Re: internal/external view problem

2016-12-14 Thread /dev/rob0
On Wed, Dec 14, 2016 at 07:52:58PM +0100, Per olof Ljungmark wrote: > I am facing a problem internal/external views, I will do my best > to describe it: > > An internal host needs to nsupdate an external view using a key, > but cannot because it is part of the internal ip range, at least > that is

internal/external view problem

2016-12-14 Thread Per olof Ljungmark
Hi list, I am facing a problem internal/external views, I will do my best to describe it: An internal host needs to nsupdate an external view using a key, but cannot because it is part of the internal ip range, at least that is what I think. The acutal use is for Letsencrypt certs. Is there a w

Re: view problem

2016-10-19 Thread Pol Hallen
If there are zones that both sets of clients should see, you have to duplicate them in both views. Overlapping views don't do this automatically. solved thanks your advice cheers! Pol ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users

Re: view problem

2016-10-18 Thread Jay Ford
On Wed, 19 Oct 2016, Mark Andrews wrote: In message , Jay Ford writes: Right. "in-view" can be useful for this, as long as you only need to refer to previously defined views (i.e., it unfortunatley doesn't allow forward references). So put the zone in the first view. Updates, notifies and q

Re: view problem

2016-10-18 Thread Mark Andrews
In message , Jay Ford writes: > On Tue, 18 Oct 2016, Barry Margolin wrote: > > If there are zones that both sets of clients should see, you have to > > duplicate them in both views. Overlapping views don't do this > > automatically. > > Right. "in-view" can be useful for this, as long as you on

Re: view problem

2016-10-18 Thread Jay Ford
On Tue, 18 Oct 2016, Barry Margolin wrote: If there are zones that both sets of clients should see, you have to duplicate them in both views. Overlapping views don't do this automatically. Right. "in-view" can be useful for this, as long as you only need to refer to previously defined views (

Re: view problem

2016-10-18 Thread Barry Margolin
In article , Pol Hallen wrote: > > Please be aware that only one view is visible for any client. > > mhmh... > > how I can solve my problem? > > all clients need to access to my zones but mobile clients (don't have > vpn client) needs to access to all zones exception vpn (but can use FQDN) >

Re: view problem

2016-10-18 Thread Pol Hallen
Please be aware that only one view is visible for any client. mhmh... how I can solve my problem? all clients need to access to my zones but mobile clients (don't have vpn client) needs to access to all zones exception vpn (but can use FQDN) any idea? thanks POl __

RE: view problem

2016-10-18 Thread RAM MOHAN, Hari Ganesh
zone "zone1" { type master; file "/etc/bind/zones/zone1.db"; }; Thanks & Regards, Hari Ganesh Ram Mohan From: Sten Carlsen [mailto:st...@s-carlsen.dk] Sent: Tuesday, October 18, 2016 2:37 PM To: RAM MOHAN, Hari Ganesh Cc: m...@fuckaroun

Re: view problem

2016-10-18 Thread Sten Carlsen
s, > > Hari Ganesh Ram Mohan > > > -----Original Message- > From: bind-users [mailto:bind-users-boun...@lists.isc.org] On Behalf Of Pol > Hallen > Sent: Tuesday, October 18, 2016 1:21 PM > To: bind-users@lists.isc.org > Subject: view problem > > Hi all

RE: view problem

2016-10-18 Thread RAM MOHAN, Hari Ganesh
file "/etc/bind/zones/zone1.db"; }; Thanks & Regards, Hari Ganesh Ram Mohan -Original Message- From: bind-users [mailto:bind-users-boun...@lists.isc.org] On Behalf Of Pol Hallen Sent: Tuesday, October 18, 2016 1:21 PM To: bind-users@lists.isc.org Subject: view

view problem

2016-10-18 Thread Pol Hallen
Hi all :-) I've two zones: zone1 is an internal zone and another zone: vpn. I need that acl1 can "see" internal vpn zone, the problem is that acl1 "see" vpn zone as external zone because this zone is a FQDN, while should see vpn as vpn.db. 192.168.1.0/24 are clients with also openvpn clients