# limitations under the License.
#
-include_recipe "networking"
-
-ipv4_clients = []
-ipv6_clients = []
-
package "bind9"
-service "bind9" do
+service "named" do
action [:enable, :start]
- supports :status => true, :restart => true, :reload => true
end
template "/etc/bind/named.conf.local" do
source "named.local.erb"
owner "root"
group "root"
- mode 0o644
- notifies :restart, "service[bind9]"
+ mode "644"
+ notifies :restart, "service[named]"
end
template "/etc/bind/named.conf.options" do
source "named.options.erb"
owner "root"
group "root"
- mode 0o644
- variables :ipv4_clients => ipv4_clients, :ipv6_clients => ipv6_clients
- notifies :restart, "service[bind9]"
+ mode "644"
+ notifies :restart, "service[named]"
end
template "/etc/bind/db.10" do
source "db.10.erb"
owner "root"
group "root"
- mode 0o644
- notifies :reload, "service[bind9]"
+ mode "644"
+ notifies :reload, "service[named]"
end
firewall_rule "accept-dns-udp" do
action :accept
- source "net"
- dest "fw"
- proto "udp"
+ context :incoming
+ protocol :udp
dest_ports "domain"
- source_ports "-"
end
firewall_rule "accept-dns-tcp" do
action :accept
- source "net"
- dest "fw"
- proto "tcp:syn"
+ context :incoming
+ protocol :tcp
dest_ports "domain"
- source_ports "-"
end