problem with bind - Printable Version

Code:

// This is the primary configuration file for the BIND DNS server named.

//

// Please read /usr/share/doc/bind9/README.Debian.gz for information on the

// structure of BIND configuration files in Debian, *BEFORE* you customize

// this configuration file.

//

// If you are just adding zones, please do that in /etc/bind/named.conf.local



include "/etc/bind/named.conf.options";



// prime the server with knowledge of the root servers

zone "." {

    type hint;

    file "/etc/bind/db.root";

};



// be authoritative for the localhost forward and reverse zones, and for

// broadcast zones as per RFC 1912



zone "localhost" {

    type master;

    file "/etc/bind/db.local";

};



zone "127.in-addr.arpa" {

    type master;

    file "/etc/bind/db.127";

};



zone "0.in-addr.arpa" {

    type master;

    file "/etc/bind/db.0";

};



zone "255.in-addr.arpa" {

    type master;

    file "/etc/bind/db.255";

};



// zone "com" { type delegation-only; };

// zone "net" { type delegation-only; };



// From the release notes:

//  Because many of our users are uncomfortable receiving undelegated answers

//  from root or top level domains, other than a few for whom that behaviour

//  has been trusted and expected for quite some length of time, we have now

//  introduced the "root-delegations-only" feature which applies delegation-only

//  logic to all top level domains, and to the root domain.  An exception list

//  should be specified, including "MUSEUM" and "DE", and any other top level

//  domains from whom undelegated responses are expected and trusted.

// root-delegation-only exclude { "DE"; "MUSEUM"; };



include "/etc/bind/keys.conf";

include "/etc/bind/named.conf.local";

Code:

options {

    directory "/var/cache/bind";



    // If there is a firewall between you and nameservers you want

    // to talk to, you might need to uncomment the query-source

    // directive below.  Previous versions of BIND always asked

    // questions using port 53, but BIND 8.1 and later use an unprivileged

    // port by default.



    // query-source address * port 53;



    // If your ISP provided one or more IP addresses for stable

    // nameservers, you probably want to use them as forwarders.

    // Uncomment the following block, and insert the addresses replacing

    // the all-0's placeholder.



    // forwarders {

    //  0.0.0.0;

    // };



    recursion no;

    transfer-format many-answers; //this is for speed up the transfer to a secondary dns



    auth-nxdomain no;    # conform to RFC1035

    listen-on-v6 { any; };

};