> Приведите конфиг днс-сервера.[root@antares] > cat /etc/namedb/named.conf
// $FreeBSD: src/etc/namedb/named.conf,v 1.21.2.1 2005/09/10 08:27:27 dougb Exp $
//
// Refer to the named.conf(5) and named(8) man pages, and the documentation
// in /usr/share/doc/bind9 for more details.
# ---------
# RCS Header
# $Id: named.conf,v 1.2 2009/04/24 10:18:50 root Exp root $
# $Log: named.conf,v $
# Revision 1.2 2009/04/24 10:18:50 root
# stable config
#
# Revision 1.1 2009/03/26 08:55:32 root
# Initial revision
#
# ----------
acl rec_hosts {
localhost;
62.105.140.192/27; 195.16.60.240/28;
217.22.162.192/29; 80.237.82.136/29;
212.30.182.96/32; 192.168.1.0/24;
10.0.0.0/8;
};
acl transfer_hosts {
localhost;
62.105.140.192/27; 195.16.60.240/28; 217.22.162.192/29;
194.85.128.10; 194.85.128.28;
194.85.129.80; 213.234.194.138;
194.67.2.109; 194.67.7.1; 212.118.45.74;
81.211.9.94; 195.230.111.32/27;
10.0.0.0/8;
};
# Start of rndc.conf
key "rndc-key" {
algorithm hmac-md5;
secret "7979I9mTmifwrPA4yz/D9w==";
};
controls {
inet 127.0.0.1 port 953
allow { 127.0.0.1; } keys { "rndc-key"; };
};
logging {
channel my_debug {
file "/var/log/named/debug" versions 3 size 1m;
severity debug ;
print-time yes;
print-category yes;
print-severity yes;
};
category default { my_debug; };
category general { my_debug; default_syslog;};
category database {my_debug;};
category security { my_debug; };
category config {my_debug;};
category resolver { my_debug;};
category xfer-in {my_debug;};
category xfer-out { my_debug;};
category notify { my_debug;};
category client { my_debug;};
category unmatched { my_debug;};
category network { my_debug;};
category update { my_debug;};
category queries { my_debug;};
category dispatch { my_debug;};
category dnssec { my_debug;};
category lame-servers {my_debug;};
//category delegation-only { my_debug;};
};
options {
allow-transfer { transfer_hosts; };
directory "/etc/namedb";
pid-file "/var/run/named/pid";
dump-file "/var/dump/named_dump.db";
statistics-file "/var/stats/named.stats";
// If named is being used only as a local resolver, this is a safe default.
// For named to be accessible to the network, comment this option, specify
// the proper IP address, or delete this option.
// listen-on { 127.0.0.1; };
// If you have IPv6 enabled on this system, uncomment this option for
// use as a local resolver. To give access to the network, specify
// an IPv6 address, or the keyword "any".
// listen-on-v6 { ::1; };
// In addition to the "forwarders" clause, you can force your name
// server to never initiate queries of its own, but always ask its
// forwarders only, by enabling the following line:
//
// forward only;
// If you've got a DNS server around at your upstream provider, enter
// its IP address here, and enable the line below. This will make you
// benefit from its cache, thus reduce overall DNS traffic in the Internet.
/*
forwarders {
127.0.0.1;
};
*/
/*
* If there is a firewall between you and nameservers you want
* to talk to, you might need to uncomment the query-source
* directive below. Previous versions of BIND always asked
* questions using port 53, but BIND versions 8 and later
* use a pseudo-random unprivileged UDP port by default.
*/
// query-source address * port 53;
//query-source address 10.1.10.26 port 53;
query-source address 10.1.10.55 port 53;
//transfer-source 10.1.10.25 port *;
transfer-source 10.1.10.55 port *;
};
// If you enable a local name server, don't forget to enter 127.0.0.1
// first in your /etc/resolv.conf so this server will be queried.
// Also, make sure to enable it in /etc/rc.conf.
view audi {
match-clients { 192.168.99.0/24; };
recursion yes;
zone "." IN { type hint; file "named.root"; };
zone "localhost" IN { type master; file "localhost.zone"; };
zone "0.0.127.in-addr.arpa" IN { type master; file "localhost.rev"; };
zone "vbrr.ru" { type master; file "vbrr.ru"; };
};
view int {
match-clients { 127.0.0.1; 10.0.0.0/8; 192.168.0.0/16; };
// forwarders { 194.85.128.10; };
// forwarders { 212.44.130.6; };
// query-source address 10.1.10.25 port *;
recursion yes;
zone "." IN { type hint; file "named.root"; };
zone "localhost" IN { type master; file "localhost.zone"; };
zone "0.0.127.in-addr.arpa" IN { type master; file "localhost.rev"; };
zone "vbrr.ru" { type master; file "vbrr.ru.int"; };
zone "vbrr.su" { type master; file "vbrr.su.int"; };
zone "rrfc.ru" { type master; file "rrfc.ru"; };
zone "rrfk.ru" { type master; file "rrfk.ru"; };
zone "invtex.ru" { type master; file "invtex.ru.int"; };
zone "portfinvest.ru" { type master; file "portfinvest.ru.int"; };
zone "agorapif.ru" { type slave; file "slave/agorapif.ru"; masters { 81.211.9.94; }; };
zone "pifagora.ru" { type slave; file "slave/pifagora.ru"; masters { 81.211.9.94; }; };
zone "isbroker.ru" { type slave; file "slave/isbroker.ru"; masters { 81.211.9.94; }; };
zone "140.105.62.in-addr.arpa" { type master; file "62.105.140.192"; };
zone "162.22.217.in-addr.arpa" { type master; file "217.22.162.192"; };
zone "111.230.195.in-addr.arpa" { type master; file "195.230.111.0"; };
zone "rrdb.net" { type forward; forwarders {10.1.10.34;}; };
zone "vbrr.loc" { type forward; forwarders {10.1.2.64;}; };
zone "rrdbank.lan" IN { type slave; masters {10.2.1.100;}; file "slave/rrdbank.lan"; };
zone "vbrr.lan" IN {type slave; masters {10.2.1.100;}; file "slave/vbrr.lan"; };
zone "cocon.lan" IN {type slave; masters {10.2.1.100;}; file "slave/cocon.lan"; };
zone "spb.lan" IN { type slave; masters { 10.3.1.33; }; file "slave/spb.lan"; };
zone "8.1.10.in-addr.arpa" in { type slave; masters {10.2.1.100;}; file "slave/10.1.8.0.rev"; };
zone "168.192.in-addr.arpa" in { type slave; masters {10.2.1.100;}; file "slave/192.168.0.0.rev"; };
zone "1.1.10.in-addr.arpa" in { type forward; forwarders {10.1.2.64;}; };
zone "2.1.10.in-addr.arpa" in { type forward; forwarders {10.1.2.64;}; };
zone "10.1.10.in-addr.arpa" in { type forward; forwarders {10.1.2.64;}; };
zone "100.1.10.in-addr.arpa" in { type forward; forwarders {10.1.2.64;}; };
zone "101.1.10.in-addr.arpa" in { type forward; forwarders {10.1.2.64;}; };
zone "102.1.10.in-addr.arpa" in { type forward; forwarders {10.1.2.64;}; };
zone "103.1.10.in-addr.arpa" in { type forward; forwarders {10.1.2.64;}; };
zone "1.2.10.in-addr.arpa" in { type forward; forwarders {10.1.2.64;}; };
zone "2.2.10.in-addr.arpa" in { type forward; forwarders {10.1.2.64;}; };
zone "3.2.10.in-addr.arpa" in { type forward; forwarders {10.1.2.64;}; };
zone "4.2.10.in-addr.arpa" in { type forward; forwarders {10.1.2.64;}; };
// zone "3.10.in-addr.arpa" in { type forward; forwarders {10.1.2.64;}; };
// zone "1.10.in-addr.arpa" in { type slave; masters {10.2.1.100;}; file "slave/10.1.0.0.rev"; };
// zone "2.10.in-addr.arpa" in { type slave; masters {10.2.1.100;}; file "slave/10.2.0.0.rev"; };
// zone "10.1.10.in-addr.arpa" in { type slave; masters {10.2.1.100;}; file "slave/10.1.10.0.rev"; };
zone "msk.rn.ru" in { type forward; forwarders { 127.0.0.1 port 1053; }; };
};
view ext {
match-clients { any; };
// allow-recursion { rec_hosts; };
recursion yes;
zone "." IN { type hint; file "named.root"; };
zone "localhost" IN { type master; file "localhost.zone"; };
zone "0.0.127.in-addr.arpa" IN { type master; file "localhost.rev"; };
zone "vbrr.ru" { type master; file "vbrr.ru"; };
zone "vbrr.su" { type master; file "vbrr.su"; };
zone "rrfc.ru" { type master; file "rrfc.ru"; };
zone "rrfk.ru" { type master; file "rrfk.ru"; };
zone "invtex.ru" { type master; file "invtex.ru"; };
zone "portfinvest.ru" { type master; file "portfinvest.ru"; };
zone "agorapif.ru" { type slave; file "slave/agorapif.ru"; masters { 81.211.9.94; }; };
zone "pifagora.ru" { type slave; file "slave/pifagora.ru"; masters { 81.211.9.94; }; };
zone "isbroker.ru" { type slave; file "slave/isbroker.ru"; masters { 81.211.9.94; }; };
zone "ukpi.ru" { type slave; file "slave/isbroker.ru"; masters { 81.211.9.94; }; };
zone "140.105.62.in-addr.arpa" { type master; file "62.105.140.192"; };
zone "0.162.22.217.in-addr.arpa" { type master; file "217.22.162.192"; };
zone "111.230.195.in-addr.arpa" { type master; file "195.230.111.0"; };
};
[root@antares] >
Вариант для распечатки
(ok) on 29-Апр-11, 10:14 
