3 // Refer to the named.conf(5) and named(8) man pages, and the documentation
4 // in /usr/share/doc/bind9 for more details.
6 // If you are going to set up an authoritative server, make sure you
7 // understand the hairy details of how DNS works. Even with
8 // simple mistakes, you can break connectivity for affected parties,
9 // or cause huge amounts of useless Internet traffic.
12 // All file and path names are relative to the chroot directory,
13 // if any, and should be fully qualified.
14 directory "/etc/namedb/working";
15 pid-file "/var/run/named/pid";
16 dump-file "/var/dump/named_dump.db";
17 statistics-file "/var/stats/named.stats";
19 // If named is being used only as a local resolver, this is a safe default.
20 // For named to be accessible to the network, comment this option, specify
21 // the proper IP address, or delete this option.
22 listen-on { 127.0.0.1; };
24 // If you have IPv6 enabled on this system, uncomment this option for
25 // use as a local resolver. To give access to the network, specify
26 // an IPv6 address, or the keyword "any".
27 // listen-on-v6 { ::1; };
29 // These zones are already covered by the empty zones listed below.
30 // If you remove the related empty zones below, comment these lines out.
31 disable-empty-zone "255.255.255.255.IN-ADDR.ARPA";
32 disable-empty-zone "0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.IP6.ARPA";
33 disable-empty-zone "1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.IP6.ARPA";
35 // If you've got a DNS server around at your upstream provider, enter
36 // its IP address here, and enable the line below. This will make you
37 // benefit from its cache, thus reduce overall DNS traffic in the Internet.
44 // If the 'forwarders' clause is not empty the default is to 'forward first'
45 // which will fall back to sending a query from your local server if the name
46 // servers in 'forwarders' do not have the answer. Alternatively you can
47 // force your name server to never initiate queries of its own by enabling the
51 // If you wish to have forwarding configured automatically based on
52 // the entries in /etc/resolv.conf, uncomment the following line and
53 // set named_auto_forward=yes in /etc/rc.conf. You can also enable
54 // named_auto_forward_only (the effect of which is described above).
55 // include "/etc/namedb/auto_forward.conf";
58 Modern versions of BIND use a random UDP port for each outgoing
59 query by default in order to dramatically reduce the possibility
60 of cache poisoning. All users are strongly encouraged to utilize
61 this feature, and to configure their firewalls to accommodate it.
63 AS A LAST RESORT in order to get around a restrictive firewall
64 policy you can try enabling the option below. Use of this option
65 will significantly reduce your ability to withstand cache poisoning
66 attacks, and should be avoided if at all possible.
68 Replace NNNNN in the example with a number between 49160 and 65530.
70 // query-source address * port NNNNN;
73 // If you enable a local name server, don't forget to enter 127.0.0.1
74 // first in your /etc/resolv.conf so this server will be queried.
75 // Also, make sure to enable it in /etc/rc.conf.
77 // The traditional root hints mechanism. Use this, OR the slave zones below.
78 zone "." { type hint; file "/etc/namedb/named.root"; };
80 /* Slaving the following zones from the root name servers has some
81 significant advantages:
82 1. Faster local resolution for your users
83 2. No spurious traffic will be sent from your network to the roots
84 3. Greater resilience to any potential root server failure/DDoS
86 On the other hand, this method requires more monitoring than the
87 hints file to be sure that an unexpected failure mode has not
88 incapacitated your server. Name servers that are serving a lot
89 of clients will benefit more from this approach than individual
90 hosts. Use with caution.
92 To use this mechanism, uncomment the entries below, and comment
95 As documented at http://dns.icann.org/services/axfr/ these zones:
96 "." (the root), ARPA, IN-ADDR.ARPA, IP6.ARPA, and ROOT-SERVERS.NET
97 are availble for AXFR from these servers on IPv4 and IPv6:
98 xfr.lax.dns.icann.org, xfr.cjr.dns.icann.org
103 file "/etc/namedb/slave/root.slave";
105 192.5.5.241; // F.ROOT-SERVERS.NET.
111 file "/etc/namedb/slave/arpa.slave";
113 192.5.5.241; // F.ROOT-SERVERS.NET.
119 /* Serving the following zones locally will prevent any queries
120 for these zones leaving your network and going to the root
121 name servers. This has two significant advantages:
122 1. Faster local resolution for your users
123 2. No spurious traffic will be sent from your network to the roots
125 // RFCs 1912, 5735 and 6303 (and BCP 32 for localhost)
126 zone "localhost" { type master; file "/etc/namedb/master/localhost-forward.db"; };
127 zone "127.in-addr.arpa" { type master; file "/etc/namedb/master/localhost-reverse.db"; };
128 zone "255.in-addr.arpa" { type master; file "/etc/namedb/master/empty.db"; };
130 // RFC 1912-style zone for IPv6 localhost address (RFC 6303)
131 zone "0.ip6.arpa" { type master; file "/etc/namedb/master/localhost-reverse.db"; };
133 // "This" Network (RFCs 1912, 5735 and 6303)
134 zone "0.in-addr.arpa" { type master; file "/etc/namedb/master/empty.db"; };
136 // Private Use Networks (RFCs 1918, 5735 and 6303)
137 zone "10.in-addr.arpa" { type master; file "/etc/namedb/master/empty.db"; };
138 zone "16.172.in-addr.arpa" { type master; file "/etc/namedb/master/empty.db"; };
139 zone "17.172.in-addr.arpa" { type master; file "/etc/namedb/master/empty.db"; };
140 zone "18.172.in-addr.arpa" { type master; file "/etc/namedb/master/empty.db"; };
141 zone "19.172.in-addr.arpa" { type master; file "/etc/namedb/master/empty.db"; };
142 zone "20.172.in-addr.arpa" { type master; file "/etc/namedb/master/empty.db"; };
143 zone "21.172.in-addr.arpa" { type master; file "/etc/namedb/master/empty.db"; };
144 zone "22.172.in-addr.arpa" { type master; file "/etc/namedb/master/empty.db"; };
145 zone "23.172.in-addr.arpa" { type master; file "/etc/namedb/master/empty.db"; };
146 zone "24.172.in-addr.arpa" { type master; file "/etc/namedb/master/empty.db"; };
147 zone "25.172.in-addr.arpa" { type master; file "/etc/namedb/master/empty.db"; };
148 zone "26.172.in-addr.arpa" { type master; file "/etc/namedb/master/empty.db"; };
149 zone "27.172.in-addr.arpa" { type master; file "/etc/namedb/master/empty.db"; };
150 zone "28.172.in-addr.arpa" { type master; file "/etc/namedb/master/empty.db"; };
151 zone "29.172.in-addr.arpa" { type master; file "/etc/namedb/master/empty.db"; };
152 zone "30.172.in-addr.arpa" { type master; file "/etc/namedb/master/empty.db"; };
153 zone "31.172.in-addr.arpa" { type master; file "/etc/namedb/master/empty.db"; };
154 zone "168.192.in-addr.arpa" { type master; file "/etc/namedb/master/empty.db"; };
156 // Shared Address Space (RFC 6598)
157 zone "64.100.in-addr.arpa" { type master; file "/etc/namedb/master/empty.db"; };
158 zone "65.100.in-addr.arpa" { type master; file "/etc/namedb/master/empty.db"; };
159 zone "66.100.in-addr.arpa" { type master; file "/etc/namedb/master/empty.db"; };
160 zone "67.100.in-addr.arpa" { type master; file "/etc/namedb/master/empty.db"; };
161 zone "68.100.in-addr.arpa" { type master; file "/etc/namedb/master/empty.db"; };
162 zone "69.100.in-addr.arpa" { type master; file "/etc/namedb/master/empty.db"; };
163 zone "70.100.in-addr.arpa" { type master; file "/etc/namedb/master/empty.db"; };
164 zone "71.100.in-addr.arpa" { type master; file "/etc/namedb/master/empty.db"; };
165 zone "72.100.in-addr.arpa" { type master; file "/etc/namedb/master/empty.db"; };
166 zone "73.100.in-addr.arpa" { type master; file "/etc/namedb/master/empty.db"; };
167 zone "74.100.in-addr.arpa" { type master; file "/etc/namedb/master/empty.db"; };
168 zone "75.100.in-addr.arpa" { type master; file "/etc/namedb/master/empty.db"; };
169 zone "76.100.in-addr.arpa" { type master; file "/etc/namedb/master/empty.db"; };
170 zone "77.100.in-addr.arpa" { type master; file "/etc/namedb/master/empty.db"; };
171 zone "78.100.in-addr.arpa" { type master; file "/etc/namedb/master/empty.db"; };
172 zone "79.100.in-addr.arpa" { type master; file "/etc/namedb/master/empty.db"; };
173 zone "80.100.in-addr.arpa" { type master; file "/etc/namedb/master/empty.db"; };
174 zone "81.100.in-addr.arpa" { type master; file "/etc/namedb/master/empty.db"; };
175 zone "82.100.in-addr.arpa" { type master; file "/etc/namedb/master/empty.db"; };
176 zone "83.100.in-addr.arpa" { type master; file "/etc/namedb/master/empty.db"; };
177 zone "84.100.in-addr.arpa" { type master; file "/etc/namedb/master/empty.db"; };
178 zone "85.100.in-addr.arpa" { type master; file "/etc/namedb/master/empty.db"; };
179 zone "86.100.in-addr.arpa" { type master; file "/etc/namedb/master/empty.db"; };
180 zone "87.100.in-addr.arpa" { type master; file "/etc/namedb/master/empty.db"; };
181 zone "88.100.in-addr.arpa" { type master; file "/etc/namedb/master/empty.db"; };
182 zone "89.100.in-addr.arpa" { type master; file "/etc/namedb/master/empty.db"; };
183 zone "90.100.in-addr.arpa" { type master; file "/etc/namedb/master/empty.db"; };
184 zone "91.100.in-addr.arpa" { type master; file "/etc/namedb/master/empty.db"; };
185 zone "92.100.in-addr.arpa" { type master; file "/etc/namedb/master/empty.db"; };
186 zone "93.100.in-addr.arpa" { type master; file "/etc/namedb/master/empty.db"; };
187 zone "94.100.in-addr.arpa" { type master; file "/etc/namedb/master/empty.db"; };
188 zone "95.100.in-addr.arpa" { type master; file "/etc/namedb/master/empty.db"; };
189 zone "96.100.in-addr.arpa" { type master; file "/etc/namedb/master/empty.db"; };
190 zone "97.100.in-addr.arpa" { type master; file "/etc/namedb/master/empty.db"; };
191 zone "98.100.in-addr.arpa" { type master; file "/etc/namedb/master/empty.db"; };
192 zone "99.100.in-addr.arpa" { type master; file "/etc/namedb/master/empty.db"; };
193 zone "100.100.in-addr.arpa" { type master; file "/etc/namedb/master/empty.db"; };
194 zone "101.100.in-addr.arpa" { type master; file "/etc/namedb/master/empty.db"; };
195 zone "102.100.in-addr.arpa" { type master; file "/etc/namedb/master/empty.db"; };
196 zone "103.100.in-addr.arpa" { type master; file "/etc/namedb/master/empty.db"; };
197 zone "104.100.in-addr.arpa" { type master; file "/etc/namedb/master/empty.db"; };
198 zone "105.100.in-addr.arpa" { type master; file "/etc/namedb/master/empty.db"; };
199 zone "106.100.in-addr.arpa" { type master; file "/etc/namedb/master/empty.db"; };
200 zone "107.100.in-addr.arpa" { type master; file "/etc/namedb/master/empty.db"; };
201 zone "108.100.in-addr.arpa" { type master; file "/etc/namedb/master/empty.db"; };
202 zone "109.100.in-addr.arpa" { type master; file "/etc/namedb/master/empty.db"; };
203 zone "110.100.in-addr.arpa" { type master; file "/etc/namedb/master/empty.db"; };
204 zone "111.100.in-addr.arpa" { type master; file "/etc/namedb/master/empty.db"; };
205 zone "112.100.in-addr.arpa" { type master; file "/etc/namedb/master/empty.db"; };
206 zone "113.100.in-addr.arpa" { type master; file "/etc/namedb/master/empty.db"; };
207 zone "114.100.in-addr.arpa" { type master; file "/etc/namedb/master/empty.db"; };
208 zone "115.100.in-addr.arpa" { type master; file "/etc/namedb/master/empty.db"; };
209 zone "116.100.in-addr.arpa" { type master; file "/etc/namedb/master/empty.db"; };
210 zone "117.100.in-addr.arpa" { type master; file "/etc/namedb/master/empty.db"; };
211 zone "118.100.in-addr.arpa" { type master; file "/etc/namedb/master/empty.db"; };
212 zone "119.100.in-addr.arpa" { type master; file "/etc/namedb/master/empty.db"; };
213 zone "120.100.in-addr.arpa" { type master; file "/etc/namedb/master/empty.db"; };
214 zone "121.100.in-addr.arpa" { type master; file "/etc/namedb/master/empty.db"; };
215 zone "122.100.in-addr.arpa" { type master; file "/etc/namedb/master/empty.db"; };
216 zone "123.100.in-addr.arpa" { type master; file "/etc/namedb/master/empty.db"; };
217 zone "124.100.in-addr.arpa" { type master; file "/etc/namedb/master/empty.db"; };
218 zone "125.100.in-addr.arpa" { type master; file "/etc/namedb/master/empty.db"; };
219 zone "126.100.in-addr.arpa" { type master; file "/etc/namedb/master/empty.db"; };
220 zone "127.100.in-addr.arpa" { type master; file "/etc/namedb/master/empty.db"; };
222 // Link-local/APIPA (RFCs 3927, 5735 and 6303)
223 zone "254.169.in-addr.arpa" { type master; file "/etc/namedb/master/empty.db"; };
225 // IETF protocol assignments (RFCs 5735 and 5736)
226 zone "0.0.192.in-addr.arpa" { type master; file "/etc/namedb/master/empty.db"; };
228 // TEST-NET-[1-3] for Documentation (RFCs 5735, 5737 and 6303)
229 zone "2.0.192.in-addr.arpa" { type master; file "/etc/namedb/master/empty.db"; };
230 zone "100.51.198.in-addr.arpa" { type master; file "/etc/namedb/master/empty.db"; };
231 zone "113.0.203.in-addr.arpa" { type master; file "/etc/namedb/master/empty.db"; };
233 // IPv6 Example Range for Documentation (RFCs 3849 and 6303)
234 zone "8.b.d.0.1.0.0.2.ip6.arpa" { type master; file "/etc/namedb/master/empty.db"; };
236 // Domain Names for Documentation and Testing (BCP 32)
237 zone "test" { type master; file "/etc/namedb/master/empty.db"; };
238 zone "example" { type master; file "/etc/namedb/master/empty.db"; };
239 zone "invalid" { type master; file "/etc/namedb/master/empty.db"; };
240 zone "example.com" { type master; file "/etc/namedb/master/empty.db"; };
241 zone "example.net" { type master; file "/etc/namedb/master/empty.db"; };
242 zone "example.org" { type master; file "/etc/namedb/master/empty.db"; };
244 // Router Benchmark Testing (RFCs 2544 and 5735)
245 zone "18.198.in-addr.arpa" { type master; file "/etc/namedb/master/empty.db"; };
246 zone "19.198.in-addr.arpa" { type master; file "/etc/namedb/master/empty.db"; };
248 // IANA Reserved - Old Class E Space (RFC 5735)
249 zone "240.in-addr.arpa" { type master; file "/etc/namedb/master/empty.db"; };
250 zone "241.in-addr.arpa" { type master; file "/etc/namedb/master/empty.db"; };
251 zone "242.in-addr.arpa" { type master; file "/etc/namedb/master/empty.db"; };
252 zone "243.in-addr.arpa" { type master; file "/etc/namedb/master/empty.db"; };
253 zone "244.in-addr.arpa" { type master; file "/etc/namedb/master/empty.db"; };
254 zone "245.in-addr.arpa" { type master; file "/etc/namedb/master/empty.db"; };
255 zone "246.in-addr.arpa" { type master; file "/etc/namedb/master/empty.db"; };
256 zone "247.in-addr.arpa" { type master; file "/etc/namedb/master/empty.db"; };
257 zone "248.in-addr.arpa" { type master; file "/etc/namedb/master/empty.db"; };
258 zone "249.in-addr.arpa" { type master; file "/etc/namedb/master/empty.db"; };
259 zone "250.in-addr.arpa" { type master; file "/etc/namedb/master/empty.db"; };
260 zone "251.in-addr.arpa" { type master; file "/etc/namedb/master/empty.db"; };
261 zone "252.in-addr.arpa" { type master; file "/etc/namedb/master/empty.db"; };
262 zone "253.in-addr.arpa" { type master; file "/etc/namedb/master/empty.db"; };
263 zone "254.in-addr.arpa" { type master; file "/etc/namedb/master/empty.db"; };
265 // IPv6 Unassigned Addresses (RFC 4291)
266 zone "1.ip6.arpa" { type master; file "/etc/namedb/master/empty.db"; };
267 zone "3.ip6.arpa" { type master; file "/etc/namedb/master/empty.db"; };
268 zone "4.ip6.arpa" { type master; file "/etc/namedb/master/empty.db"; };
269 zone "5.ip6.arpa" { type master; file "/etc/namedb/master/empty.db"; };
270 zone "6.ip6.arpa" { type master; file "/etc/namedb/master/empty.db"; };
271 zone "7.ip6.arpa" { type master; file "/etc/namedb/master/empty.db"; };
272 zone "8.ip6.arpa" { type master; file "/etc/namedb/master/empty.db"; };
273 zone "9.ip6.arpa" { type master; file "/etc/namedb/master/empty.db"; };
274 zone "a.ip6.arpa" { type master; file "/etc/namedb/master/empty.db"; };
275 zone "b.ip6.arpa" { type master; file "/etc/namedb/master/empty.db"; };
276 zone "c.ip6.arpa" { type master; file "/etc/namedb/master/empty.db"; };
277 zone "d.ip6.arpa" { type master; file "/etc/namedb/master/empty.db"; };
278 zone "e.ip6.arpa" { type master; file "/etc/namedb/master/empty.db"; };
279 zone "0.f.ip6.arpa" { type master; file "/etc/namedb/master/empty.db"; };
280 zone "1.f.ip6.arpa" { type master; file "/etc/namedb/master/empty.db"; };
281 zone "2.f.ip6.arpa" { type master; file "/etc/namedb/master/empty.db"; };
282 zone "3.f.ip6.arpa" { type master; file "/etc/namedb/master/empty.db"; };
283 zone "4.f.ip6.arpa" { type master; file "/etc/namedb/master/empty.db"; };
284 zone "5.f.ip6.arpa" { type master; file "/etc/namedb/master/empty.db"; };
285 zone "6.f.ip6.arpa" { type master; file "/etc/namedb/master/empty.db"; };
286 zone "7.f.ip6.arpa" { type master; file "/etc/namedb/master/empty.db"; };
287 zone "8.f.ip6.arpa" { type master; file "/etc/namedb/master/empty.db"; };
288 zone "9.f.ip6.arpa" { type master; file "/etc/namedb/master/empty.db"; };
289 zone "a.f.ip6.arpa" { type master; file "/etc/namedb/master/empty.db"; };
290 zone "b.f.ip6.arpa" { type master; file "/etc/namedb/master/empty.db"; };
291 zone "0.e.f.ip6.arpa" { type master; file "/etc/namedb/master/empty.db"; };
292 zone "1.e.f.ip6.arpa" { type master; file "/etc/namedb/master/empty.db"; };
293 zone "2.e.f.ip6.arpa" { type master; file "/etc/namedb/master/empty.db"; };
294 zone "3.e.f.ip6.arpa" { type master; file "/etc/namedb/master/empty.db"; };
295 zone "4.e.f.ip6.arpa" { type master; file "/etc/namedb/master/empty.db"; };
296 zone "5.e.f.ip6.arpa" { type master; file "/etc/namedb/master/empty.db"; };
297 zone "6.e.f.ip6.arpa" { type master; file "/etc/namedb/master/empty.db"; };
298 zone "7.e.f.ip6.arpa" { type master; file "/etc/namedb/master/empty.db"; };
300 // IPv6 ULA (RFCs 4193 and 6303)
301 zone "c.f.ip6.arpa" { type master; file "/etc/namedb/master/empty.db"; };
302 zone "d.f.ip6.arpa" { type master; file "/etc/namedb/master/empty.db"; };
304 // IPv6 Link Local (RFCs 4291 and 6303)
305 zone "8.e.f.ip6.arpa" { type master; file "/etc/namedb/master/empty.db"; };
306 zone "9.e.f.ip6.arpa" { type master; file "/etc/namedb/master/empty.db"; };
307 zone "a.e.f.ip6.arpa" { type master; file "/etc/namedb/master/empty.db"; };
308 zone "b.e.f.ip6.arpa" { type master; file "/etc/namedb/master/empty.db"; };
310 // IPv6 Deprecated Site-Local Addresses (RFCs 3879 and 6303)
311 zone "c.e.f.ip6.arpa" { type master; file "/etc/namedb/master/empty.db"; };
312 zone "d.e.f.ip6.arpa" { type master; file "/etc/namedb/master/empty.db"; };
313 zone "e.e.f.ip6.arpa" { type master; file "/etc/namedb/master/empty.db"; };
314 zone "f.e.f.ip6.arpa" { type master; file "/etc/namedb/master/empty.db"; };
316 // IP6.INT is Deprecated (RFC 4159)
317 zone "ip6.int" { type master; file "/etc/namedb/master/empty.db"; };
319 // NB: Do not use the IP addresses below, they are faked, and only
320 // serve demonstration/documentation purposes!
322 // Example slave zone config entries. It can be convenient to become
323 // a slave at least for the zone your own domain is in. Ask
324 // your network administrator for the IP address of the responsible
325 // master name server.
327 // Do not forget to include the reverse lookup zone!
328 // This is named after the first bytes of the IP address, in reverse
329 // order, with ".IN-ADDR.ARPA" appended, or ".IP6.ARPA" for IPv6.
331 // Before starting to set up a master zone, make sure you fully
332 // understand how DNS and BIND work. There are sometimes
333 // non-obvious pitfalls. Setting up a slave zone is usually simpler.
335 // NB: Don't blindly enable the examples below. :-) Use actual names
336 // and addresses instead.
338 /* An example dynamic zone
339 key "exampleorgkey" {
341 secret "sf87HJqjkqh8ac87a02lla==";
348 file "/etc/namedb/dynamic/example.org";
352 /* Example of a slave reverse zone
353 zone "1.168.192.in-addr.arpa" {
355 file "/etc/namedb/slave/1.168.192.in-addr.arpa";