9.16.13 overwrote master files

Carl Byington carl at byington.org
Mon Mar 29 04:02:29 UTC 2021


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

On Mon, 2021-03-29 at 12:54 +1100, Mark Andrews wrote:
> What do you have in options?

options {
    directory "/var/named";
    allow-recursion { "friends"; };
    dnssec-enable yes;
    dnssec-validation auto;
    bindkeys-file "/etc/named.bind.keys";
    managed-keys-directory "/var/named/dynamic";
    listen-on-v6 {any;};
    ixfr-from-differences yes;
    max-journal-size 2m;
    notify yes;
    response-policy { zone "rpz.five-ten-sg.com";}
        qname-wait-recurse no;
    rate-limit {
        responses-per-second 500;
        errors-per-second    50;
        nxdomains-per-second 500;
        qps-scale            4000;
        exempt-clients { "friends"; };
    };
    max-recursion-queries 200; qname-minimization disabled;
    fetches-per-server 50;
    fetches-per-zone   50;
    server-id hostname;
};

This is on Centos 8. I will setup a VM tomorrow for more testing on
this. For now, reverted back to 9.16.12.




-----BEGIN PGP SIGNATURE-----

iHMEAREKADMWIQSuFMepaSkjWnTxQ5QvqPuaKVMWwQUCYGFRRxUcY2FybEBmaXZl
LXRlbi1zZy5jb20ACgkQL6j7milTFsFm/wCbBpzr/W/QdtUMG0hhstYcI1wpsBcA
nRdv220ju0R0IIEgbLzfbXs8CjHX
=+zDb
-----END PGP SIGNATURE-----






More information about the bind-users mailing list