(Masters DNS)
// generated by named-bootconf.pl
options { directory "/var/named";
statistics-file "/var/named/named.stats";
dump-file "/var/named/data/cache_dump.db";
// query-source address * port 53;
listen-on-v6 { none; };
notify yes;
allow-notify { 10.0.1.1; 10.0.1.6; };
auth-nxdomain yes; # conform to RFC1035
version " " ;
listen-on {10.0.1.1; 10.0.99.1; };
//allow-transfer {10.0.1.1; 10.0.1.6; };
//check-names master ignore;
//check-names slave ignore;
//check-names response ignore;};
};
};
controls { inet * port 953 allow { 127.0.0.1; 10.0.1.1; 10.0.99.1; } keys { "rndckey"; };};
key "rndckey" { algorithm hmac-md5; secret "tqqAoUEYJN48iWP1knJLmzb2ZvtEChfjLXyteWYqxRTNHeVr46MOSFdzOnKH";};
acl inside-group { 10.0.1.0/24; 10.0.2.0/24; };
acl dns-transfer-group { !10.0.1.1; 10.0.1.6; };
view "internal" {
allow-query { inside-group; };
match-clients { 10.0.1.1; 10.0.1.6; !10.0.99.0/24; inside-group; };
allow-transfer { dns-transfer-group; } ;
recursion yes ;
zone "." IN {
zone "." IN {
type hint;
file "named.ca"; };
zone "domain.com" IN {
type master;
file "domain.com.internal"; };
zone "1.0.10.in-addr.arpa" IN {
type master;
file "10.0.1.rev"; };
};
view "external" {
view "external" {
allow-query { any; };
match-clients { any; };
allow-transfer { 10.0.99.6; !10.0.99.1; };
recursion no;
zone "." IN {
type hint;
file "named.ca"; };
zone "domain.com" IN {
type master;
file "domain.com.external"; };
zone "domain.com.tw" IN {
type master;
file "domain.com.tw.external"; };
// zone "0.0.127.in-addr.arpa" IN {
// type master;
// file "localhost.rev";
// };
};
(Slave DNS)
// generated by named-bootconf.pl
controls { inet * port 953 allow { 127.0.0.1; 10.0.1.6; 10.0.99.6; } keys { "rndckey"; };};
key "rndckey" { algorithm hmac-md5; secret "tqqAoUEYJN48iWP1knJLmzb2ZvtEChfjLXyteWYqxRTNHeVr46MOSFdzOnKH";};
acl inside-group { 10.0.1.0/24; 10.0.2.0/24; };
acl dns-transfer-group { 10.0.1.1; !10.0.1.6; };
view "internal" {
allow-query { inside-group; };
match-clients { !10.0.1.1; 10.0.1.6 ; inside-group; };
allow-transfer { dns-transfer-group ; } ;
recursion yes ;
zone "." IN {
type hint;
file "named.ca"; };
zone "domain.com" IN {
type slave;
masters { 10.0.1.1; };
transfer-source 10.0.1.6;
transfer-source 10.0.1.6;
file "domain.com.internal"; };
zone "1.0.10.in-addr.arpa" IN {
type slave;
masters { 10.0.1.1; };
transfer-source 10.0.1.6;
file "10.0.1.rev"; };
};
view "external" {
view "external" {
allow-query { any; };
match-clients { any; };
allow-transfer { 10.0.99.1; !10.0.99.6; };
recursion no;
zone "." IN {
type hint;
file "named.ca"; };
zone "domain.com" IN {
type slave;
masters { 10.0.99.1; };
transfer-source 10.0.99.6;
file "domain.com.external"; };
zone "domain.com.tw" IN {
type slave;
masters { 10.0.99.1; };
transfer-source 10.0.99.6;
file "domain.com.tw.external"; };
// zone "0.0.127.in-addr.arpa" IN {
// type master;
// file "localhost.rev";
// };
};