blob: 6705069e3953e8d83437b11d44cb8848930c89ec (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
|
workers: 1
management:
interface: 127.0.0.1@5000
logging:
level: notice
groups:
- manager
- supervisord
network:
listen:
- interface: 127.0.0.1@5353
views:
- subnets: [127.0.0.0/24]
tags: [t01, t02, t03]
options:
dns64: false
- subnets: [0.0.0.0/0, "::/0"]
answer: refused
- subnets: [10.0.10.0/24]
answer: allow
local-data:
ttl: 60m
nodata: false
root-fallback-addresses:
j.root-servers.net.: ["2001:503:c27::2:30", "192.58.128.30"]
l.root-servers.net.: '199.7.83.42'
m.root-servers.net.: '202.12.27.33'
# root-fallback-addresses-files: root.custom
addresses:
foo.bar: 127.0.0.1
addresses-files:
- /etc/hosts
records: |
example.net. TXT "foo bar"
A 192.168.2.3
A 192.168.2.4
local.example.org AAAA ::1
rules:
- name: custom.example
address: 1.2.3.4
nodata: true
tags: [t01]
- subtree: empty
tags: [ t02 ]
name: [ example1.org ]
- subtree: nxdomain
name: [ sub4.example.org ]
# - file: hosts.custom
# tags: [t02]
# ttl: 10m
# rpz:
# - file: runtime/blocklist.rpz
# tags: [t01, t02]
forward:
- subtree: '.'
options:
dnssec: true
authoritative: false
servers:
- address: [2001:148f:fffe::1, 185.43.135.1]
transport: tls
hostname: odvr.nic.cz
- address: [ 192.0.2.1, 192.0.2.2 ]
transport: tls
pin-sha256:
- d6qzRu9zOECb90Uez27xWltNsj0e1Md7GkYYkVoZWmM=
- E9CZ9INDbd+2eRQozYqqbQ2yXLVKB9+xcprMF+44U1g=
- subtree: 1.168.192.in-addr.arpa
options:
dnssec: false
servers: [ 192.0.2.1@5353 ]
|
