xref: /netbsd-src/external/mpl/bind/dist/bin/tests/system/rpz/ns6/named.conf.in (revision 8feb0f0b7eaff0608f8350bbfa3098827b4bb91b)
1/*
2 * Copyright (C) Internet Systems Consortium, Inc. ("ISC")
3 *
4 * SPDX-License-Identifier: MPL-2.0
5 *
6 * This Source Code Form is subject to the terms of the Mozilla Public
7 * License, v. 2.0.  If a copy of the MPL was not distributed with this
8 * file, you can obtain one at https://mozilla.org/MPL/2.0/.
9 *
10 * See the COPYRIGHT file distributed with this work for additional
11 * information regarding copyright ownership.
12 */
13
14options {
15	query-source address 10.53.0.6;
16	notify-source 10.53.0.6;
17	transfer-source 10.53.0.6;
18	port @PORT@;
19	pid-file "named.pid";
20	statistics-file "named.stats";
21	session-keyfile "session.key";
22	listen-on { 10.53.0.6; };
23	listen-on-v6 { none; };
24	forward only;
25	forwarders { 10.53.0.3; };
26	minimal-responses no;
27	recursion yes;
28	dnssec-validation yes;
29	qname-minimization disabled;
30
31	response-policy {
32	    zone "policy1" min-update-interval 0;
33	    zone "bl.tld2s" policy given;
34	} qname-wait-recurse yes
35	// add-soa yes # leave add-soa as default for unset test
36	nsip-enable yes
37	nsdname-enable yes;
38
39	include "../dnsrps-slave.conf";
40};
41
42logging { category rpz { default_debug; }; };
43
44key rndc_key {
45	secret "1234abcd8765";
46	algorithm hmac-sha256;
47};
48
49controls {
50	inet 10.53.0.6 port @CONTROLPORT@ allow { any; } keys { rndc_key; };
51};
52
53include "../trusted.conf";
54
55zone "policy1" {
56	type secondary;
57	primaries { 10.53.0.5; };
58	file "empty.db";
59	also-notify { 10.53.0.3 port @EXTRAPORT1@; };
60	notify-delay 0;
61	allow-transfer  { any; };
62};
63
64zone "bl.tld2s." {
65    type primary;
66    file "bl.tld2s.db";
67};
68