nameserver — format of nameserver component configuration
General syntax rules of Kernun Firewall configuration files are described in configuration(7). This man page describes types, sections and items specific for the nameserver component configuration.
Repeatable sections/items are marked by
the '*' before section/item name.
Configuration directives have attributes of several value-types. For the basic types description, see configuration(7).
Enumeration is a list of words (names) representing integer values. Some enumerations accept both names and direct integer values; in this case, enumeration description contains values for every name (in parenthesis next to name). For other enumerations, using of names is obligatory.
The following enumerations are used in nameserver configuration directives:
genesis (see common(5))Configuration of nameserver library component consists of following prototypes:
* nameserver name { ... }
nameserver name {
phase ... ;
* tag ... ;
* listen-sock ... ;
* forwarder ... ;
* from ... ;
* option ... ;
* raw ... ;
* zone name { ... }
}
Domain Name System Server Configuration.
This section allows to define a configuration for a simple nameserver serving local clients as a caching forwarder (typically forwarding to the DNS-PROXY) and an authoritative nameserver for local zones.
For configuration attributes details, see named.conf(5).
LISTEN-SOCK must be specified.
FORWARDER must be specified.
phase [number];Application Startup Phase.
number (type: uint8, optional, default: 30)Phase number; the lower one, the earlier start.
tag value;Configuration factorization tag.
This feature allows admin to create groups of Kernun applications (specially proxies and servers) according to various aspects (belonging to one customer, applications of particular network traffic etc.).
Each application can have several tag attributes and the KAT tool can run some commands (like 'ps', 'start' atc.) for applications with or without given tag.
value (type: str)Tag must contain letters, digits, hyphens and dots, only.
listen-sock addr;Address to listen on.
addr (type: sock)forwarder [static] addr;forwarder dynamic;Next-hop nameserver address.
Usually the forwarder will be a local dns-proxy.
DYNAMIC mode means getting the address via the DHCP.
genesis, optional, default: static)addr (type: sock)from clients;Valid clients definition (ALLOW-QUERY).
clients (type: net-set)Regexps and discontiguous masks not allowed in nameserver lists.
option line;Raw lines into options definition.
line (type: str)raw line;Raw lines into global definition.
line (type: str)zone name {
name ... ;
reverse ... ;
* master-server ... ;
* raw ... ;
generate { ... }
}
Nameserver zone definition.
Zone name is defined either by the NAME item (for a regular one) or by the REVERSE item (for a reverse one).
Zone type (master/slave) is defined by using of MASTER-SERVER item(s). If not used, this zone is MASTER, otherwise SLAVE.
Exactly one of NAME and REVERSE must be specified.
name zone;Zone domain name.
zone (type: str)reverse zone;Reverse zone specification.
zone (type: net)master-server addr;Define master server for domain.
addr (type: sock)raw line;Raw lines into zone definition.
line (type: str)generate {
* raw ... ;
}
Zone data generation parameters.
If used, KGB will generate zone database file from HOST-TABLE. Otherwise, zone file is expected to be created outside the CML and will be used without modifications.
raw line;Raw lines into zone database file.
line (type: str)[End of section nameserver.zone.generate description.]
[End of section nameserver.zone description.]
[End of section nameserver description.]