Hi Erich, please fill an proper issue at our GitLab instance - https://gitlab.isc.org/isc-projects/bind9/issues and we’ll take it from here. We will need more information and mailing list is very clumsy way of tracking that.
Thanks,
Ondrej
--
Ondřej Surý (He/Him)
ond...@isc.org
> On 19. 2. 2021, at 14:07, Erich Eckner <b...@eckner.net> wrote:
>
> Signed PGP part
> Hi,
>
> I upgraded from bind 9.16.11 to 9.16.12 (on arch linux) and suddenly, AXFR
> transfers were denied:
>
> 19-Feb-2021 13:56:01.276 client @0x7f37c8015028 127.0.0.1#57139: TCP request
> 19-Feb-2021 13:56:01.276 client @0x7f37c8015028 127.0.0.1#57139: using view
> '_default'
> 19-Feb-2021 13:56:01.276 client @0x7f37c8015028 127.0.0.1#57139: request is
> not signed
> 19-Feb-2021 13:56:01.276 client @0x7f37c8015028 127.0.0.1#57139: recursion
> available
> 19-Feb-2021 13:56:01.276 client @0x7f37c8015028 127.0.0.1#57139
> (ddns.eckner.net): AXFR request
> 19-Feb-2021 13:56:01.276 client @0x7f37c8015028 127.0.0.1#57139
> (ddns.eckner.net): zone transfer setup failed
> 19-Feb-2021 13:56:01.276 client @0x7f37c8015028 127.0.0.1#57139
> (ddns.eckner.net): reset client
> 19-Feb-2021 13:56:01.276 client @0x7f37c8015028 127.0.0.1#57139: freeing
> client
>
> Relevant part of the config (I can post more/full config, if desired):
>
> /etc/named.conf:
>
> options {
> ...
> allow-recursion { any; };
> allow-transfer { none; };
> ...
> }
>
> ...
>
> zone "ddns.eckner.net" IN {
> type master;
> allow-transfer { 127.0.0.1; ...; };
> }
>
>
> I cannot find any relevant change in the changelog at
> https://ftp.isc.org/isc/bind9/cur/9.16/CHANGES - did I miss something or
> is this a bug?
>
> (Adding 127.0.0.1 to allow-transfer in options clause did not help.)
>
> regards,
> Erich
>
>
signature.asc
Description: Message signed with OpenPGP
_______________________________________________ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
