| [c5c522c] | 1 | // Sample pdnsd configuration file. Must be customized to obtain a working pdnsd setup! |
|---|
| 2 | // Read the pdnsd.conf(5) manpage for an explanation of the options. |
|---|
| 3 | // Add or remove '#' in front of options you want to disable or enable, respectively. |
|---|
| 4 | // Remove '/*' and '*/' to enable complete sections. |
|---|
| 5 | |
|---|
| 6 | global { |
|---|
| 7 | perm_cache=1024; |
|---|
| 8 | cache_dir="/var/cache/pdnsd"; |
|---|
| 9 | # pid_file = /var/run/pdnsd.pid; |
|---|
| 10 | run_as="nobody"; |
|---|
| 11 | server_ip = 0.0.0.0; # Use eth0 here if you want to allow other |
|---|
| 12 | # machines on your network to query pdnsd. |
|---|
| 13 | status_ctl = on; |
|---|
| 14 | # paranoid=on; # This option reduces the chance of cache poisoning |
|---|
| 15 | # but may make pdnsd less efficient, unfortunately. |
|---|
| 16 | query_method=udp_tcp; |
|---|
| 17 | min_ttl=1s; |
|---|
| 18 | max_ttl=1w; |
|---|
| 19 | neg_ttl=60s; # how long before we retry a query one it has failed? |
|---|
| 20 | timeout=10; # Global timeout option (10 seconds). |
|---|
| 21 | neg_domain_pol=on; |
|---|
| 22 | udpbufsize=1024; # Upper limit on the size of UDP messages. |
|---|
| 23 | } |
|---|
| 24 | |
|---|
| 25 | |
|---|
| 26 | server { |
|---|
| 27 | label= "primary"; |
|---|
| 28 | ip = 8.8.4.4; # Put your ISP's DNS-server address(es) here. |
|---|
| 29 | timeout=4; # Server timeout; this may be much shorter |
|---|
| 30 | # that the global timeout option. |
|---|
| 31 | uptest=query; # Test if the network interface is active. |
|---|
| 32 | query_test_name="."; |
|---|
| 33 | interval=60s; # Check every 60s. |
|---|
| 34 | purge_cache=off; # Keep stale cache entries in case the ISP's |
|---|
| 35 | # DNS servers go offline. |
|---|
| 36 | edns_query=yes; # Use EDNS for outgoing queries to allow UDP messages |
|---|
| 37 | # larger than 512 bytes. May cause trouble with some |
|---|
| 38 | # legacy systems. |
|---|
| 39 | } |
|---|
| 40 | |
|---|
| 41 | server { |
|---|
| 42 | label= "secondary"; |
|---|
| 43 | ip = 8.8.8.8; # Put your ISP's DNS-server address(es) here. |
|---|
| 44 | timeout=4; # Server timeout; this may be much shorter |
|---|
| 45 | # that the global timeout option. |
|---|
| 46 | uptest=query; # Test if the network interface is active. |
|---|
| 47 | query_test_name="."; |
|---|
| 48 | interval=60s; # Check every 60s. |
|---|
| 49 | purge_cache=off; # Keep stale cache entries in case the ISP's |
|---|
| 50 | # DNS servers go offline. |
|---|
| 51 | edns_query=yes; # Use EDNS for outgoing queries to allow UDP messages |
|---|
| 52 | # larger than 512 bytes. May cause trouble with some |
|---|
| 53 | # legacy systems. |
|---|
| 54 | } |
|---|
| 55 | |
|---|
| 56 | |
|---|
| 57 | |
|---|
| 58 | /* |
|---|
| 59 | # This section is meant for resolving from root servers. |
|---|
| 60 | server { |
|---|
| 61 | label = "root-servers"; |
|---|
| 62 | root_server = discover; # Query the name servers listed below |
|---|
| 63 | # to obtain a full list of root servers. |
|---|
| 64 | randomize_servers = on; # Give every root server an equal chance |
|---|
| 65 | # of being queried. |
|---|
| 66 | ip = 198.41.0.4, # This list will be expanded to the full |
|---|
| 67 | 192.228.79.201; # list on start up. |
|---|
| 68 | timeout = 5; |
|---|
| 69 | uptest = query; # Test availability |
|---|
| 70 | # query_test_name = .; # To be used if remote servers ignore empty queries. |
|---|
| 71 | interval = 30m; # Test every half hour. |
|---|
| 72 | ping_timeout = 300; # Test should time out after 30 seconds. |
|---|
| 73 | purge_cache = off; |
|---|
| 74 | # edns_query = yes; # Use EDNS for outgoing queries to allow UDP messages |
|---|
| 75 | # larger than 512 bytes. May cause trouble with some |
|---|
| 76 | # legacy systems. |
|---|
| 77 | exclude = .localdomain; |
|---|
| 78 | policy = included; |
|---|
| 79 | preset = off; |
|---|
| 80 | } |
|---|
| 81 | */ |
|---|
| 82 | |
|---|
| 83 | source { |
|---|
| 84 | owner=localhost; |
|---|
| 85 | # serve_aliases=on; |
|---|
| 86 | file="/etc/hosts"; |
|---|
| 87 | } |
|---|
| 88 | |
|---|
| 89 | /* |
|---|
| 90 | include {file="/etc/pdnsd.include";} # Read additional definitions from /etc/pdnsd.include. |
|---|
| 91 | */ |
|---|
| 92 | |
|---|
| 93 | rr { |
|---|
| 94 | name=localhost; |
|---|
| 95 | reverse=on; |
|---|
| 96 | a=127.0.0.1; |
|---|
| 97 | owner=localhost; |
|---|
| 98 | soa=localhost,root.localhost,42,86400,900,86400,86400; |
|---|
| 99 | } |
|---|
| 100 | |
|---|
| 101 | /* |
|---|
| 102 | neg { |
|---|
| 103 | name=doubleclick.net; |
|---|
| 104 | types=domain; # This will also block xxx.doubleclick.net, etc. |
|---|
| 105 | } |
|---|
| 106 | */ |
|---|
| 107 | |
|---|
| 108 | /* |
|---|
| 109 | neg { |
|---|
| 110 | name=bad.server.com; # Badly behaved server you don't want to connect to. |
|---|
| 111 | types=A,AAAA; |
|---|
| 112 | } |
|---|
| 113 | */ |
|---|
