Commit Diff


commit - a1f21b007fd346ae8bf54b3e3fb9bf1d7f169486
commit + 314de8be703599c3e6f003fba30b071f5871c947
blob - 4e05f31d6fff8bf76687348129062a4c349f23e4 (mode 644)
blob + /dev/null
--- example1.conf
+++ /dev/null
@@ -1,84 +0,0 @@
-#
-#
-# wildcarddns - RR configuration file
-#
-#
-
-version "6";
-
-; WARNING - 	the way wildcarddnsd originally implemented wildcarding is
-;		wrong and can cause damage on the Internet (DoS), it can	
-;		also cause damage on someone using wildcarding, so it's best
-;		to turn it off.  By default anyone wanting to turn wildcarding
-;		on should enable the "wildcard-only-for" block as shown below.
-;
-; comment the below block to turn wildcarding off
-;
-wildcard-only-for "my IP's" {
-	2001:a60:f074::8/128;
-	::1/128;
-        ; this is a comment
-        ; if this option isn't mentioned, then wildcarding is off
-        ; this will remove the -W option in the command line
-}
-
-
-zone "default" {
-	; comments must be at the beginning of a new line, # and ; is allowed
-	;
-	;
-	; ALL RR's begine with:  zone,RR,time to live, ...
-	;
-	; names can be expressed with no trailing . or with trailing dot either way
-	; they'll be modified to have a trailing dot.
-	; example: www.google.com or www.google.com. becomes www.google.com.
-	;
-	; soa RR consists of: zone, SOA, ttl of RR, nameserver, responsible person, 
-	; serial, refresh, retry, expire, zone time to live (no spaces)
-	;
-	*,soa,3600,neptune.ATLAS.,pbug.neptune.ATLAS,1,3600,1800,7200,3600
-	;
-	; a RR consists of:  zone, A, ttl of RR, IP  (no spaces)
-	; up to 10 addresses allowed
-	;
-	*,a,3600,10.0.0.2
-	*,a,3600,10.0.0.1
-	;
-	; MX RR consists of:  zone, MX, ttl of RR, priority, name of MX  (no spaces)
-	; up to 10 addresses allowed
-	;
-	*,mx,3600,1,atlas.local
-	*,mx,3600,1,neptune.local
-	;
-	; AAAA RR consists of:  zone, AAAA, ttl of RR, IPv6 address  (no spaces)
-	; up to 10 addresses allowed
-	;
-	*,aaaa,3600,::1
-	*,aaaa,3600,3ffe:b00:1022::
-	;
-	; all of *.com looks like this:
-	;
-	com,soa,3600,a.com,b.com,1,3600,1800,300000,3600
-	;
-	; CNAME RR consists of: zone, CNAME, ttl of RR, name 	(no spaces)
-	; CNAME support is currently not complete since a CNAME must attach the
-	; records it is pointing to... something to be done in the future I guess..
-	;
-	*,cname,3600,neptune.local
-	;
-	; 
-	; PTR RR consists of: zone, PTR, ttl of RR, name	(no spaces)
-	;
-	arpa.,ptr,3600,neptune.local.
-	;
-	; NS RR consists of:  zone, NS, ttl of RR, name		(no spaces)
-	;
-	*,ns,3600,ns.neptune.local.
-	;
-	; TXT RR's have this format
-	*,txt,3600,"this is a text"
-
-; close zone
-}
-
-; pretty straight forward
blob - /dev/null
blob + 4e05f31d6fff8bf76687348129062a4c349f23e4 (mode 644)
--- /dev/null
+++ examples/example1.conf
@@ -0,0 +1,84 @@
+#
+#
+# wildcarddns - RR configuration file
+#
+#
+
+version "6";
+
+; WARNING - 	the way wildcarddnsd originally implemented wildcarding is
+;		wrong and can cause damage on the Internet (DoS), it can	
+;		also cause damage on someone using wildcarding, so it's best
+;		to turn it off.  By default anyone wanting to turn wildcarding
+;		on should enable the "wildcard-only-for" block as shown below.
+;
+; comment the below block to turn wildcarding off
+;
+wildcard-only-for "my IP's" {
+	2001:a60:f074::8/128;
+	::1/128;
+        ; this is a comment
+        ; if this option isn't mentioned, then wildcarding is off
+        ; this will remove the -W option in the command line
+}
+
+
+zone "default" {
+	; comments must be at the beginning of a new line, # and ; is allowed
+	;
+	;
+	; ALL RR's begine with:  zone,RR,time to live, ...
+	;
+	; names can be expressed with no trailing . or with trailing dot either way
+	; they'll be modified to have a trailing dot.
+	; example: www.google.com or www.google.com. becomes www.google.com.
+	;
+	; soa RR consists of: zone, SOA, ttl of RR, nameserver, responsible person, 
+	; serial, refresh, retry, expire, zone time to live (no spaces)
+	;
+	*,soa,3600,neptune.ATLAS.,pbug.neptune.ATLAS,1,3600,1800,7200,3600
+	;
+	; a RR consists of:  zone, A, ttl of RR, IP  (no spaces)
+	; up to 10 addresses allowed
+	;
+	*,a,3600,10.0.0.2
+	*,a,3600,10.0.0.1
+	;
+	; MX RR consists of:  zone, MX, ttl of RR, priority, name of MX  (no spaces)
+	; up to 10 addresses allowed
+	;
+	*,mx,3600,1,atlas.local
+	*,mx,3600,1,neptune.local
+	;
+	; AAAA RR consists of:  zone, AAAA, ttl of RR, IPv6 address  (no spaces)
+	; up to 10 addresses allowed
+	;
+	*,aaaa,3600,::1
+	*,aaaa,3600,3ffe:b00:1022::
+	;
+	; all of *.com looks like this:
+	;
+	com,soa,3600,a.com,b.com,1,3600,1800,300000,3600
+	;
+	; CNAME RR consists of: zone, CNAME, ttl of RR, name 	(no spaces)
+	; CNAME support is currently not complete since a CNAME must attach the
+	; records it is pointing to... something to be done in the future I guess..
+	;
+	*,cname,3600,neptune.local
+	;
+	; 
+	; PTR RR consists of: zone, PTR, ttl of RR, name	(no spaces)
+	;
+	arpa.,ptr,3600,neptune.local.
+	;
+	; NS RR consists of:  zone, NS, ttl of RR, name		(no spaces)
+	;
+	*,ns,3600,ns.neptune.local.
+	;
+	; TXT RR's have this format
+	*,txt,3600,"this is a text"
+
+; close zone
+}
+
+; pretty straight forward
blob - /dev/null
blob + 5b86a472a9f70b2f48cbbeec2349a3859faf6b38 (mode 644)
--- /dev/null
+++ examples/example11.conf
@@ -0,0 +1,123 @@
+; sample config file that is in production.
+;
+version "6";
+
+; WARNING - 	the way wildcarddnsd originally implemented wildcarding is
+;		wrong and can cause damage on the Internet (DoS), it can	
+;		also cause damage on someone using wildcarding, so it's best
+;		to turn it off.  By default anyone wanting to turn wildcarding
+;		on should enable the "wildcard-only-for" block as shown below.
+;
+; To enable wildcarding uncomment the below...
+;
+;wildcard-only-for "wildcard everyone" {
+;        ::/0;
+;	 0.0.0.0/0;
+;        ; this is a comment
+;        ; if this option isn't mentioned, then wildcarding is off
+;        ; this will remove the -W option in the command line
+;}
+
+;
+; AXFR turned on...
+;
+
+axfr-for "these hosts" {
+	::1/128;
+	127.0.0.1/32;
+}
+
+
+axfrport "10053";
+
+
+zone "centroid.eu" {
+	centroid.eu,soa,3600,uranus.centroid.eu.,pjp.solarscale.de.,1258740680,3600,1800,7200,3600
+	centroid.eu,ns,3600,proteus.solarscale.de.
+	centroid.eu,ns,3600,uranus.centroid.eu.
+	centroid.eu,ns,3600,dione.solarscale.de.
+	; balance these two
+	centroid.eu,a,3600,200.46.208.61
+	centroid.eu,a,3600,62.75.160.180
+	;
+	centroid.eu,mx,3600,10,proteus.solarscale.de.
+	centroid.eu,aaaa,3600,2001:a60:f074::8
+	; and these two
+	www.centroid.eu,a,3600,62.75.160.180
+	www.centroid.eu,a,3600,200.46.208.61
+	;
+	www.centroid.eu,aaaa,3600,2001:a60:f074::8
+	uranus.centroid.eu,a,3600,212.114.251.91
+	uranus.centroid.eu,aaaa,3600,2001:a60:f000:99::2
+	proteus.centroid.eu,a,3600,62.75.160.180
+	dione.centroid.eu,a,3600,200.46.208.61
+	rosalind.centroid.eu,aaaa,3600,2001:a60:f074::8
+	irc.centroid.eu,a,3600,212.114.251.91
+	irc.centroid.eu,aaaa,3600,2001:a60:f074::24
+	irc2.centroid.eu,a,3600,200.46.208.61
+	localhost.centroid.eu,a,3600,127.0.0.1
+	localhost.centroid.eu,aaaa,3600,::1
+	; the below are new delegations (NS) records
+	delegation.centroid.eu,delegate,3600,ns1.server.com.
+	; glue record
+	ns1.server.com.,a,3600,10.0.0.1
+	delegation.centroid.eu,delegate,3600,ns2.server.com.
+	; glue record
+	ns2.server.com.,a,3600,10.0.0.2
+}
+zone "ipv6.centroid.eu" {
+	ipv6.centroid.eu,soa,3600,uranus.centroid.eu.,pjp.solarscale.de.,1244725285,3600,1800,7200,3600
+	ipv6.centroid.eu,aaaa,3600,2001:a60:f074::8
+	www.ipv6.centroid.eu,aaaa,3600,2001:a60:f074::8
+}
+zone "ipv6.solarscale.de" {
+	ipv6.solarscale.de,soa,3600,proteus.solarscale.de.,pjp.solarscale.de.,1234896563,3600,1800,7200,3600
+	ipv6.solarscale.de,ns,3600,proteus.solarscale.de.
+	ipv6.solarscale.de,ns,3600,uranus.centroid.eu.
+	ipv6.solarscale.de,aaaa,3600,2001:a60:f074::8
+	www.ipv6.solarscale.de,aaaa,3600,2001:a60:f074::8
+}
+zone "reverse dns" {
+	0.4.7.0.f.0.6.a.0.1.0.0.2.ip6.arpa.,soa,3600,proteus.solarscale.de.,pjp.solarscale.de.,1234896562,3600,1800,7200,3600
+	1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.4.7.0.f.0.6.a.0.1.0.0.2.ip6.arpa.,ptr,3600,uranus.centroid.eu.
+	2.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.4.7.0.f.0.6.a.0.1.0.0.2.ip6.arpa.,ptr,3600,setebos.centroid.eu.
+}
+
+; keep root hints disabled until we have a working resolver, even then it
+; should be REFUSED to 3rd parties, disabled after watching a reflection attack
+;zone "root hints" {
+;	.,hint,3600000,A.ROOT-SERVERS.NET.
+;	A.ROOT-SERVERS.NET.,a,3600000,198.41.0.4
+;	A.ROOT-SERVERS.NET.,aaaa,3600000,2001:503:BA3E::2:30
+;	.,hint,3600000,B.ROOT-SERVERS.NET.
+;	B.ROOT-SERVERS.NET.,a,3600000,192.228.79.201
+;	.,hint,3600000,C.ROOT-SERVERS.NET.
+;	C.ROOT-SERVERS.NET.,a,3600000,192.33.4.12
+;	.,hint,3600000,D.ROOT-SERVERS.NET.
+;	D.ROOT-SERVERS.NET.,a,3600000,199.7.91.13
+;	D.ROOT-SERVERS.NET.,aaaa,3600000,2001:500:2D::D
+;	.,hint,3600000,E.ROOT-SERVERS.NET.
+;	E.ROOT-SERVERS.NET.,a,3600000,192.203.230.10	
+;	.,hint,3600000,F.ROOT-SERVERS.NET.
+;	F.ROOT-SERVERS.NET.,a,3600000,192.5.5.241
+;	F.ROOT-SERVERS.NET.,aaaa,3600000,2001:500:2f::f
+;	.,hint,3600000,G.ROOT-SERVERS.NET.
+;	G.ROOT-SERVERS.NET.,a,3600000,192.112.36.4
+;	.,hint,3600000,H.ROOT-SERVERS.NET.
+;	H.ROOT-SERVERS.NET.,a,3600000,128.63.2.53
+;	H.ROOT-SERVERS.NET.,aaaa,3600000,2001:500:1::803f:235
+;	.,hint,3600000,I.ROOT-SERVERS.NET.
+;	I.ROOT-SERVERS.NET.,a,3600000,192.36.148.17
+;	.,hint,3600000,J.ROOT-SERVERS.NET.
+;	J.ROOT-SERVERS.NET.,a,3600000,192.58.128.30
+;	J.ROOT-SERVERS.NET.,aaaa,3600000,2001:503:C27::2:30
+;	.,hint,3600000,K.ROOT-SERVERS.NET.
+;	K.ROOT-SERVERS.NET.,a,3600000,193.0.14.129
+;	K.ROOT-SERVERS.NET.,aaaa,3600000,2001:7fd::1
+;	.,hint,3600000,L.ROOT-SERVERS.NET.
+;	L.ROOT-SERVERS.NET.,a,3600000,199.7.83.42
+;	L.ROOT-SERVERS.NET.,aaaa,3600000,2001:500:3::42
+;	.,hint,3600000,M.ROOT-SERVERS.NET.
+;	M.ROOT-SERVERS.NET.,a,3600000,202.12.27.33
+;	M.ROOT-SERVERS.NET.,aaaa,3600000,2001:dc3::35
+;}
blob - /dev/null
blob + a4476a364230acbc2c25daef97b07f54d46c1995 (mode 644)
--- /dev/null
+++ examples/example2.conf
@@ -0,0 +1,103 @@
+#
+#
+# wildcarddns - RR configuration file
+#
+#
+
+version "6";
+
+; WARNING - 	the way wildcarddnsd originally implemented wildcarding is
+;		wrong and can cause damage on the Internet (DoS), it can	
+;		also cause damage on someone using wildcarding, so it's best
+;		to turn it off.  By default anyone wanting to turn wildcarding
+;		on should enable the "wildcard-only-for" block as shown below.
+;
+; comment the below to turn wildcarding off
+wildcard-only-for "wildcard everyone" {
+        0.0.0.0/0;
+	::/0;
+        ; this is a comment
+        ; if this option isn't mentioned, then wildcarding is off
+        ; this will remove the -W option in the command line
+}
+
+zone "default" {
+	;
+	; comments must be at the beginning of a new line, # and ; is allowed
+	;
+	;
+	; ALL RR's begine with:  zone,RR,time to live, ...
+	;
+	; names can be expressed with no trailing . or with trailing dot either way
+	; they'll be modified to have a trailing dot.
+	; example: www.google.com or www.google.com. becomes www.google.com.
+	;
+	; soa RR consists of: zone, SOA, ttl of RR, nameserver, responsible person, 
+	; serial, refresh, retry, expire, zone time to live (no spaces)
+	;
+	*,soa,3600,miranda.solarscale.de.,pjp.solarscale.de.,1,3600,1800,7200,3600
+	;
+	; a RR consists of:  zone, A, ttl of RR, IP  (no spaces)
+	; up to 10 addresses allowed
+	;
+	; miranda.solarscale.de
+	*,a,3600,192.168.0.20
+	;
+	; MX RR consists of:  zone, MX, ttl of RR, priority, name of MX  (no spaces)
+	; up to 10 addresses allowed
+	;
+	*,mx,3600,1,miranda.solarscale.de.
+	;
+	; AAAA RR consists of:  zone, AAAA, ttl of RR, IPv6 address  (no spaces)
+	; up to 10 addresses allowed
+	;
+	;*,aaaa,3600,::1
+	;*,aaaa,3600,3ffe:b00:1022::
+	;
+	; all of *.com looks like this:
+	;
+	;com,soa,3600,a.com,b.com,1,3600,1800,300000,3600
+	;
+	; CNAME RR consists of: zone, CNAME, ttl of RR, name 	(no spaces)
+	; CNAME support is currently not complete since a CNAME must attach the
+	; records it is pointing to... something to be done in the future I guess..
+	;
+	;*,cname,3600,neptune.local
+	;
+	; 
+	; PTR RR consists of: zone, PTR, ttl of RR, name	(no spaces)
+	;
+	arpa.,ptr,3600,miranda.solarscale.de.
+	;
+	; NS RR consists of:  zone, NS, ttl of RR, name		(no spaces)
+	;
+	*,ns,3600,miranda.solarscale.de.
+	;
+	; Got it?  good.
+	ferdinand.solarscale.de,a,3600,192.168.0.21
+	21.0.168.192.in-addr.arpa.,ptr,3600,ferdinand.solarscale.de.
+	ariel.solarscale.de,a,3600,192.168.0.17
+	17.0.168.192.in-addr.arpa.,ptr,3600,ariel.solarscale.de.
+	uranus.solarscale.de,a,3600,192.168.0.1
+	1.0.168.192.in-addr.arpa.,ptr,3600,uranus.solarscale.de.
+	area5.solarscale.de,a,3600,192.168.0.11
+	11.0.168.192.in-addr.arpa.,ptr,3600,area5.solarscale.de.
+	perdita.solarscale.de,a,3600,192.168.0.23
+	perdita.solarscale.de,txt,3600,"also does IPv6"
+	23.0.168.192.in-addr.arpa,ptr,3600,perdita.solarscale.de.
+	itojun.solarscale.de,cname,3600,perdita.solarscale.de.
+	desdemona.solarscale.de,a,3600,192.168.0.15
+	15.0.168.192.in-addr.arpa,ptr,3600,desdemona.solarscale.de.
+	rosalind.solarscale.de,a,3600,192.168.0.19
+	19.0.168.192.in-addr.arpa,ptr,3600,rosalind.solarscale.de.
+	titania.solarscale.de,a,3600,192.168.0.16
+	16.0.168.192.in-addr.arpa,ptr,3600,titania.solarscale.de.
+	cupid.solarscale.de,a,3600,192.168.0.12
+	12.0.168.192.in-addr.arpa,ptr,3600,cupid.solarscale.de.
+	;
+	; cvs
+	cvs.solarscale.de,cname,3600,miranda.solarscale.de.
+	; irc
+	irc.solarscale.de,cname,3600,ariel.solarscale.de.
+}
+; end
blob - /dev/null
blob + b9ea0396853bd925dcdf5ff418fb74982a1bd808 (mode 644)
--- /dev/null
+++ examples/example3.conf
@@ -0,0 +1,46 @@
+# wildcarddns - RR configuration file
+version "6";
+
+zone "centroid.eu" {
+	# serial, refresh, retry, expire, zone time to live (no spaces)
+	margaret.centroid.eu,soa,3600,proteus.solarscale.de.,pjp.solarscale.de.,1234896561,3600,1800,7200,3600
+	margaret.centroid.eu,ns,3600,proteus.solarscale.de.
+	margaret.centroid.eu,ns,3600,uranus.centroid.eu.
+	;
+	margaret.centroid.eu,a,3600,212.114.251.91
+	margaret.centroid.eu,aaaa,3600,2001:a60:f074::2
+	;
+}
+
+zone "ipv6.solarscale.de" {
+		ipv6.solarscale.de,soa,3600,proteus.solarscale.de.,pjp.solarscale.de.,1234896561,3600,1800,7200,3600
+		ipv6.solarscale.de,ns,3600,proteus.solarscale.de.
+	ipv6.solarscale.de,ns,3600,uranus.centroid.eu.
+	ipv6.solarscale.de,ns,3600,margaret.centroid.eu.
+	;
+	ipv6.solarscale.de,aaaa,3600,2001:a60:f074::2
+	www.ipv6.solarscale.de,aaaa,3600,2001:a60:f074::2
+	;
+}
+
+zone "ipv6.centroid.eu" {
+	ipv6.centroid.eu,soa,3600,proteus.solarscale.de.,pjp.solarscale.de.,1234896561,3600,1800,7200,3600
+	ipv6.centroid.eu,ns,3600,proteus.solarscale.de.
+	ipv6.centroid.eu,ns,3600,uranus.centroid.eu.
+	ipv6.centroid.eu,ns,3600,margaret.centroid.eu.
+	;
+	ipv6.centroid.eu,aaaa,3600,2001:a60:f074::2
+	www.ipv6.centroid.eu,aaaa,3600,2001:a60:f074::2
+	;
+	;
+}
+
+zone "ip6.arpa" {
+	# reverse dns for IPv6
+	0.4.7.0.f.0.6.a.0.1.0.0.2.ip6.arpa.,soa,3600,proteus.solarscale.de.,pjp.solarscale.de.,1234896561,3600,1800,7200,3600
+	;
+	1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.4.7.0.f.0.6.a.0.1.0.0.2.ip6.arpa.,ptr,3600,uranus.centroid.eu.
+	2.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.4.7.0.f.0.6.a.0.1.0.0.2.ip6.arpa.,ptr,3600,margaret.centroid.eu.
+}
+
+; end
blob - /dev/null
blob + 5fc6e57a1ea23fd2d9b4a21b214c2950abc1f7d6 (mode 644)
--- /dev/null
+++ examples/example4.conf
@@ -0,0 +1,126 @@
+; sample config file that is in production.
+;
+version "6";
+
+; WARNING - 	the way wildcarddnsd originally implemented wildcarding is
+;		wrong and can cause damage on the Internet (DoS), it can	
+;		also cause damage on someone using wildcarding, so it's best
+;		to turn it off.  By default anyone wanting to turn wildcarding
+;		on should enable the "wildcard-only-for" block as shown below.
+;
+; To enable wildcarding uncomment the below...
+;
+;wildcard-only-for "wildcard everyone" {
+;        ::/0;
+;	 0.0.0.0/0;
+;        ; this is a comment
+;        ; if this option isn't mentioned, then wildcarding is off
+;        ; this will remove the -W option in the command line
+;}
+
+; this is for the host dione.centroid.eu which is in Panama
+; it serves best for the Americas and Australia (?)
+
+region "LACNIC" {
+	192.168.0.0/16;
+	2001:A60:F074::/64;
+	; arin below
+	2001:0400::/23;
+	2001:1800::/23;
+	2001:4800::/23;
+	2600:0000::/12;
+	2610:0000::/23;
+	2620:0000::/23;
+	; lacnic
+	2001:1200::/23;
+	2800:0000::/12;
+}
+region "RIPE" {
+	;
+	; for RIPE we'll just put the prefix 0.0.0.0/0
+	; this should work because the higher the prefix the more
+	; precedence the region has, let's give it a shot.
+	;
+	0.0.0.0/0;
+	::/0;
+	; RIPE
+	2001:0600::/23;
+	2001:0800::/23;
+	2001:0A00::/23;
+	2001:1400::/23;
+	2001:1600::/23;
+	2001:1A00::/23;	
+	2001:1C00::/22;
+	2001:2000::/20;
+	2001:3000::/21;
+	2001:3800::/22;
+	2001:4000::/23;
+	2001:4600::/23;
+	2001:4A00::/23;
+	2001:4C00::/23;
+	2001:5000::/20;
+	2003:0000::/18;
+	2A00:0000::/12;
+	; APNIC
+	2001:0200::/23;
+	2001:0C00::/23;
+	2001:0E00::/23;
+	2001:4400::/23;
+	2001:8000::/19;
+	2001:A000::/20;
+	2001:B000::/20;
+	2400:0000::/12;
+	; AfriNIC
+	2001:4200::/23;
+	2C00:0000::/12;
+}
+zone "centroid.eu" {
+	centroid.eu,soa,3600,uranus.centroid.eu.,pjp.solarscale.de.,1258740680,3600,1800,7200,3600
+	centroid.eu,ns,3600,proteus.solarscale.de.
+	centroid.eu,ns,3600,uranus.centroid.eu.
+	centroid.eu,ns,3600,dione.solarscale.de.
+	; balance these two
+	centroid.eu,balance,3600,62.75.160.180
+	centroid.eu,balance,3600,192.168.0.24
+	centroid.eu,txt,3600,"1234\"\"1234"
+	text.centroid.eu,txt,3600,",,,,this is valid,,,too,,,"
+}
+
+; keep root hints disabled until we have a working resolver, even then it
+; should be REFUSED to 3rd parties, disabled after watching a reflection attack
+;zone "root hints" {
+;	.,hint,3600000,A.ROOT-SERVERS.NET.
+;	A.ROOT-SERVERS.NET.,a,3600000,198.41.0.4
+;	A.ROOT-SERVERS.NET.,aaaa,3600000,2001:503:BA3E::2:30
+;	.,hint,3600000,B.ROOT-SERVERS.NET.
+;	B.ROOT-SERVERS.NET.,a,3600000,192.228.79.201
+;	.,hint,3600000,C.ROOT-SERVERS.NET.
+;	C.ROOT-SERVERS.NET.,a,3600000,192.33.4.12
+;	.,hint,3600000,D.ROOT-SERVERS.NET.
+;	D.ROOT-SERVERS.NET.,a,3600000,199.7.91.13
+;	D.ROOT-SERVERS.NET.,aaaa,3600000,2001:500:2D::D
+;	.,hint,3600000,E.ROOT-SERVERS.NET.
+;	E.ROOT-SERVERS.NET.,a,3600000,192.203.230.10	
+;	.,hint,3600000,F.ROOT-SERVERS.NET.
+;	F.ROOT-SERVERS.NET.,a,3600000,192.5.5.241
+;	F.ROOT-SERVERS.NET.,aaaa,3600000,2001:500:2f::f
+;	.,hint,3600000,G.ROOT-SERVERS.NET.
+;	G.ROOT-SERVERS.NET.,a,3600000,192.112.36.4
+;	.,hint,3600000,H.ROOT-SERVERS.NET.
+;	H.ROOT-SERVERS.NET.,a,3600000,128.63.2.53
+;	H.ROOT-SERVERS.NET.,aaaa,3600000,2001:500:1::803f:235
+;	.,hint,3600000,I.ROOT-SERVERS.NET.
+;	I.ROOT-SERVERS.NET.,a,3600000,192.36.148.17
+;	.,hint,3600000,J.ROOT-SERVERS.NET.
+;	J.ROOT-SERVERS.NET.,a,3600000,192.58.128.30
+;	J.ROOT-SERVERS.NET.,aaaa,3600000,2001:503:C27::2:30
+;	.,hint,3600000,K.ROOT-SERVERS.NET.
+;	K.ROOT-SERVERS.NET.,a,3600000,193.0.14.129
+;	K.ROOT-SERVERS.NET.,aaaa,3600000,2001:7fd::1
+;	.,hint,3600000,L.ROOT-SERVERS.NET.
+;	L.ROOT-SERVERS.NET.,a,3600000,199.7.83.42
+;	L.ROOT-SERVERS.NET.,aaaa,3600000,2001:500:3::42
+;	.,hint,3600000,M.ROOT-SERVERS.NET.
+;	M.ROOT-SERVERS.NET.,a,3600000,202.12.27.33
+;	M.ROOT-SERVERS.NET.,aaaa,3600000,2001:dc3::35
+;}
blob - /dev/null
blob + fb29589792bad2db850aac91fed19f12862c7bc7 (mode 644)
--- /dev/null
+++ examples/example6.conf
@@ -0,0 +1,47 @@
+; sample config file that is in production.
+;
+version "6";
+
+recurse-for "these hosts" {
+	127.0.0.1/32;
+	::1/128;
+}
+
+; keep root hints disabled until we have a working resolver, even then it
+; should be REFUSED to 3rd parties, disabled after watching a reflection attack
+;zone "root hints" {
+;	.,hint,3600000,A.ROOT-SERVERS.NET.
+;	A.ROOT-SERVERS.NET.,a,3600000,198.41.0.4
+;	A.ROOT-SERVERS.NET.,aaaa,3600000,2001:503:BA3E::2:30
+;	.,hint,3600000,B.ROOT-SERVERS.NET.
+;	B.ROOT-SERVERS.NET.,a,3600000,192.228.79.201
+;	.,hint,3600000,C.ROOT-SERVERS.NET.
+;	C.ROOT-SERVERS.NET.,a,3600000,192.33.4.12
+;	.,hint,3600000,D.ROOT-SERVERS.NET.
+;	D.ROOT-SERVERS.NET.,a,3600000,199.7.91.13
+;	D.ROOT-SERVERS.NET.,aaaa,3600000,2001:500:2D::D
+;	.,hint,3600000,E.ROOT-SERVERS.NET.
+;	E.ROOT-SERVERS.NET.,a,3600000,192.203.230.10	
+;	.,hint,3600000,F.ROOT-SERVERS.NET.
+;	F.ROOT-SERVERS.NET.,a,3600000,192.5.5.241
+;	F.ROOT-SERVERS.NET.,aaaa,3600000,2001:500:2f::f
+;	.,hint,3600000,G.ROOT-SERVERS.NET.
+;	G.ROOT-SERVERS.NET.,a,3600000,192.112.36.4
+;	.,hint,3600000,H.ROOT-SERVERS.NET.
+;	H.ROOT-SERVERS.NET.,a,3600000,128.63.2.53
+;	H.ROOT-SERVERS.NET.,aaaa,3600000,2001:500:1::803f:235
+;	.,hint,3600000,I.ROOT-SERVERS.NET.
+;	I.ROOT-SERVERS.NET.,a,3600000,192.36.148.17
+;	.,hint,3600000,J.ROOT-SERVERS.NET.
+;	J.ROOT-SERVERS.NET.,a,3600000,192.58.128.30
+;	J.ROOT-SERVERS.NET.,aaaa,3600000,2001:503:C27::2:30
+;	.,hint,3600000,K.ROOT-SERVERS.NET.
+;	K.ROOT-SERVERS.NET.,a,3600000,193.0.14.129
+;	K.ROOT-SERVERS.NET.,aaaa,3600000,2001:7fd::1
+;	.,hint,3600000,L.ROOT-SERVERS.NET.
+;	L.ROOT-SERVERS.NET.,a,3600000,199.7.83.42
+;	L.ROOT-SERVERS.NET.,aaaa,3600000,2001:500:3::42
+;	.,hint,3600000,M.ROOT-SERVERS.NET.
+;	M.ROOT-SERVERS.NET.,a,3600000,202.12.27.33
+;	M.ROOT-SERVERS.NET.,aaaa,3600000,2001:dc3::35
+;}
blob - /dev/null
blob + 8369bfe67630069f39502afcd7e978e9d1e19658 (mode 644)
--- /dev/null
+++ examples/example7.conf
@@ -0,0 +1,219 @@
+; sample config file that is in production.
+;
+version "6";
+
+; WARNING - 	the way wildcarddnsd originally implemented wildcarding is
+;		wrong and can cause damage on the Internet (DoS), it can	
+;		also cause damage on someone using wildcarding, so it's best
+;		to turn it off.  By default anyone wanting to turn wildcarding
+;		on should enable the "wildcard-only-for" block as shown below.
+;
+; To enable wildcarding uncomment the below...
+;
+;wildcard-only-for "wildcard everyone" {
+;        ::/0;
+;	 0.0.0.0/0;
+;        ; this is a comment
+;        ; if this option isn't mentioned, then wildcarding is off
+;        ; this will remove the -W option in the command line
+;}
+
+
+
+; this is for the host dione.centroid.eu which is in Panama
+; it serves best for the Americas and Australia (?)
+
+region "LACNIC" {
+	;
+	; ARIN and LACNIC blocks below
+	;
+	; lacnic netblocks
+	186.0.0.0/8;
+	187.0.0.0/8;
+	189.0.0.0/8;
+	190.0.0.0/8;
+	191.0.0.0/8;
+	200.0.0.0/8;
+	201.0.0.0/8;
+	; arin netblocks 
+	216.0.0.0/8;
+	209.0.0.0/8;
+	208.0.0.0/8;
+	207.0.0.0/8;
+	206.0.0.0/8;
+	205.0.0.0/8;
+	204.0.0.0/8;
+	199.0.0.0/8;
+	198.0.0.0/8;
+	192.0.0.0/8;
+	184.0.0.0/8;
+	173.0.0.0/8;
+	172.0.0.0/8;
+	170.0.0.0/8;
+	169.0.0.0/8;
+	168.0.0.0/8;
+	167.0.0.0/8;
+	166.0.0.0/8;
+	165.0.0.0/8;
+	164.0.0.0/8;
+	162.0.0.0/8;
+	161.0.0.0/8;
+	160.0.0.0/8;
+	159.0.0.0/8;
+	158.0.0.0/8;
+	157.0.0.0/8;
+	156.0.0.0/8;
+	155.0.0.0/8;
+	152.0.0.0/8;
+	149.0.0.0/8;
+	148.0.0.0/8;
+	147.0.0.0/8;
+	146.0.0.0/8;
+	144.0.0.0/8;
+	143.0.0.0/8;
+	140.0.0.0/8;
+	139.0.0.0/8;
+	138.0.0.0/8;
+	137.0.0.0/8;
+	136.0.0.0/8;
+	135.0.0.0/8;
+	134.0.0.0/8;
+	132.0.0.0/8;
+	131.0.0.0/8;
+	130.0.0.0/8;
+	129.0.0.0/8;
+	128.0.0.0/8;
+	108.0.0.0/8;
+	99.0.0.0/8;
+	98.0.0.0/8;
+	97.0.0.0/8;
+	96.0.0.0/8;
+	76.0.0.0/8;
+	75.0.0.0/8;
+	74.0.0.0/8;
+	73.0.0.0/8;
+	72.0.0.0/8;
+	71.0.0.0/8;
+	70.0.0.0/8;
+	69.0.0.0/8;
+	68.0.0.0/8;
+	67.0.0.0/8;
+	66.0.0.0/8;
+	65.0.0.0/8;
+	64.0.0.0/8;
+	63.0.0.0/8;
+	24.0.0.0/8;
+	7.0.0.0/8;
+	; Australia likes going through the US, LACNIC is closer
+	; these two blocks are just some of many
+	202.0.0.0/8;
+	203.0.0.0/8;
+
+}
+;
+; This region is served by proteus.solarscale.de which resides in RIPE
+; it serves regions RIPE, AFRINIC and APNIC although the traceroutes
+; from China seem to indicate as much latency for proteus as there is
+; for dione
+;
+region "RIPE" {
+	;
+	; for RIPE we'll just put the prefix 0.0.0.0/0
+	; this should work because the higher the prefix the more
+	; precedence the region has, let's give it a shot.
+	;
+	::/0;	
+	0.0.0.0/0;
+	192.168.0.0/16;
+	147.102.0.0/16;
+}
+zone "centroid.eu" {
+	centroid.eu,soa,3600,uranus.centroid.eu.,pjp.solarscale.de.,1258740680,3600,1800,7200,3600
+	centroid.eu,ns,3600,proteus.solarscale.de.
+	centroid.eu,ns,3600,uranus.centroid.eu.
+	centroid.eu,ns,3600,dione.solarscale.de.
+	; balance these two
+	centroid.eu,balance,3600,200.46.208.61
+	centroid.eu,balance,3600,62.75.160.180
+	;
+	centroid.eu,mx,3600,10,proteus.solarscale.de.
+	centroid.eu,aaaa,3600,2001:a60:f074::8
+	; and these two
+	www.centroid.eu,balance,3600,62.75.160.180
+	www.centroid.eu,balance,3600,200.46.208.61
+	;
+	www.centroid.eu,aaaa,3600,2001:a60:f074::8
+	uranus.centroid.eu,a,3600,212.114.251.91
+	uranus.centroid.eu,aaaa,3600,2001:a60:f000:99::2
+	proteus.centroid.eu,a,3600,62.75.160.180
+	dione.centroid.eu,a,3600,200.46.208.61
+	rosalind.centroid.eu,aaaa,3600,2001:a60:f074::8
+	irc.centroid.eu,a,3600,212.114.251.91
+	irc.centroid.eu,aaaa,3600,2001:a60:f074::24
+	irc2.centroid.eu,a,3600,200.46.208.61
+	localhost.centroid.eu,a,3600,127.0.0.1
+	localhost.centroid.eu,aaaa,3600,::1
+	; the below are new delegations (NS) records
+	;delegation.centroid.eu,delegate,3600,ns1.server.com.
+	; glue record
+	;ns1.server.com.,a,3600,10.0.0.1
+	;delegation.centroid.eu,delegate,3600,ns2.server.com.
+	; glue record
+	;ns2.server.com.,a,3600,10.0.0.2
+}
+zone "ipv6.centroid.eu" {
+	ipv6.centroid.eu,soa,3600,uranus.centroid.eu.,pjp.solarscale.de.,1244725285,3600,1800,7200,3600
+	ipv6.centroid.eu,aaaa,3600,2001:a60:f074::8
+	www.ipv6.centroid.eu,aaaa,3600,2001:a60:f074::8
+}
+zone "ipv6.solarscale.de" {
+	ipv6.solarscale.de,soa,3600,proteus.solarscale.de.,pjp.solarscale.de.,1234896563,3600,1800,7200,3600
+	ipv6.solarscale.de,ns,3600,proteus.solarscale.de.
+	ipv6.solarscale.de,ns,3600,uranus.centroid.eu.
+	ipv6.solarscale.de,aaaa,3600,2001:a60:f074::8
+	www.ipv6.solarscale.de,aaaa,3600,2001:a60:f074::8
+}
+zone "reverse dns" {
+	0.4.7.0.f.0.6.a.0.1.0.0.2.ip6.arpa.,soa,3600,proteus.solarscale.de.,pjp.solarscale.de.,1234896562,3600,1800,7200,3600
+	1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.4.7.0.f.0.6.a.0.1.0.0.2.ip6.arpa.,ptr,3600,uranus.centroid.eu.
+	2.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.4.7.0.f.0.6.a.0.1.0.0.2.ip6.arpa.,ptr,3600,setebos.centroid.eu.
+}
+
+; keep root hints disabled until we have a working resolver, even then it
+; should be REFUSED to 3rd parties, disabled after watching a reflection attack
+;zone "root hints" {
+;	.,hint,3600000,A.ROOT-SERVERS.NET.
+;	A.ROOT-SERVERS.NET.,a,3600000,198.41.0.4
+;	A.ROOT-SERVERS.NET.,aaaa,3600000,2001:503:BA3E::2:30
+;	.,hint,3600000,B.ROOT-SERVERS.NET.
+;	B.ROOT-SERVERS.NET.,a,3600000,192.228.79.201
+;	.,hint,3600000,C.ROOT-SERVERS.NET.
+;	C.ROOT-SERVERS.NET.,a,3600000,192.33.4.12
+;	.,hint,3600000,D.ROOT-SERVERS.NET.
+;	D.ROOT-SERVERS.NET.,a,3600000,199.7.91.13
+;	D.ROOT-SERVERS.NET.,aaaa,3600000,2001:500:2D::D
+;	.,hint,3600000,E.ROOT-SERVERS.NET.
+;	E.ROOT-SERVERS.NET.,a,3600000,192.203.230.10	
+;	.,hint,3600000,F.ROOT-SERVERS.NET.
+;	F.ROOT-SERVERS.NET.,a,3600000,192.5.5.241
+;	F.ROOT-SERVERS.NET.,aaaa,3600000,2001:500:2f::f
+;	.,hint,3600000,G.ROOT-SERVERS.NET.
+;	G.ROOT-SERVERS.NET.,a,3600000,192.112.36.4
+;	.,hint,3600000,H.ROOT-SERVERS.NET.
+;	H.ROOT-SERVERS.NET.,a,3600000,128.63.2.53
+;	H.ROOT-SERVERS.NET.,aaaa,3600000,2001:500:1::803f:235
+;	.,hint,3600000,I.ROOT-SERVERS.NET.
+;	I.ROOT-SERVERS.NET.,a,3600000,192.36.148.17
+;	.,hint,3600000,J.ROOT-SERVERS.NET.
+;	J.ROOT-SERVERS.NET.,a,3600000,192.58.128.30
+;	J.ROOT-SERVERS.NET.,aaaa,3600000,2001:503:C27::2:30
+;	.,hint,3600000,K.ROOT-SERVERS.NET.
+;	K.ROOT-SERVERS.NET.,a,3600000,193.0.14.129
+;	K.ROOT-SERVERS.NET.,aaaa,3600000,2001:7fd::1
+;	.,hint,3600000,L.ROOT-SERVERS.NET.
+;	L.ROOT-SERVERS.NET.,a,3600000,199.7.83.42
+;	L.ROOT-SERVERS.NET.,aaaa,3600000,2001:500:3::42
+;	.,hint,3600000,M.ROOT-SERVERS.NET.
+;	M.ROOT-SERVERS.NET.,a,3600000,202.12.27.33
+;	M.ROOT-SERVERS.NET.,aaaa,3600000,2001:dc3::35
+;}
blob - /dev/null
blob + 690de3a7d6eded3b2056d2affdbdc426894651f6 (mode 644)
--- /dev/null
+++ examples/example8.conf
@@ -0,0 +1,139 @@
+; sample config file that is in production.
+;
+version "6";
+options "cool stuff" {
+	interface "lo0";
+	interface "em0";
+
+	;bind 127.0.0.1;
+	;bind 192.168.34.4;
+
+	ratelimit-pps 6;
+
+	port 53;
+
+	;fork 2;
+	log;
+}
+
+axfrport "10053";
+
+axfr-for "these hosts" {
+	127.0.0.1;
+	::1;
+	192.168.0.0/16;
+}
+
+notify "these hosts" {
+	192.168.34.1;
+	192.168.35.1;
+	::1;
+}
+
+
+zone "centroid.eu" {
+	centroid.eu,soa,3600,uranus.centroid.eu.,pjp.solarscale.de.,2014051701,3600,1800,7200,3600
+	centroid.eu,ns,3600,proteus.solarscale.de.
+	centroid.eu,ns,3600,uranus.centroid.eu.
+	centroid.eu,ns,3600,dione.solarscale.de.
+	;
+	centroid.eu,a,3600,200.46.208.61
+	centroid.eu,a,3600,62.75.160.180
+	;
+	centroid.eu,SSHFP,3600,1,1,"9b3624f96a6766e73dc88505f945a564dee82e59"
+	centroid.eu,SSHFP,3600,1,2,"03310030886404f8f61d2e4dc445412788284ab04d0858bfa375eb80fc0d34f6"
+	centroid.eu,SSHFP,3600,2,1,"3de1bbae4de5ebd3571a169a50d6a5a4145dd7a9"
+	centroid.eu,SSHFP,3600,2,2,"bbd96ff7e7f629377d655d7fa9662502837b66cf9a2d24590df77acef66fe405"
+	centroid.eu,SSHFP,3600,3,1,"0ca455de4800c0f6c681e805e7bd86e511efb1fc"
+	centroid.eu,SSHFP,3600,3,2,"b330fd2288cf9e13c9ef68b1b0c0b20a10c16cc55f03cd3869cf1a49f06bed43"
+	;
+	centroid.eu,mx,3600,10,proteus.solarscale.de.
+	centroid.eu,aaaa,3600,2001:a60:f074::8
+	;
+	centroid.eu,spf,3600,"v=spf1 ip4:200.46.208.61 ~all"
+	; 
+	;
+	; NAPTR trial
+	centroid.eu,naptr,3600,10,10,"u","E2U+sip","!^.*$!sip:1234@sip.example.com!",centroid.eu
+	centroid.eu,naptr,3600,10,20,"u","E2U+sip","!^.*$!sip:1234@sip.example.com!",.
+
+	;
+	www.centroid.eu,a,3600,62.75.160.180
+	www.centroid.eu,a,3600,200.46.208.61
+	;
+	www.centroid.eu,aaaa,3600,2001:a60:f074::8
+	uranus.centroid.eu,a,3600,212.114.251.91
+	uranus.centroid.eu,aaaa,3600,2001:a60:f000:99::2
+	proteus.centroid.eu,a,3600,62.75.160.180
+	dione.centroid.eu,a,3600,200.46.208.61
+	rosalind.centroid.eu,aaaa,3600,2001:a60:f074::8
+	irc.centroid.eu,a,3600,212.114.251.91
+	irc.centroid.eu,aaaa,3600,2001:a60:f074::24
+	irc2.centroid.eu,a,3600,200.46.208.61
+	localhost.centroid.eu,a,3600,127.0.0.1
+	localhost.centroid.eu,aaaa,3600,::1
+	; the below are new delegations (NS) records
+	;delegation.centroid.eu,delegate,3600,ns1.server.com.
+	; glue record
+	;ns1.server.com.,a,3600,10.0.0.1
+	;delegation.centroid.eu,delegate,3600,ns2.server.com.
+	; glue record
+	;ns2.server.com.,a,3600,10.0.0.2
+}
+zone "ipv6.centroid.eu" {
+	ipv6.centroid.eu,soa,3600,uranus.centroid.eu.,pjp.solarscale.de.,1244725285,3600,1800,7200,3600
+	ipv6.centroid.eu,aaaa,3600,2001:a60:f074::8
+	www.ipv6.centroid.eu,aaaa,3600,2001:a60:f074::8
+}
+zone "ipv6.solarscale.de" {
+	ipv6.solarscale.de,soa,3600,proteus.solarscale.de.,pjp.solarscale.de.,1234896563,3600,1800,7200,3600
+	ipv6.solarscale.de,ns,3600,proteus.solarscale.de.
+	ipv6.solarscale.de,ns,3600,uranus.centroid.eu.
+	ipv6.solarscale.de,aaaa,3600,2001:a60:f074::8
+	www.ipv6.solarscale.de,aaaa,3600,2001:a60:f074::8
+}
+zone "reverse dns" {
+	0.4.7.0.f.0.6.a.0.1.0.0.2.ip6.arpa.,soa,3600,proteus.solarscale.de.,pjp.solarscale.de.,1234896562,3600,1800,7200,3600
+	1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.4.7.0.f.0.6.a.0.1.0.0.2.ip6.arpa.,ptr,3600,uranus.centroid.eu.
+	2.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.4.7.0.f.0.6.a.0.1.0.0.2.ip6.arpa.,ptr,3600,setebos.centroid.eu.
+}
+
+; keep root hints disabled until we have a working resolver, even then it
+; should be REFUSED to 3rd parties, disabled after watching a reflection attack
+;zone "root hints" {
+;	.,hint,3600000,A.ROOT-SERVERS.NET.
+;	A.ROOT-SERVERS.NET.,a,3600000,198.41.0.4
+;	A.ROOT-SERVERS.NET.,aaaa,3600000,2001:503:BA3E::2:30
+;	.,hint,3600000,B.ROOT-SERVERS.NET.
+;	B.ROOT-SERVERS.NET.,a,3600000,192.228.79.201
+;	.,hint,3600000,C.ROOT-SERVERS.NET.
+;	C.ROOT-SERVERS.NET.,a,3600000,192.33.4.12
+;	.,hint,3600000,D.ROOT-SERVERS.NET.
+;	D.ROOT-SERVERS.NET.,a,3600000,199.7.91.13
+;	D.ROOT-SERVERS.NET.,aaaa,3600000,2001:500:2D::D
+;	.,hint,3600000,E.ROOT-SERVERS.NET.
+;	E.ROOT-SERVERS.NET.,a,3600000,192.203.230.10	
+;	.,hint,3600000,F.ROOT-SERVERS.NET.
+;	F.ROOT-SERVERS.NET.,a,3600000,192.5.5.241
+;	F.ROOT-SERVERS.NET.,aaaa,3600000,2001:500:2f::f
+;	.,hint,3600000,G.ROOT-SERVERS.NET.
+;	G.ROOT-SERVERS.NET.,a,3600000,192.112.36.4
+;	.,hint,3600000,H.ROOT-SERVERS.NET.
+;	H.ROOT-SERVERS.NET.,a,3600000,128.63.2.53
+;	H.ROOT-SERVERS.NET.,aaaa,3600000,2001:500:1::803f:235
+;	.,hint,3600000,I.ROOT-SERVERS.NET.
+;	I.ROOT-SERVERS.NET.,a,3600000,192.36.148.17
+;	.,hint,3600000,J.ROOT-SERVERS.NET.
+;	J.ROOT-SERVERS.NET.,a,3600000,192.58.128.30
+;	J.ROOT-SERVERS.NET.,aaaa,3600000,2001:503:C27::2:30
+;	.,hint,3600000,K.ROOT-SERVERS.NET.
+;	K.ROOT-SERVERS.NET.,a,3600000,193.0.14.129
+;	K.ROOT-SERVERS.NET.,aaaa,3600000,2001:7fd::1
+;	.,hint,3600000,L.ROOT-SERVERS.NET.
+;	L.ROOT-SERVERS.NET.,a,3600000,199.7.83.42
+;	L.ROOT-SERVERS.NET.,aaaa,3600000,2001:500:3::42
+;	.,hint,3600000,M.ROOT-SERVERS.NET.
+;	M.ROOT-SERVERS.NET.,a,3600000,202.12.27.33
+;	M.ROOT-SERVERS.NET.,aaaa,3600000,2001:dc3::35
+;}
+;
blob - 5b86a472a9f70b2f48cbbeec2349a3859faf6b38 (mode 644)
blob + /dev/null
--- example11.conf
+++ /dev/null
@@ -1,123 +0,0 @@
-; sample config file that is in production.
-;
-version "6";
-
-; WARNING - 	the way wildcarddnsd originally implemented wildcarding is
-;		wrong and can cause damage on the Internet (DoS), it can	
-;		also cause damage on someone using wildcarding, so it's best
-;		to turn it off.  By default anyone wanting to turn wildcarding
-;		on should enable the "wildcard-only-for" block as shown below.
-;
-; To enable wildcarding uncomment the below...
-;
-;wildcard-only-for "wildcard everyone" {
-;        ::/0;
-;	 0.0.0.0/0;
-;        ; this is a comment
-;        ; if this option isn't mentioned, then wildcarding is off
-;        ; this will remove the -W option in the command line
-;}
-
-;
-; AXFR turned on...
-;
-
-axfr-for "these hosts" {
-	::1/128;
-	127.0.0.1/32;
-}
-
-
-axfrport "10053";
-
-
-zone "centroid.eu" {
-	centroid.eu,soa,3600,uranus.centroid.eu.,pjp.solarscale.de.,1258740680,3600,1800,7200,3600
-	centroid.eu,ns,3600,proteus.solarscale.de.
-	centroid.eu,ns,3600,uranus.centroid.eu.
-	centroid.eu,ns,3600,dione.solarscale.de.
-	; balance these two
-	centroid.eu,a,3600,200.46.208.61
-	centroid.eu,a,3600,62.75.160.180
-	;
-	centroid.eu,mx,3600,10,proteus.solarscale.de.
-	centroid.eu,aaaa,3600,2001:a60:f074::8
-	; and these two
-	www.centroid.eu,a,3600,62.75.160.180
-	www.centroid.eu,a,3600,200.46.208.61
-	;
-	www.centroid.eu,aaaa,3600,2001:a60:f074::8
-	uranus.centroid.eu,a,3600,212.114.251.91
-	uranus.centroid.eu,aaaa,3600,2001:a60:f000:99::2
-	proteus.centroid.eu,a,3600,62.75.160.180
-	dione.centroid.eu,a,3600,200.46.208.61
-	rosalind.centroid.eu,aaaa,3600,2001:a60:f074::8
-	irc.centroid.eu,a,3600,212.114.251.91
-	irc.centroid.eu,aaaa,3600,2001:a60:f074::24
-	irc2.centroid.eu,a,3600,200.46.208.61
-	localhost.centroid.eu,a,3600,127.0.0.1
-	localhost.centroid.eu,aaaa,3600,::1
-	; the below are new delegations (NS) records
-	delegation.centroid.eu,delegate,3600,ns1.server.com.
-	; glue record
-	ns1.server.com.,a,3600,10.0.0.1
-	delegation.centroid.eu,delegate,3600,ns2.server.com.
-	; glue record
-	ns2.server.com.,a,3600,10.0.0.2
-}
-zone "ipv6.centroid.eu" {
-	ipv6.centroid.eu,soa,3600,uranus.centroid.eu.,pjp.solarscale.de.,1244725285,3600,1800,7200,3600
-	ipv6.centroid.eu,aaaa,3600,2001:a60:f074::8
-	www.ipv6.centroid.eu,aaaa,3600,2001:a60:f074::8
-}
-zone "ipv6.solarscale.de" {
-	ipv6.solarscale.de,soa,3600,proteus.solarscale.de.,pjp.solarscale.de.,1234896563,3600,1800,7200,3600
-	ipv6.solarscale.de,ns,3600,proteus.solarscale.de.
-	ipv6.solarscale.de,ns,3600,uranus.centroid.eu.
-	ipv6.solarscale.de,aaaa,3600,2001:a60:f074::8
-	www.ipv6.solarscale.de,aaaa,3600,2001:a60:f074::8
-}
-zone "reverse dns" {
-	0.4.7.0.f.0.6.a.0.1.0.0.2.ip6.arpa.,soa,3600,proteus.solarscale.de.,pjp.solarscale.de.,1234896562,3600,1800,7200,3600
-	1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.4.7.0.f.0.6.a.0.1.0.0.2.ip6.arpa.,ptr,3600,uranus.centroid.eu.
-	2.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.4.7.0.f.0.6.a.0.1.0.0.2.ip6.arpa.,ptr,3600,setebos.centroid.eu.
-}
-
-; keep root hints disabled until we have a working resolver, even then it
-; should be REFUSED to 3rd parties, disabled after watching a reflection attack
-;zone "root hints" {
-;	.,hint,3600000,A.ROOT-SERVERS.NET.
-;	A.ROOT-SERVERS.NET.,a,3600000,198.41.0.4
-;	A.ROOT-SERVERS.NET.,aaaa,3600000,2001:503:BA3E::2:30
-;	.,hint,3600000,B.ROOT-SERVERS.NET.
-;	B.ROOT-SERVERS.NET.,a,3600000,192.228.79.201
-;	.,hint,3600000,C.ROOT-SERVERS.NET.
-;	C.ROOT-SERVERS.NET.,a,3600000,192.33.4.12
-;	.,hint,3600000,D.ROOT-SERVERS.NET.
-;	D.ROOT-SERVERS.NET.,a,3600000,199.7.91.13
-;	D.ROOT-SERVERS.NET.,aaaa,3600000,2001:500:2D::D
-;	.,hint,3600000,E.ROOT-SERVERS.NET.
-;	E.ROOT-SERVERS.NET.,a,3600000,192.203.230.10	
-;	.,hint,3600000,F.ROOT-SERVERS.NET.
-;	F.ROOT-SERVERS.NET.,a,3600000,192.5.5.241
-;	F.ROOT-SERVERS.NET.,aaaa,3600000,2001:500:2f::f
-;	.,hint,3600000,G.ROOT-SERVERS.NET.
-;	G.ROOT-SERVERS.NET.,a,3600000,192.112.36.4
-;	.,hint,3600000,H.ROOT-SERVERS.NET.
-;	H.ROOT-SERVERS.NET.,a,3600000,128.63.2.53
-;	H.ROOT-SERVERS.NET.,aaaa,3600000,2001:500:1::803f:235
-;	.,hint,3600000,I.ROOT-SERVERS.NET.
-;	I.ROOT-SERVERS.NET.,a,3600000,192.36.148.17
-;	.,hint,3600000,J.ROOT-SERVERS.NET.
-;	J.ROOT-SERVERS.NET.,a,3600000,192.58.128.30
-;	J.ROOT-SERVERS.NET.,aaaa,3600000,2001:503:C27::2:30
-;	.,hint,3600000,K.ROOT-SERVERS.NET.
-;	K.ROOT-SERVERS.NET.,a,3600000,193.0.14.129
-;	K.ROOT-SERVERS.NET.,aaaa,3600000,2001:7fd::1
-;	.,hint,3600000,L.ROOT-SERVERS.NET.
-;	L.ROOT-SERVERS.NET.,a,3600000,199.7.83.42
-;	L.ROOT-SERVERS.NET.,aaaa,3600000,2001:500:3::42
-;	.,hint,3600000,M.ROOT-SERVERS.NET.
-;	M.ROOT-SERVERS.NET.,a,3600000,202.12.27.33
-;	M.ROOT-SERVERS.NET.,aaaa,3600000,2001:dc3::35
-;}
blob - a4476a364230acbc2c25daef97b07f54d46c1995 (mode 644)
blob + /dev/null
--- example2.conf
+++ /dev/null
@@ -1,103 +0,0 @@
-#
-#
-# wildcarddns - RR configuration file
-#
-#
-
-version "6";
-
-; WARNING - 	the way wildcarddnsd originally implemented wildcarding is
-;		wrong and can cause damage on the Internet (DoS), it can	
-;		also cause damage on someone using wildcarding, so it's best
-;		to turn it off.  By default anyone wanting to turn wildcarding
-;		on should enable the "wildcard-only-for" block as shown below.
-;
-; comment the below to turn wildcarding off
-wildcard-only-for "wildcard everyone" {
-        0.0.0.0/0;
-	::/0;
-        ; this is a comment
-        ; if this option isn't mentioned, then wildcarding is off
-        ; this will remove the -W option in the command line
-}
-
-zone "default" {
-	;
-	; comments must be at the beginning of a new line, # and ; is allowed
-	;
-	;
-	; ALL RR's begine with:  zone,RR,time to live, ...
-	;
-	; names can be expressed with no trailing . or with trailing dot either way
-	; they'll be modified to have a trailing dot.
-	; example: www.google.com or www.google.com. becomes www.google.com.
-	;
-	; soa RR consists of: zone, SOA, ttl of RR, nameserver, responsible person, 
-	; serial, refresh, retry, expire, zone time to live (no spaces)
-	;
-	*,soa,3600,miranda.solarscale.de.,pjp.solarscale.de.,1,3600,1800,7200,3600
-	;
-	; a RR consists of:  zone, A, ttl of RR, IP  (no spaces)
-	; up to 10 addresses allowed
-	;
-	; miranda.solarscale.de
-	*,a,3600,192.168.0.20
-	;
-	; MX RR consists of:  zone, MX, ttl of RR, priority, name of MX  (no spaces)
-	; up to 10 addresses allowed
-	;
-	*,mx,3600,1,miranda.solarscale.de.
-	;
-	; AAAA RR consists of:  zone, AAAA, ttl of RR, IPv6 address  (no spaces)
-	; up to 10 addresses allowed
-	;
-	;*,aaaa,3600,::1
-	;*,aaaa,3600,3ffe:b00:1022::
-	;
-	; all of *.com looks like this:
-	;
-	;com,soa,3600,a.com,b.com,1,3600,1800,300000,3600
-	;
-	; CNAME RR consists of: zone, CNAME, ttl of RR, name 	(no spaces)
-	; CNAME support is currently not complete since a CNAME must attach the
-	; records it is pointing to... something to be done in the future I guess..
-	;
-	;*,cname,3600,neptune.local
-	;
-	; 
-	; PTR RR consists of: zone, PTR, ttl of RR, name	(no spaces)
-	;
-	arpa.,ptr,3600,miranda.solarscale.de.
-	;
-	; NS RR consists of:  zone, NS, ttl of RR, name		(no spaces)
-	;
-	*,ns,3600,miranda.solarscale.de.
-	;
-	; Got it?  good.
-	ferdinand.solarscale.de,a,3600,192.168.0.21
-	21.0.168.192.in-addr.arpa.,ptr,3600,ferdinand.solarscale.de.
-	ariel.solarscale.de,a,3600,192.168.0.17
-	17.0.168.192.in-addr.arpa.,ptr,3600,ariel.solarscale.de.
-	uranus.solarscale.de,a,3600,192.168.0.1
-	1.0.168.192.in-addr.arpa.,ptr,3600,uranus.solarscale.de.
-	area5.solarscale.de,a,3600,192.168.0.11
-	11.0.168.192.in-addr.arpa.,ptr,3600,area5.solarscale.de.
-	perdita.solarscale.de,a,3600,192.168.0.23
-	perdita.solarscale.de,txt,3600,"also does IPv6"
-	23.0.168.192.in-addr.arpa,ptr,3600,perdita.solarscale.de.
-	itojun.solarscale.de,cname,3600,perdita.solarscale.de.
-	desdemona.solarscale.de,a,3600,192.168.0.15
-	15.0.168.192.in-addr.arpa,ptr,3600,desdemona.solarscale.de.
-	rosalind.solarscale.de,a,3600,192.168.0.19
-	19.0.168.192.in-addr.arpa,ptr,3600,rosalind.solarscale.de.
-	titania.solarscale.de,a,3600,192.168.0.16
-	16.0.168.192.in-addr.arpa,ptr,3600,titania.solarscale.de.
-	cupid.solarscale.de,a,3600,192.168.0.12
-	12.0.168.192.in-addr.arpa,ptr,3600,cupid.solarscale.de.
-	;
-	; cvs
-	cvs.solarscale.de,cname,3600,miranda.solarscale.de.
-	; irc
-	irc.solarscale.de,cname,3600,ariel.solarscale.de.
-}
-; end
blob - b9ea0396853bd925dcdf5ff418fb74982a1bd808 (mode 644)
blob + /dev/null
--- example3.conf
+++ /dev/null
@@ -1,46 +0,0 @@
-# wildcarddns - RR configuration file
-version "6";
-
-zone "centroid.eu" {
-	# serial, refresh, retry, expire, zone time to live (no spaces)
-	margaret.centroid.eu,soa,3600,proteus.solarscale.de.,pjp.solarscale.de.,1234896561,3600,1800,7200,3600
-	margaret.centroid.eu,ns,3600,proteus.solarscale.de.
-	margaret.centroid.eu,ns,3600,uranus.centroid.eu.
-	;
-	margaret.centroid.eu,a,3600,212.114.251.91
-	margaret.centroid.eu,aaaa,3600,2001:a60:f074::2
-	;
-}
-
-zone "ipv6.solarscale.de" {
-		ipv6.solarscale.de,soa,3600,proteus.solarscale.de.,pjp.solarscale.de.,1234896561,3600,1800,7200,3600
-		ipv6.solarscale.de,ns,3600,proteus.solarscale.de.
-	ipv6.solarscale.de,ns,3600,uranus.centroid.eu.
-	ipv6.solarscale.de,ns,3600,margaret.centroid.eu.
-	;
-	ipv6.solarscale.de,aaaa,3600,2001:a60:f074::2
-	www.ipv6.solarscale.de,aaaa,3600,2001:a60:f074::2
-	;
-}
-
-zone "ipv6.centroid.eu" {
-	ipv6.centroid.eu,soa,3600,proteus.solarscale.de.,pjp.solarscale.de.,1234896561,3600,1800,7200,3600
-	ipv6.centroid.eu,ns,3600,proteus.solarscale.de.
-	ipv6.centroid.eu,ns,3600,uranus.centroid.eu.
-	ipv6.centroid.eu,ns,3600,margaret.centroid.eu.
-	;
-	ipv6.centroid.eu,aaaa,3600,2001:a60:f074::2
-	www.ipv6.centroid.eu,aaaa,3600,2001:a60:f074::2
-	;
-	;
-}
-
-zone "ip6.arpa" {
-	# reverse dns for IPv6
-	0.4.7.0.f.0.6.a.0.1.0.0.2.ip6.arpa.,soa,3600,proteus.solarscale.de.,pjp.solarscale.de.,1234896561,3600,1800,7200,3600
-	;
-	1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.4.7.0.f.0.6.a.0.1.0.0.2.ip6.arpa.,ptr,3600,uranus.centroid.eu.
-	2.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.4.7.0.f.0.6.a.0.1.0.0.2.ip6.arpa.,ptr,3600,margaret.centroid.eu.
-}
-
-; end
blob - 5fc6e57a1ea23fd2d9b4a21b214c2950abc1f7d6 (mode 644)
blob + /dev/null
--- example4.conf
+++ /dev/null
@@ -1,126 +0,0 @@
-; sample config file that is in production.
-;
-version "6";
-
-; WARNING - 	the way wildcarddnsd originally implemented wildcarding is
-;		wrong and can cause damage on the Internet (DoS), it can	
-;		also cause damage on someone using wildcarding, so it's best
-;		to turn it off.  By default anyone wanting to turn wildcarding
-;		on should enable the "wildcard-only-for" block as shown below.
-;
-; To enable wildcarding uncomment the below...
-;
-;wildcard-only-for "wildcard everyone" {
-;        ::/0;
-;	 0.0.0.0/0;
-;        ; this is a comment
-;        ; if this option isn't mentioned, then wildcarding is off
-;        ; this will remove the -W option in the command line
-;}
-
-; this is for the host dione.centroid.eu which is in Panama
-; it serves best for the Americas and Australia (?)
-
-region "LACNIC" {
-	192.168.0.0/16;
-	2001:A60:F074::/64;
-	; arin below
-	2001:0400::/23;
-	2001:1800::/23;
-	2001:4800::/23;
-	2600:0000::/12;
-	2610:0000::/23;
-	2620:0000::/23;
-	; lacnic
-	2001:1200::/23;
-	2800:0000::/12;
-}
-region "RIPE" {
-	;
-	; for RIPE we'll just put the prefix 0.0.0.0/0
-	; this should work because the higher the prefix the more
-	; precedence the region has, let's give it a shot.
-	;
-	0.0.0.0/0;
-	::/0;
-	; RIPE
-	2001:0600::/23;
-	2001:0800::/23;
-	2001:0A00::/23;
-	2001:1400::/23;
-	2001:1600::/23;
-	2001:1A00::/23;	
-	2001:1C00::/22;
-	2001:2000::/20;
-	2001:3000::/21;
-	2001:3800::/22;
-	2001:4000::/23;
-	2001:4600::/23;
-	2001:4A00::/23;
-	2001:4C00::/23;
-	2001:5000::/20;
-	2003:0000::/18;
-	2A00:0000::/12;
-	; APNIC
-	2001:0200::/23;
-	2001:0C00::/23;
-	2001:0E00::/23;
-	2001:4400::/23;
-	2001:8000::/19;
-	2001:A000::/20;
-	2001:B000::/20;
-	2400:0000::/12;
-	; AfriNIC
-	2001:4200::/23;
-	2C00:0000::/12;
-}
-zone "centroid.eu" {
-	centroid.eu,soa,3600,uranus.centroid.eu.,pjp.solarscale.de.,1258740680,3600,1800,7200,3600
-	centroid.eu,ns,3600,proteus.solarscale.de.
-	centroid.eu,ns,3600,uranus.centroid.eu.
-	centroid.eu,ns,3600,dione.solarscale.de.
-	; balance these two
-	centroid.eu,balance,3600,62.75.160.180
-	centroid.eu,balance,3600,192.168.0.24
-	centroid.eu,txt,3600,"1234\"\"1234"
-	text.centroid.eu,txt,3600,",,,,this is valid,,,too,,,"
-}
-
-; keep root hints disabled until we have a working resolver, even then it
-; should be REFUSED to 3rd parties, disabled after watching a reflection attack
-;zone "root hints" {
-;	.,hint,3600000,A.ROOT-SERVERS.NET.
-;	A.ROOT-SERVERS.NET.,a,3600000,198.41.0.4
-;	A.ROOT-SERVERS.NET.,aaaa,3600000,2001:503:BA3E::2:30
-;	.,hint,3600000,B.ROOT-SERVERS.NET.
-;	B.ROOT-SERVERS.NET.,a,3600000,192.228.79.201
-;	.,hint,3600000,C.ROOT-SERVERS.NET.
-;	C.ROOT-SERVERS.NET.,a,3600000,192.33.4.12
-;	.,hint,3600000,D.ROOT-SERVERS.NET.
-;	D.ROOT-SERVERS.NET.,a,3600000,199.7.91.13
-;	D.ROOT-SERVERS.NET.,aaaa,3600000,2001:500:2D::D
-;	.,hint,3600000,E.ROOT-SERVERS.NET.
-;	E.ROOT-SERVERS.NET.,a,3600000,192.203.230.10	
-;	.,hint,3600000,F.ROOT-SERVERS.NET.
-;	F.ROOT-SERVERS.NET.,a,3600000,192.5.5.241
-;	F.ROOT-SERVERS.NET.,aaaa,3600000,2001:500:2f::f
-;	.,hint,3600000,G.ROOT-SERVERS.NET.
-;	G.ROOT-SERVERS.NET.,a,3600000,192.112.36.4
-;	.,hint,3600000,H.ROOT-SERVERS.NET.
-;	H.ROOT-SERVERS.NET.,a,3600000,128.63.2.53
-;	H.ROOT-SERVERS.NET.,aaaa,3600000,2001:500:1::803f:235
-;	.,hint,3600000,I.ROOT-SERVERS.NET.
-;	I.ROOT-SERVERS.NET.,a,3600000,192.36.148.17
-;	.,hint,3600000,J.ROOT-SERVERS.NET.
-;	J.ROOT-SERVERS.NET.,a,3600000,192.58.128.30
-;	J.ROOT-SERVERS.NET.,aaaa,3600000,2001:503:C27::2:30
-;	.,hint,3600000,K.ROOT-SERVERS.NET.
-;	K.ROOT-SERVERS.NET.,a,3600000,193.0.14.129
-;	K.ROOT-SERVERS.NET.,aaaa,3600000,2001:7fd::1
-;	.,hint,3600000,L.ROOT-SERVERS.NET.
-;	L.ROOT-SERVERS.NET.,a,3600000,199.7.83.42
-;	L.ROOT-SERVERS.NET.,aaaa,3600000,2001:500:3::42
-;	.,hint,3600000,M.ROOT-SERVERS.NET.
-;	M.ROOT-SERVERS.NET.,a,3600000,202.12.27.33
-;	M.ROOT-SERVERS.NET.,aaaa,3600000,2001:dc3::35
-;}
blob - fb29589792bad2db850aac91fed19f12862c7bc7 (mode 644)
blob + /dev/null
--- example6.conf
+++ /dev/null
@@ -1,47 +0,0 @@
-; sample config file that is in production.
-;
-version "6";
-
-recurse-for "these hosts" {
-	127.0.0.1/32;
-	::1/128;
-}
-
-; keep root hints disabled until we have a working resolver, even then it
-; should be REFUSED to 3rd parties, disabled after watching a reflection attack
-;zone "root hints" {
-;	.,hint,3600000,A.ROOT-SERVERS.NET.
-;	A.ROOT-SERVERS.NET.,a,3600000,198.41.0.4
-;	A.ROOT-SERVERS.NET.,aaaa,3600000,2001:503:BA3E::2:30
-;	.,hint,3600000,B.ROOT-SERVERS.NET.
-;	B.ROOT-SERVERS.NET.,a,3600000,192.228.79.201
-;	.,hint,3600000,C.ROOT-SERVERS.NET.
-;	C.ROOT-SERVERS.NET.,a,3600000,192.33.4.12
-;	.,hint,3600000,D.ROOT-SERVERS.NET.
-;	D.ROOT-SERVERS.NET.,a,3600000,199.7.91.13
-;	D.ROOT-SERVERS.NET.,aaaa,3600000,2001:500:2D::D
-;	.,hint,3600000,E.ROOT-SERVERS.NET.
-;	E.ROOT-SERVERS.NET.,a,3600000,192.203.230.10	
-;	.,hint,3600000,F.ROOT-SERVERS.NET.
-;	F.ROOT-SERVERS.NET.,a,3600000,192.5.5.241
-;	F.ROOT-SERVERS.NET.,aaaa,3600000,2001:500:2f::f
-;	.,hint,3600000,G.ROOT-SERVERS.NET.
-;	G.ROOT-SERVERS.NET.,a,3600000,192.112.36.4
-;	.,hint,3600000,H.ROOT-SERVERS.NET.
-;	H.ROOT-SERVERS.NET.,a,3600000,128.63.2.53
-;	H.ROOT-SERVERS.NET.,aaaa,3600000,2001:500:1::803f:235
-;	.,hint,3600000,I.ROOT-SERVERS.NET.
-;	I.ROOT-SERVERS.NET.,a,3600000,192.36.148.17
-;	.,hint,3600000,J.ROOT-SERVERS.NET.
-;	J.ROOT-SERVERS.NET.,a,3600000,192.58.128.30
-;	J.ROOT-SERVERS.NET.,aaaa,3600000,2001:503:C27::2:30
-;	.,hint,3600000,K.ROOT-SERVERS.NET.
-;	K.ROOT-SERVERS.NET.,a,3600000,193.0.14.129
-;	K.ROOT-SERVERS.NET.,aaaa,3600000,2001:7fd::1
-;	.,hint,3600000,L.ROOT-SERVERS.NET.
-;	L.ROOT-SERVERS.NET.,a,3600000,199.7.83.42
-;	L.ROOT-SERVERS.NET.,aaaa,3600000,2001:500:3::42
-;	.,hint,3600000,M.ROOT-SERVERS.NET.
-;	M.ROOT-SERVERS.NET.,a,3600000,202.12.27.33
-;	M.ROOT-SERVERS.NET.,aaaa,3600000,2001:dc3::35
-;}
blob - 8369bfe67630069f39502afcd7e978e9d1e19658 (mode 644)
blob + /dev/null
--- example7.conf
+++ /dev/null
@@ -1,219 +0,0 @@
-; sample config file that is in production.
-;
-version "6";
-
-; WARNING - 	the way wildcarddnsd originally implemented wildcarding is
-;		wrong and can cause damage on the Internet (DoS), it can	
-;		also cause damage on someone using wildcarding, so it's best
-;		to turn it off.  By default anyone wanting to turn wildcarding
-;		on should enable the "wildcard-only-for" block as shown below.
-;
-; To enable wildcarding uncomment the below...
-;
-;wildcard-only-for "wildcard everyone" {
-;        ::/0;
-;	 0.0.0.0/0;
-;        ; this is a comment
-;        ; if this option isn't mentioned, then wildcarding is off
-;        ; this will remove the -W option in the command line
-;}
-
-
-
-; this is for the host dione.centroid.eu which is in Panama
-; it serves best for the Americas and Australia (?)
-
-region "LACNIC" {
-	;
-	; ARIN and LACNIC blocks below
-	;
-	; lacnic netblocks
-	186.0.0.0/8;
-	187.0.0.0/8;
-	189.0.0.0/8;
-	190.0.0.0/8;
-	191.0.0.0/8;
-	200.0.0.0/8;
-	201.0.0.0/8;
-	; arin netblocks 
-	216.0.0.0/8;
-	209.0.0.0/8;
-	208.0.0.0/8;
-	207.0.0.0/8;
-	206.0.0.0/8;
-	205.0.0.0/8;
-	204.0.0.0/8;
-	199.0.0.0/8;
-	198.0.0.0/8;
-	192.0.0.0/8;
-	184.0.0.0/8;
-	173.0.0.0/8;
-	172.0.0.0/8;
-	170.0.0.0/8;
-	169.0.0.0/8;
-	168.0.0.0/8;
-	167.0.0.0/8;
-	166.0.0.0/8;
-	165.0.0.0/8;
-	164.0.0.0/8;
-	162.0.0.0/8;
-	161.0.0.0/8;
-	160.0.0.0/8;
-	159.0.0.0/8;
-	158.0.0.0/8;
-	157.0.0.0/8;
-	156.0.0.0/8;
-	155.0.0.0/8;
-	152.0.0.0/8;
-	149.0.0.0/8;
-	148.0.0.0/8;
-	147.0.0.0/8;
-	146.0.0.0/8;
-	144.0.0.0/8;
-	143.0.0.0/8;
-	140.0.0.0/8;
-	139.0.0.0/8;
-	138.0.0.0/8;
-	137.0.0.0/8;
-	136.0.0.0/8;
-	135.0.0.0/8;
-	134.0.0.0/8;
-	132.0.0.0/8;
-	131.0.0.0/8;
-	130.0.0.0/8;
-	129.0.0.0/8;
-	128.0.0.0/8;
-	108.0.0.0/8;
-	99.0.0.0/8;
-	98.0.0.0/8;
-	97.0.0.0/8;
-	96.0.0.0/8;
-	76.0.0.0/8;
-	75.0.0.0/8;
-	74.0.0.0/8;
-	73.0.0.0/8;
-	72.0.0.0/8;
-	71.0.0.0/8;
-	70.0.0.0/8;
-	69.0.0.0/8;
-	68.0.0.0/8;
-	67.0.0.0/8;
-	66.0.0.0/8;
-	65.0.0.0/8;
-	64.0.0.0/8;
-	63.0.0.0/8;
-	24.0.0.0/8;
-	7.0.0.0/8;
-	; Australia likes going through the US, LACNIC is closer
-	; these two blocks are just some of many
-	202.0.0.0/8;
-	203.0.0.0/8;
-
-}
-;
-; This region is served by proteus.solarscale.de which resides in RIPE
-; it serves regions RIPE, AFRINIC and APNIC although the traceroutes
-; from China seem to indicate as much latency for proteus as there is
-; for dione
-;
-region "RIPE" {
-	;
-	; for RIPE we'll just put the prefix 0.0.0.0/0
-	; this should work because the higher the prefix the more
-	; precedence the region has, let's give it a shot.
-	;
-	::/0;	
-	0.0.0.0/0;
-	192.168.0.0/16;
-	147.102.0.0/16;
-}
-zone "centroid.eu" {
-	centroid.eu,soa,3600,uranus.centroid.eu.,pjp.solarscale.de.,1258740680,3600,1800,7200,3600
-	centroid.eu,ns,3600,proteus.solarscale.de.
-	centroid.eu,ns,3600,uranus.centroid.eu.
-	centroid.eu,ns,3600,dione.solarscale.de.
-	; balance these two
-	centroid.eu,balance,3600,200.46.208.61
-	centroid.eu,balance,3600,62.75.160.180
-	;
-	centroid.eu,mx,3600,10,proteus.solarscale.de.
-	centroid.eu,aaaa,3600,2001:a60:f074::8
-	; and these two
-	www.centroid.eu,balance,3600,62.75.160.180
-	www.centroid.eu,balance,3600,200.46.208.61
-	;
-	www.centroid.eu,aaaa,3600,2001:a60:f074::8
-	uranus.centroid.eu,a,3600,212.114.251.91
-	uranus.centroid.eu,aaaa,3600,2001:a60:f000:99::2
-	proteus.centroid.eu,a,3600,62.75.160.180
-	dione.centroid.eu,a,3600,200.46.208.61
-	rosalind.centroid.eu,aaaa,3600,2001:a60:f074::8
-	irc.centroid.eu,a,3600,212.114.251.91
-	irc.centroid.eu,aaaa,3600,2001:a60:f074::24
-	irc2.centroid.eu,a,3600,200.46.208.61
-	localhost.centroid.eu,a,3600,127.0.0.1
-	localhost.centroid.eu,aaaa,3600,::1
-	; the below are new delegations (NS) records
-	;delegation.centroid.eu,delegate,3600,ns1.server.com.
-	; glue record
-	;ns1.server.com.,a,3600,10.0.0.1
-	;delegation.centroid.eu,delegate,3600,ns2.server.com.
-	; glue record
-	;ns2.server.com.,a,3600,10.0.0.2
-}
-zone "ipv6.centroid.eu" {
-	ipv6.centroid.eu,soa,3600,uranus.centroid.eu.,pjp.solarscale.de.,1244725285,3600,1800,7200,3600
-	ipv6.centroid.eu,aaaa,3600,2001:a60:f074::8
-	www.ipv6.centroid.eu,aaaa,3600,2001:a60:f074::8
-}
-zone "ipv6.solarscale.de" {
-	ipv6.solarscale.de,soa,3600,proteus.solarscale.de.,pjp.solarscale.de.,1234896563,3600,1800,7200,3600
-	ipv6.solarscale.de,ns,3600,proteus.solarscale.de.
-	ipv6.solarscale.de,ns,3600,uranus.centroid.eu.
-	ipv6.solarscale.de,aaaa,3600,2001:a60:f074::8
-	www.ipv6.solarscale.de,aaaa,3600,2001:a60:f074::8
-}
-zone "reverse dns" {
-	0.4.7.0.f.0.6.a.0.1.0.0.2.ip6.arpa.,soa,3600,proteus.solarscale.de.,pjp.solarscale.de.,1234896562,3600,1800,7200,3600
-	1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.4.7.0.f.0.6.a.0.1.0.0.2.ip6.arpa.,ptr,3600,uranus.centroid.eu.
-	2.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.4.7.0.f.0.6.a.0.1.0.0.2.ip6.arpa.,ptr,3600,setebos.centroid.eu.
-}
-
-; keep root hints disabled until we have a working resolver, even then it
-; should be REFUSED to 3rd parties, disabled after watching a reflection attack
-;zone "root hints" {
-;	.,hint,3600000,A.ROOT-SERVERS.NET.
-;	A.ROOT-SERVERS.NET.,a,3600000,198.41.0.4
-;	A.ROOT-SERVERS.NET.,aaaa,3600000,2001:503:BA3E::2:30
-;	.,hint,3600000,B.ROOT-SERVERS.NET.
-;	B.ROOT-SERVERS.NET.,a,3600000,192.228.79.201
-;	.,hint,3600000,C.ROOT-SERVERS.NET.
-;	C.ROOT-SERVERS.NET.,a,3600000,192.33.4.12
-;	.,hint,3600000,D.ROOT-SERVERS.NET.
-;	D.ROOT-SERVERS.NET.,a,3600000,199.7.91.13
-;	D.ROOT-SERVERS.NET.,aaaa,3600000,2001:500:2D::D
-;	.,hint,3600000,E.ROOT-SERVERS.NET.
-;	E.ROOT-SERVERS.NET.,a,3600000,192.203.230.10	
-;	.,hint,3600000,F.ROOT-SERVERS.NET.
-;	F.ROOT-SERVERS.NET.,a,3600000,192.5.5.241
-;	F.ROOT-SERVERS.NET.,aaaa,3600000,2001:500:2f::f
-;	.,hint,3600000,G.ROOT-SERVERS.NET.
-;	G.ROOT-SERVERS.NET.,a,3600000,192.112.36.4
-;	.,hint,3600000,H.ROOT-SERVERS.NET.
-;	H.ROOT-SERVERS.NET.,a,3600000,128.63.2.53
-;	H.ROOT-SERVERS.NET.,aaaa,3600000,2001:500:1::803f:235
-;	.,hint,3600000,I.ROOT-SERVERS.NET.
-;	I.ROOT-SERVERS.NET.,a,3600000,192.36.148.17
-;	.,hint,3600000,J.ROOT-SERVERS.NET.
-;	J.ROOT-SERVERS.NET.,a,3600000,192.58.128.30
-;	J.ROOT-SERVERS.NET.,aaaa,3600000,2001:503:C27::2:30
-;	.,hint,3600000,K.ROOT-SERVERS.NET.
-;	K.ROOT-SERVERS.NET.,a,3600000,193.0.14.129
-;	K.ROOT-SERVERS.NET.,aaaa,3600000,2001:7fd::1
-;	.,hint,3600000,L.ROOT-SERVERS.NET.
-;	L.ROOT-SERVERS.NET.,a,3600000,199.7.83.42
-;	L.ROOT-SERVERS.NET.,aaaa,3600000,2001:500:3::42
-;	.,hint,3600000,M.ROOT-SERVERS.NET.
-;	M.ROOT-SERVERS.NET.,a,3600000,202.12.27.33
-;	M.ROOT-SERVERS.NET.,aaaa,3600000,2001:dc3::35
-;}
blob - 690de3a7d6eded3b2056d2affdbdc426894651f6 (mode 644)
blob + /dev/null
--- example8.conf
+++ /dev/null
@@ -1,139 +0,0 @@
-; sample config file that is in production.
-;
-version "6";
-options "cool stuff" {
-	interface "lo0";
-	interface "em0";
-
-	;bind 127.0.0.1;
-	;bind 192.168.34.4;
-
-	ratelimit-pps 6;
-
-	port 53;
-
-	;fork 2;
-	log;
-}
-
-axfrport "10053";
-
-axfr-for "these hosts" {
-	127.0.0.1;
-	::1;
-	192.168.0.0/16;
-}
-
-notify "these hosts" {
-	192.168.34.1;
-	192.168.35.1;
-	::1;
-}
-
-
-zone "centroid.eu" {
-	centroid.eu,soa,3600,uranus.centroid.eu.,pjp.solarscale.de.,2014051701,3600,1800,7200,3600
-	centroid.eu,ns,3600,proteus.solarscale.de.
-	centroid.eu,ns,3600,uranus.centroid.eu.
-	centroid.eu,ns,3600,dione.solarscale.de.
-	;
-	centroid.eu,a,3600,200.46.208.61
-	centroid.eu,a,3600,62.75.160.180
-	;
-	centroid.eu,SSHFP,3600,1,1,"9b3624f96a6766e73dc88505f945a564dee82e59"
-	centroid.eu,SSHFP,3600,1,2,"03310030886404f8f61d2e4dc445412788284ab04d0858bfa375eb80fc0d34f6"
-	centroid.eu,SSHFP,3600,2,1,"3de1bbae4de5ebd3571a169a50d6a5a4145dd7a9"
-	centroid.eu,SSHFP,3600,2,2,"bbd96ff7e7f629377d655d7fa9662502837b66cf9a2d24590df77acef66fe405"
-	centroid.eu,SSHFP,3600,3,1,"0ca455de4800c0f6c681e805e7bd86e511efb1fc"
-	centroid.eu,SSHFP,3600,3,2,"b330fd2288cf9e13c9ef68b1b0c0b20a10c16cc55f03cd3869cf1a49f06bed43"
-	;
-	centroid.eu,mx,3600,10,proteus.solarscale.de.
-	centroid.eu,aaaa,3600,2001:a60:f074::8
-	;
-	centroid.eu,spf,3600,"v=spf1 ip4:200.46.208.61 ~all"
-	; 
-	;
-	; NAPTR trial
-	centroid.eu,naptr,3600,10,10,"u","E2U+sip","!^.*$!sip:1234@sip.example.com!",centroid.eu
-	centroid.eu,naptr,3600,10,20,"u","E2U+sip","!^.*$!sip:1234@sip.example.com!",.
-
-	;
-	www.centroid.eu,a,3600,62.75.160.180
-	www.centroid.eu,a,3600,200.46.208.61
-	;
-	www.centroid.eu,aaaa,3600,2001:a60:f074::8
-	uranus.centroid.eu,a,3600,212.114.251.91
-	uranus.centroid.eu,aaaa,3600,2001:a60:f000:99::2
-	proteus.centroid.eu,a,3600,62.75.160.180
-	dione.centroid.eu,a,3600,200.46.208.61
-	rosalind.centroid.eu,aaaa,3600,2001:a60:f074::8
-	irc.centroid.eu,a,3600,212.114.251.91
-	irc.centroid.eu,aaaa,3600,2001:a60:f074::24
-	irc2.centroid.eu,a,3600,200.46.208.61
-	localhost.centroid.eu,a,3600,127.0.0.1
-	localhost.centroid.eu,aaaa,3600,::1
-	; the below are new delegations (NS) records
-	;delegation.centroid.eu,delegate,3600,ns1.server.com.
-	; glue record
-	;ns1.server.com.,a,3600,10.0.0.1
-	;delegation.centroid.eu,delegate,3600,ns2.server.com.
-	; glue record
-	;ns2.server.com.,a,3600,10.0.0.2
-}
-zone "ipv6.centroid.eu" {
-	ipv6.centroid.eu,soa,3600,uranus.centroid.eu.,pjp.solarscale.de.,1244725285,3600,1800,7200,3600
-	ipv6.centroid.eu,aaaa,3600,2001:a60:f074::8
-	www.ipv6.centroid.eu,aaaa,3600,2001:a60:f074::8
-}
-zone "ipv6.solarscale.de" {
-	ipv6.solarscale.de,soa,3600,proteus.solarscale.de.,pjp.solarscale.de.,1234896563,3600,1800,7200,3600
-	ipv6.solarscale.de,ns,3600,proteus.solarscale.de.
-	ipv6.solarscale.de,ns,3600,uranus.centroid.eu.
-	ipv6.solarscale.de,aaaa,3600,2001:a60:f074::8
-	www.ipv6.solarscale.de,aaaa,3600,2001:a60:f074::8
-}
-zone "reverse dns" {
-	0.4.7.0.f.0.6.a.0.1.0.0.2.ip6.arpa.,soa,3600,proteus.solarscale.de.,pjp.solarscale.de.,1234896562,3600,1800,7200,3600
-	1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.4.7.0.f.0.6.a.0.1.0.0.2.ip6.arpa.,ptr,3600,uranus.centroid.eu.
-	2.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.4.7.0.f.0.6.a.0.1.0.0.2.ip6.arpa.,ptr,3600,setebos.centroid.eu.
-}
-
-; keep root hints disabled until we have a working resolver, even then it
-; should be REFUSED to 3rd parties, disabled after watching a reflection attack
-;zone "root hints" {
-;	.,hint,3600000,A.ROOT-SERVERS.NET.
-;	A.ROOT-SERVERS.NET.,a,3600000,198.41.0.4
-;	A.ROOT-SERVERS.NET.,aaaa,3600000,2001:503:BA3E::2:30
-;	.,hint,3600000,B.ROOT-SERVERS.NET.
-;	B.ROOT-SERVERS.NET.,a,3600000,192.228.79.201
-;	.,hint,3600000,C.ROOT-SERVERS.NET.
-;	C.ROOT-SERVERS.NET.,a,3600000,192.33.4.12
-;	.,hint,3600000,D.ROOT-SERVERS.NET.
-;	D.ROOT-SERVERS.NET.,a,3600000,199.7.91.13
-;	D.ROOT-SERVERS.NET.,aaaa,3600000,2001:500:2D::D
-;	.,hint,3600000,E.ROOT-SERVERS.NET.
-;	E.ROOT-SERVERS.NET.,a,3600000,192.203.230.10	
-;	.,hint,3600000,F.ROOT-SERVERS.NET.
-;	F.ROOT-SERVERS.NET.,a,3600000,192.5.5.241
-;	F.ROOT-SERVERS.NET.,aaaa,3600000,2001:500:2f::f
-;	.,hint,3600000,G.ROOT-SERVERS.NET.
-;	G.ROOT-SERVERS.NET.,a,3600000,192.112.36.4
-;	.,hint,3600000,H.ROOT-SERVERS.NET.
-;	H.ROOT-SERVERS.NET.,a,3600000,128.63.2.53
-;	H.ROOT-SERVERS.NET.,aaaa,3600000,2001:500:1::803f:235
-;	.,hint,3600000,I.ROOT-SERVERS.NET.
-;	I.ROOT-SERVERS.NET.,a,3600000,192.36.148.17
-;	.,hint,3600000,J.ROOT-SERVERS.NET.
-;	J.ROOT-SERVERS.NET.,a,3600000,192.58.128.30
-;	J.ROOT-SERVERS.NET.,aaaa,3600000,2001:503:C27::2:30
-;	.,hint,3600000,K.ROOT-SERVERS.NET.
-;	K.ROOT-SERVERS.NET.,a,3600000,193.0.14.129
-;	K.ROOT-SERVERS.NET.,aaaa,3600000,2001:7fd::1
-;	.,hint,3600000,L.ROOT-SERVERS.NET.
-;	L.ROOT-SERVERS.NET.,a,3600000,199.7.83.42
-;	L.ROOT-SERVERS.NET.,aaaa,3600000,2001:500:3::42
-;	.,hint,3600000,M.ROOT-SERVERS.NET.
-;	M.ROOT-SERVERS.NET.,a,3600000,202.12.27.33
-;	M.ROOT-SERVERS.NET.,aaaa,3600000,2001:dc3::35
-;}
-;