2 // THIS FILE IS UNDER PUPPET CONTROL. DON'T EDIT IT HERE.
3 // USE: git clone git+ssh://$USER@puppet.debian.org/srv/puppet.debian.org/git/dsa-puppet.git
7 directory "/var/cache/bind";
9 // If there is a firewall between you and nameservers you want
10 // to talk to, you may need to fix the firewall to allow multiple
11 // ports to talk. See http://www.kb.cert.org/vuls/id/800113
13 // If your ISP provided one or more IP addresses for stable
14 // nameservers, you probably want to use them as forwarders.
15 // Uncomment the following block, and insert the addresses replacing
16 // the all-0's placeholder.
22 auth-nxdomain no; # conform to RFC1035
23 listen-on-v6 { any; };
25 allow-update { none; };
26 allow-transfer { none; };
27 allow-recursion { Nagios; };
28 blackhole { 192.168.0.0/16; 10.0.0.0/8; 172.16.0.0/12; };
34 file "/var/log/bind9/geoip-query.log" versions 4 size 40m;
38 category queries { queries; };
39 category lame-servers { null; };