boolean;string trust-anchor string;string boolean;string;string;boolean;string;dialuptype;ixfrdiff;
view string optional_class {
match-clients { address_match_element; ... };
@@ -368,6 +373,12 @@ view
dnssec-lookaside string trust-anchor string;
dnssec-must-be-secure string boolean;
+
+ empty-server string;
+ empty-contact string;
+ empty-zones-enable boolean;
+ disable-empty-zone string;
+
dialup dialuptype;
ixfr-from-differences ixfrdiff;
@@ -424,7 +435,7 @@ view
zone string optional_class {
type ( master | slave | stub | hint |
@@ -504,12 +515,12 @@ zone
named(8), rndc(8), BIND 9 Administrator Reference Manual. diff --git a/doc/arm/Bv9ARM.ch06.html b/doc/arm/Bv9ARM.ch06.html index f412fa3ad2..66f34e2100 100644 --- a/doc/arm/Bv9ARM.ch06.html +++ b/doc/arm/Bv9ARM.ch06.html @@ -14,7 +14,7 @@ - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR - PERFORMANCE OF THIS SOFTWARE. --> - +
@@ -77,23 +77,23 @@number ; ]
[ max-clients-per-query number ; ]
[ masterfile-format (text|raw) ; ]
+ [ empty-server name ; ]
+ [ empty-contact name ; ]
+ [ empty-zones-enable yes_or_no ; ]
+ [ disable-empty-zone zone_name ; ]
};
The forwarding facility can be used to create a large site-wide cache on a few servers, reducing traffic over links to external @@ -2740,7 +2744,7 @@ options {
Dual-stack servers are used as servers of last resort to work around @@ -2905,7 +2909,7 @@ options {
The interfaces and ports that the server will answer queries from may be specified using the listen-on option. listen-on takes @@ -2985,7 +2989,7 @@ listen-on-v6 port 1234 { !2001:db8::/32; any; };
If the server doesn't know the answer to a question, it will query other name servers. query-source specifies @@ -3240,7 +3244,7 @@ query-source-v6 address * port *;
avoid-v4-udp-ports and avoid-v6-udp-ports specify a list of IPv4 and IPv6 UDP ports that will not be used as system @@ -3254,7 +3258,7 @@ query-source-v6 address * port *;
The server's usage of many system resources can be limited. Scaled values are allowed when specifying resource limits. For @@ -3314,7 +3318,7 @@ query-source-v6 address * port *;
The following options set limits on the server's resource consumption that are enforced internally by the @@ -3392,7 +3396,7 @@ query-source-v6 address * port *;
@@ -3875,6 +3879,109 @@ query-source-v6 address * port *;
+ Named has some built-in empty zones (SOA and NS records only). + These are for zones that should normally be answered locally + and which queries should not be sent to the Internet's root + servers. The offical servers which cover these namespaces + return NXDOMAIN responses to these queries. In particular + these cover the reverse namespace for addresses from RFC 1918 and + RFC 3330. They also include the reverse namespace for IPv6 local + address (locally assigned), IPv6 link local addresses, the IPv6 + loopback address and the IPv6 unknown addresss. +
++ Named will attempt to determine if a built in zone already exists + or is active (covered by a forward-only forwarding declaration) + and will not not create a empty zone in that case. +
++ The current list of empty zones is: +
++
++ Empty zones are settable at the view level and only apply to + views of class IN. Disabled empty zones are only inherited + from options if there are no disabled empty zones specified + at the view level. To override the options list of disabled + zones you can disable the root zone at the view level + (disable-empty-zone ".";). +
++ If you are using the address ranges covered here you should + already have reverse zones covering the addresses you use. + In practice this appears to not be the case with many queries + being made to the infrustucture servers for names in these + spaces. So many in fact that sacrificial servers were needed + to be deployed to channel the query load away from the + infrustucture servers. +
++ Specify what server name will appear in the returned + SOA record for empty zones. If none is specified then + the zone's name will be used. +
+ Specify what contact name will appear in the returned + SOA record for empty zones. If none is specified then + "." will be used. +
+ Enable / disable all empty zones. By default they + are enabled. +
+ Disable a indiviual empty zones. By default none are + disabled. This option can be specified multiple times. +
The statistics file generated by BIND 9 @@ -4248,7 +4355,7 @@ query-source-v6 address * port *;
trusted-keys {
string number number number string ;
[ string number number number string ; [...]]
@@ -4257,7 +4364,7 @@ query-source-v6 address * port *;
The trusted-keys statement defines
@@ -4296,7 +4403,7 @@ query-source-v6 address * port *;
The view statement is a powerful
feature
@@ -4469,10 +4576,10 @@ view "external" {