diff options
| author | Adam <Adam@anope.org> | 2012-10-24 19:32:26 -0400 |
|---|---|---|
| committer | Adam <Adam@anope.org> | 2012-10-24 19:32:26 -0400 |
| commit | 1057fa842144e84563ddd887beaeaebe8c4f8a47 (patch) | |
| tree | c43d1706df45866d5c13fcfb8333d3ee62bbdfd0 /data/operserv.example.conf | |
| parent | fca9ec085e74efa005dd981f2af2a6d6fd78ce89 (diff) | |
BIND's forward ability did not work as I expected
because it will not forward non recursive queries.
So, added support for SOA, NS, and AXFR requests.
Diffstat (limited to 'data/operserv.example.conf')
| -rw-r--r-- | data/operserv.example.conf | 22 |
1 files changed, 11 insertions, 11 deletions
diff --git a/data/operserv.example.conf b/data/operserv.example.conf index 167d13c04..8a887c5ea 100644 --- a/data/operserv.example.conf +++ b/data/operserv.example.conf @@ -366,21 +366,21 @@ defcon * To use this module you must set a nameserver record for services * so that DNS queries go to services. * - * We recommend you use something similar to BIND's query forwarding - * ability to hide service's IP, provide query caching, and provide - * better fault tolerance. To do this, configure BIND similar to: + * Alternatively, you may use a slave DNS server to hide service's IP, + * provide query caching, and provide better fault tolerance. + * + * To do this using BIND, configure similar to: * - * options { - * dnssec-enable no; - * dnssec-validation no; - * }; * zone "irc.example.com" IN { - * type forward; - * forward first; - * forwarders { 10.0.0.1 port 5353; }; # Where this is the IP and dns:port of services + * type slave; + * masters { 127.0.0.1 port 5353; }; * }; * - * And then set a NS record for irc.example.com. to BIND. + * Where 127.0.0.1:5353 is the IP and port services are listening on. + * We recommend you externally firewall both UDP and TCP to the port + * Anope is listening on. + * + * Finally set a NS record for irc.example.com. to BIND or services. */ #module { name = "os_dns" } #command { service = "OperServ"; name = "DNS"; command = "operserv/dns"; permission = "operserv/dns"; } |
