# -*- mode: python; encoding: utf-8 -*-

info["owner"] = "root"
info["group"] = "bind"
info["perms"] = 0644

comment_start = "//"

header("Options de Bind9")

comment("Listes d'accès")
if has("vlan-radin"):
    @acl "radins" { 10.42.0.0/16; };
    @acl "accueil" { 10.51.0.0/16; };
@acl "crans" { 138.231.136.0/21; 138.231.144.0/21; };
@acl "cransadm" { 10.231.136.0/24; };


@options {
@    directory "/var/cache/bind";
@    recursive-clients 5000;
@

if has("dns-primary"):
    @    include "/etc/bind/named.conf.notify";

@
@    allow-transfer {
@         127.0.0.1;
@         138.231.136.0/21; // fixes
@         82.225.39.54;     // freebox
@         138.231.148.0/22; // wifi
@         10.231.136.0/24;  // adm
@         138.231.176.4;    // ariane
@    };
@    auth-nxdomain no; # conform to RFC1035
@

if not has("dns-secondary-no-forward"):
    @    // Ne pas modifier le commentaire de fin de ligne suivant,
    @    // traitement automatique pour la connexion de secours
    @    // (ligne decommentee automatiquement en mode secours)
    @//  forwarders { 138.231.136.14; } ; #POUR SECOURS

@
if not has("vlan-radin"):
    @        allow-recursion {"localnets"; "cransadm"; "crans";};
else:
    @        allow-recursion {"localnets"; "cransadm"; "crans"; "radins";};
@};