/etc/named.conf (for a caching and forwarding nameserver)

Download /etc/named.conf (caching and forwarding)

//
// named.conf for caching, gcaw.org forwarding, name server
//
// WARNING!!  If running in chroot jail, be sure to copy /etc/named.conf
// into your jail (usually /var/named/chroot/etc/named.conf) after
// every change.  See /etc/sysconfig/named to see if it is configured
// to use a chroot jail.

options {
	directory "/var/named";
	dump-file "/var/named/data/cache_dump.db";
        statistics-file "/var/named/data/named_stats.txt";
	/*
	 * If there is a firewall between you and nameservers you want
	 * to talk to, you might need to uncomment the query-source
	 * directive below.  Previous versions of BIND always asked
	 * questions using port 53, but BIND 8.1 uses an unprivileged
	 * port by default.
	 */
	  query-source address * port 53;
};

controls {
	inet 127.0.0.1 allow { localhost; } keys { rndckey; };
};

logging {
    channel "security" { syslog authpriv; severity info; };
    channel "named" { syslog local2; };
    category security {  "security"; "named"; };
    category  default { "named"; };
};

zone "." IN {
	type hint;
	file "named.ca";
};

zone "localdomain" IN {
	type master;
	file "localdomain.zone";
	allow-update { none; };
};

zone "gcaw.org" IN {
       type forward;
       forwarders { 10.41.87.250; };
       forward only;
};

zone "localhost" IN {
	type master;
	file "localhost.zone";
	allow-update { none; };
};

zone "0.0.127.in-addr.arpa" IN {
	type master;
	file "named.local";
	allow-update { none; };
};

zone "0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ip6.arpa" IN {
        type master;
	file "named.ip6.local";
	allow-update { none; };
};

zone "255.in-addr.arpa" IN {
	type master;
	file "named.broadcast";
	allow-update { none; };
};

zone "0.in-addr.arpa" IN {
	type master;
	file "named.zero";
	allow-update { none; };
};

include "/etc/rndc.key";