Installing and Administering Internet Services

Chapter 3 89
Configuring and Administering the BIND Name Service
Configuring a Primary Master Name Server
• server Statement
• zone Statement
acl Statement
The acl statement in the /etc/named.conf file is typically used to define
a named IP address matching list for the purpose of access control, etc.
This statement is typically used inside a zone Statement.
The syntax to use this statement is as follows:
acl name { address_match_list };
The acl statement creates a named address match list. It gets its name
from a primary use of address match lists: Access Control Lists (ACLs).
Note that an address match list’s name must be defined with acl before it
can be used elsewhere; no forward references are allowed.
The following ACLs are predefined:
• any - allows all hosts
• none - denies all hosts
• localhost - allows the IP addresses of all interfaces on the system.
• localnets - allows any host on a network for which the system has an
interface.
Example:
acl can_query{ 1.2.3; any;};
The ACL statement, can_query, will allow queries from any host in
network 1.2.3.
include Statement
The include statement in /etc/named.conf inserts the specified file at
the point where the include statement is encountered in the
configuration file. This statement is used to break the configuration up
into easily-manageable chunks.
The syntax to use this statement is:
include path_name;
Example: