Thank you Greg<div><br></div><div>I'm a NetBSD user also, from 1.5 and love it.</div><div><br></div><div>Thank you for you config.</div><div><br></div><div>Regards.<br><br><div class="gmail_quote">On Tue, Oct 11, 2011 at 3:42 PM, Greg A. Woods <span dir="ltr"><<a href="mailto:woods@planix.ca">woods@planix.ca</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;">At Tue, 11 Oct 2011 14:51:01 -0500, ficovh Valladolid <<a href="mailto:ficovh@gmail.com">ficovh@gmail.com</a>> wrote:<br>
Subject: [nsd-users] First post in the list<br>
<div class="im">><br>
> I'm a BSD User, and are experimenting NSD in a OpenBSD box: anyone have<br>
> samples or config for setting NSD on OpenBSD ?<br>
> Anyone are using it on BSD succesfully ?<br>
<br>
</div>I'm using NSD successfully on NetBSD, and have been doing so for some<br>
time now, and in several different settings.<br>
<br>
I think for the most part any differences between OpenBSD and NetBSD are<br>
irrelevant for use of NSD.<br>
<br>
I'm building and installing NSD from NetBSD pkgsrc (more or less -- I<br>
have local patches to fix a few cosmetic issues with the pkgsrc module<br>
itself and add features to the rc.d script, but no local patches to the<br>
NSD code).<br>
<br>
I append the following two lines to /etc/daily.local:<br>
<br>
# do daily flush of /var/db/nsd/nsd-ixfrd.db<br>
su -m nsd -c '/usr/pkg/sbin/nsdc patch'<br>
<br>
----------------------------------------<br>
#<br>
# nsd.conf -- the NSD(8) configuration file, nsd.conf(5).<br>
#<br>
<br>
# global options for the nsd server<br>
#<br>
server:<br>
# uncomment to specify specific interfaces to bind (default all).<br>
#ip-address: 1.2.3.4<br>
#ip-address: 12fe::8ef0<br>
ip-address: 204.92.254.5<br>
<br>
# port to answer queries on. default is 53.<br>
#port: 53<br>
<br>
# listen only on IPv4 connections<br>
ip4-only: yes<br>
<br>
# listen only on IPv6 connections<br>
# ip6-only: no<br>
<br>
# the database to use.<br>
database: "/var/db/nsd/nsd.db"<br>
<br>
# whether or not to hide the server's identity (not necessary!)<br>
hide-version: no<br>
<br>
# log messages to file. Default to stderr and syslog.<br>
#logfile: "/var/log/nsd.log"<br>
<br>
# Number of NSD servers to fork.<br>
#server-count: 1<br>
<br>
# Maximum number of concurrent TCP connections per server.<br>
tcp-count: 100<br>
<br>
# File to store pid for nsd in.<br>
#pidfile: "/var/run/nsd.pid"<br>
<br>
# statistics are produced every number of seconds.<br>
statistics: 3600<br>
<br>
# After binding socket, drop user privileges.<br>
# can be a username, id or id.gid.<br>
username: nsd<br>
<br>
# The directory for zonefile: files.<br>
#zonesdir: "/etc/nsd"<br>
<br>
# The file where incoming zone transfers are stored.<br>
# run nsd-patch to update zone files, then you can safely delete it.<br>
difffile: "/var/db/nsd/nsd-ixfr.db"<br>
<br>
# The file where secondary zone refresh and expire timeouts are kept.<br>
# If you delete this file, all secondary zones are forced to be<br>
# 'refreshing' (as if nsd got a notify).<br>
xfrdfile: "/var/db/nsd/nsd-xfrd.state"<br>
<br>
# Number of seconds between reloads triggered by xfrd.<br>
#xfrd-reload-timeout: 10<br>
<br>
# Verbosity level.<br>
verbosity: 2<br>
<br>
# the following zones should be in every nameserver as per RFC 1912<br>
#<br>
# They have no secondaries, and provide no notifies (but are freely<br>
# transferable). These zones are most critical in caching resolvers<br>
# and fowarders, but may still provide some benefit in<br>
# authoritative-only nameservers.<br>
#<br>
zone:<br>
name: "0.in-addr.arpa"<br>
zonefile: "master/0"<br>
provide-xfr: <a href="http://0.0.0.0/0" target="_blank">0.0.0.0/0</a> NOKEY<br>
#<br>
zone:<br>
name: "255.in-addr.arpa"<br>
zonefile: "master/255"<br>
provide-xfr: <a href="http://0.0.0.0/0" target="_blank">0.0.0.0/0</a> NOKEY<br>
#<br>
# the ipv4 loopback forward and reverse-lookup zones...<br>
#<br>
# a "top-level" domain to name the loopback interface(s)...<br>
#<br>
zone:<br>
name: "localhost"<br>
zonefile: "master/localhost"<br>
provide-xfr: <a href="http://0.0.0.0/0" target="_blank">0.0.0.0/0</a> NOKEY<br>
#<br>
# The 127/8 reverse zones also provide a pedantic example of how<br>
# reverse zones for class-A and class-B subnets should be delegated so<br>
# that you can manage each sub-zone from a separate file...<br>
#<br>
zone:<br>
name: "127.IN-ADDR.ARPA"<br>
zonefile: "master/127"<br>
provide-xfr: <a href="http://0.0.0.0/0" target="_blank">0.0.0.0/0</a> NOKEY<br>
#<br>
zone:<br>
name: "0.127.IN-ADDR.ARPA"<br>
zonefile: "master/127.0"<br>
provide-xfr: <a href="http://0.0.0.0/0" target="_blank">0.0.0.0/0</a> NOKEY<br>
#<br>
zone:<br>
name: "0.0.127.IN-ADDR.ARPA"<br>
zonefile: "master/127.0.0"<br>
provide-xfr: <a href="http://0.0.0.0/0" target="_blank">0.0.0.0/0</a> NOKEY<br>
#<br>
zone:<br>
name: "255.127.IN-ADDR.ARPA"<br>
zonefile: "master/127.255"<br>
provide-xfr: <a href="http://0.0.0.0/0" target="_blank">0.0.0.0/0</a> NOKEY<br>
#<br>
zone:<br>
name: "255.255.127.IN-ADDR.ARPA"<br>
zonefile: "master/127.255.255"<br>
provide-xfr: <a href="http://0.0.0.0/0" target="_blank">0.0.0.0/0</a> NOKEY<br>
<br>
<br>
# the rest of the configuration is included from separate files for<br>
# easier maintenance -- i.e. this file can be updated independently of<br>
# whatever zones this server handles.<br>
#<br>
include: "/etc/nsd/nsd-keys.conf"<br>
<br>
include: "/etc/nsd/nsd-master.conf"<br>
<br>
include: "/etc/nsd/nsd-slave.conf"<br>
<br>
----------------------------------------<br>
#<br>
# nsd-keys.conf<br>
#<br>
# currently empty....<br>
----------------------------------------<br>
#<br>
# nsd-master.conf<br>
#<br>
# public zones for which this server is auth<br>
#<br>
zone:<br>
name: "<a href="http://weird.ca" target="_blank">weird.ca</a>"<br>
zonefile: "master/<a href="http://weird.ca" target="_blank">weird.ca</a>"<br>
provide-xfr: <a href="http://0.0.0.0/0" target="_blank">0.0.0.0/0</a> NOKEY<br>
<br>
# ... and so on ...<br>
----------------------------------------<br>
#<br>
# nsd-slave.conf<br>
#<br>
# public zones which this server slaves from some other master<br>
#<br>
zone:<br>
name: "PhaedraV.com"<br>
zonefile: "/var/db/nsd/PhaedraV.com"<br>
allow-notify: 216.138.231.224 NOKEY<br>
request-xfr: 216.138.231.224 NOKEY<br>
allow-notify: 127.0.0.1 NOKEY<br>
allow-notify: 204.92.254.5 NOKEY<br>
provide-xfr: <a href="http://0.0.0.0/0" target="_blank">0.0.0.0/0</a> NOKEY<br>
outgoing-interface: 204.92.254.5<br>
<br>
# ... and so on ...<br>
----------------------------------------<br>
<br>
And here are the necessary master files, suitable for use at any and all<br>
sites, as a shell archive:<br>
<br>
# This is a shell archive. Save it in a file, remove anything before<br>
# this line, and then unpack it by entering "sh file". Note, it may<br>
# create directories; files and directories will be owned by you and<br>
# have default permissions.<br>
#<br>
# This archive contains:<br>
#<br>
# 0<br>
# 255<br>
# localhost<br>
# 127<br>
# 127.0<br>
# 127.0.0<br>
# 127.255<br>
# 127.255.255<br>
#<br>
echo x - 0<br>
sed 's/^X//' >0 << 'END-of-0'<br>
X;#ident "@(#)namedb/master:$Id$"<br>
X<br>
X$TTL 6w ; the default TTL for all records listed in this file<br>
X<br>
X;$ORIGIN 0.IN-ADDR.ARPA.<br>
X@ IN SOA localhost. hostmaster.localhost. (<br>
X 2001092700 ; Serial number (yyyymmddhh)<br>
X 8h ; Refresh Interval<br>
X 2h ; Refresh Retry Interval<br>
X 24w ; Expire time (24w max for BIND-8.2.3)<br>
X 8h ) ; negative response TTL<br>
X IN NS localhost.<br>
X IN TXT "To stop bogus queries for net 0, as per RFC 1912."<br>
X<br>
X; there should be no other records in here.<br>
END-of-0<br>
echo x - 255<br>
sed 's/^X//' >255 << 'END-of-255'<br>
X;#ident "@(#)namedb:$Id$"<br>
X<br>
X$TTL 6w ; the default TTL for all records listed in this file<br>
X<br>
X;$ORIGIN 255.IN-ADDR.ARPA.<br>
X@ IN SOA localhost. hostmaster.localhost. (<br>
X 2001092700 ; Serial number (yyyymmddhh)<br>
X 8h ; Refresh Interval<br>
X 2h ; Refresh Retry Interval<br>
X 24w ; Expire time (24w max for BIND-8.2.3)<br>
X 8h ) ; negative response TTL<br>
X IN NS localhost.<br>
X IN TXT "To stop bogus queries for net 255, as per RFC 1912."<br>
X<br>
X; there should be no other records in here.<br>
END-of-255<br>
echo x - localhost<br>
sed 's/^X//' >localhost << 'END-of-localhost'<br>
X;#ident "@(#)namedb/master:$Id$"<br>
X<br>
X$TTL 24w ; the default TTL for all records listed in this file<br>
X<br>
X;$ORIGIN localhost.<br>
X@ IN SOA localhost. hostmaster.localhost. (<br>
X 2003073113 ; Serial number (yyyymmddhh)<br>
X 8h ; Refresh Interval<br>
X 2h ; Refresh Retry Interval<br>
X 24w ; Expire time (24w max for BIND-8.2.3)<br>
X 16h ) ; negative response TTL<br>
X IN NS localhost.<br>
X IN A 127.0.0.1 ; as per RFC 1912<br>
X IN AAAA ::1<br>
X IN HINFO VIRTUAL UNKNOWN<br>
X IN TXT "The default loopback interface"<br>
X<br>
X; these names in the localhost zone are for RFC-1101 network names<br>
X<br>
Xloopback-net IN A 127.0.0.0<br>
X IN HINFO NETWORK NONE<br>
X IN TXT "The default IPv4 loopback network"<br>
X<br>
Xloopback-bcast IN A 127.255.255.255<br>
X IN HINFO NETWORK NONE<br>
X IN TXT "The default IPv4 loopback broadcast address (unused in most stacks)."<br>
X<br>
X; there can be no other records in here.<br>
END-of-localhost<br>
echo x - 127<br>
sed 's/^X//' >127 << 'END-of-127'<br>
X;#ident "@(#)namedb/master:$Id$"<br>
X<br>
X$TTL 6w ; the default TTL for all records listed in this file<br>
X<br>
X;$ORIGIN 127.IN-ADDR.ARPA.<br>
X@ IN SOA localhost. hostmaster.localhost. (<br>
X 2001092700 ; Serial number (yyyymmddhh)<br>
X 8h ; Refresh Interval<br>
X 2h ; Refresh Retry Interval<br>
X 24w ; Expire time (24w max for BIND-8.2.3)<br>
X 8h ) ; negative response TTL<br>
X IN NS localhost.<br>
X IN TXT "The IPv4 LOOPBACK net reverse parent zone."<br>
X<br>
X; delegate sub-zones<br>
X0 IN NS localhost.<br>
X255 IN NS localhost.<br>
END-of-127<br>
echo x - 127.0<br>
sed 's/^X//' >127.0 << 'END-of-127.0'<br>
X;#ident "@(#)namedb/master:$Id$"<br>
X<br>
X$TTL 6w ; the default TTL for all records listed in this file<br>
X<br>
X;$ORIGIN 0.127.IN-ADDR.ARPA.<br>
X@ IN SOA localhost. hostmaster.localhost. (<br>
X 2001092700 ; Serial number (yyyymmddhh)<br>
X 8h ; Refresh Interval<br>
X 2h ; Refresh Retry Interval<br>
X 24w ; Expire time (24w max for BIND-8.2.3)<br>
X 8h ) ; negative response TTL<br>
X IN NS localhost.<br>
X IN TXT "The IPv4 LOOPBACK net intermediate reverse zone."<br>
X<br>
X; delegate sub-zone(s)<br>
X0 IN NS localhost.<br>
END-of-127.0<br>
echo x - 127.0.0<br>
sed 's/^X//' >127.0.0 << 'END-of-127.0.0'<br>
X;#ident "@(#)namedb/master:$Id$"<br>
X<br>
X$TTL 24w ; the default TTL for all records listed in this file<br>
X<br>
X;$ORIGIN 0.0.127.IN-ADDR.ARPA.<br>
X@ IN SOA localhost. hostmaster.localhost. (<br>
X 2003073113 ; Serial number (yyyymmddhh)<br>
X 8h ; Refresh Interval<br>
X 2h ; Refresh Retry Interval<br>
X 24w ; Expire time (24w max for BIND-8.2.3)<br>
X 16h ) ; negative response TTL<br>
X IN NS localhost.<br>
X IN TXT "The IPv4 LOOPBACK net reverse zone."<br>
X<br>
X; reverse lookup for the loopback network interface and its RFC-1101<br>
X; network name, as well as an A RR that gives the netmask:<br>
X;<br>
X0 IN PTR loopback-net.localhost.<br>
X IN A 255.0.0.0<br>
X IN TXT "The loopback interface network and its netmask."<br>
X<br>
X; NOTE: do NOT create a "localhost.your.domain" vanity A record -- use a CNAME instead!<br>
X;<br>
X1 IN PTR localhost.<br>
X IN TXT "The pointer to _the_ canonical localhost."<br>
X<br>
X; there can be no other records in this zone.<br>
END-of-127.0.0<br>
echo x - 127.255<br>
sed 's/^X//' >127.255 << 'END-of-127.255'<br>
X;#ident "@(#)namedb:$Id$"<br>
X<br>
X$TTL 6w ; the default TTL for all records listed in this file<br>
X<br>
X;$ORIGIN 255.127.IN-ADDR.ARPA.<br>
X@ IN SOA localhost. hostmaster.localhost. (<br>
X 2001092700 ; Serial number (yyyymmddhh)<br>
X 8h ; Refresh Interval<br>
X 2h ; Refresh Retry Interval<br>
X 24w ; Expire time (24w max for BIND-8.2.3)<br>
X 8h ) ; negative response TTL<br>
X IN NS localhost.<br>
X IN TXT "The IPv4 LOOPBACK net's intermediate broadcast reverse zone."<br>
X<br>
X; delegate sub-zones<br>
X255 IN NS localhost.<br>
END-of-127.255<br>
echo x - 127.255.255<br>
sed 's/^X//' >127.255.255 << 'END-of-127.255.255'<br>
X;#ident "@(#)namedb/master:$Id$"<br>
X<br>
X$TTL 6w ; the default TTL for all records listed in this file<br>
X<br>
X;$ORIGIN 255.255.127.IN-ADDR.ARPA.<br>
X@ IN SOA localhost. hostmaster.localhost. (<br>
X 2001092700 ; Serial number (yyyymmddhh)<br>
X 8h ; Refresh Interval<br>
X 2h ; Refresh Retry Interval<br>
X 24w ; Expire time (24w max for BIND-8.2.3)<br>
X 8h ) ; negative response TTL<br>
X IN NS localhost.<br>
X IN TXT "The IPv4 LOOPBACK net's broadcast reverse zone."<br>
X<br>
X255 PTR loopback-bcast.localhost.<br>
X IN TXT "The loopback network broadcast (usually unused)."<br>
END-of-127.255.255<br>
exit<br>
<font color="#888888"><br>
<br>
<br>
<br>
--<br>
Greg A. Woods<br>
Planix, Inc.<br>
<br>
<<a href="mailto:woods@planix.com">woods@planix.com</a>> <a href="tel:%2B1%20250%20762-7675" value="+12507627675">+1 250 762-7675</a> <a href="http://www.planix.com/" target="_blank">http://www.planix.com/</a><br>
</font><br>_______________________________________________<br>
nsd-users mailing list<br>
nsd-users@NLnetLabs.nl<br>
<a href="http://open.nlnetlabs.nl/mailman/listinfo/nsd-users" target="_blank">http://open.nlnetlabs.nl/mailman/listinfo/nsd-users</a><br>
<br></blockquote></div><br><br clear="all"><div><br></div>-- <br>Francisco Valladolid H.<br> -- <a href="http://blog.bsdguy.net" target="_blank">http://blog.bsdguy.net</a> - Jesus Christ follower.<br>
</div>