-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
I am having problems with a named that I built from sources... Not
SRPM, but tar.xx.
I can do lookups all day on the box that it's running on. However,
when I try to lookup from another on my LAN, it fails. Can't find
server, NXDOMAIN blah blah... Anyone else seen this with source built
bind-9.1.0?
Here's my configs.
named.boot;
;
; a caching only nameserver config
;
directory /var/named
cache . named.ca
primary gillnet.org gillnet.org
primary 0.0.127.in-addr.arpa 127.0.0
primary 5.168.192.in-addr.arpa 192.168.5
forwarders 206.13.28.142
named.conf;
acl untrusted { 0.0.0.0/8; 1.0.0.0/8; 2.0.0.0/8;
192.0.2.0/24; 224.0.0.0/3; 10.0.0.0/8; 172.16.0.0/12; 192.168.0.0/16;
};
acl trusted { 127.0.0.0/24; 192.168.5.0/24; };
options {
directory "/var/named";
auth-nxdomain yes; # conform to RFC1035
notify no;
zone-statistics yes;
listen-on { 127.0.0.1; };
listen-on { 192.168.5.1; };
listen-on-v6 { none; };
lame-ttl 300;
max-ncache-ttl 10800;
max-cache-ttl 259200;
allow-query { trusted; };
allow-transfer { trusted; };
allow-recursion { trusted; };
blackhole { untrusted; };
version "Fuck Off";
forwarders{
206.13.28.142;
206.13.29.11;
};
$
// firewall and things are not working out:
query-source port 53;
};
// Control access to BIND version number to
// users at example.com only.
// Ref: BUGTRAQ posting from LaMont Jones
// <[EMAIL PROTECTED]> on 1998-06-12.
//zone "bind" chaos{
// type master;
// file "bind";
// allow-query { localhost; trusted; };
// allow-transfer { none; };
//};
logging{
category lame-servers{
null;
};
};
zone "." {
type hint;
file "root.hints";
};
zone "gillnet.org" {
type master;
file "gillnet.org";
notify no;
};
zone "0.0.127.IN-ADDR.ARPA" {
type master;
file "127.0.0";
allow-query { trusted; };
allow-transfer { trusted; };
};
zone "5.168.192.IN-ADDR.ARPA" {
type master;
file "192.168.5";
notify no;
};
I tried remming out the acls and the allow-xxxxx lines with no
changes...
Would appreciate any help...
-----BEGIN PGP SIGNATURE-----
Version: PGPfreeware 6.5.8 for non-commercial use <http://www.pgp.com>
iQA/AwUBOqzx7BeamMdwy9TXEQJT5wCg0wWns7IxmV/Eg11Qzju8kgq8QkIAn2me
MrD+t+Nw9jPMat+d2lM5eLzG
=S3aV
-----END PGP SIGNATURE-----
_______________________________________________
Redhat-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list
