# -*- mode: python; encoding: utf-8 -*-

info["owner"] = "root"
info["group"] = "bind"
info["perms"] = 0644

comment_start = "//"

header("Options de Bind9")

comment("Listes d'accès")
if has("vlan-radin"):
    @acl "radins" { 10.42.0.0/16; };
    @acl "accueil" { 10.51.0.0/16; };
@acl "crans" {
@    138.231.136.0/21;
@    138.231.144.0/21;
@    2a01:240:fe3d:4::/64;
@    2a01:240:fe3d:f7::/64;
@};
@acl "cransadm" {
@    10.231.136.0/24;
@    2a01:240:fe3d:c804::/64;
@};


@options {
@    directory "/var/cache/bind";
@    recursive-clients 5000;
@

if has("dns-primary"):
    @    include "/etc/bind/named.conf.notify";

@
@    allow-transfer {
@         127.0.0.1;
@         138.231.136.0/21; // fixes
@         82.225.39.54;     // freebox
@         138.231.148.0/22; // wifi
@         10.231.136.0/24;  // adm
@         138.231.176.4;    // ariane
@    };
@    auth-nxdomain no; # conform to RFC1035
@
@    listen-on { any; };
@    listen-on-v6 { any; };
@

if not has("dns-secondary-no-forward"):
    @    // Ne pas modifier le commentaire de fin de ligne suivant,
    @    // traitement automatique pour la connexion de secours
    @    // (ligne decommentee automatiquement en mode secours)
    @//  forwarders { 138.231.136.14; } ; #POUR SECOURS
@};