named.options.conf

options {
//	listen-on port 53 { 0.0.0.0; };
//	listen-on-v6 port 53 { ::; };

	listen-on { any; };
	listen-on-v6 { any; };

	// MR -- using 'share' domain configs with nsd
	directory "/opt/configs/nsd/conf";

	dump-file "/opt/configs/bind/conf/defaults/cache_dump.db";
	statistics-file "/opt/configs/bind/conf/defaults/named_stats.txt";
	memstatistics-file "/opt/configs/bind/conf/defaults/named_mem_stats.txt";
	allow-query { any; };
	recursion no;

//	dnssec-enable yes;
//	dnssec-validation yes;

	/* Path to ISC DLV key */
//	bindkeys-file "/opt/configs/bind/conf/defaults/named.iscdlv.key";

//	managed-keys-directory "/var/named/dynamic";
//	dnssec-lookaside . trust-anchor dlv.isc.org.;
//	dnssec-enable no;
//	dnssec-validation no;

	allow-transfer { allow-transfer; };
	allow-notify { allow-notify; };

	forwarders {
		0.0.0.0;
		::;
	};

	notify yes;

	rate-limit {
		responses-per-second 5;
		window 5;
	};
};

logging {
	channel default_file {
		file "/var/log/named/default.log" versions 3 size 5m;
		severity dynamic;
		print-time yes;
	};
	channel general_file {
		file "/var/log/named/general.log" versions 3 size 5m;
		severity dynamic;
		print-time yes;
	};
	channel database_file {
		file "/var/log/named/database.log" versions 3 size 5m;
		severity dynamic;
		print-time yes;
	};
	channel security_file {
		file "/var/log/named/security.log" versions 3 size 5m;
		severity dynamic;
		print-time yes;
	};
	channel config_file {
		file "/var/log/named/config.log" versions 3 size 5m;
		severity dynamic;
		print-time yes;
	};
	channel resolver_file {
		file "/var/log/named/resolver.log" versions 3 size 5m;
		severity dynamic;
		print-time yes;
	};
	channel xfer-in_file {
		file "/var/log/named/xfer-in.log" versions 3 size 5m;
		severity dynamic;
		print-time yes;
	};
	channel xfer-out_file {
		file "/var/log/named/xfer-out.log" versions 3 size 5m;
		severity dynamic;
		print-time yes;
	};
	channel notify_file {
		file "/var/log/named/notify.log" versions 3 size 5m;
		severity dynamic;
		print-time yes;
	};
	channel client_file {
		file "/var/log/named/client.log" versions 3 size 5m;
		severity dynamic;
		print-time yes;
	};
	channel unmatched_file {
		file "/var/log/named/unmatched.log" versions 3 size 5m;
		severity dynamic;
		print-time yes;
	};
	channel queries_file {
		file "/var/log/named/queries.log" versions 3 size 5m;
		severity dynamic;
		print-time yes;
	};
	channel network_file {
		file "/var/log/named/network.log" versions 3 size 5m;
		severity dynamic;
		print-time yes;
	};
	channel update_file {
		file "/var/log/named/update.log" versions 3 size 5m;
		severity dynamic;
		print-time yes;
	};
	channel dispatch_file {
		file "/var/log/named/dispatch.log" versions 3 size 5m;
		severity dynamic;
		print-time yes;
	};
	channel dnssec_file {
		file "/var/log/named/dnssec.log" versions 3 size 5m;
		severity dynamic;
		print-time yes;
	};
	channel lame-servers_file {
		file "/var/log/named/lame-servers.log" versions 3 size 5m;
		severity dynamic;
		print-time yes;
	};

	category default { default_file; };
	category general { general_file; };
	category database { database_file; };
	category security { security_file; };
	category config { config_file; };
	category resolver { resolver_file; };
	category xfer-in { xfer-in_file; };
	category xfer-out { xfer-out_file; };
	category notify { notify_file; };
	category client { client_file; };
	category unmatched { unmatched_file; };
	category queries { queries_file; };
	category network { network_file; };
	category update { update_file; };
	category dispatch { dispatch_file; };
	category dnssec { dnssec_file; };
	category lame-servers { lame-servers_file; };
};

include "/etc/rndc.key";

controls {
		inet 127.0.0.1 allow { localhost; } keys { "rndc-key"; };
};

trusted-keys {
	dlv.isc.org. 257 3 5 "BEAAAAPHMu/5onzrEE7z1egmhg/WPO0+juoZrW3euWEn4MxDCE1+lLy2brhQv5rN32RKtMzX6Mj70jdzeND4XknW58dnJNPCxn8+jAGl2FZLK8t+1uq4W+nnA3qO2+DL+k6BD4mewMLbIYFwe0PG73Te9fZ2kJb56dhgMde5ymX4BI/oQ+cAK50/xvJv00Frf8kw6ucMTwFlgPe+jnGxPPEmHAte/URkY62ZfkLoBAADLHQ9IrS2tryAe7mbBZVcOwIeU/Rw/mRx/vwwMCTgNboMQKtUdvNXDrYJDSHZws3xiRXF1Rf+al9UmZfSav/4NWLKjHzpT59k/VStTDN0YUuWrBNh";
};


zone "." IN {
	type hint;
	file "/opt/configs/bind/conf/defaults/named.ca";
};