Home | History | Annotate | Download | only in etc
History log of /src/etc/named.conf
RevisionDateAuthorComments
 1.14  06-Aug-2025  kim Provide more detail about the edns-udp-size value
 1.13  06-Aug-2025  kim Enable minimal-any and minimal-responses
 1.12  06-Aug-2025  kim Increase edns-udp-size and max-udp-size

Per https://www.dnsflagday.net/2020/
 1.11  07-Mar-2024  christos branches: 1.11.4;
remove obsolete option "dnssec-enable"
 1.10  11-Oct-2020  jnemeth branches: 1.10.6;
Also edns-udp-size.
 1.9  11-Oct-2020  jnemeth Set max-udp-size as per DNS flag day 2020, see
https://www.isc.org/blogs/dns-flag-day-2020-2/ .
 1.8  21-Mar-2020  christos remove obsolete option
 1.7  25-Apr-2013  christos branches: 1.7.22; 1.7.30; 1.7.32;
- read the root keys from our file
- explain what happens if we get clock skew
 1.6  24-Aug-2010  christos branches: 1.6.6; 1.6.12;
Enable dnssec, and populate managed-keys.bind
 1.5  23-Jul-2008  dholland branches: 1.5.2; 1.5.6; 1.5.10;
The default named.conf should not contain a query-source statement.
Comment it out and describe what it's for and why not to use it.
 1.4  23-Mar-2006  itojun branches: 1.4.4; 1.4.6; 1.4.14; 1.4.20; 1.4.24;
disable recursion by attackers (yes, attackers do use recursion to perform DoS).
 1.3  29-Nov-2005  christos set the query source address to 53; with this setup, the vanilla config
file will work in most situations.
 1.2  01-Sep-2005  rpaulo branches: 1.2.2;
Remove the localhost ip6.int example since, as per RFC 4159, ip6.int is
now depreciated.

Discussedon tech-net.
 1.1  30-Aug-2005  tron Move "named.conf" example configuration to "/etc" because that is where
named(8) looks for it. You can now really get a caching name server
by simply setting "named=yes" in "/etc/rc.conf" as documented in
The NetBSD Guide. This fixes PR bin/30662 by Christian Hattemer.
 1.2.2.2  04-Sep-2005  tron Pull up following revision(s) (requested by jwise in ticket #725):
etc/named.conf: revision 1.1
etc/namedb/named.conf: file removal
etc/namedb/Makefile: revision 1.2
etc/Makefile: revision 1.314
distrib/sets/lists/etc/mi: revision 1.159
Move "named.conf" example configuration to "/etc" because that is where
named(8) looks for it. You can now really get a caching name server
by simply setting "named=yes" in "/etc/rc.conf" as documented in
The NetBSD Guide. This fixes PR bin/30662 by Christian Hattemer.
 1.2.2.1  01-Sep-2005  tron file named.conf was added on branch netbsd-3 on 2005-09-04 19:57:50 +0000
 1.4.24.1  18-Sep-2008  wrstuden Sync with wrstuden-revivesa-base-2.
 1.4.20.1  05-Oct-2008  mjf Sync with HEAD.
 1.4.14.1  24-Jul-2008  ghen Pull up following revision(s) (requested by dholland in ticket #1169):
etc/named.conf: revision 1.5
The default named.conf should not contain a query-source statement.
Comment it out and describe what it's for and why not to use it.
 1.4.6.1  04-Sep-2008  skrll Sync with netbsd-4.
 1.4.4.1  24-Jul-2008  ghen Pull up following revision(s) (requested by dholland in ticket #1169):
etc/named.conf: revision 1.5
The default named.conf should not contain a query-source statement.
Comment it out and describe what it's for and why not to use it.
 1.5.10.1  16-Jan-2011  bouyer Pull up following revision(s) (requested by spz in ticket #1528):
etc/named.conf: revision 1.6
etc/mtree/special: revision 1.133
Enable dnssec, and populate managed-keys.bind
Add directory for bind's managed keys.
 1.5.6.1  16-Jan-2011  bouyer Pull up following revision(s) (requested by spz in ticket #1528):
etc/named.conf: revision 1.6
etc/mtree/special: revision 1.133
Enable dnssec, and populate managed-keys.bind
Add directory for bind's managed keys.
 1.5.2.1  16-Jan-2011  bouyer Pull up following revision(s) (requested by spz in ticket #1528):
etc/named.conf: revision 1.6
etc/mtree/special: revision 1.133
Enable dnssec, and populate managed-keys.bind
Add directory for bind's managed keys.
 1.6.12.1  23-Jun-2013  tls resync from head
 1.6.6.1  22-May-2014  yamt sync with head.

for a reference, the tree before this commit was tagged
as yamt-pagecache-tag8.

this commit was splitted into small chunks to avoid
a limitation of cvs. ("Protocol error: too many arguments")
 1.7.32.2  11-Mar-2024  martin Pull up following revision(s) (requested by christos in ticket #1813):

etc/named.conf: revision 1.11
usr.sbin/postinstall/postinstall.in: revision 1.59
external/mpl/bind/dist/lib/isc/netmgr/netmgr-int.h: revision 1.11

Make sure that the extra field is maximally aligned since it is used for
other struct storage.
- fix named.conf (remove dnssec-enable option)
- use proper local variables instead of adding _ or other prefixes.
- centralize rm use
- use grep -q instead of > /dev/null
- reduce constant duplication

remove obsolete option "dnssec-enable"
 1.7.32.1  27-Mar-2020  sborrill Pull up the following revisions(s) (requested by christos in ticket #806):
etc/named.conf: revision 1.8

Stop using obsolete dnssec-lookaside (implies use of dlv.isc.org, which
no longer serves any useful purpose).
 1.7.30.1  08-Apr-2020  martin Merge changes from current as of 20200406
 1.7.22.1  27-Mar-2020  sborrill Pull up the following revisions(s) (requested by christos in ticket #1524):
etc/named.conf: revision 1.8

Stop using obsolete dnssec-lookaside (implies use of dlv.isc.org, which
no longer serves any useful purpose).
 1.10.6.2  08-Aug-2025  martin Pull up following revision(s) (requested by kim in ticket #1147):

etc/named.conf: revision 1.12
etc/named.conf: revision 1.13
etc/named.conf: revision 1.14

Increase edns-udp-size and max-udp-size
Per https://www.dnsflagday.net/2020/

Enable minimal-any and minimal-responses

Provide more detail about the edns-udp-size value
 1.10.6.1  11-Mar-2024  martin Pull up following revision(s) (requested by christos in ticket #622):

etc/named.conf: revision 1.11
usr.sbin/postinstall/postinstall.in: revision 1.59
external/mpl/bind/dist/lib/isc/netmgr/netmgr-int.h: revision 1.11
usr.sbin/postinstall/postinstall.in: revision 1.60
usr.sbin/postinstall/postinstall.in: revision 1.61

Make sure that the extra field is maximally aligned since it is used for
other struct storage.
- fix named.conf (remove dnssec-enable option)
- use proper local variables instead of adding _ or other prefixes.
- centralize rm use
- use grep -q instead of > /dev/null
- reduce constant duplication

no local in loops, simplify eval (thanks kre)

postinstall: fix endless loop (since 2024-03-07)

remove obsolete option "dnssec-enable"
 1.11.4.1  08-Aug-2025  martin Pull up following revision(s) (requested by kim in ticket #5):

etc/named.conf: revision 1.12
etc/named.conf: revision 1.13
etc/named.conf: revision 1.14

Increase edns-udp-size and max-udp-size
Per https://www.dnsflagday.net/2020/

Enable minimal-any and minimal-responses

Provide more detail about the edns-udp-size value

RSS XML Feed