From: Alex Dehnert <adehnert@mit.edu>
Date: Sun, 12 May 2013 21:18:48 +0000 (-0400)
Subject: Allow MIT-only recursion and add logging
X-Git-Url: https://dehnerts.com/gitweb/?a=commitdiff_plain;h=46c80495fdf865419e2cc685cd5aeaff83eca908;p=sysconfig%2Fbind.git

Allow MIT-only recursion and add logging

I'm not sure what the motivation for either of these were (changes made Feb
24).
---

diff --git a/named.conf.local b/named.conf.local
index 3a1101b..d6bd61a 100644
--- a/named.conf.local
+++ b/named.conf.local
@@ -28,3 +28,13 @@ zone "dehnerts.com" IN {
 	allow-query { any; };
 	notify no;
 };
+
+logging {
+    channel query.log {
+        file "/var/log/query.log";
+        // Set the severity to dynamic to see all the debug messages.
+        severity debug 3;
+    };
+
+    category queries { query.log; };
+};
diff --git a/named.conf.options b/named.conf.options
index 1a11b5f..42d679d 100644
--- a/named.conf.options
+++ b/named.conf.options
@@ -26,7 +26,7 @@ options {
 	// ALEX DEHNERT: copied from old arctic version on 2008-12-19
 	//ALEX DEHNERT: Security-related stuff:
 	// Secure(ish):
-	allow-recursion	{ 18.208.0.204; 66.92.29.156; 66.92.29.144; 127.0.0.1; 192.168.0.0/16; };
+	allow-recursion	{ 18.208.0.204; 66.92.29.156; 66.92.29.144; 127.0.0.1; 192.168.0.0/16; 18.0.0.0/8; };
 	//allow-query	{ 66.92.29.156; 66.92.29.144; 127.0.0.1; };
 	allow-transfer { none; };