good.conf 3.01 KB
Newer Older
1
/*
Mark Andrews's avatar
Mark Andrews committed
2
 * Copyright (C) 2005, 2007, 2010-2014  Internet Systems Consortium, Inc. ("ISC")
3
 *
Automatic Updater's avatar
Automatic Updater committed
4
 * Permission to use, copy, modify, and/or distribute this software for any
5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20
 * purpose with or without fee is hereby granted, provided that the above
 * copyright notice and this permission notice appear in all copies.
 *
 * THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
 * REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
 * AND FITNESS.  IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
 * INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
 * LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
 * OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
 * PERFORMANCE OF THIS SOFTWARE.
 */

/*
 * This is just a random selection of configuration options.
 */

21
/* cut here */
22
options {
23 24 25 26 27 28 29 30 31 32 33
	avoid-v4-udp-ports {
		100;
	};
	avoid-v6-udp-ports {
		100;
	};
	blackhole {
		10.0.0.0/8;
	};
	coresize 1073741824;
	datasize 104857600;
34 35
	deallocate-on-exit yes;
	directory ".";
Evan Hunt's avatar
Evan Hunt committed
36
	dscp 41;
37 38 39 40 41 42 43 44 45
	dump-file "named_dumpdb";
	fake-iquery yes;
	files 1000;
	has-old-clients no;
	heartbeat-interval 30;
	host-statistics yes;
	host-statistics-max 100;
	hostname none;
	interface-interval 30;
46 47 48
	keep-response-order {
		10.0.0.10/24;
	};
49 50 51
	listen-on port 90 {
		"any";
	};
Evan Hunt's avatar
Evan Hunt committed
52
	listen-on port 100 dscp 33 {
53 54
		127.0.0.1/32;
	};
Evan Hunt's avatar
Evan Hunt committed
55
	listen-on-v6 port 53 dscp 57 {
56 57
		"none";
	};
58 59 60 61 62 63 64 65 66 67 68 69 70
	match-mapped-addresses yes;
	memstatistics-file "named.memstats";
	multiple-cnames no;
	named-xfer "this is no longer needed";
	pid-file none;
	port 5300;
	querylog yes;
	recursing-file "named.recursing";
	random-device "/dev/random";
	recursive-clients 3000;
	serial-queries 10;
	serial-query-rate 100;
	server-id none;
71
	max-cache-size 20000000000000;
72 73
	nta-recheck 604800;
	nta-lifetime 604800;
Evan Hunt's avatar
Evan Hunt committed
74
	transfer-source 0.0.0.0 dscp 63;
75
	zone-statistics none;
76
};
77 78 79 80 81 82 83 84
view "first" {
	match-clients {
		"none";
	};
	zone "example1" {
		type master;
		file "xxx";
		update-policy local;
Evan Hunt's avatar
Evan Hunt committed
85
		notify-source 10.10.10.10 port 53 dscp 55;
86
	};
Evan Hunt's avatar
Evan Hunt committed
87 88 89 90
	zone "clone" {
		type master;
		file "yyy";
	};
91 92
	dnssec-lookaside auto;
	dnssec-validation auto;
93
	zone-statistics terse;
94
};
95 96 97 98 99 100
view "second" {
	match-clients {
		"any";
	};
	zone "example1" {
		type master;
101
		file "zzz";
102
		update-policy local;
103
		zone-statistics yes;
104
	};
105 106 107 108 109 110
	zone "example2" {
		type static-stub;
		forward only;
		forwarders {
			10.53.0.4;
		};
111
		zone-statistics no;
112
	};
Evan Hunt's avatar
Evan Hunt committed
113 114 115
	zone "clone" {
		in-view "first";
	};
116 117 118 119 120 121
	zone "." {
		type redirect;
		masters {
			1.2.3.4 ;
		};
	};
122 123
	dnssec-lookaside "." trust-anchor "dlv.isc.org.";
	dnssec-validation auto;
124
	zone-statistics full;
125
};
Evan Hunt's avatar
Evan Hunt committed
126 127 128 129 130 131 132 133 134 135 136
view "third" {
	match-clients {
		"none";
	};
	zone "clone" {
		in-view "first";
		forward only;
		forwarders {
			10.0.0.100;
		};
	};
137 138 139 140 141 142 143 144
	zone "dnssec" {
		type master;
		file "file";
		auto-dnssec maintain;
	};
	allow-update {
		"any";
	};
Evan Hunt's avatar
Evan Hunt committed
145
};
146 147 148 149 150 151
view "chaos" chaos {
	zone "hostname.bind" chaos {
		type master;
		database "_builtin hostname";
	};
};
152 153 154 155
key "mykey" {
	algorithm "hmac-md5";
	secret "qwertyuiopasdfgh";
};