Re: Query denied errors on PTR records for delegated zone

2010-02-24 Thread Matus UHLAR - fantomas
Pollard > [mailto:j.deboynepollard-newsgro...@ntlworld.com] > Sent: Wednesday, February 24, 2010 4:36 AM > To: Lightner, Jeff; BIND users mailing list > Subject: Re: Query denied errors on PTR records for delegated zone > > I did run into some oddities in setting up arpa zo

Re: Query denied errors on PTR records for delegated zone

2010-02-24 Thread Matus UHLAR - fantomas
On 24.02.10 08:31, Lightner, Jeff wrote: > From: "Lightner, Jeff" > Date: Wed, 24 Feb 2010 08:31:44 -0500 > Subject: RE: Query denied errors on PTR records for delegated zone > To: Jonathan de Boyne Pollard , > BIND users mailing list > > Nice write up. I

RE: Query denied errors on PTR records for delegated zone

2010-02-24 Thread Lightner, Jeff
ry denied errors on PTR records for delegated zone I did run into some oddities in setting up arpa zones to be able to query them inside my network and outside my network [...] You've hit one of the several reasons that RFC 2317 style delegation should be avoided <http://home

Re: Query denied errors on PTR records for delegated zone

2010-02-23 Thread Matus UHLAR - fantomas
On 23.02.10 08:47, Lightner, Jeff wrote: > I'm running 9.3 on RHEL 5.4. > > My options are: > > options { > directory "/var/named"; > query-source address 10.0.0.3; > allow-query { internaldns; externaldns; dswadnsalias; }; > allow-recursion { internaldns; extern

RE: Query denied errors on PTR records for delegated zone

2010-02-23 Thread Lightner, Jeff
tner=water@lists.isc.org [mailto:bind-users-bounces+jlightner=water@lists.isc.org] On Behalf Of Matus UHLAR - fantomas Sent: Tuesday, February 23, 2010 4:19 AM To: bind-users@lists.isc.org Subject: Re: Query denied errors on PTR records for delegated zone On 22.02.10 16:26, Geoff Sweet wr

Re: Query denied errors on PTR records for delegated zone

2010-02-23 Thread Matus UHLAR - fantomas
On 22.02.10 16:26, Geoff Sweet wrote: > I have an on-going problem that has totally stumped me. I have a CentOS > 5.3 server that I am using the builtin Bind (9.3) to serve our zones. Our > ISP has provisioned us a block of IP's and has delegated our name servers > as authoritative for the revers

Re: Query denied errors on PTR records for delegated zone

2010-02-23 Thread Matus UHLAR - fantomas
On 22.02.10 17:21, Geoff Sweet wrote: > The problem is that editing the options list to: > > options { > directory "/var/named"; > dump-file "/var/named/data/cache_dump.db"; > statistics-file "/var/named/data/named_stats.txt"; > m

RE: Query denied errors on PTR records for delegated zone

2010-02-22 Thread Geoff Sweet
protocols-dns-b...@isc.org Subject: Re: Query denied errors on PTR records for delegated zone In article , Geoff Sweet wrote: > The problem is that editing the options list to: > > options { > directory "/var/named"; > dump-file

Re: Query denied errors on PTR records for delegated zone

2010-02-22 Thread Barry Margolin
In article , Geoff Sweet wrote: > The problem is that editing the options list to: > > options { > directory "/var/named"; > dump-file "/var/named/data/cache_dump.db"; > statistics-file "/var/named/data/named_stats.txt"; > mems

RE: Query denied errors on PTR records for delegated zone

2010-02-22 Thread Geoff Sweet
r my IP block. -Geoff -Original Message- From: bind-users-bounces+geoff.sweet=wemadeusa@lists.isc.org [mailto:bind-users-bounces+geoff.sweet=wemadeusa@lists.isc.org] On Behalf Of Robert Spangler Sent: Monday, February 22, 2010 16:54 To: bind-users@lists.isc.org Subject: Re: Query den

Re: Query denied errors on PTR records for delegated zone

2010-02-22 Thread Robert Spangler
On Monday 22 February 2010 19:26, Geoff Sweet wrote: > I have tried several different attempts to make this work, and the only > change that works is to set in the options allow-query{any;};. However the > problem with that is that it then permits anyone to make any query against > my nameserver

Query denied errors on PTR records for delegated zone

2010-02-22 Thread Geoff Sweet
Greetings all, I have an on-going problem that has totally stumped me. I have a CentOS 5.3 server that I am using the builtin Bind (9.3) to serve our zones. Our ISP has provisioned us a block of IP's and has delegated our name servers as authoritative for the reverse zone info for that block.