<?xml version="1.0" encoding="UTF-8"?>

<!-- $Id: addnsconf.xml.in 2735 2010-01-28 14:11:27Z matthijs $ -->

<Adapter>
 	<DNS>
		<TSIG>
			<Name>secret.example.com</Name>
			<!-- http://www.iana.org/assignments/tsig-algorithm-names -->
			<Algorithm>hmac-sha256</Algorithm>
			<!-- base64 encoded secret -->
			<Secret>sw0nMPCswVbes1tmQTm1pcMmpNRK+oGMYN+qKNR/BwQ=</Secret>
		</TSIG>

		<Inbound>
			<!-- Address of host to request XFR from -->
			<RequestTransfer>
				<!-- EXAMPLE: send request to 1.2.3.4 on the default port 53 -->
				<Remote>
					<Address>1.2.3.4</Address>
				</Remote>
				<!-- EXAMPLE: send request to dead:beef::1 on port 5353, TSIG signed with secret.example.com -->
				<Remote>
					<Address>dead:beef::1</Address>
					<Port>5353</Port>
					<Key>secret.example.com</Key>
				</Remote>
			</RequestTransfer>

			<!-- Allow NOTIFY messages from host -->
			<AllowNotify>
				<!-- EXAMPLE: allow notifies from 1.2.3.4 -->
				<Peer>
					<Prefix>1.2.3.4</Prefix>
				</Peer>
			</AllowNotify>
		</Inbound>

		<Outbound>
			<!-- Provide XFR to host -->
			<ProvideTransfer>
				<!-- EXAMPLE: provide XFR to 1.2.3.5 with key secret.example.com -->
				<Peer>
					<Prefix>1.2.3.5</Prefix>
					<Key>secret.example.com</Key>
				</Peer>
			</ProvideTransfer>
	
			<!-- Send NOTIFY messages to host -->
			<Notify>
				<!-- EXAMPLE: send NOTIFY to 1.2.3.5 on the default port 53 -->
				<Remote>
					<Address>1.2.3.5</Address>
				</Remote>
			</Notify>
		</Outbound>
	</DNS>
</Adapter>