mainly alerting improvements

[distro-setup] / machine_specific / bk / filesystem / etc / bind / named.conf.options

diff --git a/machine_specific/vps/filesystem/etc/bind/named.conf.options b/machine_specific/bk/filesystem/etc/bind/named.conf.options
similarity index 79%
rename from machine_specific/vps/filesystem/etc/bind/named.conf.options
rename to machine_specific/bk/filesystem/etc/bind/named.conf.options
index 157e2955ea6e514ddfca450515446fa3368ccaa2..42f1a3e8ccd794294468be61ae6227a75816c9d7 100644 (file)
--- a/machine_specific/vps/filesystem/etc/bind/named.conf.options
+++ b/machine_specific/bk/filesystem/etc/bind/named.conf.options
@@ -21,18 +21,11 @@ options {
         //========================================================================
         dnssec-validation auto;
 
-        listen-on-v6 { any; };
-
-// iank, allow queries from network namespace
-// even if the interface doesnt exist when bind starts.
-allow-recursion {
- 10.173.8.0/24;
- localhost;
-};
-allow-query-cache {
- 10.173.8.0/24;
- localhost;
-};
+        // iank: only listen on our public addresses, lets use unbound for
+        // local process resolution, like we do at fsf, so debugging issues
+        // works for both.
+        listen-on { 85.119.83.50; };
+        listen-on-v6 { 2001:ba8:1f1:f0c9::2; };
 
 // end options
 };