iankelling.org Git - distro-setup/blob - machine_specific/vps/filesystem/etc/bind/named.conf.options

   1 // this is the default for t10, plus my commented additions
   2 options {
   3         directory "/var/cache/bind";
   4
   5         // If there is a firewall between you and nameservers you want
   6         // to talk to, you may need to fix the firewall to allow multiple
   7         // ports to talk.  See http://www.kb.cert.org/vuls/id/800113
   8
   9         // If your ISP provided one or more IP addresses for stable
  10         // nameservers, you probably want to use them as forwarders.
  11         // Uncomment the following block, and insert the addresses replacing
  12         // the all-0's placeholder.
  13
  14         // forwarders {
  15         //      0.0.0.0;
  16         // };
  17
  18         //========================================================================
  19         // If BIND logs error messages about the root key being expired,
  20         // you will need to update your keys.  See https://www.isc.org/bind-keys
  21         //========================================================================
  22         dnssec-validation auto;
  23
  24         listen-on-v6 { any; };
  25
  26 // iank, allow queries from network namespace
  27 // even if the interface doesnt exist when bind starts.
  28 allow-recursion {
  29  10.173.8.0/24;
  30  localhost;
  31 };
  32 allow-query-cache {
  33  10.173.8.0/24;
  34  localhost;
  35 };
  36
  37 // end options
  38 };