Archlinux.fr [Forums]

Code : Tout sélectionner

/*
* set-up master
*/
masters "master" {
    127.0.0.1;
};
acl "master" {
    127.0.0.1;
};

/*
* If acting as a master, accept transfers
* from the slave hosts listed here
*/
acl "slaves" {
	127.0.0.1;
	10.0.0.1;
	10.0.0.2;
	10.0.0.6;
};

/*
* trusted hosts which are allowed to use the cache
* and perform recursive queries/lookups
*/
acl "trusted" {
        127.0.0.0/8;
};

options {
        directory "/var/named";
        pid-file "/run/named/named.pid";

        dnssec-enable yes;
        dnssec-lookaside auto;

        listen-on-v6 { none; };
        listen-on { any; };

        version "My Slave DNS Server";
        hostname none;
        server-id none;

        /*
         * Accept queries from "trusted" ACL.
         */
        allow-query {
                trusted;
        };

        /* Use the cache for the "trusted" ACL. */
        allow-query-cache {
                trusted;
        };

        /* Only trusted addresses are allowed to use recursion. */
        allow-recursion {
                trusted;
        };

        /* Zone tranfers are denied by default. */
        allow-transfer {
                none;
        };

        /* Don't allow updates, e.g. via nsupdate. */
        allow-update {
                none;
        };

        /* if you have problems and are behind a firewall: */
        //query-source address * port 53;

        dnssec-validation auto;
        auth-nxdomain no; # conform to RFC1035

        /* forward to ISP's DNS */
        // forwarders {
        // 0.0.0.0;
        // };
};

include "/etc/named.zones";

Code : Tout sélectionner

iptables -A INPUT -p udp -m state --state NEW -m udp --dport 53 -j ACCEPT