iankelling.org Git - distro-setup/blob - machine_specific/je/filesystem/etc/bind/named.conf.options

   1 // this is the default for t10, plus my commented additions
   2 options {
   3         directory "/var/cache/bind";
   4
   5         // If there is a firewall between you and nameservers you want
   6         // to talk to, you may need to fix the firewall to allow multiple
   7         // ports to talk.  See http://www.kb.cert.org/vuls/id/800113
   8
   9         // If your ISP provided one or more IP addresses for stable
  10         // nameservers, you probably want to use them as forwarders.
  11         // Uncomment the following block, and insert the addresses replacing
  12         // the all-0's placeholder.
  13
  14         // forwarders {
  15         //      0.0.0.0;
  16         // };
  17
  18         //========================================================================
  19         // If BIND logs error messages about the root key being expired,
  20         // you will need to update your keys.  See https://www.isc.org/bind-keys
  21         //========================================================================
  22         dnssec-validation auto;
  23
  24         // iank: only listen on our public addresses, lets use unbound for
  25         // local process resolution, like we do at fsf, so debugging issues
  26         // works for both.
  27         listen-on { 85.119.82.128; };
  28         listen-on-v6 { 2001:ba8:1f1:f09d::2; };
  29
  30 // end options
  31 };