunt
c3c6770e537ea916265c78d0294ad108233e17c1Michael Sawyerzone "example.nil" {
c3c6770e537ea916265c78d0294ad108233e17c1Michael Sawyer type master;
c3c6770e537ea916265c78d0294ad108233e17c1Michael Sawyer file "example.db";
2c15fcdeac4c2402258867fbac24d7475ef98259Mark Andrews check-integrity no;
9069215eac23e32f4ef1c8e44ad7ff2865cfcdacEvan Hunt update-policy {
9069215eac23e32f4ef1c8e44ad7ff2865cfcdacEvan Hunt grant ddns-key.example.nil subdomain example.nil ANY;
9069215eac23e32f4ef1c8e44ad7ff2865cfcdacEvan Hunt };
9069215eac23e32f4ef1c8e44ad7ff2865cfcdacEvan Hunt allow-transfer { any; };
9069215eac23e32f4ef1c8e44ad7ff2865cfcdacEvan Hunt};
9069215eac23e32f4ef1c8e44ad7ff2865cfcdacEvan Hunt
35f6a21f5f8114542c050bfcb484b39ce513d4bdEvan Huntzone "max-ttl.nil" {
35f6a21f5f8114542c050bfcb484b39ce513d4bdEvan Hunt type master;
35f6a21f5f8114542c050bfcb484b39ce513d4bdEvan Hunt file "max-ttl.db";
35f6a21f5f8114542c050bfcb484b39ce513d4bdEvan Hunt max-zone-ttl 300;
35f6a21f5f8114542c050bfcb484b39ce513d4bdEvan Hunt check-integrity no;
35f6a21f5f8114542c050bfcb484b39ce513d4bdEvan Hunt allow-update { any; };
35f6a21f5f8114542c050bfcb484b39ce513d4bdEvan Hunt allow-transfer { any; };
35f6a21f5f8114542c050bfcb484b39ce513d4bdEvan Hunt};
35f6a21f5f8114542c050bfcb484b39ce513d4bdEvan Hunt
9069215eac23e32f4ef1c8e44ad7ff2865cfcdacEvan Huntzone "other.nil" {
9069215eac23e32f4ef1c8e44ad7ff2865cfcdacEvan Hunt type master;
9069215eac23e32f4ef1c8e44ad7ff2865cfcdacEvan Hunt file "other.db";
9069215eac23e32f4ef1c8e44ad7ff2865cfcdacEvan Hunt check-integrity no;
9069215eac23e32f4ef1c8e44ad7ff2865cfcdacEvan Hunt update-policy local;
222d38735f97f771054e223b03f84c5858252332Evan Hunt allow-query-on { 10.53.0.1; 127.0.0.1; };
c3c6770e537ea916265c78d0294ad108233e17c1Michael Sawyer allow-transfer { any; };
c3c6770e537ea916265c78d0294ad108233e17c1Michael Sawyer};
c5272fb3303425f794dab68f734f6a2a45dce01eMichael Sawyer
ac21f918f23ce95fd5be807428ee9e2c42319878Evan Huntmasters othermasters {
2c089bf6d24936de631a57b4958ba6b8b5e3b23dMark Andrews 10.53.0.2 port 5300;
2c089bf6d24936de631a57b4958ba6b8b5e3b23dMark Andrews 10.53.0.2 port 5300 key altkey;
ac21f918f23ce95fd5be807428ee9e2c42319878Evan Hunt};
ac21f918f23ce95fd5be807428ee9e2c42319878Evan Hunt
c5272fb3303425f794dab68f734f6a2a45dce01eMichael Sawyerzone "update.nil" {
c5272fb3303425f794dab68f734f6a2a45dce01eMichael Sawyer type master;
c5272fb3303425f794dab68f734f6a2a45dce01eMichael Sawyer file "update.db";
2c15fcdeac4c2402258867fbac24d7475ef98259Mark Andrews check-integrity no;
c5272fb3303425f794dab68f734f6a2a45dce01eMichael Sawyer allow-update { any; };
c5272fb3303425f794dab68f734f6a2a45dce01eMichael Sawyer allow-transfer { any; };
ac21f918f23ce95fd5be807428ee9e2c42319878Evan Hunt also-notify { othermasters; };
c5272fb3303425f794dab68f734f6a2a45dce01eMichael Sawyer};
a69070d8fab55dbc63ba9f96c9d3e34f0ea9119aMark Andrews
a69070d8fab55dbc63ba9f96c9d3e34f0ea9119aMark Andrewszone "unixtime.nil" {
a69070d8fab55dbc63ba9f96c9d3e34f0ea9119aMark Andrews type master;
a69070d8fab55dbc63ba9f96c9d3e34f0ea9119aMark Andrews file "unixtime.db";
a69070d8fab55dbc63ba9f96c9d3e34f0ea9119aMark Andrews check-integrity no;
a69070d8fab55dbc63ba9f96c9d3e34f0ea9119aMark Andrews allow-update { any; };
a69070d8fab55dbc63ba9f96c9d3e34f0ea9119aMark Andrews allow-transfer { any; };
a69070d8fab55dbc63ba9f96c9d3e34f0ea9119aMark Andrews serial-update-method unixtime;
a69070d8fab55dbc63ba9f96c9d3e34f0ea9119aMark Andrews};
a69070d8fab55dbc63ba9f96c9d3e34f0ea9119aMark Andrews
7318bbc26262a66a0d740ceefed769961ef7e476Evan Huntzone "yyyymmddvv.nil" {
7318bbc26262a66a0d740ceefed769961ef7e476Evan Hunt type master;
7318bbc26262a66a0d740ceefed769961ef7e476Evan Hunt file "yyyymmddvv.db";
7318bbc26262a66a0d740ceefed769961ef7e476Evan Hunt check-integrity no;
7318bbc26262a66a0d740ceefed769961ef7e476Evan Hunt allow-update { any; };
7318bbc26262a66a0d740ceefed769961ef7e476Evan Hunt allow-transfer { any; };
7318bbc26262a66a0d740ceefed769961ef7e476Evan Hunt serial-update-method date;
7318bbc26262a66a0d740ceefed769961ef7e476Evan Hunt};
7318bbc26262a66a0d740ceefed769961ef7e476Evan Hunt
de5890da9b87cb4b91aca033db0e25b1fdb68c77Evan Huntinclude "md5.key";
de5890da9b87cb4b91aca033db0e25b1fdb68c77Evan Huntinclude "sha1.key";
de5890da9b87cb4b91aca033db0e25b1fdb68c77Evan Huntinclude "sha224.key";
de5890da9b87cb4b91aca033db0e25b1fdb68c77Evan Huntinclude "sha256.key";
de5890da9b87cb4b91aca033db0e25b1fdb68c77Evan Huntinclude "sha384.key";
de5890da9b87cb4b91aca033db0e25b1fdb68c77Evan Huntinclude "sha512.key";
de5890da9b87cb4b91aca033db0e25b1fdb68c77Evan Hunt
de5890da9b87cb4b91aca033db0e25b1fdb68c77Evan Huntzone "keytests.nil" {
2c089bf6d24936de631a57b4958ba6b8b5e3b23dMark Andrews type master;
2c089bf6d24936de631a57b4958ba6b8b5e3b23dMark Andrews file "keytests.db";
2c089bf6d24936de631a57b4958ba6b8b5e3b23dMark Andrews update-policy {
2c089bf6d24936de631a57b4958ba6b8b5e3b23dMark Andrews grant md5-key name md5.keytests.nil. ANY;
2c089bf6d24936de631a57b4958ba6b8b5e3b23dMark Andrews grant sha1-key name sha1.keytests.nil. ANY;
2c089bf6d24936de631a57b4958ba6b8b5e3b23dMark Andrews grant sha224-key name sha224.keytests.nil. ANY;
2c089bf6d24936de631a57b4958ba6b8b5e3b23dMark Andrews grant sha256-key name sha256.keytests.nil. ANY;
2c089bf6d24936de631a57b4958ba6b8b5e3b23dMark Andrews grant sha384-key name sha384.keytests.nil. ANY;
2c089bf6d24936de631a57b4958ba6b8b5e3b23dMark Andrews grant sha512-key name sha512.keytests.nil. ANY;
2c089bf6d24936de631a57b4958ba6b8b5e3b23dMark Andrews };
de5890da9b87cb4b91aca033db0e25b1fdb68c77Evan Hunt};
74717eef53ba5d6aefc80eb262bbb090ff4bb3b5Mark Andrews
74717eef53ba5d6aefc80eb262bbb090ff4bb3b5Mark Andrewszone "many.test" {
948c80ffa8f4efbade049f49d9751675f6937cf4Tinderbox User type master;
948c80ffa8f4efbade049f49d9751675f6937cf4Tinderbox User allow-update { any; };
948c80ffa8f4efbade049f49d9751675f6937cf4Tinderbox User file "many.test.db";
74717eef53ba5d6aefc80eb262bbb090ff4bb3b5Mark Andrews};
45f206e6c1521c710947e9d5e734c32c6b286b13Mark Andrews
45f206e6c1521c710947e9d5e734c32c6b286b13Mark Andrewszone "sample" {
45f206e6c1521c710947e9d5e734c32c6b286b13Mark Andrews type master;
45f206e6c1521c710947e9d5e734c32c6b286b13Mark Andrews allow-update { any; };
45f206e6c1521c710947e9d5e734c32c6b286b13Mark Andrews file "sample.db";
45f206e6c1521c710947e9d5e734c32c6b286b13Mark Andrews};