57 lines
		
	
	
		
			1.8 KiB
		
	
	
	
		
			Plaintext
		
	
	
	
	
	
			
		
		
	
	
			57 lines
		
	
	
		
			1.8 KiB
		
	
	
	
		
			Plaintext
		
	
	
	
	
	
// Copy this file to /etc/bind/named.conf.options if you want to run bind as an
 | 
						|
// authoritative nameserver. If you want to run a recursive DNS resolver
 | 
						|
// instead, see Ventz's "example-configs/recursive-resolver/named.conf.options"
 | 
						|
//
 | 
						|
// BIND supports using the same daemon as both authoritative nameserver and
 | 
						|
// recursive resolver; it supports this because it is the oldest and original
 | 
						|
// nameserver and so was designed before it was realized that combining these
 | 
						|
// functions is inadvisable.
 | 
						|
//
 | 
						|
// In actual fact, combining these functions is a very bad idea. It is thus
 | 
						|
// recommended that you run a given instance of BIND as either an authoritative
 | 
						|
// nameserver or recursive resolver, not both. The example configuration herein
 | 
						|
// provides a secure starting point for running an authoritative nameserver.
 | 
						|
 | 
						|
options {
 | 
						|
	directory "/var/bind";
 | 
						|
 | 
						|
	// Configure the IPs to listen on here.
 | 
						|
	listen-on { 127.0.0.1; };
 | 
						|
	listen-on-v6 { none; };
 | 
						|
 | 
						|
	// If you want to allow only specific hosts to use the DNS server:
 | 
						|
	//allow-query {
 | 
						|
	//	127.0.0.1;
 | 
						|
	//};
 | 
						|
 | 
						|
	// Specify a list of IPs/masks to allow zone transfers to here.
 | 
						|
	//
 | 
						|
	// You can override this on a per-zone basis by specifying this inside a zone
 | 
						|
	// block.
 | 
						|
	//
 | 
						|
	// Warning: Removing this block will cause BIND to revert to its default
 | 
						|
	//          behaviour of allowing zone transfers to any host (!).
 | 
						|
	allow-transfer {
 | 
						|
		none;
 | 
						|
	};
 | 
						|
 | 
						|
	// If you have problems and are behind a firewall:
 | 
						|
	//query-source address * port 53;
 | 
						|
 | 
						|
	pid-file "/var/run/named/named.pid";
 | 
						|
 | 
						|
	// Changing this is NOT RECOMMENDED; see the notes above and in
 | 
						|
	// named.conf.recursive.
 | 
						|
	allow-recursion { none; };
 | 
						|
	recursion no;
 | 
						|
};
 | 
						|
 | 
						|
// Example of how to configure a zone for which this server is the master:
 | 
						|
//zone "example.com" IN {
 | 
						|
//	type master;
 | 
						|
//	file "/etc/bind/master/example.com";
 | 
						|
//};
 | 
						|
 | 
						|
// You can include files:
 | 
						|
//include "/etc/bind/example.conf";
 |