These tests have ns1 configured as a mock root server. Make sure it is used in all config files of those tests, otherwise some queries could leak to root nameservers.
79 lines
1.4 KiB
Plaintext
79 lines
1.4 KiB
Plaintext
/*
|
|
* Copyright (C) Internet Systems Consortium, Inc. ("ISC")
|
|
*
|
|
* SPDX-License-Identifier: MPL-2.0
|
|
*
|
|
* This Source Code Form is subject to the terms of the Mozilla Public
|
|
* License, v. 2.0. If a copy of the MPL was not distributed with this
|
|
* file, you can obtain one at https://mozilla.org/MPL/2.0/.
|
|
*
|
|
* See the COPYRIGHT file distributed with this work for additional
|
|
* information regarding copyright ownership.
|
|
*/
|
|
|
|
// NS4
|
|
|
|
options {
|
|
query-source address 10.53.0.4;
|
|
notify-source 10.53.0.4;
|
|
transfer-source 10.53.0.4;
|
|
port @PORT@;
|
|
pid-file "named.pid";
|
|
listen-on { 10.53.0.4; };
|
|
listen-on-v6 { none; };
|
|
};
|
|
|
|
key rndc_key {
|
|
secret "1234abcd8765";
|
|
algorithm @DEFAULT_HMAC@;
|
|
};
|
|
|
|
controls {
|
|
inet 10.53.0.4 port @CONTROLPORT@ allow { any; } keys { rndc_key; };
|
|
};
|
|
|
|
key auth {
|
|
secret "1234abcd8765";
|
|
algorithm @DEFAULT_HMAC@;
|
|
};
|
|
|
|
include "trusted.conf";
|
|
|
|
zone "." {
|
|
type hint;
|
|
file "../../_common/root.hint";
|
|
};
|
|
|
|
view rec {
|
|
match-recursive-only yes;
|
|
recursion yes;
|
|
dnssec-validation yes;
|
|
dnssec-accept-expired yes;
|
|
minimal-responses no;
|
|
|
|
zone secure.example {
|
|
type static-stub;
|
|
server-addresses { 10.53.0.4; };
|
|
};
|
|
|
|
zone insecure.secure.example {
|
|
type static-stub;
|
|
server-addresses { 10.53.0.4; };
|
|
};
|
|
};
|
|
|
|
view auth {
|
|
recursion no;
|
|
allow-recursion { none; };
|
|
|
|
zone secure.example {
|
|
type secondary;
|
|
primaries { 10.53.0.3; };
|
|
};
|
|
|
|
zone insecure.secure.example {
|
|
type secondary;
|
|
primaries { 10.53.0.2; };
|
|
};
|
|
};
|