dump-file "data/cache_dump.db";
statistics-file "data/named_stats.txt";
memstatistics-file "data/named_mem_stats.txt";
+ secroots-file "data/named.secroots";
+ recursing-file "data/named.recursing";
- listen-on port 53 { any; };
- listen-on-v6 port 53 { any; };
+ listen-on port 53 { any; };
+ listen-on-v6 port 53 { any; };
allow-query { none; };
allow-query-cache { none; };
allow-recursion { none; };
- recursion no;
-
- dnssec-enable yes;
- dnssec-validation auto;
+ dnssec-validation yes;
random-device "/dev/urandom";
+
+ max-cache-size 64m;
+
+ managed-keys-directory "/var/named/dynamic";
+ geoip-directory "/usr/share/GeoIP";
+
+ include "/etc/crypto-policies/back-ends/bind.config";
};
logging {
dump-file "data/cache_dump.db";
statistics-file "data/named_stats.txt";
memstatistics-file "data/named_mem_stats.txt";
+ secroots-file "data/named.secroots";
+ recursing-file "data/named.recursing";
- listen-on port 53 { any; };
- listen-on-v6 port 53 { any; };
+ listen-on port 53 { any; };
+ listen-on-v6 port 53 { any; };
allow-query { none; };
allow-query-cache { none; };
allow-recursion { none; };
- recursion no;
+ dnssec-validation yes;
- dnssec-enable yes;
- dnssec-validation no;
+ random-device "/dev/urandom";
+
+ max-cache-size 64m;
+
+ managed-keys-directory "/var/named/dynamic";
+ geoip-directory "/usr/share/GeoIP";
+
+ include "/etc/crypto-policies/back-ends/bind.config";
};
logging {
dump-file "data/cache_dump.db";
statistics-file "data/named_stats.txt";
memstatistics-file "data/named_mem_stats.txt";
+ secroots-file "data/named.secroots";
+ recursing-file "data/named.recursing";
- listen-on port 53 { any; };
- listen-on-v6 port 53 { any; };
+ listen-on port 53 { any; };
+ listen-on-v6 port 53 { any; };
allow-query { none; };
allow-query-cache { none; };
allow-recursion { none; };
- recursion no;
+ dnssec-validation yes;
- dnssec-enable yes;
- dnssec-validation no;
+ random-device "/dev/urandom";
+
+ max-cache-size 64m;
+
+ managed-keys-directory "/var/named/dynamic";
+ geoip-directory "/usr/share/GeoIP";
+
+ include "/etc/crypto-policies/back-ends/bind.config";
};
logging {
dump-file "data/cache_dump.db";
statistics-file "data/named_stats.txt";
memstatistics-file "data/named_mem_stats.txt";
+ secroots-file "data/named.secroots";
+ recursing-file "data/named.recursing";
- listen-on port 53 { any; };
- listen-on-v6 port 53 { any; };
+ listen-on port 53 { any; };
+ listen-on-v6 port 53 { any; };
allow-query { none; };
allow-query-cache { none; };
allow-recursion { none; };
- recursion no;
+ dnssec-validation yes;
- dnssec-enable yes;
- dnssec-validation no;
+ random-device "/dev/urandom";
+
+ max-cache-size 64m;
+
+ managed-keys-directory "/var/named/dynamic";
+ geoip-directory "/usr/share/GeoIP";
+
+ include "/etc/crypto-policies/back-ends/bind.config";
};
logging {
dump-file "data/cache_dump.db";
statistics-file "data/named_stats.txt";
memstatistics-file "data/named_mem_stats.txt";
+ secroots-file "data/named.secroots";
+ recursing-file "data/named.recursing";
- listen-on port 53 { any; };
- listen-on-v6 port 53 { any; };
+ listen-on port 53 { any; };
+ listen-on-v6 port 53 { any; };
allow-query { none; };
allow-query-cache { none; };
allow-recursion { none; };
- recursion no;
+ dnssec-validation yes;
- dnssec-enable yes;
- dnssec-validation no;
+ random-device "/dev/urandom";
+
+ max-cache-size 64m;
+
+ managed-keys-directory "/var/named/dynamic";
+ geoip-directory "/usr/share/GeoIP";
+
+ include "/etc/crypto-policies/back-ends/bind.config";
};
logging {