caching-only name server

[Vijay Viswanathan]

Hi
I understand that I need the below snip in my /etc/named.conf

-----------snip -----------


  // Two corporate subnets we wish to allow queries from.
acl corpnets { 192.168.4.0/24; 192.168.7.0/24; };
options {

     // Working directory
     directory "/etc/namedb";

     allow-query { corpnets; };

};
// Provide a reverse mapping for the loopback
// address 127.0.0.1
zone "0.0.127.in-addr.arpa" {

     type master;
     file "localhost.rev";
     notify no;

};


----------------

What else do I need along with the above to function as a caching only name
server.

looks like the default /etc/named.conf is designed to run much more than
caching server

----------default-------

options {

        listen-on port 53 { 127.0.0.1; };

        listen-on-v6 port 53 { ::1; };

        directory       "/var/named";

        dump-file       "/var/named/data/cache_dump.db";

        statistics-file "/var/named/data/named_stats.txt";

        memstatistics-file "/var/named/data/named_mem_stats.txt";

        allow-query     { localhost; };

        recursion yes;


        dnssec-enable yes;

        dnssec-validation yes;

        dnssec-lookaside auto;


        /* Path to ISC DLV key */

        bindkeys-file "/etc/named.iscdlv.key";


        managed-keys-directory "/var/named/dynamic";

};


logging {

        channel default_debug {

                file "data/named.run";

                severity dynamic;

        };

};


zone "." IN {

        type hint;

        file "named.ca";

};


include "/etc/named.rfc1912.zones";

include "/etc/named.root.key";

-------------------


also,

Is it possible to have this running in my client machines ?


Thanks,

Vijay
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.isc.org/pipermail/bind-users/attachments/20150219/315e1a2b/attachment.html>