Re: bind-users Digest, Vol 2083, Issue 1

2015-04-07 Thread Noel Butler
On 07/04/2015 17:07, Matus UHLAR - fantomas wrote: > On 06.04.15 15:19, Noel Butler wrote: > >> you need an allow-⁠query and ACL, eg: > > No. Don't play with allow-⁠query if it is supposed to be authoritative for > any zones (unless those zones are internal). > > If the server is supposed

Re: bind-users Digest, Vol 2083, Issue 1

2015-04-07 Thread Matus UHLAR - fantomas
On 06.04.15 15:19, Noel Butler wrote: you need an allow-query and ACL, eg: No. Don't play with allow-query if it is supposed to be authoritative for any zones (unless those zones are internal). If the server is supposed to host any zones visible from the net, allow-query would make them invisi

Re: bind-users Digest, Vol 2083, Issue 1

2015-04-05 Thread Noel Butler
you need an allow-query and ACL, eg: Assuming for example your LAN ip range is 192.168.0.0/24, then you would use for simplicity, at top of named.conf: acl "trust" { localhost; 192.168.0.0/24; }; then in... options { allow-query { trust; }; allow-query-cache { trust; }; ..

Re: bind-users Digest, Vol 2083, Issue 1

2015-04-05 Thread Reindl Harald
Am 05.04.2015 um 17:52 schrieb STEPHEN EYRE: The aim is to make it authoritive as well as hosting my web sites but a authoritive nameserver don't need nor should it do recursion for foreign zones, it only should respond for the zones he is authoritative for and so the behavior is correctly,

Re: bind-users Digest, Vol 2083, Issue 1

2015-04-05 Thread STEPHEN EYRE
to say which clients are allowed to perform recursion to prevent it from being an open recursor. Steve -- ___ bind-users mailing list bind-users@lists.isc.org