cat /etc/default/pdnsd
# do we start pdnsd ?
START_DAEMON=yes
# auto-mode, overrides /etc/pdsnd.conf if set [see /usr/share/pdnsd/]
AUTO_MODE=
# optional CLI options to pass to pdnsd(
START_OPTIONS=
конфиг как есть
cat /etc/pdnsd.conf
// Read the pdnsd.conf(5) manpage for an explanation of the options.
/* Note: this file is overriden by automatic config files when
/etc/default/pdnsd AUTO_MODE is set and that
/usr/share/pdnsd/pdnsd-$AUTO_MODE.conf exists
*/
global {
perm_cache=1024;
cache_dir="/var/cache/pdnsd";
run_as="pdnsd";
// Use eth0 here if you want to allow other
server_ip = 0.0.0.0; // machines on your network to query pdnsd.
status_ctl = on;
// paranoid = off;
query_method=tcp_udp; // pdnsd must be compiled with tcp
// query support for this to work.
min_ttl=15m; // Retain cached entries at least 15 minutes.
max_ttl=1w; // One week.
timeout=10; // Global timeout option (10 seconds).
// Don't enable if you don't recurse yourself, can lead to problems
// delegation_only="com","net";
}
/* with status_ctl=on and resolvconf installed, this will work out from the box
this is the recommended setup for mobile machines */
server {
label="resolvconf";
}
/*
// This section is meant for resolving from root servers.
server {
label = "root-servers";
root_server=on;
ip = 198.41.0.4
, 192.228.79.201
, 192.33.4.12
, 128.8.10.90
, 192.203.230.10
, 192.5.5.241
, 192.112.36.4
, 128.63.2.53
// , 192.36.148.17
// , 192.58.128.30
// , 193.0.14.129
// , 198.32.64.12
// , 202.12.27.33
;
timeout = 5;
uptest = query;
interval = 30m; // Test every half hour.
ping_timeout = 300; // 30 seconds.
purge_cache = off;
exclude = .localdomain;
policy = included;
preset = off;
}
*/
source {
owner=localhost;
// serve_aliases=on;
file="/etc/hosts";
}
rr {
name=localhost;
reverse=on;
a=127.0.0.1;
owner=localhost;
soa=localhost,root.localhost,42,86400,900,86400,86400;
}
rr
{
name = ya.ru;
a = 192.168.5.1;
}
rr
{
name = 123456789.ru;
a = 192.168.5.1;
}
///*
neg {
name=doubleclick.net;
types=domain; // This will also block xxx.doubleclick.net, etc.
}
//*/
/*
neg {
name=bad.server.com; // Badly behaved server you don't want to connect to.
types=A,AAAA;
}
*/
/* vim:set ft=c: */
а вот это интересно
после изменения /etc/default/pdnsd
$ sudo /etc/init.d/pdnsd restart
* Stopping pdnsd [ OK ]
* Starting pdnsd [ OK ]
Error: could not open socket /var/cache/pdnsd/pdnsd.status: No such file or directory
потом запустился
$ sudo /etc/init.d/pdnsd restart
* Stopping pdnsd [ OK ]
* Reloading Squid configuration files
* Starting pdnsd [ OK ]
* Reloading Squid configuration files
Пользователь решил продолжить мысль 18 Февраля 2010, 17:47:29:
>ipconfig /flushdns
Настройка протокола IP для Windows
Успешно сброшен кэш распознавателя DNS.
>nslookup doubleclick.net
*** Can't find server name for address 192.168.5.1: Non-existent domain
*** Default servers are not available
Server: UnKnown
Address: 192.168.5.1
*** No address (A) records available for doubleclick.net
>nslookup ya.ru
*** Can't find server name for address 192.168.5.1: Non-existent domain
*** Default servers are not available
Server: UnKnown
Address: 192.168.5.1
Name: ya.ru
Address: 192.168.5.1
^^ всё как есть, с клиента
заработало
только на кой pdnsd при рестарте squid force-reload устраивает
Пользователь решил продолжить мысль 18 Февраля 2010, 21:57:58:
Mam(O)n, спасибо
проверил pdnsd debian 5.0.4, там neg и rr директивы начинают работать после изменения в /etc/default/pdnsd
Тема: pdnsd, Блокирование не желательных доменных имен (Прочитано 4896 раз)
