From 86170c5501448455d508cdca76b9a0b151974fcc Mon Sep 17 00:00:00 2001
From: root <root@olinda.mit.edu>
Date: Mon, 1 Mar 2010 10:54:29 -0500
Subject: [PATCH] Stock named.conf*

---
 named.conf               | 11 +++++++++++
 named.conf.default-zones | 30 ++++++++++++++++++++++++++++++
 named.conf.local         |  8 ++++++++
 named.conf.options       | 20 ++++++++++++++++++++
 4 files changed, 69 insertions(+)
 create mode 100644 named.conf
 create mode 100644 named.conf.default-zones
 create mode 100644 named.conf.local
 create mode 100644 named.conf.options

diff --git a/named.conf b/named.conf
new file mode 100644
index 0000000..880786a
--- /dev/null
+++ b/named.conf
@@ -0,0 +1,11 @@
+// This is the primary configuration file for the BIND DNS server named.
+//
+// Please read /usr/share/doc/bind9/README.Debian.gz for information on the 
+// structure of BIND configuration files in Debian, *BEFORE* you customize 
+// this configuration file.
+//
+// If you are just adding zones, please do that in /etc/bind/named.conf.local
+
+include "/etc/bind/named.conf.options";
+include "/etc/bind/named.conf.local";
+include "/etc/bind/named.conf.default-zones";
diff --git a/named.conf.default-zones b/named.conf.default-zones
new file mode 100644
index 0000000..355338b
--- /dev/null
+++ b/named.conf.default-zones
@@ -0,0 +1,30 @@
+// prime the server with knowledge of the root servers
+zone "." {
+	type hint;
+	file "/etc/bind/db.root";
+};
+
+// be authoritative for the localhost forward and reverse zones, and for
+// broadcast zones as per RFC 1912
+
+zone "localhost" {
+	type master;
+	file "/etc/bind/db.local";
+};
+
+zone "127.in-addr.arpa" {
+	type master;
+	file "/etc/bind/db.127";
+};
+
+zone "0.in-addr.arpa" {
+	type master;
+	file "/etc/bind/db.0";
+};
+
+zone "255.in-addr.arpa" {
+	type master;
+	file "/etc/bind/db.255";
+};
+
+
diff --git a/named.conf.local b/named.conf.local
new file mode 100644
index 0000000..7a57b10
--- /dev/null
+++ b/named.conf.local
@@ -0,0 +1,8 @@
+//
+// Do any local configuration here
+//
+
+// Consider adding the 1918 zones here, if they are not used in your
+// organization
+//include "/etc/bind/zones.rfc1918";
+
diff --git a/named.conf.options b/named.conf.options
new file mode 100644
index 0000000..af79758
--- /dev/null
+++ b/named.conf.options
@@ -0,0 +1,20 @@
+options {
+	directory "/var/cache/bind";
+
+	// If there is a firewall between you and nameservers you want
+	// to talk to, you may need to fix the firewall to allow multiple
+	// ports to talk.  See http://www.kb.cert.org/vuls/id/800113
+
+	// If your ISP provided one or more IP addresses for stable 
+	// nameservers, you probably want to use them as forwarders.  
+	// Uncomment the following block, and insert the addresses replacing 
+	// the all-0's placeholder.
+
+	// forwarders {
+	// 	0.0.0.0;
+	// };
+
+	auth-nxdomain no;    # conform to RFC1035
+	listen-on-v6 { any; };
+};
+
-- 
2.34.1