Blame bin/tests/system/acl/ns2/named2.conf.in

Packit 5ce601
/*
Packit 5ce601
 * Copyright (C) Internet Systems Consortium, Inc. ("ISC")
Packit 5ce601
 *
Packit 5ce601
 * This Source Code Form is subject to the terms of the Mozilla Public
Packit 5ce601
 * License, v. 2.0. If a copy of the MPL was not distributed with this
Packit Service 704ed8
 * file, you can obtain one at https://mozilla.org/MPL/2.0/.
Packit 5ce601
 *
Packit 5ce601
 * See the COPYRIGHT file distributed with this work for additional
Packit 5ce601
 * information regarding copyright ownership.
Packit 5ce601
 */
Packit 5ce601
Packit 5ce601
key rndc_key {
Packit 5ce601
	secret "1234abcd8765";
Packit 5ce601
	algorithm hmac-sha256;
Packit 5ce601
};
Packit 5ce601
Packit 5ce601
controls {
Packit 5ce601
	inet 10.53.0.2 port @CONTROLPORT@ allow { any; } keys { rndc_key; };
Packit 5ce601
};
Packit 5ce601
Packit 5ce601
options {
Packit 5ce601
	query-source address 10.53.0.2;
Packit 5ce601
	notify-source 10.53.0.2;
Packit 5ce601
	transfer-source 10.53.0.2;
Packit 5ce601
	port @PORT@;
Packit 5ce601
	pid-file "named.pid";
Packit 5ce601
	listen-on { 10.53.0.2; };
Packit 5ce601
	listen-on-v6 { none; };
Packit 5ce601
	recursion no;
Packit 5ce601
	notify yes;
Packit 5ce601
	ixfr-from-differences yes;
Packit 5ce601
	check-integrity no;
Packit 5ce601
};
Packit 5ce601
Packit 5ce601
key one {
Packit Service d3afd5
	algorithm hmac-md5;
Packit 5ce601
	secret "1234abcd8765";
Packit 5ce601
};
Packit 5ce601
Packit 5ce601
key two {
Packit Service d3afd5
	algorithm hmac-md5;
Packit 5ce601
	secret "1234abcd8765";
Packit 5ce601
};
Packit 5ce601
Packit 5ce601
zone "." {
Packit 5ce601
	type hint;
Packit 5ce601
	file "../../common/root.hint";
Packit 5ce601
};
Packit 5ce601
Packit 5ce601
zone "example" {
Packit 5ce601
	type master;
Packit 5ce601
	file "example.db";
Packit 5ce601
};
Packit 5ce601
Packit 5ce601
zone "tsigzone" {
Packit 5ce601
	type master;
Packit 5ce601
	file "tsigzone.db";
Packit 5ce601
	/*
Packit 5ce601
	 * 0a00::/8 and 10/8 are the same bits, but different address
Packit 5ce601
	 * families.  This should *not* match IPv4 queries from 10.*.
Packit 5ce601
	 */
Packit 5ce601
	allow-transfer { 0a00::/8; !10/8; key one; };
Packit 5ce601
};