named.conf.local

   1 //
   2 // Do any local configuration here
   3 //
   4
   5 // Consider adding the 1918 zones here, if they are not used in your
   6 // organization
   7 //include "/etc/bind/zones.rfc1918";
   8
   9 # zone "debuntu.foo" {
  10 #        type master;
  11 #        file "debuntu.foo.db";
  12 #        notify no;
  13 #};
  14
  15 acl "transfer-allowed" {
  16         localhost;
  17         207.29.250.54;  // ???
  18         18.4.60.36;     // charon
  19         18.49.3.1;      // charon4
  20         18.25.131.1;    // charon4
  21         74.207.246.137; // arctic
  22         66.92.29.156;   // copan
  23         18.18.208.12;   // olinda
  24         18.25.129.162;  // adehnert3.xvm
  25         130.44.166.3;   // DD
  26         // Linode
  27         104.237.137.10;
  28         45.79.109.10;
  29         74.207.225.10;
  30         207.192.70.10;
  31         109.74.194.10;
  32         2600:3c00::a;
  33         2600:3c01::a;
  34         2600:3c02::a;
  35         2600:3c03::a;
  36         2a01:7e00::a;
  37 };
  38
  39 masters "primary-ns" {
  40         18.18.208.12;   // olinda
  41 };
  42
  43 masters "secondary-ns" {
  44         18.25.129.162;  // adehnert3.xvm
  45         // Linode
  46         // https://www.linode.com/docs/products/networking/dns-manager/guides/incoming-dns-zone-transfers/#operate-as-a-secondary-read-only-dns-service
  47         104.237.137.10;
  48         45.79.109.10;
  49         74.207.225.10;
  50         207.192.70.10;
  51         109.74.194.10;
  52         2600:3c00::a;
  53         2600:3c01::a;
  54         2600:3c02::a;
  55         2600:3c03::a;
  56         2a01:7e00::a;
  57 };
  58
  59 include "/etc/bind/named.conf.per-host";
  60
  61 zone "dynamic.dehnert.arctic.org" IN {
  62         // DNAME to the real, dynamic.dehnerts.com, zone
  63         type master;
  64         file "/etc/bind/pri/arctic-dynamic.zone";
  65         allow-update { none; };
  66         allow-transfer { "transfer-allowed"; };
  67         allow-query { any; };
  68         //notify no;
  69 };
  70
  71 zone "dehnert.arctic.org" IN {
  72         type master;
  73         file "/etc/bind/pri/combined-dehnerts.zone";
  74         allow-update { none; };
  75         allow-transfer { "transfer-allowed"; };
  76         allow-query { any; };
  77         //notify no;
  78 };
  79 zone "dehnerts.com" IN {
  80         type master;
  81         file "/etc/bind/pri/combined-dehnerts.zone";
  82         #update-policy { grant * selfsub * A TXT;};
  83         allow-update { none; };
  84         allow-transfer { "transfer-allowed"; };
  85         allow-query { any; };
  86         //notify no;
  87 };
  88
  89 logging {
  90     channel query.log {
  91         file "/var/log/named/query.log" versions 10 size 100M;
  92         // Set the severity to dynamic to see all the debug messages.
  93         severity debug 3;
  94         print-category yes;
  95         print-severity yes;
  96         print-time yes;
  97     };
  98
  99     category queries { query.log; };
 100 };