|
1 | 1 | bind: |
2 | 2 | configured_acls: # We have an internal ACL restricted to our |
3 | | - internal: # private IP ranges. |
4 | | - - 127.0.0.0/8 # In this case, an ACL for external isn't needed |
5 | | - - 10.0.0.0/8 # as that view will be matched by 'any'. |
| 3 | + internal: # private IP range. |
| 4 | + - 10.0.0.0/8 # In this case, an ACL for external isn't needed |
| 5 | + # as that view will be matched by 'any'. |
6 | 6 |
|
7 | 7 | # Notice that there is no 'configured_zones' at this indentation level. |
8 | 8 | # That is because when you are using views, the bind service forces all zones to be served via a view. |
9 | 9 | # |
10 | 10 | # Also note - any other zones defined in any other conf files will either need to be commented out, or |
11 | 11 | # also served via a view using a file include. If you have other zones being served outside of a view, bind will |
12 | | - # fail to start. |
| 12 | + # fail to start and give you an error message indicating this. You will likely find these externally-defined zones |
| 13 | + # in /etc/named.conf and /etc/named.conf.local |
13 | 14 |
|
14 | 15 | configured_views: |
15 | | - external: |
| 16 | + external: # A view called 'external' to match anything except the 'internal' ACL. |
16 | 17 | match_clients: |
17 | 18 | - any # This will match anything, including the public internet. |
18 | 19 | configured_zones: |
|
25 | 26 | notify: False |
26 | 27 | dnssec: False |
27 | 28 |
|
28 | | - internal: |
| 29 | + internal: # The 'internal' view that is restricted to the 'internal' ACL. |
29 | 30 | match_clients: |
30 | 31 | - internal # This will match only our ACL named 'internal'. |
31 | 32 | configured_zones: |
|
39 | 40 | dnssec: False |
40 | 41 |
|
41 | 42 | available_zones: |
42 | | - external.mydomain.com: # Beginning of the external zone definition. |
| 43 | + external.mydomain.com: # Beginning of the 'external' zone definition. |
43 | 44 | file: external.mydomain.com.txt # The file in which to save this zone's record set - matches the file |
44 | 45 | # specified in the 'external' view. |
45 | 46 |
|
|
67 | 68 | login: portal.mydomain.com. |
68 | 69 | dashboard: www.mydomain.com. |
69 | 70 |
|
70 | | - internal.mydomain.com: # Beginning of the internal zone definition. |
| 71 | + internal.mydomain.com: # Beginning of the 'internal' zone definition. |
71 | 72 | file: internal.mydomain.com.txt # The file in which to save this zone's record set - matches the file |
72 | 73 | # specified in the 'internal' view. |
73 | 74 |
|
|
83 | 84 | ttl: 8600 # Optional. Not set by default |
84 | 85 | records: # Records for the zone, grouped by type |
85 | 86 | A: |
86 | | - portal: 10.0.0.10 |
87 | | - gateway: 10.0.0.11 |
| 87 | + portal: 10.0.0.10 # Here we serve all private IPs as opposed to the public IPs |
| 88 | + gateway: 10.0.0.11 # in the external zone. |
88 | 89 | directory: 10.0.0.12 |
89 | 90 | ns1: 10.0.0.13 |
90 | 91 | www: 10.0.0.14 |
|
0 commit comments