@@ -630,9 +630,9 @@ options
630630 datasize default;
631631 datasize unlimited;
632632 deallocate-on-exit no; // ancient
633- deny-answer-addresses { example.net; 127.0.0.1/8; };
633+ deny-answer-addresses { " example.net" ; 127.0.0.1/8; };
634634 deny-answer-addresses { "example.net"; };
635- deny-answer-addresses { acl_ntwk; };
635+ deny-answer-addresses { " acl_ntwk" ; };
636636 deny-answer-addresses { 123.123.123.123; };
637637 deny-answer-addresses { 123.123.123.123; } except-from { "localhost"; 1.2.3.4; };
638638 deny-answer-addresses { 123.123.123.123; }
@@ -645,7 +645,7 @@ options
645645 1.2.3.4;
646646 };
647647 deny-answer-aliases { "example.net"; };
648- deny-answer-aliases { acl_ntwk; };
648+ deny-answer-aliases { " acl_ntwk" ; };
649649 deny-answer-aliases { "example.org"; } except-from { "localhost"; 1.2.3.4; };
650650 deny-answer-aliases { "cname.example.com."; }
651651 except from {
@@ -664,13 +664,14 @@ options
664664 dns64 fe08::1/5 { mapped { any; }; }; // default
665665 dns64 fe08::1/5 { recursive-only no; }; // default
666666 dns64 fe08::1/5 {
667- break-dnssec yes;
668- recursive-only no;
669- suffix ::ffff:0.0.0.0/96;
670- exclude { ff::; };
671- mapped { none; };
672- recursive-only yes;
673- };
667+ break-dnssec yes ;
668+ recursive-only no ;
669+ suffix ::ffff:0.0.0.0/96 ;
670+ suffix ::ffff:0.0.0.0/96 ;
671+ exclude { ff:: ; } ;
672+ mapped { none; } ;
673+ recursive-only yes ;
674+ } ;
674675 dns64-contact "test.example.org";
675676 dns64-server 'test.example.net.';
676677 dnskey-sig-validity 1;
@@ -704,14 +705,13 @@ options
704705 dnstap-identity example.com;
705706 dnstap-output unix quotedstring size unlimited version unlimited suffix increment;
706707 dnstap-output
707- unix quotedstring
708+ unix " quotedstring"
708709 size unlimited
709- version unlimited
710- suffix increment;
710+ versions unlimited suffix increment;
711711 dnstap-output
712712 file "/var/run/bind/dnstap-out.sock"
713713 size unlimited
714- version unlimited
714+ versions unlimited
715715 suffix increment;
716716 dnstap-version none;
717717 dnstap-version quoted_string;
@@ -756,7 +756,7 @@ options
756756 glue-cache yes;
757757 has-old-clients no; // ancient
758758 heartbeat-interval 40320;
759- host-statistics "/tmp/junk" ;
759+ host-statistics no ;
760760 host-statistics-max 15;
761761 hostname none;
762762 inline-signing yes;
@@ -800,6 +800,7 @@ include "/var/lib/dhcp/bind-listen-on-ip.conf";
800800 max-transfer-time-in 100;
801801 max-transfer-time-out 100;
802802 max-udp-size 1490;
803+ max-udp-size 490;
803804 max-zone-ttl 123123;
804805 max-zone-ttl unlimited;
805806 memstatistics yes;
@@ -985,7 +986,7 @@ include "/var/lib/dhcp/bind-listen-on-ip.conf";
985986 treat-cr-as-space no; // ancient
986987 trust-anchor-telemetry true;
987988 try-tcp-refresh true;
988- # trust-anchors { example.net initial-ds 1 1 1 yes; };
989+ trust-anchors { example.net initial-ds 1 1 1 yes; };
989990 update-check-ksk true;
990991 use-alt-transfer-source yes;
991992 use-id-pool no; // ancient
@@ -1016,15 +1017,16 @@ server 192.1.2.324/24 {
10161017 edns yes;
10171018 edns-version 15;
10181019 keys key_id;
1019- max-udp-size 4096;
1020+ max-udp-size 4096
1021+ max-udp-size x096xx
10201022 notify-source 1.1.1.1 port * dscp 53;
10211023 notify-source-v6 ff08::1 port * dscp 53;
10221024 padding 1490;
10231025 provide-ixfr no;
10241026 query-source 1.1.1.1 port * dscp 53;
10251027 query-source-v6 ff08::1 port * dscp 53;
10261028 request-expire yes;
1027- request-ixfr yes;
1029+ request-ixfr yes;
10281030 request-nsid yes;
10291031 request-sit no; // obsolete
10301032 send-cookie yes;
@@ -1035,7 +1037,7 @@ server 192.1.2.324/24 {
10351037 transfer-source * port * dscp 63;
10361038 transfer-source-v6 fe80:1::127.0.0.1 port * dscp 63;
10371039 transfer-source-v6 fe08:1::127.0.0.1 port 53;
1038- transfers 15;
1040+ transfers 15;
10391041};
10401042
10411043statistics-channels {
@@ -1160,6 +1162,23 @@ view "redview" {
11601162 dnssec-update-mode no-resign;
11611163 dnssec-validation True;
11621164 dnstap { all; };
1165+ dnstap { all query; };
1166+ dnstap { all response; };
1167+ dnstap { auth; };
1168+ dnstap { auth query; };
1169+ dnstap { auth response; };
1170+ dnstap { client; };
1171+ dnstap { client query; };
1172+ dnstap { client response; };
1173+ dnstap { forwarder; };
1174+ dnstap { forwarder query; };
1175+ dnstap { forwarder response; };
1176+ dnstap { resolver; };
1177+ dnstap { resolver query; };
1178+ dnstap { resolver response; };
1179+ dnstap { update; };
1180+ dnstap { update query; };
1181+ dnstap { update response; };
11631182 dual-stack-servers { example.com; } ;
11641183 dual-stack-servers port 123{example.com ;} ;
11651184 dual-stack-servers { example.com port 11111; };
@@ -1216,11 +1235,17 @@ view "redview" {
12161235 max-refresh-time 53;
12171236 max-retry-time 53;
12181237 max-stale-ttl 53;
1219- max-transfer-idle-in 53;
1238+ max-transfer-idle-in 53; // my inline comment seems to work now.
12201239 max-transfer-idle-out 53;
12211240 max-transfer-time-in 53;
12221241 max-transfer-time-out 53;
1223- max-udp-size 53;
1242+ max-udp-size 4096;
1243+ max-udp-size 1024;
1244+ max-udp-size 512;
1245+ max-udp-size 0;
1246+ max-udp-size 1;
1247+ max-udp-size 4097;
1248+ max-udp-size x;
12241249 max-zone-ttl unlimited;
12251250 message-compression no;
12261251 min-cache-ttl 53;
0 commit comments