reverse zone file in external view not transferring to slave server??

2009-12-01 Thread Kaya Saman 

Hi,

now that I have my zones and reverse files sorted out I have managed to 
come across a problem which seems I had before even beginning any of this!


Basically for some reason my reverse zone for the external view isn't 
transferring to my slave server this is quite strange as all the 
other forward zones for the external view work fine??


Here is config:



named.conf file snippit for both servers:

view external {
   match-clients { any; !192.168.0.0/22; !127.0.0.1; };
   allow-recursion {
   127.0.0.1;
   };

   include /etc/opt/csw/bind/named.conf.external;

};



named.conf.external file from master server:



zone optiplex-networks.com {
  type master;
  file /var/named/optiplex-networks-external.db;
  allow-query { any; !192.168.0.0/22; 192.168.1.101; };
};

zone 2.178.81.in-addr.arpa {
  type master;
  file /var/named/81.178.2.rev;
  allow-query { any; !192.168.0.0/22; 192.168.1.101; };
};



named.conf.external file from slave server:



zone optiplex-networks.com {
  type slave;
  file /var/named/optiplex-networks-external.db;
  masters { 192.168.1.100; };
  allow-notify { 192.168.1.100; };
  allow-query { any; !192.168.0.0/22; 192.168.1.100; };
};

zone 2.178.81.in-addr.arpa {
  type slave;
  file /var/named/81.178.2.rev;
  masters { 192.168.1.100; };
  allow-notify { 192.168.1.100; };
  allow-query { any; !192.168.0.0/22; 192.168.1.100; };
};



If any one can help me figure out why this is happening as the reverse 
zone for my internal view works perfectly fine with similar config and 
all the other forward zones for the external work perfectly fine??


Many thanks,

--Kaya
___
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users

Re: reverse zone file in external view not transferring to slave server??

2009-12-01 Thread Mark Andrews 

In message 4b1576eb.2020...@netscape.net, Kaya Saman writes:
 Hi,
 
 now that I have my zones and reverse files sorted out I have managed to 
 come across a problem which seems I had before even beginning any of this!
 
 Basically for some reason my reverse zone for the external view isn't 
 transferring to my slave server this is quite strange as all the 
 other forward zones for the external view work fine??
 
 Here is config:
 
 
 
 named.conf file snippit for both servers:
 
 view external {
 match-clients { any; !192.168.0.0/22; !127.0.0.1; };

Acl's are first match.

What you had devolves to

match-clients { any; };

Try.
match-clients { !192.168.0.0/22; !127.0.0.1; any; };

Adjust all the other acls

 allow-recursion {
 127.0.0.1;
 };
 
 include /etc/opt/csw/bind/named.conf.external;
 
 };
 
 
 
 named.conf.external file from master server:
 
 
 
 zone optiplex-networks.com {
type master;
file /var/named/optiplex-networks-external.db;
allow-query { any; !192.168.0.0/22; 192.168.1.101; };
 };
 
 zone 2.178.81.in-addr.arpa {
type master;
file /var/named/81.178.2.rev;
allow-query { any; !192.168.0.0/22; 192.168.1.101; };
 };
 
 
 
 named.conf.external file from slave server:
 
 
 
 zone optiplex-networks.com {
type slave;
file /var/named/optiplex-networks-external.db;
masters { 192.168.1.100; };
allow-notify { 192.168.1.100; };
allow-query { any; !192.168.0.0/22; 192.168.1.100; };
 };
 
 zone 2.178.81.in-addr.arpa {
type slave;
file /var/named/81.178.2.rev;
masters { 192.168.1.100; };
allow-notify { 192.168.1.100; };
allow-query { any; !192.168.0.0/22; 192.168.1.100; };
 };
 
 
 
 If any one can help me figure out why this is happening as the reverse 
 zone for my internal view works perfectly fine with similar config and 
 all the other forward zones for the external work perfectly fine??
 
 Many thanks,
 
 --Kaya
 ___
 bind-users mailing list
 bind-users@lists.isc.org
 https://lists.isc.org/mailman/listinfo/bind-users
-- 
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org
___
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users

Re: reverse zone file in external view not transferring to slave server??

2009-12-01 Thread Kaya Saman 





Acl's are first match.

What you had devolves to

match-clients { any; };

Try.
match-clients { !192.168.0.0/22; !127.0.0.1; any; };

Adjust all the other acls

  


Ok so these are similar to Cisco IOS Acl's now I get it :-)

Unfortunately the reverse zone is still not transferring??

This is what I have now after re-jig:



named.conf:


view external {
   match-clients { !192.168.0.0/22; !127.0.0.1; any; };
   allow-recursion {
   127.0.0.1;
   };

   include /etc/opt/csw/bind/named.conf.external;

};


named.conf.external:


zone 2.178.81.in-addr.arpa {
  type slave;
  file /var/named/81.178.2.rev;
  masters { 192.168.1.100; };
  allow-notify { 192.168.1.100; };
  allow-query { 192.168.1.100; !192.168.0.0/22; any; };
};


Of course this is the slave, however the master is quite similar with 
allow-notify and query being 192.168.1.101 instead..


Still no go though :-(



# ls /var/named
192.168.1.rev  birim-it-external.db   
birimgrup.db   birimguvenlik-net-external.db  
optiplex-networks.db
benimadimfs-external.dbbirim-it.db
birimguvenlik-com-external.db  birimguvenlik-net.db
benimadimfs.db birimgrup-external.db  
birimguvenlik-com.db   optiplex-networks-external.db



??



___
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users

Re: reverse zone file in external view not transferring to slave server??

2009-12-01 Thread Kaya Saman 

Many thanks for all the help first up :-) I really do appreciate it!

Am just wondering, I'm running BIND 9.6.0-P1 on Solaris 9 to achieve 
this, so could this be a bug or something else yet not implemented into 
Bind or perhaps somehow the way it was compiled as I'm using the 
Blastwave version..


??

Unfortunately no chance of upgrading at the moment either the system or 
the OS as I'm in another country and the systems are along way a way 
with no-one other then myself capable of doing anything with them.

___
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users

Re: reverse zone file in external view not transferring to slave server??

2009-12-01 Thread Joseph S D Yao 

type master;
allow-transfer { other.servers.ip.addresses; };
perhaps?

I tend to do
options {
...
allow-transfer {none;};
...
};

But this wouldn't explain why all the rest can transfer and the one zone
can't.

Have you made sure that the slaved copies for the internal view and the
external view go to DIFFERENT files?  Otherwise they overwrite each
other and strange timing effects occur.

Just thoughts.


-- 
/*\
**
** Joe Yao  j...@tux.org - Joseph S. D. Yao
**
\*/
___
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users