the default value of dnssec-validation is 'auto', which causes
a server to send a key refresh query to the root zone when starting
up. this is undesirable behavior in system tests, so this commit
sets dnssec-validation to either 'yes' or 'no' in all tests where
it had not previously been set.
this change had the mostly-harmless side effect of changing the cached
trust level of unvalidated answer data from 'answer' to 'authanswer',
which caused a few test cases in which dumped cache data was examined in
the serve-stale system test to fail. those test cases have now been
updated to expect 'authanswer'.
(cherry picked from commit
0b09ee8cdc83f27a244681bfdbc97ed81dc07708)
notify yes;
ixfr-from-differences yes;
check-integrity no;
+ dnssec-validation no;
};
key one {
notify yes;
ixfr-from-differences yes;
check-integrity no;
+ dnssec-validation no;
};
key one {
notify yes;
ixfr-from-differences yes;
check-integrity no;
+ dnssec-validation no;
};
key one {
notify yes;
ixfr-from-differences yes;
check-integrity no;
+ dnssec-validation no;
};
key one {
notify yes;
ixfr-from-differences yes;
check-integrity no;
+ dnssec-validation no;
allow-query-on { 10.53.0.2; };
blackhole { 10.53.0.8; };
};
notify no;
allow-new-zones yes;
allow-transfer { none; };
+ dnssec-validation no;
};
controls {
notify no;
allow-new-zones yes;
allow-transfer { none; };
+ dnssec-validation no;
};
controls {
listen-on-v6 { none; };
notify no;
minimal-responses yes;
+ dnssec-validation no;
};
zone "." {
allow-query { any; };
allow-new-zones yes;
recursion no;
+ dnssec-validation no;
};
zone "." {
allow-query { any; };
recursion no;
allow-new-zones yes;
+ dnssec-validation no;
};
include "../../common/rndc.key";
listen-on { 10.53.0.2; 10.53.0.4; };
listen-on-v6 { none; };
recursion no;
+ dnssec-validation no;
};
view internal {
listen-on-v6 { none; };
recursion no;
new-zones-directory "new-zones";
+ dnssec-validation no;
};
view internal {
allow-query { any; };
recursion no;
allow-new-zones yes;
+ dnssec-validation no;
};
zone "." {
allow-query { any; };
recursion no;
allow-new-zones yes;
+ dnssec-validation no;
};
listen-on { 10.53.0.1; };
listen-on-v6 { none; };
recursion no;
+ dnssec-validation no;
};
zone "." {
listen-on { 10.53.0.2; };
listen-on-v6 { none; };
recursion no;
+ dnssec-validation no;
};
include "controls.conf";
listen-on-v6 { none; };
recursion no;
allow-query { any; };
+ dnssec-validation no;
};
include "controls.conf";
listen-on-v6 { none; };
recursion no;
allow-query { none; };
+ dnssec-validation no;
};
include "controls.conf";
listen-on-v6 { none; };
recursion no;
allow-query { 10.53.0.2; };
+ dnssec-validation no;
};
include "controls.conf";
listen-on-v6 { none; };
recursion no;
allow-query { 10.53.0.1; };
+ dnssec-validation no;
};
include "controls.conf";
listen-on-v6 { none; };
recursion no;
allow-query {! 10.53.0.2; };
+ dnssec-validation no;
};
include "controls.conf";
listen-on-v6 { none; };
recursion no;
allow-query { accept; };
+ dnssec-validation no;
};
include "controls.conf";
listen-on-v6 { none; };
recursion no;
allow-query { accept; };
+ dnssec-validation no;
};
include "controls.conf";
listen-on-v6 { none; };
recursion no;
allow-query {! accept; };
+ dnssec-validation no;
};
include "controls.conf";
listen-on-v6 { none; };
recursion no;
allow-query { key one; };
+ dnssec-validation no;
};
include "controls.conf";
listen-on-v6 { none; };
recursion no;
allow-query { key one; };
+ dnssec-validation no;
};
include "controls.conf";
listen-on-v6 { none; };
recursion no;
allow-query {! key one; };
+ dnssec-validation no;
};
include "controls.conf";
listen-on { 10.53.0.2; };
listen-on-v6 { none; };
recursion no;
+ dnssec-validation no;
};
include "controls.conf";
listen-on { 10.53.0.2; };
listen-on-v6 { none; };
recursion no;
+ dnssec-validation no;
};
include "controls.conf";
listen-on { 10.53.0.2; };
listen-on-v6 { none; };
recursion no;
+ dnssec-validation no;
};
include "controls.conf";
listen-on { 10.53.0.2; };
listen-on-v6 { none; };
recursion no;
+ dnssec-validation no;
};
include "controls.conf";
listen-on { 10.53.0.2; };
listen-on-v6 { none; };
recursion no;
+ dnssec-validation no;
};
include "controls.conf";
listen-on { 10.53.0.2; };
listen-on-v6 { none; };
recursion no;
+ dnssec-validation no;
};
include "controls.conf";
listen-on { 10.53.0.2; };
listen-on-v6 { none; };
recursion no;
+ dnssec-validation no;
};
include "controls.conf";
listen-on { 10.53.0.2; };
listen-on-v6 { none; };
recursion no;
+ dnssec-validation no;
};
include "controls.conf";
listen-on { 10.53.0.2; };
listen-on-v6 { none; };
recursion no;
+ dnssec-validation no;
};
include "controls.conf";
listen-on { 10.53.0.2; };
listen-on-v6 { none; };
recursion no;
+ dnssec-validation no;
};
include "controls.conf";
listen-on-v6 { none; };
recursion no;
allow-query { key one; };
+ dnssec-validation no;
};
include "controls.conf";
listen-on { 10.53.0.2; };
listen-on-v6 { none; };
recursion no;
+ dnssec-validation no;
};
include "controls.conf";
listen-on-v6 { none; };
recursion no;
allow-query { none; };
+ dnssec-validation no;
};
include "controls.conf";
listen-on-v6 { none; };
recursion no;
allow-query { any; };
+ dnssec-validation no;
};
include "controls.conf";
listen-on { 10.53.0.2; };
listen-on-v6 { none; };
recursion no;
+ dnssec-validation no;
};
include "controls.conf";
listen-on-v6 { none; };
recursion no;
allow-query { none; };
+ dnssec-validation no;
};
include "controls.conf";
listen-on-v6 { none; };
recursion no;
allow-query { any; };
+ dnssec-validation no;
};
include "controls.conf";
listen-on { 10.53.0.2; };
listen-on-v6 { none; };
recursion no;
+ dnssec-validation no;
};
include "controls.conf";
listen-on { 10.53.0.2; };
listen-on-v6 { none; };
recursion no;
+ dnssec-validation no;
};
include "controls.conf";
listen-on { 10.53.0.2; };
listen-on-v6 { none; };
recursion no;
+ dnssec-validation no;
};
include "controls.conf";
listen-on-v6 { none; };
recursion no;
notify yes;
+ dnssec-validation no;
};
view main in {
listen-on-v6 { none; };
recursion yes;
notify no;
+ dnssec-validation no;
};
zone example.net {
listen-on-v6 { none; };
recursion yes;
notify no;
+ dnssec-validation no;
};
recursion yes;
notify no;
server-id hostname;
+ dnssec-validation no;
};
hostname "this.is.a.test.of.hostname";
server-id "this.is.a.test.of.server-id";
version "this is a test of version";
+ dnssec-validation no;
};
ixfr-from-differences yes;
check-integrity no;
minimal-responses no;
+ dnssec-validation no;
};
zone "example" {
check-integrity no;
no-case-compress { 10.53.0.2; };
minimal-responses no;
+ dnssec-validation no;
};
zone "example" {
notify no;
recursion no;
allow-transfer { any; };
+ dnssec-validation no;
};
view "default" {
notify no;
recursion no;
serial-query-rate 100;
+ dnssec-validation no;
};
/*
notify no;
recursion no;
serial-query-rate 100;
+ dnssec-validation no;
};
view "default" {
listen-on-v6 { fd92:7065:b8e:ffff::3; };
notify no;
recursion no;
+ dnssec-validation no;
};
zone "catalog2.example" {
recursion no;
serial-query-rate 100;
ixfr-from-differences yes; // GL #3777
+ dnssec-validation no;
catalog-zones {
zone "catalog-tls.example"
listen-on-v6 { none; };
allow-transfer { any; };
recursion no;
+ dnssec-validation no;
};
key rndc_key {
listen-on-v6 { none; };
allow-transfer { any; };
recursion no;
+ dnssec-validation no;
};
key rndc_key {
listen-on-v6 { none; };
allow-transfer { any; };
recursion no;
+ dnssec-validation no;
};
key rndc_key {
listen-on-v6 { none; };
allow-transfer { any; };
recursion no;
+ dnssec-validation no;
};
key rndc_key {
listen-on-v6 { none; };
allow-transfer { any; };
recursion no;
+ dnssec-validation no;
};
key rndc_key {
listen-on-v6 { none; };
allow-transfer { any; };
recursion no;
+ dnssec-validation yes;
};
key rndc_key {
answer-cookie no;
send-cookie yes;
nocookie-udp-size 512;
+ dnssec-validation no;
};
zone "." {
recursion no;
servfail-ttl 0;
+ dnssec-validation no;
};
zone "." {
recursion yes;
servfail-ttl 0;
+ dnssec-validation no;
};
zone "." {
allow-transfer { !10.53.0.1; any; };
recursion no;
notify yes;
+ dnssec-validation no;
};
key rndc_key {
listen-on { 10.53.0.4; };
listen-on-v6 { none; };
bindkeys-file "managed.conf";
+ dnssec-validation no;
};
key rndc_key {
listen-on { 10.53.0.5; 127.0.0.1; };
listen-on-v6 { none; };
recursion yes;
+ dnssec-validation yes;
};
view root {
listen-on { 10.53.0.1; };
listen-on-v6 { none; };
pid-file "named.pid";
+ dnssec-validation no;
};
zone "signing.test" {
listen-on-v6 { none; };
recursion no;
notify yes;
+ dnssec-validation no;
};
key rndc_key {
listen-on { 10.53.0.1; };
listen-on-v6 { none; };
recursion no;
+ dnssec-validation no;
};
zone "." {
listen-on { 10.53.0.1; };
listen-on-v6 { none; };
recursion yes;
+ dnssec-validation no;
deny-answer-addresses { 192.0.2.0/24; 2001:db8:beef::/48; }
except-from { "example.org"; };
deny-answer-aliases { "example.org"; }
listen-on { 10.53.0.1; };
listen-on-v6 { none; };
recursion yes;
+ dnssec-validation no;
deny-answer-addresses { 192.0.2.0/24; 2001:db8:beef::/48; }
except-from { "example.org"; };
deny-answer-aliases { "example.org"; }
listen-on { 10.53.0.1; };
listen-on-v6 { none; };
recursion no;
+ dnssec-validation no;
};
zone "." {
listen-on { 10.53.0.10; };
listen-on-v6 { none; };
minimal-responses no;
+ dnssec-validation no;
};
zone "net." {
listen-on-v6 { none; };
recursion yes;
notify no;
+ dnssec-validation no;
};
zone "." {
listen-on { 10.53.0.1; };
listen-on-v6 { none; };
recursion no;
+ dnssec-validation no;
};
zone "example" {
listen-on-v6 { none; };
recursion no;
notify no;
+ dnssec-validation no;
};
# Should include all files matching pattern.
notify yes;
notify-delay 0;
allow-new-zones yes;
+ dnssec-validation no;
};
zone "bits" {
try-tcp-refresh no;
notify-delay 0;
allow-new-zones yes;
+ dnssec-validation no;
};
zone "bits" {
recursion no;
notify yes;
notify-delay 0;
+ dnssec-validation no;
};
zone "noixfr" {
recursion yes;
notify yes;
notify-delay 0;
+ dnssec-validation yes;
};
zone "." {
try-tcp-refresh no;
notify-delay 0;
allow-new-zones yes;
+ dnssec-validation no;
};
zone "example01.com" {
notify yes;
ixfr-from-differences yes;
check-integrity no;
+ dnssec-validation no;
};
zone "." {
listen-on-v6 { none; };
recursion no;
notify yes;
+ dnssec-validation no;
};
key rndc_key {
listen-on-v6 { none; };
recursion no;
notify yes;
+ dnssec-validation no;
};
key rndc_key {
listen-on-v6 { none; };
recursion no;
notify yes;
+ dnssec-validation no;
};
key rndc_key {
recursion no;
notify yes;
provide-ixfr no;
+ dnssec-validation no;
};
key rndc_key {
allow-transfer { any; };
recursion no;
dnssec-policy "none";
+ dnssec-validation no;
};
key rndc_key {
allow-transfer { any; };
recursion no;
dnssec-policy "rsasha256";
+ dnssec-validation no;
};
key rndc_key {
listen-on-v6 { none; };
recursion no;
dnssec-policy "test";
+ dnssec-validation no;
};
view "inherit" {
listen-on-v6 { none; };
recursion no;
dnssec-policy "none";
+ dnssec-validation no;
};
view "inherit" {
allow-transfer { any; };
recursion no;
key-directory ".";
+ dnssec-validation no;
};
key rndc_key {
listen-on-v6 { none; };
allow-transfer { any; };
recursion no;
+ dnssec-validation no;
};
key rndc_key {
listen-on-v6 { none; };
recursion no;
notify yes;
+ dnssec-validation no;
};
key rndc_key {
recursion yes;
send-cookie yes;
tcp-advertised-timeout 150;
+ dnssec-validation no;
};
zone "." {
listen-on-v6 { none; };
recursion yes;
notify yes;
+ dnssec-validation no;
};
server 10.53.0.2 {
allow-transfer { any; };
recursion no;
key-directory ".";
+ dnssec-validation no;
};
key rndc_key {
listen-on-v6 { none; };
allow-transfer { any; };
recursion no;
+ dnssec-validation no;
};
key rndc_key {
allow-transfer { any; };
recursion no;
key-directory ".";
+ dnssec-validation no;
};
key rndc_key {
allow-transfer { any; };
recursion no;
key-directory ".";
+ dnssec-validation no;
};
key rndc_key {
recursion no;
notify yes;
minimal-responses no;
+ dnssec-validation no;
};
zone "." {
listen-on-v6 { none; };
recursion no;
notify yes;
+ dnssec-validation no;
};
zone "include" {
notify no;
session-keyfile "session.key";
servfail-ttl 0;
+ dnssec-validation no;
};
key rndc_key {
recursion no;
notify no;
servfail-ttl 0;
+ dnssec-validation no;
};
zone "example" {
listen-on-v6 { none; };
recursion no;
notify no;
+ dnssec-validation no;
};
key rndc_key {
listen-on { 10.53.0.1; };
listen-on-v6 { none; };
recursion no;
+ dnssec-validation no;
};
zone "." {
listen-on { 10.53.0.2; };
listen-on-v6 { none; };
recursion no;
+ dnssec-validation no;
};
zone "example" {
allow-query-cache { 10.53.0.1; };
trust-anchor-telemetry yes;
allow-new-zones yes;
+ dnssec-validation yes;
};
zone "." {
notify yes;
ixfr-from-differences yes;
check-integrity no;
+ dnssec-validation no;
};
listen-on-v6 { none; };
recursion no;
notify yes;
+ dnssec-validation no;
};
zone "." {
recursion no;
notify yes;
startup-notify-rate 5;
+ dnssec-validation no;
};
key rndc_key {
listen-on-v6 { none; };
recursion yes;
notify yes;
+ dnssec-validation no;
};
zone "." {
listen-on-v6 { none; };
recursion yes;
notify yes;
+ dnssec-validation no;
};
zone "." {
listen-on-v6 { none; };
recursion yes;
notify yes;
+ dnssec-validation no;
};
view "a" {
listen-on-v6 { none; };
allow-transfer { any; };
recursion no;
+ dnssec-validation no;
};
key rndc_key {
listen-on { 10.53.0.1; };
listen-on-v6 { none; };
recursion no;
+ dnssec-validation no;
};
zone "example" {
notify yes;
minimal-responses no;
update-quota 1;
+ dnssec-validation no;
};
acl named-acl {
recursion no;
notify yes;
minimal-responses no;
+ dnssec-validation no;
@TKEY_CONFIGURATION@
};
recursion yes;
notify yes;
serial-query-rate 1; // workaround for KB AA-01213
+ dnssec-validation no;
};
key rndc_key {
recursion no;
notify yes;
minimal-responses no;
+ dnssec-validation no;
};
key rndc_key {
recursion no;
notify yes;
minimal-responses no;
+ dnssec-validation no;
};
key rndc_key {
recursion no;
notify yes;
minimal-responses no;
+ dnssec-validation no;
tkey-gssapi-keytab "dns.keytab";
};
recursion no;
notify yes;
minimal-responses no;
+ dnssec-validation no;
tkey-gssapi-keytab "dns-other-than-KRB5_KTNAME.keytab";
};
recursion no;
notify yes;
minimal-responses no;
+ dnssec-validation no;
@TKEY_CONFIGURATION@
};
allow-query { any; };
recursion no;
allow-new-zones yes;
+ dnssec-validation no;
};
key rndc_key {
listen-on-v6 { none; };
recursion no;
notify yes;
+ dnssec-validation no;
};
key rndc_key {
recursion yes;
send-cookie yes;
response-padding { !10.53.0.8; any; } block-size 64;
+ dnssec-validation no;
};
zone "." {
listen-on-v6 { none; };
recursion yes;
notify yes;
+ dnssec-validation no;
};
server 10.53.0.2 {
listen-on-v6 { none; };
recursion yes;
notify yes;
+ dnssec-validation no;
};
server 10.53.0.2 {
listen-on { 10.53.0.1; };
listen-on-v6 { none; };
recursion no;
+ dnssec-validation no;
};
zone "." {
listen-on { 10.53.0.4; };
listen-on-v6 { none; };
recursion yes;
+ dnssec-validation yes;
};
zone "." {
listen-on port @PORT@ { 10.53.0.5; };
pid-file "named.pid";
nxdomain-redirect signed;
+ dnssec-validation no;
};
zone "." {
listen-on port @PORT@ { 10.53.0.6; };
pid-file "named.pid";
nxdomain-redirect unsigned;
+ dnssec-validation no;
};
zone "." {
listen-on { 10.53.0.2; };
listen-on-v6 { none; };
recursion no;
+ dnssec-validation no;
};
key rndc_key {
pid-file "named.pid";
listen-on { 10.53.0.3; };
listen-on-v6 { none; };
+ dnssec-validation no;
};
key rndc_key {
listen-on { 10.53.0.5; };
listen-on-v6 { none; };
recursion no;
+ dnssec-validation no;
};
key rndc_key {
listen-on { 10.53.0.6; };
listen-on-v6 { none; };
recursion no;
+ dnssec-validation no;
};
key rndc_key {
pid-file "named.pid";
listen-on { 10.53.0.7; };
listen-on-v6 { none; };
+ dnssec-validation no;
};
key rndc_key {
listen-on-v6 { none; };
notify no;
minimal-responses no;
+ dnssec-validation no;
};
key rndc_key {
listen-on { 10.53.0.5; };
listen-on-v6 { none; };
notify no;
+ dnssec-validation no;
rate-limit {
responses-per-second 2;
listen-on-v6 { none; };
recursion no;
notify yes;
+ dnssec-validation no;
};
zone "." {
listen-on { 10.53.0.2; };
listen-on-v6 { none; };
recursion no;
+ dnssec-validation no;
};
listen-on { 10.53.0.2; };
listen-on-v6 { none; };
recursion no;
+ dnssec-validation no;
};
listen-on { 10.53.0.2; };
listen-on-v6 { none; };
recursion no;
+ dnssec-validation no;
};
pid-file "named.pid";
listen-on { 10.53.0.2; };
listen-on-v6 { fd92:7065:b8e:ffff::2; };
+ dnssec-validation no;
};
listen-on { 10.53.0.2; };
listen-on-v6 { none; };
recursion no;
+ dnssec-validation no;
};
listen-on { 10.53.0.1; };
listen-on-v6 { none; };
recursion yes;
+ dnssec-validation no;
max-stale-ttl 3600;
stale-answer-ttl 4;
stale-answer-enable yes;
listen-on { 10.53.0.1; };
listen-on-v6 { none; };
recursion yes;
+ dnssec-validation no;
max-stale-ttl 3600;
stale-answer-ttl 4;
stale-answer-enable yes;
listen-on { 10.53.0.1; };
listen-on-v6 { none; };
recursion yes;
+ dnssec-validation no;
max-stale-ttl 20;
stale-answer-ttl 3;
stale-answer-enable yes;
listen-on { 10.53.0.1; };
listen-on-v6 { none; };
recursion yes;
+ dnssec-validation no;
max-stale-ttl 20;
stale-answer-ttl 3;
stale-answer-enable yes;
recursion yes;
dump-file "named_dump3.db";
stale-cache-enable yes;
+ dnssec-validation no;
};
zone "." {
listen-on { 10.53.0.3; };
listen-on-v6 { none; };
recursion yes;
+ dnssec-validation no;
stale-answer-enable yes;
stale-cache-enable yes;
stale-answer-client-timeout 1800;
listen-on { 10.53.0.4; };
listen-on-v6 { none; };
recursion yes;
+ dnssec-validation no;
dump-file "named_dump.db";
stale-answer-enable no;
stale-cache-enable yes;
listen-on { 10.53.0.5; };
listen-on-v6 { none; };
recursion yes;
+ dnssec-validation no;
dump-file "named_dump.db";
stale-answer-enable yes;
stale-cache-enable no;
awk '/; stale/ { x=$0; getline; print x, $0}' ns1/named_dump.db.test$n |
grep "; stale data\.example.*3[56]...*TXT.*A text record with a 2 second ttl" > /dev/null 2>&1 || ret=1
# Also make sure the not expired data does not have a stale comment.
-awk '/; answer/ { x=$0; getline; print x, $0}' ns1/named_dump.db.test$n |
- grep "; answer longttl\.example.*[56]...*TXT.*A text record with a 600 second ttl" > /dev/null 2>&1 || ret=1
+awk '/; authanswer/ { x=$0; getline; print x, $0}' ns1/named_dump.db.test$n |
+ grep "; authanswer longttl\.example.*[56]...*TXT.*A text record with a 600 second ttl" > /dev/null 2>&1 || ret=1
if [ $ret != 0 ]; then echo_i "failed"; fi
status=$((status+ret))
awk '/; expired/ { x=$0; getline; print x, $0}' ns5/named_dump.db.test$n |
grep "; expired since .* (awaiting cleanup) othertype\.example\." > /dev/null 2>&1 || ret=1
# Also make sure the not expired data does not have an expired comment.
-awk '/; answer/ { x=$0; getline; print x, $0}' ns5/named_dump.db.test$n |
- grep "; answer longttl\.example.*A text record with a 600 second ttl" > /dev/null 2>&1 || ret=1
+awk '/; authanswer/ { x=$0; getline; print x, $0}' ns5/named_dump.db.test$n |
+ grep "; authanswer longttl\.example.*A text record with a 600 second ttl" > /dev/null 2>&1 || ret=1
if [ $ret != 0 ]; then echo_i "failed"; fi
status=$((status+ret))
listen-on { 10.53.0.1; };
listen-on-v6 { none; };
recursion no;
+ dnssec-validation no;
notify yes;
sortlist {
listen-on { 10.53.0.1; };
listen-on-v6 { none; };
recursion no;
+ dnssec-validation no;
notify yes;
ixfr-from-differences yes;
};
listen-on { 10.53.0.2; };
listen-on-v6 { none; };
recursion yes;
+ dnssec-validation no;
notify yes;
};
listen-on { 10.53.0.1; };
listen-on-v6 { none; };
recursion no;
+ dnssec-validation no;
notify explicit;
minimal-responses no;
version none; // make statistics independent of the version number
listen-on { 10.53.0.2; };
listen-on-v6 { none; };
recursion no;
+ dnssec-validation no;
notify no;
minimal-responses no;
version none; // make statistics independent of the version number
listen-on { 10.53.0.2; };
listen-on-v6 { none; };
recursion no;
+ dnssec-validation no;
notify no;
minimal-responses no;
version none; // make statistics independent of the version number
listen-on { 10.53.0.3; };
listen-on-v6 { none; };
recursion no;
+ dnssec-validation no;
notify no;
minimal-responses no;
version none; // make statistics independent of the version number
listen-on { 10.53.0.1; };
listen-on-v6 { none; };
recursion no;
+ dnssec-validation no;
notify yes;
minimal-responses no;
};
listen-on { 10.53.0.2; };
listen-on-v6 { none; };
recursion no;
+ dnssec-validation no;
notify yes;
minimal-responses no;
};
listen-on { 10.53.0.3; };
listen-on-v6 { none; };
recursion yes;
+ dnssec-validation no;
notify yes;
minimal-responses no;
};
listen-on { 10.53.0.1; };
listen-on-v6 { none; };
recursion no;
+ dnssec-validation no;
notify yes;
statistics-file "named.stats";
};
listen-on { 10.53.0.2; };
listen-on-v6 { none; };
recursion yes;
+ dnssec-validation no;
notify yes;
statistics-file "named.stats";
};
listen-on { 10.53.0.3; };
listen-on-v6 { none; };
recursion yes;
+ dnssec-validation no;
notify yes;
};
listen-on { 10.53.0.4; };
listen-on-v6 { none; };
recursion yes;
+ dnssec-validation no;
notify yes;
forwarders { 10.53.0.2; };
forward only;
listen-on { 10.53.0.7; };
listen-on-v6 { none; };
recursion no;
+ dnssec-validation no;
notify yes;
statistics-file "named.stats";
tcp-clients 1;
pid-file "named.pid";
listen-on { 10.53.0.1; };
listen-on-v6 { none; };
+ dnssec-validation no;
recursion no;
notify no;
tcp-initial-timeout 20;
listen-on { 10.53.0.1; };
listen-on-v6 { none; };
recursion no;
+ dnssec-validation no;
notify no;
tkey-domain "server";
tkey-dhkey "server" KEYID;
listen-on { 10.53.0.1; 127.0.0.1; };
listen-on-v6 { none; };
recursion no;
+ dnssec-validation no;
notify yes;
tkey-gssapi-keytab "dns.keytab";
};
listen-on { 10.53.0.1; };
listen-on-v6 { none; };
recursion no;
+ dnssec-validation no;
check-integrity no;
};
listen-on { 10.53.0.1; };
listen-on-v6 { none; };
recursion no;
+ dnssec-validation no;
notify no;
};
listen-on { 10.53.0.2; };
listen-on-v6 { none; };
recursion no;
+ dnssec-validation no;
notify no;
};
listen-on { 10.53.0.3; };
listen-on-v6 { none; };
recursion no;
+ dnssec-validation no;
notify no;
};
listen-on { 10.53.0.1; };
listen-on-v6 { none; };
recursion yes;
+ dnssec-validation no;
notify yes;
};
listen-on { 10.53.0.2; };
listen-on-v6 { none; };
recursion yes;
+ dnssec-validation no;
notify yes;
};
listen-on { 10.53.0.3; };
listen-on-v6 { none; };
recursion no;
+ dnssec-validation no;
notify yes;
include "dnstap.conf";
};
listen-on tls ephemeral { 10.53.0.3; };
listen-on-v6 { none; };
recursion no;
+ dnssec-validation no;
notify yes;
update-quota 1;
};
listen-on { 10.53.0.1; };
listen-on-v6 { none; };
recursion no;
+ dnssec-validation no;
notify yes;
};
listen-on { 10.53.0.2; };
listen-on-v6 { none; };
recursion yes;
+ dnssec-validation no;
notify yes;
};
listen-on { 10.53.0.2; 10.53.0.4; };
listen-on-v6 { none; };
recursion yes;
+ dnssec-validation no;
notify yes;
};
listen-on { 10.53.0.2; };
listen-on-v6 { none; };
recursion no;
+ dnssec-validation no;
notify no;
};
listen-on { 10.53.0.3; };
listen-on-v6 { none; };
recursion yes;
+ dnssec-validation no;
notify yes;
};
listen-on { 10.53.0.3; };
listen-on-v6 { none; };
recursion yes;
+ dnssec-validation no;
notify yes;
};
listen-on { 10.53.0.5; };
listen-on-v6 { none; };
recursion yes;
+ dnssec-validation no;
notify yes;
};
listen-on { 10.53.0.1; };
listen-on-v6 { none; };
recursion no;
+ dnssec-validation no;
notify yes;
};
listen-on { 10.53.0.1; };
listen-on-v6 { none; };
recursion no;
+ dnssec-validation no;
notify yes;
};
listen-on { 10.53.0.1; };
listen-on-v6 { none; };
recursion no;
+ dnssec-validation no;
notify yes;
};
listen-on { 10.53.0.2; };
listen-on-v6 { none; };
recursion no;
+ dnssec-validation no;
notify yes;
ixfr-from-differences yes;
check-integrity no;
listen-on { 10.53.0.3; };
listen-on-v6 { none; };
recursion yes;
+ dnssec-validation no;
notify yes;
};
listen-on { 10.53.0.6; };
listen-on-v6 { none; };
recursion no;
+ dnssec-validation no;
notify yes;
ixfr-from-differences primary;
check-integrity no;
listen-on { 10.53.0.7; };
listen-on-v6 { none; };
recursion no;
+ dnssec-validation no;
notify yes;
ixfr-from-differences secondary;
check-integrity no;
listen-on { 10.53.0.8; };
listen-on-v6 { none; };
recursion no;
+ dnssec-validation no;
notify no;
transfer-message-size 1024;
};
listen-on { 10.53.0.1; };
listen-on-v6 { none; };
recursion no;
+ dnssec-validation no;
notify yes;
};
listen-on { 10.53.0.2; };
listen-on-v6 { none; };
recursion no;
+ dnssec-validation no;
notify no;
transfers-in 5;
projects / thirdparty / bind9.git / commitdiff
