- SOFTWARE.
-->
-<!-- $Id: Bv9ARM.6.html,v 1.5.2.3 2000/07/12 17:57:45 gson Exp $ -->
+<!-- $Id: Bv9ARM.6.html,v 1.5.2.4 2000/07/18 18:18:00 gson Exp $ -->
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML EXPERIMENTAL 970324//EN">
<HTML>
<PRE CLASS="2Level-fixed"><A NAME="pgfId=1038409"></A>
<KBD CLASS="Literal-user-input"> view </KBD><EM CLASS="variable">view name</EM><KBD CLASS="Literal-user-input"> {</KBD>
- <KBD CLASS="Literal-user-input">match_clients {</KBD> <EM CLASS="variable">address_match_list</EM><KBD CLASS="Literal-user-input"> } ; </KBD>
+ <KBD CLASS="Literal-user-input">match-clients {</KBD> <EM CLASS="variable">address_match_list</EM><KBD CLASS="Literal-user-input"> } ; </KBD>
<EM CLASS="Optional-meta-syntax">[</EM><CODE CLASS="grammar_literal">view_option</CODE><KBD CLASS="Literal-user-input">;</KBD><EM CLASS="Optional-meta-syntax"> ...]</EM>
<EM CLASS="Optional-meta-syntax">[</EM><CODE CLASS="grammar_literal">zone_statement</CODE><KBD CLASS="Literal-user-input">;</KBD><EM CLASS="Optional-meta-syntax"> ...]]</EM>
<KBD CLASS="Literal-user-input">};</KBD>
statements must occur inside <CODE CLASS="Program-Process">
view</CODE>
statements.</P>
-<P CLASS="3LevelContinued">
-<A NAME="pgfId=1107611">
-</A>
-A <CODE CLASS="Program-Process">
-zone</CODE>
- statement of type <EM CLASS="variable">
-hint</EM>
- for the root zone (`<EM CLASS="grammar_literal">
-.</EM>
-') does not strictly define a zone. Therefore, it should not be included in a <CODE CLASS="Program-Process">
-view</CODE>
- statement.</P>
+
<P CLASS="3LevelContinued">
<A NAME="pgfId=1038608">
</A>
configuration parser will accept any string as the argument to algorithm,
currently only the string "hmac-md5" has any meaning. The secret is a
base-64 encoded string, typically generated with either dnssec-keygen or
-mmencode. The parser will happily accept an invalid base-64 string, but it
-will never work with the server because the server validates the
-base-64 of the secret for itself when loading its own configuration file.
+mmencode.
The server{} statement uses the key clause to associate a key{}-defined key
with a server. The argument to the server{} statement is a host name or
6.2.17 view Statement Grammar
view view name {
- match_clients { address_match_list } ;
+ match-clients { address_match_list } ;
[view_option; ...]
[zone_statement; ...]]
};
considered to be part of this default view. If any explicit view statements
are present, all zone statements must occur inside view statements.
-A zone statement of type hint for the root zone ('.') does not strictly
-define a zone. Therefore, it should not be included in a view statement.
-
Here is an example of a typical split DNS setup implemented using view
statements.