genzone: A hook for hacks; do not forget to remove *.new

[nsc-5.git] / cf.dist / domains

diff --git a/cf.dist/domains b/cf.dist/domains
index 3933d4537c72150871cc3df4795a5033e0271b7c..4ec0d214bfc19694a43d8dbd608a7c9a885def92 100644 (file)
--- a/cf.dist/domains
+++ b/cf.dist/domains
@@ -1,14 +1,40 @@
 ; An example domain table for the NSC
 
 ; An example domain table for the NSC
 

+; If you do not want to use DNSSEC, please remove the lines
+; commented with "; DNSSEC".
+

 ; Various mandatory things required by RFC 1912, section 4.1
 PRIMARY(localhost)
 ; Various mandatory things required by RFC 1912, section 4.1
 PRIMARY(localhost)

-REVERSE(0)
-REVERSE(255)

 REVERSE(127.0.0, localhost)
 
 REVERSE(127.0.0, localhost)
 

+; Blackhole zones recommended by RFC 6303
+BLACKHOLE(REV(0))                      ; IPv4 reserved net
+BLACKHOLE(REV(127))                    ; IPv4 loopback net
+BLACKHOLE(REV(169.254))                        ; IPv4 link-local
+BLACKHOLE(REV(192.0.2))                        ; IPv4 test
+BLACKHOLE(REV(198.51.100))             ; IPv4 test
+BLACKHOLE(REV(203.0.113))              ; IPv4 test
+BLACKHOLE(REV(255.255.255.255))                ; IPv4 broadcast
+BLACKHOLE(REV(::1/128))                        ; IPv6 loopback
+BLACKHOLE(REV(::0/128))                        ; IPv6 unspecified
+BLACKHOLE(REV(fd00::/8))               ; IPv6 locally assigned
+BLACKHOLE(REV(fe80::/12))              ; IPv6 link-local
+BLACKHOLE(REV(fe90::/12))
+BLACKHOLE(REV(fea0::/12))
+BLACKHOLE(REV(feb0::/12))
+BLACKHOLE(REV(2001:0db8::/32))         ; IPv6 example prefix
+
+; Blackhole zones for site-local addresses recommended by RFC 6303
+BLACKHOLE(REV(10))
+nsc_forloop(`i', 16, 31, `BLACKHOLE(REV(172.i))')
+BLACKHOLE(REV(192.168))
+

 ; A pretty normal example domain (we act as a primary nameserver for it)
 
 ; A pretty normal example domain (we act as a primary nameserver for it)
 

+DNSSEC(`                       ; DNSSEC

 PRIMARY(example.com)
 PRIMARY(example.com)

+DSFOR(a.example.com)           ; DNSSEC
+')                             ; DNSSEC

 
 ; It also has a couple of sub-domains and one of them resides on another server
 
 
 ; It also has a couple of sub-domains and one of them resides on another server
 


@@ -29,8 +55,10 @@ ZONE_OPTIONS()
 ; Here are reverse delegations for two networks. NSC automatically creates
 ; the PTR records from A records in all mentioned zones. See cf/{0,1}.0.10.
 
 ; Here are reverse delegations for two networks. NSC automatically creates
 ; the PTR records from A records in all mentioned zones. See cf/{0,1}.0.10.
 

+DNSSEC(`                       ; DNSSEC

 REVERSE(10.0.0, example.com, a.example.com)
 REVERSE(10.1.0, example.com, a.example.com, ip6.example.com)
 REVERSE(10.0.0, example.com, a.example.com)
 REVERSE(10.1.0, example.com, a.example.com, ip6.example.com)

+')                             ; DNSSEC

 
 ; You can even have reverse zones for larger networks
 
 
 ; You can even have reverse zones for larger networks