Include Statement - Red Hat ENTERPRISE LINUX 5 - DEPLOYMENT Deployment Manual

Chapter 17. Berkeley Internet Name Domain (BIND)
• localhost — Matches any IP address in use by the local system
• localnets — Matches any IP address on any network to which the local system is connected
• none — Matches no IP addresses
When used in conjunction with other statements (such as the options statement), acl statements
can be very useful in preventing the misuse of a BIND nameserver.
The following example defines two access control lists and uses an options statement to define how
they are treated by the nameserver:
acl black-hats {
10.0.2.0/24; 192.168.0.0/24;
acl red-hats { 10.0.1.0/24;
options {
blackhole { black-hats; };
allow-query { red-hats; };
allow-recursion { red-hats; };
}
This example contains two access control lists, black-hats and red-hats. Hosts in the black-
hats list are denied access to the nameserver, while hosts in the red-hats list are given normal
access.

17.2.1.2. include Statement

The include statement allows files to be included in a named.conf file. In this way, sensitive
configuration data (such as keys) can be placed in a separate file with restrictive permissions.
An include statement takes the following form:
include "<file-name>"
In this statement, <file-name> is replaced with an absolute path to a file.
17.2.1.3. options Statement
The options statement defines global server configuration options and sets defaults for other
statements. It can be used to specify the location of the named working directory, the types of queries
allowed, and much more.
The options statement takes the following form:
options { <option>; [<option>; ...] };
In this statement, the <option> directives are replaced with a valid option.
The following are commonly used options:
allow-query
Specifies which hosts are allowed to query this nameserver. By default, all hosts are allowed to
query. An access control list, or collection of IP addresses or networks, may be used here to allow
only particular hosts to query the nameserver.
206
};
};