
/*
 *              Configuration bind pour ns-master.fr.clara.net (Nord)
 *
 */

// L'ACL "allowed" contient la liste des IP qui ont le droit de faire des
// requetes DNS sur notre serveurs (requetes de base et transferts de zones)
// Aucune autre IP n'a le droit de faire de requetes sur ns-master :
// c'est un stealth-master.

//              195.8.69.14;
//              195.8.69.57;

acl "allowed" {
                127.0.0.1;              //  localhost
                212.43.195.0/24;        //  Staff Claranet France
                212.43.194.38;          //  nagios) 
                212.43.194.108;         //  (chablais => nagios3)
                212.43.194.2;           //  ns0 (Alsace)
                212.43.194.3;           //  ns1 (Lorraine)
                212.43.194.135;         //  ns1 (Lorraine)
                212.43.250.4;           //  ns2 (Flam)
                212.43.250.5;           //  ns2 (Flam)
                212.43.194.27;          //  ns0 (alsace-new)
                212.43.194.81;          //  ns-master (Nord, nous-memes)
                212.43.194.82;          //  Queyras 
                212.43.194.83;          //  ns3 (alias sur Queyras)
                80.168.69.10;           //  ns4 (Jersey)
                212.43.194.97;          //  ns5 (Perche)
                212.43.194.99;          //  ns6 (Verdon)
                212.43.194.104;         //  ns7 (Argens)
                212.43.194.105;         //  ns7 (Argens)
                89.185.48.169;          //  ns0.sd.fr.clara.net (xen sur Nivelles)
                212.43.206.2;           //  ns0.freesurf.fr (alias sur Bastille)
                212.43.206.3;           //  ns1.freesurf.fr (Danton)
                212.43.206.19;          //  Bastille 
                //193.0.0.0/24;         //  RIPE (inutile a priori) 
                //192.134.4.0/27;       //  AFNIC (inutile a priori) 
                //217.158.169.0/24;     // uk.clara.net (tom, 24/11/03) (inutile a priori) 
                212.43.241.250;         // test gslb Server Iron 2004/07 
                212.43.241.248;         // test gslb Server Iron 2004/07 
                212.43.232.64/27;       // Staff Claranet France
                212.43.194.123;         // machine remplaçt Queyras 
};


options {
        directory "/var/named";
        
        pid-file "/var/run/named.pid";
//      forward only;

//      forwarders { 127.0.0.1; };
        // dump-file "s/named_dump.db";

        recursion no;
        //fetch-glue no;

        allow-query { "allowed"; };
        allow-transfer { "allowed"; };
//      allow-update { none; };

        listen-on { 212.43.194.81; };

        transfer-source 212.43.194.81;
        notify-source 212.43.194.81 port *; 
        query-source address 212.43.194.81 port *; 

        version "Claranet Name Server";

        notify yes;

//        also-notify { 212.43.194.83; 80.168.69.10; 212.43.250.5; };
        also-notify { 212.43.194.83; 80.168.69.10; 212.43.250.5; 212.43.194.97; 212.43.194.99; 212.43.194.104
};

controls {
            inet 127.0.0.1 port 953
            allow { localhost; }
            keys { "dnsadmin"; };
};

include "/etc/named/rndc.key";

// 

zone "." {
        type hint;
        file "named.root";
};

zone "0.0.127.IN-ADDR.ARPA" {
        type master;
        file "localhost.rev";
};

zone "1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ip6.arpa."        {
        type master;
        file "localhost.rev";
};

//      mkdir /etc/namedb/s
//      chown bind.bind /etc/namedb/s
//      chmod 750 /etc/namedb/s

zone "corp.fr.clara.net" {
        type master;
        file "dyn/corp.fr.clara.net";
        allow-transfer { 127.0.0.1; };
        allow-update { 127.0.0.1; 212.43.194.10;};
        also-notify {212.43.194.2;212.43.194.3;212.43.194.83;80.168.69.10;212.43.206.2;212.43.206.3;212.43.19
};


include "easy.conf";
include "clara.conf";
include "ipv6.conf";
include "deleg.conf";
include "misc.conf";

