Hi,
I'm struggling go get geo access-lists working with actual libmaxminddb
support but can't do it right. Bind is compiled with the following options:
named -V
BIND 9.16.3 (Stable Release) <id:5ea41c1>
running on Linux x86_64 5.6.3-1.el7.elrepo.x86_64 #1 SMP Wed Apr 8 07:13:05
EDT 2020
built by make with defaults
compiled by GCC 4.8.5 20150623 (Red Hat 4.8.5-39)
compiled with OpenSSL version: OpenSSL 1.0.2k-fips 26 Jan 2017
linked to OpenSSL version: OpenSSL 1.0.2k-fips 26 Jan 2017
compiled with libxml2 version: 2.9.1
linked to libxml2 version: 20901
compiled with json-c version: 0.11
linked to json-c version: 0.11
compiled with zlib version: 1.2.7
linked to zlib version: 1.2.7
*linked to maxminddb version: 1.2.0*
threads support is enabled
default paths:
named configuration: /usr/local/etc/named.conf
rndc configuration: /usr/local/etc/rndc.conf
DNSSEC root key: /usr/local/etc/bind.keys
nsupdate session key: /usr/local/var/run/named/session.key
named PID file: /usr/local/var/run/named/named.pid
named lock file: /usr/local/var/run/named/named.lock
*geoip-directory: /usr/share/GeoIP*
The geoip-directory contains Geolite2 databases:
ls /usr/share/GeoIP
GeoLite2-ASN.mmdb GeoLite2-City.mmdb GeoLite2-Country.mmdb
But when I try to generate acls the same way it was done with legacy
Maxmind databases:
acl us {
geoip country us;
}
I'm getting "no GeoIP database installed which can answer queries of type
'country'".
The documentation now shows that "BIND 9.16 supports v2 of the API but
these instructions have not been updated accordingly"
Can you share the instructions that should be used now?
Thank you,
_______________________________________________
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe
from this list
ISC funds the development of this software with paid support subscriptions.
Contact us at https://www.isc.org/contact/ for more information.
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users
