X-Git-Url: http://mj.ucw.cz/gitweb/?a=blobdiff_plain;f=cf.dist%2Fdomains;h=e1be8a8d447ff37732e4fabe0c9fe84edf9bf9f5;hb=5e15d5081f974dad3c4ada98818c5dc10af13686;hp=3933d4537c72150871cc3df4795a5033e0271b7c;hpb=5fdd42ff7477dba312833e956e45e375184c033a;p=nsc-5.git

diff --git a/cf.dist/domains b/cf.dist/domains
index 3933d45..e1be8a8 100644
--- a/cf.dist/domains
+++ b/cf.dist/domains
@@ -2,10 +2,30 @@
 
 ; Various mandatory things required by RFC 1912, section 4.1
 PRIMARY(localhost)
-REVERSE(0)
-REVERSE(255)
 REVERSE(127.0.0, localhost)
 
+; Blackhole zones recommended by RFC 6303
+BLACKHOLE(REV(0))			; IPv4 reserved net
+BLACKHOLE(REV(127))			; IPv4 loopback net
+BLACKHOLE(REV(169.254))			; IPv4 link-local
+BLACKHOLE(REV(192.0.2))			; IPv4 test
+BLACKHOLE(REV(198.51.100))		; IPv4 test
+BLACKHOLE(REV(203.0.113))		; IPv4 test
+BLACKHOLE(REV(255.255.255.255))		; IPv4 broadcast
+BLACKHOLE(REV(::1/128))			; IPv6 loopback
+BLACKHOLE(REV(::0/128))			; IPv6 unspecified
+BLACKHOLE(REV(fd00::/8))		; IPv6 locally assigned
+BLACKHOLE(REV(fe80::/12))		; IPv6 link-local
+BLACKHOLE(REV(fe90::/12))
+BLACKHOLE(REV(fea0::/12))
+BLACKHOLE(REV(feb0::/12))
+BLACKHOLE(REV(2001:0db8::/32))		; IPv6 example prefix
+
+; Blackhole zones for site-local addresses recommended by RFC 6303
+BLACKHOLE(REV(10))
+nsc_forloop(`i', 16, 31, `BLACKHOLE(REV(172.i))')
+BLACKHOLE(REV(192.168))
+
 ; A pretty normal example domain (we act as a primary nameserver for it)
 
 PRIMARY(example.com)