directory "/var/cache/bind";
auth-nxdomain no; # conform to RFC1035
+<% if classes.include?("named::recursor") -%>
listen-on-v6 { any; };
+<% else -%>
+ listen-on { ! 127.0.0.1; any; };
+ listen-on-v6 { ! ::1; any; };
+<% end -%>
allow-transfer { none; };
allow-update { none; };
<%=
allowed='Nagios; '
- if classes.include?('named::authoritative') or classes.include?('named::recursor')
+ if classes.include?('named::recursor')
allowed += 'localnets; '
end