Salut,
>
>
>Am doua probleme in Bind:
>1. conectat la hostul respectiv imi rezolva orice cerere dns - folosind 
>nslookup. Query-urile facute de alte statii catre acest host, nu le rezolva.
>
>
>Output fisier named.conf
>
>
>acl "recursive_subnets" {
>       x.x.54.0/23;
>        y.y.0.0/16;
>       localhost;
>};
>
>
>options {
>        directory "/var/named";
>        allow-recursion { "recursive_subnets"; };
>        allow-transfer { "recursive_subnets"; };
>        allow-query { "recursive_subnets"; };
>        listen-on { 127.0.0.1; x.x.54.0/23; y.y.0.0/16; };
>        #listen-on-v6 port 53 { ::1; };
>        dump-file       "/var/named/data/cache_dump.db";
>        statistics-file "/var/named/data/named_stats.txt";
>        memstatistics-file "/var/named/data/named_mem_stats.txt";
>        #allow-query  {"any"; localhost; };
>        #dnssec-enable yes;
>        #dnssec-validation yes;
>        #dnssec-lookaside auto;
>
>
>        /* Path to ISC DLV key */
>        bindkeys-file "/etc/named.iscdlv.key";
>
>
>etc.
>
>
>
>
> netstat -tulpn | grep :53
>tcp        0      0 y.y.23.23:53             0.0.0.0:*                   
>LISTEN      2184/named
>tcp        0      0 127.0.0.1:53                0.0.0.0:*                   
>LISTEN      2184/named
>udp        0      0 y.y.23.23:53             0.0.0.0:*                         
>      2184/named
>udp        0      0 127.0.0.1:53                0.0.0.0:*                      
>         2184/named
>
>
>
>
>[root@ns3 ~]# iptables -L -n
>Chain INPUT (policy ACCEPT)
>target     prot opt source               destination
>ACCEPT     all  --  0.0.0.0/0            0.0.0.0/0           state 
>RELATED,ESTABLISHED
>ACCEPT     icmp --  0.0.0.0/0            0.0.0.0/0
>ACCEPT     all  --  0.0.0.0/0            0.0.0.0/0
>ACCEPT     tcp  --  0.0.0.0/0            0.0.0.0/0           state NEW tcp 
>dpt:22
>REJECT     all  --  0.0.0.0/0            0.0.0.0/0           reject-with 
>icmp-host-prohibited
>
>
>Chain FORWARD (policy ACCEPT)
>target     prot opt source               destination
>REJECT     all  --  0.0.0.0/0            0.0.0.0/0           reject-with 
>icmp-host-prohibited
>
>
>Chain OUTPUT (policy ACCEPT)
>target     prot opt source               destination
>
>
>
>
>
>
>2. Acest server este secondary
>
>
>
>
>Dec  9 14:53:49 ns3 named[2184]: transfer of 'rai-ria.ro/IN' 
>from Ip_master#53: Transfer completed: 0 messages, 9 records, 0 bytes, 0.003 
>secs (0 bytes/sec)
>
>Dec  9 14:57:32 ns3 named[2184]: zone .ro/IN: Transfer started.
>Dec  9 14:57:32 ns3 named[2184]: transfer of '.ro/IN' from Ip_master#53: 
>connected using y.y.23.23#39743
>Dec  9 14:57:32 ns3 named[2184]: dumping master file: tmp-12SgbfA9Jf: open: 
>permission denied
>Dec  9 14:57:32 ns3 named[2184]: transfer of '.ro/IN' from Ip_master#53: 
>failed while receiving responses: permission denied
>Dec  9 14:57:32 ns3 named[2184]: transfer of '.ro/IN' from Ip_master#53: 
>Transfer completed: 0 messages, 7 records, 0 bytes, 0.003 secs (0 bytes/sec)
>
>
>si la master si la slave toate fisierele din /var/named apartin grupului si 
>userului named.
>
>
>Idei?
>
>
>
>
> 
>  Kind Regards,
>  Cu respect, 
>  Gabriel Avramescu
>  IT Trainer & Consultant
>
>________________________________
>
>
>
>  Cisco Networking Academy
>  http://www.ituniversity.ro
>
>
_______________________________________________
RLUG mailing list
[email protected]
http://lists.lug.ro/mailman/listinfo/rlug

Raspunde prin e-mail lui