Linux简明系统维护手册(二)

　　/*

　　 * This is a worthless, nonrunnable example of a named.conf file that has

　　 * every conceivable syntax element in use.  We use it to test the parser.

　　 * It could also be used as a conceptual template for users of new features.

　　 */



　　/*

　　 * C-style comments are OK

　　 */



　　// So are C  -style comments



　　# So are shell-style comments



　　// watch out for ";" -- it's important!



　　options {

       directory "/var/named";                 

　　　　　　// use current directory

       named-xfer "/usr/libexec/named-xfer";   

　　　　　　// _PATH_XFER

       dump-file "named_dump.db";             

　　　　　　// _PATH_DUMPFILE

      pid-file "/var/run/named.pid";          

　　　　　  // _PATH_PIDFILE

      statistics-file "named.stats";          

　　　　　　// _PATH_STATS

      memstatistics-file "named.memstats";     

　　　　　　// _PATH_MEMSTATS

      check-names master fail;

      check-names slave warn;

      check-names response ignore;

      host-statistics no;

      deallocate-on-exit no;                  

　　　　　　// Painstakingly deallocate all

　　　　　　// objects when exiting instead of

　　　　　　// letting the OS clean up for us.

　　　　　　// Useful a memory leak is suspected.

            // Final statistics are written to the

            // memstatistics-file.

      datasize default;

      stacksize default;

      coresize default;

      files unlimited;

      recursion yes;

      fetch-glue yes;

      fake-iquery no;

      notify yes;    

　　　 　// send NOTIFY messages.  You can set

         // notify on a zone-by-zone

         // basis in the "zone" statement

         // see (below)

      serial-queries 4;               

　 　　　// number of parallel SOA queries

         // we can have outstanding for master

         // zone change testing purposes

      auth-nxdomain yes;             

         // always set AA on NXDOMAIN.

         // don't set this to 'no' unless

         // you know what you're doing -- older

         // servers won't like it.

      multiple-cnames no;             

　　     // if yes, then a name my have more

        // than one CNAME RR.  This use

        // is non-standard and is not

        // recommended, but it is available

        // because previous releases supported

        // it and it was used by large sites

        // for load balancing.

     allow-query { any; };

     allow-transfer { any; };

      transfers-in 10;               

　　　　 // DEFAULT_XFERS_RUNNING, cannot be

 　　    // set > than MAX_XFERS_RUNNING (20)

      transfers-per-ns 2;             

         // DEFAULT_XFERS_PER_NS

      transfers-out 0;                

        // not implemented

      max-transfer-time-in 120;     

        // MAX_XFER_TIME; the default number

        // of minutes an inbound zone transfer

        // may run.  May be set on a per-zone

        // basis.

     transfer-format one-answer;

     query-source address * port *;

　　/*

     * The "forward" option is only meaningful if you've defined

     * forwarders.  "first" gives the normal BIND

     * forwarding behavior, i.e. ask the forwarders first, and if that

     * doesn't work then do the full lookup.  You can also say

     * "forward only;" which is what used to be specified with

     * "slave" or "options forward-only".  "only" will never attempt

　　 * a full lookup; only the forwarders will be used.

　　 */

    forward first;

    forwarders { };                

　　　　// default is no forwarders

      topology { localhost; localnets; };     

　　　　// prefer local nameservers

      listen-on port 53 { any; };     

　　　　// listen for queries on port 53 on

　　    // any interface on the system

　　    // (i.e. all interfaces).  The

　　    // "port 53" is optional; if you

　　    // don't specify a port, port 53

　　    // is assumed.

    /*

     * Interval Timers

     */

    cleaning-interval 60;          

 　　　 // clean the cache of expired RRs

　　    // every 'cleaning-interval' minutes

    interface-interval 60;          

　　　　// scan for new or deleted interfaces

　　    // every 'interface-interval' minutes

    statistics-interval 60;         

　　　　// log statistics every 

　　    // 'statistics-interval' minutes

    maintain-ixfr-base no;   

　　　　// If yes, keep transaction log file for IXFR

    max-ixfr-log-size 20;        

　　　　// Not implemented, maximum size the 

　　    // IXFR transaction log file to grow

　　};



　　/*

　　 * Control listeners, for "ndc".  Every nameserver needs at least one.

　　 */

　　controls {

        inet * port 52 allow { any; };

             // a bad idea

        unix "/var/run/ndc" perm 0600 owner 0 group 0; 

　　　　　　 // the default

　　};



　　zone "rd.xxx.com" in {

        type master;                    

　　　　　　// what used to be called "primary" 

        file "rd.xxx.com.db";

        check-names fail;

        allow-update { none; };

        allow-transfer { any; };

        allow-query { any; };

        // notify yes;                  

　　　　　　// send NOTIFY messages for this

            // zone?  The global option is used

            // if "notify" is not specified

            // here.

        also-notify { };                

　　　　　　// don't notify any nameservers other

            // than those on the NS list for this

            // zone

　　};



　　zone "223.99.211.in-addr.arpa" in {

        type master;         

           // what used to be called "secondary" 

        file "21.9.22.db";

        };



　　zone "0.0.127.in-addr.arpa" in {

        type master;

        file "127.0.0.db";

　　};



　　zone "." in {

        type hint;                     

　　　　　　 // used to be specified w/ "cache"

        file "named.root";

　　};



　　logging {

        /*

         * All log output goes to one or more "channels"; you can make as

         * many of them as you want.

         */



     channel syslog_errors {         

　　　　　　// this channel will send errors or

        syslog user;            

　　　　　　// or worse to syslog (user facility)

        severity error;

     };



    category parser {

       syslog_errors;

          // you can log to as many channels

       default_syslog;     

　　　　  // as you want

    };



    category lame-servers { null; };       

　　　　 // don't log these at all



    channel moderate_debug {

       severity debug 3;              

　　　　 // level 3 debugging to file

       file "foo";                     

　　　　 // foo

       print-time yes;                 

　　　　// timestamp log entries

       print-category yes;            

　　　　 // print category name

       print-severity yes;             

　　　　 // print severity level

         /*

          * Note that debugging must have been turned on either

          * on the command line or with a signal to get debugging

          * output (non-debugging output will still be written to

          * this channel).

          */

        };



    /*

     * If you don't want to see "zone XXXX loaded" messages but do

     * want to see any problems, you could do the following.

     */



    channel no_info_messages {

            syslog;

            severity notice;

    };



    category load { no_info_messages; };



    /*

     * You can also define category "default"; it gets used when no

     * "category" statement has been given for a category.

     */

 

    category default {

          default_syslog;

          moderate_debug;

    };



};

标签：

版权申明：本站文章部分自网络，如有侵权，请联系：west999com@outlook.com
特别注意：本站所有转载文章言论不代表本站观点，本站所提供的摄影照片，插画，设计作品，如需使用，请与原作者联系，版权归原作者所有

热门词条

最新资讯

• Photoshop绘制立体风格的微笑表情
• PS文字特效教程：制作公路上个性的涂鸦
• Photoshop设计卷边效果的变形金刚电影
• PS色彩修复教程：利用色阶工具快速给红
• PS半透明物体抠图：利用通道选区工具抠
• PS海报设计技巧教程：学习制作个性的扭
• PS图片特效制作教程：学习给铁塔图片制
• 学习用photoshop把浑浊的海水照片后期
• PS古风照片教程：给古风美女打造出女侠
• PS个性人物海报制作：设计创意时尚的玻

热门关注

• vim常用命令大全
• 运维基础
• 针对CCTV摄像头的扫描爆破工具 ：Camer
• 内部服务器错误Internal server error
• 《Taylor的树莓派》之 树莓派3B+ 安装C
• 制作linux系统U盘并使用U盘安装CentOS7
• LInux因为缺失网关出现Name or service
• 命令行中“\”和“--”符号所代表的含
• z390 m.2 接口插上sata 硬盘后，机械硬
• shell脚本练习案例

热门标签