rpms/bind
5
0
Fork 1
Code Issues Pull Requests Releases Activity

- fixed named.conf.sample file (#437569)

Browse Source
This commit is contained in:
Adam Tkac 2008-04-02 12:43:33 +00:00
parent dcb87f0cf7
commit 95fd5e6c3e
2 changed files with 13 additions and 15 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
bind.spec
View File

@ -18,7 +18,7 @@ Summary: The Berkeley Internet Name Domain (BIND) DNS (Domain Name System) serv
Name: bind Name: bind
License: ISC License: ISC
Version: 9.5.0 Version: 9.5.0
Release: 29.2.%{RELEASEVER}%{?dist} Release: 29.3.%{RELEASEVER}%{dist}
Epoch: 32 Epoch: 32
Url: http://www.isc.org/products/BIND/ Url: http://www.isc.org/products/BIND/
Buildroot: %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n) Buildroot: %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n)
@ -647,6 +647,9 @@ rm -rf ${RPM_BUILD_ROOT}
%{_sbindir}/bind-chroot-admin %{_sbindir}/bind-chroot-admin
%changelog %changelog
* Wed Apr 02 2008 Adam Tkac <atkac redhat com> 32:9.5.0-29.3.b2
- fixed named.conf.sample file (#437569)
* Fri Mar 14 2008 Adam Tkac <atkac redhat com> 32:9.5.0-29.2.b2 * Fri Mar 14 2008 Adam Tkac <atkac redhat com> 32:9.5.0-29.2.b2
- fixed URLs - fixed URLs

23
named.conf.sample
View File

@ -9,12 +9,6 @@
// //
options options
{ {
/* make named use port 53 for the source of all queries, to allow
* firewalls to block all ports except 53:
*/
query-source port 53;
query-source-v6 port 53;
// Put files that named is allowed to write in the data/ directory: // Put files that named is allowed to write in the data/ directory:
directory "/var/named"; // the default directory "/var/named"; // the default
dump-file "data/cache_dump.db"; dump-file "data/cache_dump.db";
@ -52,14 +46,13 @@ view "localhost_resolver"
* If all you want is a caching-only nameserver, then you need only define this view: * If all you want is a caching-only nameserver, then you need only define this view:
*/ */
match-clients { localhost; }; match-clients { localhost; };
match-destinations { localhost; };
recursion yes; recursion yes;
# all views must contain the root hints zone: # all views must contain the root hints zone:
include "/etc/named.root.hints"; include "/etc/named.root.hints";
/* these are zones that contain definitions for all the localhost /* these are zones that contain definitions for all the localhost
* names and addresses, as recommended in RFC1912 - these names should * names and addresses, as recommended in RFC1912 - these names should
* ONLY be served to localhost clients: * not leak to the other nameservers:
*/ */
include "/etc/named.rfc1912.zones"; include "/etc/named.rfc1912.zones";
}; };
@ -69,13 +62,16 @@ view "internal"
that connect via your directly attached LAN interfaces - "localnets" . that connect via your directly attached LAN interfaces - "localnets" .
*/ */
match-clients { localnets; }; match-clients { localnets; };
match-destinations { localnets; };
recursion yes; recursion yes;
// all views must contain the root hints zone: // all views must contain the root hints zone:
include "/etc/named.root.hints"; include "/etc/named.root.hints";
// include "named.rfc1912.zones";
// you should not serve your rfc1912 names to non-localhost clients. /* these are zones that contain definitions for all the localhost
* names and addresses, as recommended in RFC1912 - these names should
* not leak to the other nameservers:
*/
include "/etc/named.rfc1912.zones";
// These are your "authoritative" internal zones, and would probably // These are your "authoritative" internal zones, and would probably
// also be included in the "localhost_resolver" view above : // also be included in the "localhost_resolver" view above :
@ -105,10 +101,9 @@ key ddns_key
view "external" view "external"
{ {
/* This view will contain zones you want to serve only to "external" clients /* This view will contain zones you want to serve only to "external" clients
* that have addresses that are not on your directly attached LAN interface subnets: * that have addresses that are not match any above view:
*/ */
match-clients { !localnets; !localhost; }; match-clients { any; };
match-destinations { !localnets; !localhost; };
recursion no; recursion no;
// you'd probably want to deny recursion to external clients, so you don't // you'd probably want to deny recursion to external clients, so you don't