FM / bind

/usr/share/doc/bind

Name	Size	Mode	Actions
sample/	-	0755	rm
Bv9ARM.ch01.html	27168	0644	edit dl rm
Bv9ARM.ch02.html	7160	0644	edit dl rm
Bv9ARM.ch03.html	28699	0644	edit dl rm
Bv9ARM.ch04.html	129384	0644	edit dl rm
Bv9ARM.ch05.html	6165	0644	edit dl rm
Bv9ARM.ch06.html	667644	0644	edit dl rm
Bv9ARM.ch07.html	19493	0644	edit dl rm
Bv9ARM.ch08.html	6140	0644	edit dl rm
Bv9ARM.ch09.html	119835	0644	edit dl rm
Bv9ARM.ch10.html	7151	0644	edit dl rm
Bv9ARM.ch11.html	45277	0644	edit dl rm
Bv9ARM.ch12.html	20136	0644	edit dl rm
Bv9ARM.ch13.html	9899	0644	edit dl rm
Bv9ARM.html	33855	0644	edit dl rm
Bv9ARM.pdf	1127833	0644	edit dl rm
CHANGES	573757	0644	edit dl rm
isc-logo.pdf	17189	0644	edit dl rm
man.arpaname.html	2954	0644	edit dl rm
man.ddns-confgen.html	9364	0644	edit dl rm
man.delv.html	23808	0644	edit dl rm
man.dig.html	42278	0644	edit dl rm
man.dnssec-checkds.html	5159	0644	edit dl rm
man.dnssec-coverage.html	11142	0644	edit dl rm
man.dnssec-dsfromkey.html	12091	0644	edit dl rm
man.dnssec-importkey.html	9446	0644	edit dl rm
man.dnssec-keyfromlabel.html	18860	0644	edit dl rm
man.dnssec-keygen.html	22463	0644	edit dl rm
man.dnssec-keymgr.html	16468	0644	edit dl rm
man.dnssec-revoke.html	5449	0644	edit dl rm
man.dnssec-settime.html	14244	0644	edit dl rm
man.dnssec-signzone.html	29878	0644	edit dl rm
man.dnssec-verify.html	7302	0644	edit dl rm
man.dnstap-read.html	4316	0644	edit dl rm
man.genrandom.html	3953	0644	edit dl rm
man.host.html	13052	0644	edit dl rm
man.isc-hmac-fixup.html	4531	0644	edit dl rm
man.lwresd.html	12050	0644	edit dl rm
man.mdig.html	22789	0644	edit dl rm
man.named-checkconf.html	6586	0644	edit dl rm
man.named-checkzone.html	19710	0644	edit dl rm
man.named-journalprint.html	4175	0644	edit dl rm
man.named-nzd2nzf.html	3818	0644	edit dl rm
man.named-rrchecker.html	4161	0644	edit dl rm
man.named.conf.html	74802	0644	edit dl rm
man.named.html	18445	0644	edit dl rm
man.nsec3hash.html	3974	0644	edit dl rm
man.nslookup.html	14892	0644	edit dl rm
man.nsupdate.html	28058	0644	edit dl rm
man.pkcs11-destroy.html	5392	0644	edit dl rm
man.pkcs11-keygen.html	6884	0644	edit dl rm
man.pkcs11-list.html	5295	0644	edit dl rm
man.pkcs11-tokens.html	3851	0644	edit dl rm
man.rndc-confgen.html	11286	0644	edit dl rm
man.rndc.conf.html	10198	0644	edit dl rm
man.rndc.html	40409	0644	edit dl rm
named.conf.default	1705	0644	edit dl rm
notes.html	113313	0644	edit dl rm
notes.pdf	162347	0644	edit dl rm
README	28495	0644	edit dl rm

Edit: /usr/share/doc/bind/named.conf.default (1705B)

//
// named.conf
//
// Provided by Red Hat bind package to configure the ISC BIND named(8) DNS
// server as a caching only nameserver (as a localhost DNS resolver only).
//
// See /usr/share/doc/bind*/sample/ for example named configuration files.
//

options {
	listen-on port 53 { 127.0.0.1; };
	listen-on-v6 port 53 { ::1; };
	directory 	"/var/named";
	dump-file 	"/var/named/data/cache_dump.db";
	statistics-file "/var/named/data/named_stats.txt";
	memstatistics-file "/var/named/data/named_mem_stats.txt";
	secroots-file	"/var/named/data/named.secroots";
	recursing-file	"/var/named/data/named.recursing";
	allow-query     { localhost; };

/* 
	 - If you are building an AUTHORITATIVE DNS server, do NOT enable recursion.
	 - If you are building a RECURSIVE (caching) DNS server, you need to enable 
	   recursion. 
	 - If your recursive DNS server has a public IP address, you MUST enable access 
	   control to limit queries to your legitimate users. Failing to do so will
	   cause your server to become part of large scale DNS amplification 
	   attacks. Implementing BCP38 within your network would greatly
	   reduce such attack surface 
	*/
	recursion yes;

dnssec-enable yes;
	dnssec-validation yes;

managed-keys-directory "/var/named/dynamic";

pid-file "/run/named/named.pid";
	session-keyfile "/run/named/session.key";

/* https://fedoraproject.org/wiki/Changes/CryptoPolicy */
	include "/etc/crypto-policies/back-ends/bind.config";
};

logging {
        channel default_debug {
                file "data/named.run";
                severity dynamic;
        };
};

zone "." IN {
	type hint;
	file "named.ca";
};

include "/etc/named.rfc1912.zones";
include "/etc/named.root.key";

cmd: