summaryrefslogtreecommitdiff
path: root/data/operserv.example.conf
diff options
context:
space:
mode:
authorAdam <Adam@anope.org>2012-10-24 19:32:26 -0400
committerAdam <Adam@anope.org>2012-10-24 19:32:26 -0400
commit1057fa842144e84563ddd887beaeaebe8c4f8a47 (patch)
treec43d1706df45866d5c13fcfb8333d3ee62bbdfd0 /data/operserv.example.conf
parentfca9ec085e74efa005dd981f2af2a6d6fd78ce89 (diff)
BIND's forward ability did not work as I expected
because it will not forward non recursive queries. So, added support for SOA, NS, and AXFR requests.
Diffstat (limited to 'data/operserv.example.conf')
-rw-r--r--data/operserv.example.conf22
1 files changed, 11 insertions, 11 deletions
diff --git a/data/operserv.example.conf b/data/operserv.example.conf
index 167d13c04..8a887c5ea 100644
--- a/data/operserv.example.conf
+++ b/data/operserv.example.conf
@@ -366,21 +366,21 @@ defcon
* To use this module you must set a nameserver record for services
* so that DNS queries go to services.
*
- * We recommend you use something similar to BIND's query forwarding
- * ability to hide service's IP, provide query caching, and provide
- * better fault tolerance. To do this, configure BIND similar to:
+ * Alternatively, you may use a slave DNS server to hide service's IP,
+ * provide query caching, and provide better fault tolerance.
+ *
+ * To do this using BIND, configure similar to:
*
- * options {
- * dnssec-enable no;
- * dnssec-validation no;
- * };
* zone "irc.example.com" IN {
- * type forward;
- * forward first;
- * forwarders { 10.0.0.1 port 5353; }; # Where this is the IP and dns:port of services
+ * type slave;
+ * masters { 127.0.0.1 port 5353; };
* };
*
- * And then set a NS record for irc.example.com. to BIND.
+ * Where 127.0.0.1:5353 is the IP and port services are listening on.
+ * We recommend you externally firewall both UDP and TCP to the port
+ * Anope is listening on.
+ *
+ * Finally set a NS record for irc.example.com. to BIND or services.
*/
#module { name = "os_dns" }
#command { service = "OperServ"; name = "DNS"; command = "operserv/dns"; permission = "operserv/dns"; }