# Example simplified mararc file. # This only shows a subset of MaraDNS' features needed to be an # recursive name server. Look at # doc/detailed/example_full_mararc for an example showing most of the features # that MaraDNS has. # The address this DNS server runs on. The IP address "0.0.0.0" binds # to all addresses that a given machine has. bind_address = "0.0.0.0" # The directory with all of the zone files chroot_dir = "/etc/maradns" # The numeric UID MaraDNS will run as maradns_uid = 99 # The maximum number of threads (or processes, with the zone server) # MaraDNS is allowed to run maxprocs = 96 # The number of messages we log to stdout # 0: No messages except for fatal parsing errors and the legal disclaimer # 1: Only startup messages logged (default) # 2: Error queries logged # 3: All queries logged (but not very verbosely right now) verbose_level = 1 # Initialize the IP aliases, which are used by the list of root name servers, # and the ACL of who gets to perform recursive queries ipv4_alias = {} # Various sets of root name servers # Note: Netmasks can exist, but are ignored when specifying root name server # ICANN: the most common and most controversial root name server # http://www.icann.org ipv4_alias["icann"] = "198.41.0.4,128.9.0.107,192.33.4.12,128.8.10.90,192.203.230.10,192.5.5.241,192.112.36.4,128.63.2.53,192.36.148.17,192.58.128.30,193.0.14.129,198.32.64.12,202.12.27.33" # OSRC: http://www.open-rsc.org/ ipv4_alias["osrc"] = "199.166.24.1,205.189.73.102,199.166.24.3,207.126.103.16,195.117.6.10,205.189.73.10,204.57.55.100,213.196.2.97" # Other root servers are in the full example mararc file # Recursive ACL: Who is allowd to perform recursive queries. # With the following line, anyone on the internet can perform recursive # queries recursive_acl = "0.0.0.0/0" # Random seed file: The file form which we read 16 bytes from to get the # 128-bit random seed. This is ideally a file which is a good source # of random numbers, but can also be a fixed file if your OS does not have # a decent random number generator (make sure the contents of that file is # random and with 600 perms, owned by root, since we read the file *before* # dropping root privledges) random_seed_file = "/dev/urandom" # The maximum number of elements we can have in the cache. If we have more # elements in the cache than this amount, the "custodian" kicks in to effect, # removing elements not recently accessed from the cache (8 elements removed # per query) until we are at the 99% level or so again. maximum_cache_elements = 1024 # The root servers which we use when making recursive queries. # The following line must be uncommented to enable recursive queries root_servers = {} # You can choose which set of root servers to use. Current values (set above) # are: icann, and osrc # Other alternate registries are listed in the example_full_mararc file root_servers["."] = "osrc" # We can also blacklist known spam-friendly DNS servers, so that MaraDNS # refuses to query known spam-friendly DNS servers # As of August 12, 2001, azmalink.net is a known spam-friendly DNS # provider (see doc/detailed/spammers/azmalink.net for details). # Note that this is based on IPs, and azmalink.net constantly # changes IPs (as they constantly have to change ISPs) # Updated 2002/10/12 to reflect Azmalink's current ISP ipv4_alias["azmalink"] = "12.164.194.0/24" # As of September 20, 2001, hiddenonline.net is a known spam-friendly # DNS provider (see doc/detailed/spammers/hiddenonline for details). ipv4_alias["hiddenonline"] = "65.107.225.0/24" spammers = "azmalink,hiddenonline" # And that does it for the caching at this point