source: hybrid/branches/releng-9.0/nanobsd/files/etc/namedb/named.conf@ 10408

Last change on this file since 10408 was 10408, checked in by rick, 13 years ago

FAT hybrid helpers needed.
File size: 16.1 KB
Line 
1// $FreeBSD: release/9.0.0/etc/namedb/named.conf 224125 2011-07-17 06:20:47Z dougb $
2//
3// Refer to the named.conf(5) and named(8) man pages, and the documentation
4// in /usr/share/doc/bind9 for more details.
5//
6// If you are going to set up an authoritative server, make sure you
7// understand the hairy details of how DNS works. Even with
8// simple mistakes, you can break connectivity for affected parties,
9// or cause huge amounts of useless Internet traffic.
10
11options {
12 // All file and path names are relative to the chroot directory,
13 // if any, and should be fully qualified.
14 directory "/etc/namedb/working";
15 pid-file "/var/run/named/pid";
16 dump-file "/var/dump/named_dump.db";
17 statistics-file "/var/stats/named.stats";
18
19// If named is being used only as a local resolver, this is a safe default.
20// For named to be accessible to the network, comment this option, specify
21// the proper IP address, or delete this option.
22// listen-on { 127.0.0.1; };
23
24// If you have IPv6 enabled on this system, uncomment this option for
25// use as a local resolver. To give access to the network, specify
26// an IPv6 address, or the keyword "any".
27// listen-on-v6 { ::1; };
28
29// These zones are already covered by the empty zones listed below.
30// If you remove the related empty zones below, comment these lines out.
31 disable-empty-zone "255.255.255.255.IN-ADDR.ARPA";
32 disable-empty-zone "0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.IP6.ARPA";
33 disable-empty-zone "1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.IP6.ARPA";
34
35// If you've got a DNS server around at your upstream provider, enter
36// its IP address here, and enable the line below. This will make you
37// benefit from its cache, thus reduce overall DNS traffic in the Internet.
38/*
39 forwarders {
40 127.0.0.1;
41 };
42*/
43
44// If the 'forwarders' clause is not empty the default is to 'forward first'
45// which will fall back to sending a query from your local server if the name
46// servers in 'forwarders' do not have the answer. Alternatively you can
47// force your name server to never initiate queries of its own by enabling the
48// following line:
49// forward only;
50
51// If you wish to have forwarding configured automatically based on
52// the entries in /etc/resolv.conf, uncomment the following line and
53// set named_auto_forward=yes in /etc/rc.conf. You can also enable
54// named_auto_forward_only (the effect of which is described above).
55 include "/etc/namedb/auto_forward.conf";
56
57 /*
58 Modern versions of BIND use a random UDP port for each outgoing
59 query by default in order to dramatically reduce the possibility
60 of cache poisoning. All users are strongly encouraged to utilize
61 this feature, and to configure their firewalls to accommodate it.
62
63 AS A LAST RESORT in order to get around a restrictive firewall
64 policy you can try enabling the option below. Use of this option
65 will significantly reduce your ability to withstand cache poisoning
66 attacks, and should be avoided if at all possible.
67
68 Replace NNNNN in the example with a number between 49160 and 65530.
69 */
70 // query-source address * port NNNNN;
71 allow-transfer { "any"; };
72 allow-recursion { "any"; };
73};
74
75// If you enable a local name server, don't forget to enter 127.0.0.1
76// first in your /etc/resolv.conf so this server will be queried.
77// Also, make sure to enable it in /etc/rc.conf.
78
79// The traditional root hints mechanism. Use this, OR the slave zones below.
80zone "." { type hint; file "/etc/namedb/named.root"; };
81
82/* Slaving the following zones from the root name servers has some
83 significant advantages:
84 1. Faster local resolution for your users
85 2. No spurious traffic will be sent from your network to the roots
86 3. Greater resilience to any potential root server failure/DDoS
87
88 On the other hand, this method requires more monitoring than the
89 hints file to be sure that an unexpected failure mode has not
90 incapacitated your server. Name servers that are serving a lot
91 of clients will benefit more from this approach than individual
92 hosts. Use with caution.
93
94 To use this mechanism, uncomment the entries below, and comment
95 the hint zone above.
96
97 As documented at http://dns.icann.org/services/axfr/ these zones:
98 "." (the root), ARPA, IN-ADDR.ARPA, IP6.ARPA, and ROOT-SERVERS.NET
99 are availble for AXFR from these servers on IPv4 and IPv6:
100 xfr.lax.dns.icann.org, xfr.cjr.dns.icann.org
101*/
102/*
103zone "." {
104 type slave;
105 file "/etc/namedb/slave/root.slave";
106 masters {
107 192.5.5.241; // F.ROOT-SERVERS.NET.
108 };
109 notify no;
110};
111zone "arpa" {
112 type slave;
113 file "/etc/namedb/slave/arpa.slave";
114 masters {
115 192.5.5.241; // F.ROOT-SERVERS.NET.
116 };
117 notify no;
118};
119*/
120
121/* Serving the following zones locally will prevent any queries
122 for these zones leaving your network and going to the root
123 name servers. This has two significant advantages:
124 1. Faster local resolution for your users
125 2. No spurious traffic will be sent from your network to the roots
126*/
127// RFCs 1912, 5735 and 6303 (and BCP 32 for localhost)
128zone "localhost" { type master; file "/etc/namedb/master/localhost-forward.db"; };
129zone "127.in-addr.arpa" { type master; file "/etc/namedb/master/localhost-reverse.db"; };
130zone "255.in-addr.arpa" { type master; file "/etc/namedb/master/empty.db"; };
131
132// RFC 1912-style zone for IPv6 localhost address (RFC 6303)
133zone "0.ip6.arpa" { type master; file "/etc/namedb/master/localhost-reverse.db"; };
134
135// "This" Network (RFCs 1912, 5735 and 6303)
136zone "0.in-addr.arpa" { type master; file "/etc/namedb/master/empty.db"; };
137
138// Private Use Networks (RFCs 1918, 5735 and 6303)
139zone "10.in-addr.arpa" { type master; file "/etc/namedb/master/empty.db"; };
140//zone "16.172.in-addr.arpa" { type master; file "/etc/namedb/master/empty.db"; };
141//zone "17.172.in-addr.arpa" { type master; file "/etc/namedb/master/empty.db"; };
142//zone "18.172.in-addr.arpa" { type master; file "/etc/namedb/master/empty.db"; };
143//zone "19.172.in-addr.arpa" { type master; file "/etc/namedb/master/empty.db"; };
144//zone "20.172.in-addr.arpa" { type master; file "/etc/namedb/master/empty.db"; };
145//zone "21.172.in-addr.arpa" { type master; file "/etc/namedb/master/empty.db"; };
146//zone "22.172.in-addr.arpa" { type master; file "/etc/namedb/master/empty.db"; };
147//zone "23.172.in-addr.arpa" { type master; file "/etc/namedb/master/empty.db"; };
148//zone "24.172.in-addr.arpa" { type master; file "/etc/namedb/master/empty.db"; };
149//zone "25.172.in-addr.arpa" { type master; file "/etc/namedb/master/empty.db"; };
150//zone "26.172.in-addr.arpa" { type master; file "/etc/namedb/master/empty.db"; };
151//zone "27.172.in-addr.arpa" { type master; file "/etc/namedb/master/empty.db"; };
152//zone "28.172.in-addr.arpa" { type master; file "/etc/namedb/master/empty.db"; };
153//zone "29.172.in-addr.arpa" { type master; file "/etc/namedb/master/empty.db"; };
154//zone "30.172.in-addr.arpa" { type master; file "/etc/namedb/master/empty.db"; };
155//zone "31.172.in-addr.arpa" { type master; file "/etc/namedb/master/empty.db"; };
156zone "168.192.in-addr.arpa" { type master; file "/etc/namedb/master/empty.db"; };
157
158// Link-local/APIPA (RFCs 3927, 5735 and 6303)
159zone "254.169.in-addr.arpa" { type master; file "/etc/namedb/master/empty.db"; };
160
161// IETF protocol assignments (RFCs 5735 and 5736)
162zone "0.0.192.in-addr.arpa" { type master; file "/etc/namedb/master/empty.db"; };
163
164// TEST-NET-[1-3] for Documentation (RFCs 5735, 5737 and 6303)
165zone "2.0.192.in-addr.arpa" { type master; file "/etc/namedb/master/empty.db"; };
166zone "100.51.198.in-addr.arpa" { type master; file "/etc/namedb/master/empty.db"; };
167zone "113.0.203.in-addr.arpa" { type master; file "/etc/namedb/master/empty.db"; };
168
169// IPv6 Example Range for Documentation (RFCs 3849 and 6303)
170zone "8.b.d.0.1.0.0.2.ip6.arpa" { type master; file "/etc/namedb/master/empty.db"; };
171
172// Domain Names for Documentation and Testing (BCP 32)
173zone "test" { type master; file "/etc/namedb/master/empty.db"; };
174zone "example" { type master; file "/etc/namedb/master/empty.db"; };
175zone "invalid" { type master; file "/etc/namedb/master/empty.db"; };
176zone "example.com" { type master; file "/etc/namedb/master/empty.db"; };
177zone "example.net" { type master; file "/etc/namedb/master/empty.db"; };
178zone "example.org" { type master; file "/etc/namedb/master/empty.db"; };
179
180// Router Benchmark Testing (RFCs 2544 and 5735)
181zone "18.198.in-addr.arpa" { type master; file "/etc/namedb/master/empty.db"; };
182zone "19.198.in-addr.arpa" { type master; file "/etc/namedb/master/empty.db"; };
183
184// IANA Reserved - Old Class E Space (RFC 5735)
185zone "240.in-addr.arpa" { type master; file "/etc/namedb/master/empty.db"; };
186zone "241.in-addr.arpa" { type master; file "/etc/namedb/master/empty.db"; };
187zone "242.in-addr.arpa" { type master; file "/etc/namedb/master/empty.db"; };
188zone "243.in-addr.arpa" { type master; file "/etc/namedb/master/empty.db"; };
189zone "244.in-addr.arpa" { type master; file "/etc/namedb/master/empty.db"; };
190zone "245.in-addr.arpa" { type master; file "/etc/namedb/master/empty.db"; };
191zone "246.in-addr.arpa" { type master; file "/etc/namedb/master/empty.db"; };
192zone "247.in-addr.arpa" { type master; file "/etc/namedb/master/empty.db"; };
193zone "248.in-addr.arpa" { type master; file "/etc/namedb/master/empty.db"; };
194zone "249.in-addr.arpa" { type master; file "/etc/namedb/master/empty.db"; };
195zone "250.in-addr.arpa" { type master; file "/etc/namedb/master/empty.db"; };
196zone "251.in-addr.arpa" { type master; file "/etc/namedb/master/empty.db"; };
197zone "252.in-addr.arpa" { type master; file "/etc/namedb/master/empty.db"; };
198zone "253.in-addr.arpa" { type master; file "/etc/namedb/master/empty.db"; };
199zone "254.in-addr.arpa" { type master; file "/etc/namedb/master/empty.db"; };
200
201// IPv6 Unassigned Addresses (RFC 4291)
202zone "1.ip6.arpa" { type master; file "/etc/namedb/master/empty.db"; };
203zone "3.ip6.arpa" { type master; file "/etc/namedb/master/empty.db"; };
204zone "4.ip6.arpa" { type master; file "/etc/namedb/master/empty.db"; };
205zone "5.ip6.arpa" { type master; file "/etc/namedb/master/empty.db"; };
206zone "6.ip6.arpa" { type master; file "/etc/namedb/master/empty.db"; };
207zone "7.ip6.arpa" { type master; file "/etc/namedb/master/empty.db"; };
208zone "8.ip6.arpa" { type master; file "/etc/namedb/master/empty.db"; };
209zone "9.ip6.arpa" { type master; file "/etc/namedb/master/empty.db"; };
210zone "a.ip6.arpa" { type master; file "/etc/namedb/master/empty.db"; };
211zone "b.ip6.arpa" { type master; file "/etc/namedb/master/empty.db"; };
212zone "c.ip6.arpa" { type master; file "/etc/namedb/master/empty.db"; };
213zone "d.ip6.arpa" { type master; file "/etc/namedb/master/empty.db"; };
214zone "e.ip6.arpa" { type master; file "/etc/namedb/master/empty.db"; };
215zone "0.f.ip6.arpa" { type master; file "/etc/namedb/master/empty.db"; };
216zone "1.f.ip6.arpa" { type master; file "/etc/namedb/master/empty.db"; };
217zone "2.f.ip6.arpa" { type master; file "/etc/namedb/master/empty.db"; };
218zone "3.f.ip6.arpa" { type master; file "/etc/namedb/master/empty.db"; };
219zone "4.f.ip6.arpa" { type master; file "/etc/namedb/master/empty.db"; };
220zone "5.f.ip6.arpa" { type master; file "/etc/namedb/master/empty.db"; };
221zone "6.f.ip6.arpa" { type master; file "/etc/namedb/master/empty.db"; };
222zone "7.f.ip6.arpa" { type master; file "/etc/namedb/master/empty.db"; };
223zone "8.f.ip6.arpa" { type master; file "/etc/namedb/master/empty.db"; };
224zone "9.f.ip6.arpa" { type master; file "/etc/namedb/master/empty.db"; };
225zone "a.f.ip6.arpa" { type master; file "/etc/namedb/master/empty.db"; };
226zone "b.f.ip6.arpa" { type master; file "/etc/namedb/master/empty.db"; };
227zone "0.e.f.ip6.arpa" { type master; file "/etc/namedb/master/empty.db"; };
228zone "1.e.f.ip6.arpa" { type master; file "/etc/namedb/master/empty.db"; };
229zone "2.e.f.ip6.arpa" { type master; file "/etc/namedb/master/empty.db"; };
230zone "3.e.f.ip6.arpa" { type master; file "/etc/namedb/master/empty.db"; };
231zone "4.e.f.ip6.arpa" { type master; file "/etc/namedb/master/empty.db"; };
232zone "5.e.f.ip6.arpa" { type master; file "/etc/namedb/master/empty.db"; };
233zone "6.e.f.ip6.arpa" { type master; file "/etc/namedb/master/empty.db"; };
234zone "7.e.f.ip6.arpa" { type master; file "/etc/namedb/master/empty.db"; };
235
236// IPv6 ULA (RFCs 4193 and 6303)
237zone "c.f.ip6.arpa" { type master; file "/etc/namedb/master/empty.db"; };
238zone "d.f.ip6.arpa" { type master; file "/etc/namedb/master/empty.db"; };
239
240// IPv6 Link Local (RFCs 4291 and 6303)
241zone "8.e.f.ip6.arpa" { type master; file "/etc/namedb/master/empty.db"; };
242zone "9.e.f.ip6.arpa" { type master; file "/etc/namedb/master/empty.db"; };
243zone "a.e.f.ip6.arpa" { type master; file "/etc/namedb/master/empty.db"; };
244zone "b.e.f.ip6.arpa" { type master; file "/etc/namedb/master/empty.db"; };
245
246// IPv6 Deprecated Site-Local Addresses (RFCs 3879 and 6303)
247zone "c.e.f.ip6.arpa" { type master; file "/etc/namedb/master/empty.db"; };
248zone "d.e.f.ip6.arpa" { type master; file "/etc/namedb/master/empty.db"; };
249zone "e.e.f.ip6.arpa" { type master; file "/etc/namedb/master/empty.db"; };
250zone "f.e.f.ip6.arpa" { type master; file "/etc/namedb/master/empty.db"; };
251
252// IP6.INT is Deprecated (RFC 4159)
253zone "ip6.int" { type master; file "/etc/namedb/master/empty.db"; };
254
255// NB: Do not use the IP addresses below, they are faked, and only
256// serve demonstration/documentation purposes!
257//
258// Example slave zone config entries. It can be convenient to become
259// a slave at least for the zone your own domain is in. Ask
260// your network administrator for the IP address of the responsible
261// master name server.
262//
263// Do not forget to include the reverse lookup zone!
264// This is named after the first bytes of the IP address, in reverse
265// order, with ".IN-ADDR.ARPA" appended, or ".IP6.ARPA" for IPv6.
266//
267// Before starting to set up a master zone, make sure you fully
268// understand how DNS and BIND work. There are sometimes
269// non-obvious pitfalls. Setting up a slave zone is usually simpler.
270//
271// NB: Don't blindly enable the examples below. :-) Use actual names
272// and addresses instead.
273
274/* An example dynamic zone
275key "exampleorgkey" {
276 algorithm hmac-md5;
277 secret "sf87HJqjkqh8ac87a02lla==";
278};
279zone "example.org" {
280 type master;
281 allow-update {
282 key "exampleorgkey";
283 };
284 file "/etc/namedb/dynamic/example.org";
285};
286*/
287
288/* Example of a slave reverse zone
289zone "1.168.192.in-addr.arpa" {
290 type slave;
291 file "/etc/namedb/slave/1.168.192.in-addr.arpa";
292 masters {
293 192.168.1.1;
294 };
295};
296*/
297
298zone "16.172.in-addr.arpa" {
299 type slave;
300 file "/etc/namedb/slave/16.172.in-addr.arpa";
301 masters { 172.16.4.46; };
302};
303zone "17.172.in-addr.arpa" {
304 type slave;
305 file "/etc/namedb/slave/17.172.in-addr.arpa";
306 masters { 172.16.4.46; };
307};
308zone "18.172.in-addr.arpa" {
309 type slave;
310 file "/etc/namedb/slave/18.172.in-addr.arpa";
311 masters { 172.16.4.46; };
312};
313zone "19.172.in-addr.arpa" {
314 type slave;
315 file "/etc/namedb/slave/19.172.in-addr.arpa";
316 masters { 172.16.4.46; };
317};
318zone "20.172.in-addr.arpa" {
319 type slave;
320 file "/etc/namedb/slave/20.172.in-addr.arpa";
321 masters { 172.16.4.46; };
322};
323zone "21.172.in-addr.arpa" {
324 type slave;
325 file "/etc/namedb/slave/21.172.in-addr.arpa";
326 masters { 172.16.4.46; };
327};
328zone "22.172.in-addr.arpa" {
329 type slave;
330 file "/etc/namedb/slave/22.172.in-addr.arpa";
331 masters { 172.16.4.46; };
332};
333zone "23.172.in-addr.arpa" {
334 type slave;
335 file "/etc/namedb/slave/23.172.in-addr.arpa";
336 masters { 172.16.4.46; };
337};
338zone "24.172.in-addr.arpa" {
339 type slave;
340 file "/etc/namedb/slave/24.172.in-addr.arpa";
341 masters { 172.16.4.46; };
342};
343zone "25.172.in-addr.arpa" {
344 type slave;
345 file "/etc/namedb/slave/25.172.in-addr.arpa";
346 masters { 172.16.4.46; };
347};
348zone "26.172.in-addr.arpa" {
349 type slave;
350 file "/etc/namedb/slave/26.172.in-addr.arpa";
351 masters { 172.16.4.46; };
352};
353zone "27.172.in-addr.arpa" {
354 type slave;
355 file "/etc/namedb/slave/27.172.in-addr.arpa";
356 masters { 172.16.4.46; };
357};
358zone "28.172.in-addr.arpa" {
359 type slave;
360 file "/etc/namedb/slave/27.172.in-addr.arpa";
361 masters { 172.16.4.46; };
362};
363zone "29.172.in-addr.arpa" {
364 type slave;
365 file "/etc/namedb/slave/28.172.in-addr.arpa";
366 masters { 172.16.4.46; };
367};
368zone "30.172.in-addr.arpa" {
369 type slave;
370 file "/etc/namedb/slave/30.172.in-addr.arpa";
371 masters { 172.16.4.46; };
372};
373zone "31.172.in-addr.arpa" {
374 type slave;
375 file "/etc/namedb/slave/31.172.in-addr.arpa";
376 masters { 172.16.4.46; };
377};
378zone "wleiden.net" {
379 type slave;
380 file "/etc/namedb/slave/wleiden.net";
381 masters { 172.16.4.46; };
382};
Note: See TracBrowser for help on using the repository browser.