1/* 2 * Copyright (C) Internet Systems Consortium, Inc. ("ISC") 3 * 4 * SPDX-License-Identifier: MPL-2.0 5 * 6 * This Source Code Form is subject to the terms of the Mozilla Public 7 * License, v. 2.0. If a copy of the MPL was not distributed with this 8 * file, you can obtain one at https://mozilla.org/MPL/2.0/. 9 * 10 * See the COPYRIGHT file distributed with this work for additional 11 * information regarding copyright ownership. 12 */ 13 14/* 15 * Main rpz test DNS server. 16 */ 17 18options { 19 query-source address 10.53.0.8; 20 notify-source 10.53.0.8; 21 transfer-source 10.53.0.8; 22 port @PORT@; 23 pid-file "named.pid"; 24 statistics-file "named.stats"; 25 session-keyfile "session.key"; 26 listen-on { 10.53.0.8; }; 27 listen-on-v6 { none; }; 28 notify yes; 29 minimal-responses no; 30 recursion yes; 31 dnssec-validation yes; 32 33 response-policy { 34 zone "manual-update-rpz"; 35 } 36 // add-soa yes // do not set testing default mode 37 min-ns-dots 0 38 qname-wait-recurse yes 39 min-update-interval 0 40 nsdname-enable yes 41 nsip-enable yes 42 ; 43 44 include "../dnsrps.conf"; 45 also-notify { 10.53.0.8 port @EXTRAPORT1@; }; 46 notify-delay 0; 47}; 48 49logging { category rpz { default_debug; }; }; 50 51key rndc_key { 52 secret "1234abcd8765"; 53 algorithm hmac-sha256; 54}; 55controls { 56 inet 10.53.0.8 port @CONTROLPORT@ allow { any; } keys { rndc_key; }; 57}; 58 59 60zone "." { type hint; file "hints"; }; 61 62zone "manual-update-rpz." { 63 type primary; 64 file "manual-update-rpz.db"; 65 notify no; 66}; 67