good.conf 2.97 KB
Newer Older
1
/*
Mark Andrews's avatar
Mark Andrews committed
2
 * Copyright (C) 2005, 2007, 2010-2014  Internet Systems Consortium, Inc. ("ISC")
3
 *
Automatic Updater's avatar
Automatic Updater committed
4
 * Permission to use, copy, modify, and/or distribute this software for any
5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20
 * purpose with or without fee is hereby granted, provided that the above
 * copyright notice and this permission notice appear in all copies.
 *
 * THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
 * REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
 * AND FITNESS.  IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
 * INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
 * LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
 * OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
 * PERFORMANCE OF THIS SOFTWARE.
 */

/*
 * This is just a random selection of configuration options.
 */

21
/* cut here */
22
options {
23 24 25 26 27 28 29 30 31 32 33
	avoid-v4-udp-ports {
		100;
	};
	avoid-v6-udp-ports {
		100;
	};
	blackhole {
		10.0.0.0/8;
	};
	coresize 1073741824;
	datasize 104857600;
34 35
	deallocate-on-exit yes;
	directory ".";
Evan Hunt's avatar
Evan Hunt committed
36
	dscp 41;
37 38 39 40 41 42 43 44 45
	dump-file "named_dumpdb";
	fake-iquery yes;
	files 1000;
	has-old-clients no;
	heartbeat-interval 30;
	host-statistics yes;
	host-statistics-max 100;
	hostname none;
	interface-interval 30;
46 47 48
	listen-on port 90 {
		"any";
	};
Evan Hunt's avatar
Evan Hunt committed
49
	listen-on port 100 dscp 33 {
50 51
		127.0.0.1/32;
	};
Evan Hunt's avatar
Evan Hunt committed
52
	listen-on-v6 port 53 dscp 57 {
53 54
		"none";
	};
55 56 57 58 59 60 61 62 63 64 65 66 67
	match-mapped-addresses yes;
	memstatistics-file "named.memstats";
	multiple-cnames no;
	named-xfer "this is no longer needed";
	pid-file none;
	port 5300;
	querylog yes;
	recursing-file "named.recursing";
	random-device "/dev/random";
	recursive-clients 3000;
	serial-queries 10;
	serial-query-rate 100;
	server-id none;
68
	max-cache-size 20000000000000;
69 70
	nta-recheck 604800;
	nta-lifetime 604800;
Evan Hunt's avatar
Evan Hunt committed
71
	transfer-source 0.0.0.0 dscp 63;
72
	zone-statistics none;
73
};
74 75 76 77 78 79 80 81
view "first" {
	match-clients {
		"none";
	};
	zone "example1" {
		type master;
		file "xxx";
		update-policy local;
Evan Hunt's avatar
Evan Hunt committed
82
		notify-source 10.10.10.10 port 53 dscp 55;
83
	};
Evan Hunt's avatar
Evan Hunt committed
84 85 86 87
	zone "clone" {
		type master;
		file "yyy";
	};
88 89
	dnssec-lookaside auto;
	dnssec-validation auto;
90
	zone-statistics terse;
91
};
92 93 94 95 96 97
view "second" {
	match-clients {
		"any";
	};
	zone "example1" {
		type master;
98
		file "zzz";
99
		update-policy local;
100
		zone-statistics yes;
101
	};
102 103 104 105 106 107
	zone "example2" {
		type static-stub;
		forward only;
		forwarders {
			10.53.0.4;
		};
108
		zone-statistics no;
109
	};
Evan Hunt's avatar
Evan Hunt committed
110 111 112
	zone "clone" {
		in-view "first";
	};
113 114 115 116 117 118
	zone "." {
		type redirect;
		masters {
			1.2.3.4 ;
		};
	};
119 120
	dnssec-lookaside "." trust-anchor "dlv.isc.org.";
	dnssec-validation auto;
121
	zone-statistics full;
122
};
Evan Hunt's avatar
Evan Hunt committed
123 124 125 126 127 128 129 130 131 132 133
view "third" {
	match-clients {
		"none";
	};
	zone "clone" {
		in-view "first";
		forward only;
		forwarders {
			10.0.0.100;
		};
	};
134 135 136 137 138 139 140 141
	zone "dnssec" {
		type master;
		file "file";
		auto-dnssec maintain;
	};
	allow-update {
		"any";
	};
Evan Hunt's avatar
Evan Hunt committed
142
};
143 144 145 146 147 148
view "chaos" chaos {
	zone "hostname.bind" chaos {
		type master;
		database "_builtin hostname";
	};
};
149 150 151 152
key "mykey" {
	algorithm "hmac-md5";
	secret "qwertyuiopasdfgh";
};