Re: BIND Refusing to Resolve for External Hosts

2010-07-05 Thread Ian Smith
In freebsd-questions Digest, Vol 317, Issue 13, Message: 14 On Sat, 3 Jul 2010 14:20:01 -0700 Chris Maness ch...@chrismaness.com wrote: Ok, it is working for the local net now, but it is no longer working as an authoritative server for my zones. Here is the current config: //

Re: BIND Refusing to Resolve for External Hosts

2010-07-03 Thread Chris Maness
On Thu, Jul 1, 2010 at 7:33 AM, Matthew Seaman m.sea...@infracaninophile.co.uk wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 01/07/2010 15:05:37, Chris Maness wrote: Can a sub block of IP address space be used, and if so, what is the wild card? Yes.  You can use lists of IPs or

Re: BIND Refusing to Resolve for External Hosts

2010-07-03 Thread Matthew Seaman
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 03/07/2010 20:28:27, Chris Maness wrote: Including the line: acl public-nets { 127.0.0.1; ::1; } ^ You need a semi-colon here __| for testing resulted in a failure to launch with the following

Re: BIND Refusing to Resolve for External Hosts

2010-07-03 Thread Chris Maness
On Sat, Jul 3, 2010 at 12:52 PM, Matthew Seaman m.sea...@infracaninophile.co.uk wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 03/07/2010 20:28:27, Chris Maness wrote: Including the line: acl public-nets { 127.0.0.1; ::1; }                                     ^ You need a

Re: BIND Refusing to Resolve for External Hosts

2010-07-03 Thread Chris Maness
Ok, it is working for the local net now, but it is no longer working as an authoritative server for my zones. Here is the current config: // $FreeBSD: src/etc/namedb/named.conf,v 1.26.2.2.2.1 2008/11/25 02:59:29 kensmith Exp $ // // Refer to the named.conf(5) and named(8) man pages, and the

Re: BIND Refusing to Resolve for External Hosts

2010-07-03 Thread Chris Maness
Ahhh, I see I need to add: allow-query { any; }; to my authoritative zones. Thanks it all works now. Chris Maness p.s. So was this a change in the default behavior of BIND over the years? Because I don't think my named.conf has been changed, and this used to work for any hosts.

Re: BIND Refusing to Resolve for External Hosts

2010-07-03 Thread Matthew Seaman
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 03/07/2010 22:29:46, Chris Maness wrote: Ahhh, I see I need to add: allow-query { any; }; to my authoritative zones. Thanks it all works now. Great. p.s. So was this a change in the default behavior of BIND over the years? Because I

Re: BIND Refusing to Resolve for External Hosts

2010-07-01 Thread krad
On 30 June 2010 15:34, Chris Maness ch...@chrismaness.com wrote: On Wed, Jun 30, 2010 at 1:49 AM, krad kra...@googlemail.com wrote: On 29 June 2010 07:20, Chris Maness ch...@chrismaness.com wrote: My named server used to resolve for external hosts. Recently I have noticed that it no

Re: BIND Refusing to Resolve for External Hosts

2010-07-01 Thread Chris Maness
Can a sub block of IP address space be used, and if so, what is the wild card? Chris On Wed, Jun 30, 2010 at 7:34 AM, Chris Maness ch...@chrismaness.com wrote: On Wed, Jun 30, 2010 at 1:49 AM, krad kra...@googlemail.com wrote: On 29 June 2010 07:20, Chris Maness ch...@chrismaness.com wrote:

Re: BIND Refusing to Resolve for External Hosts

2010-07-01 Thread Matthew Seaman
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 01/07/2010 15:05:37, Chris Maness wrote: Can a sub block of IP address space be used, and if so, what is the wild card? Yes. You can use lists of IPs or address-and-mask in BIND ACLs. See:

Re: BIND Refusing to Resolve for External Hosts

2010-06-30 Thread krad
On 29 June 2010 07:20, Chris Maness ch...@chrismaness.com wrote: My named server used to resolve for external hosts. Recently I have noticed that it no longer resolves names for resolvers not on the local host. It works just fine for dig on the dns server itself. It also works for domains

Re: BIND Refusing to Resolve for External Hosts

2010-06-30 Thread Chris Maness
On Wed, Jun 30, 2010 at 1:49 AM, krad kra...@googlemail.com wrote: On 29 June 2010 07:20, Chris Maness ch...@chrismaness.com wrote: My named server used to resolve for external hosts.  Recently I have noticed that it no longer resolves names for resolvers not on the local host.  It works

BIND Refusing to Resolve for External Hosts

2010-06-29 Thread Chris Maness
My named server used to resolve for external hosts. Recently I have noticed that it no longer resolves names for resolvers not on the local host. It works just fine for dig on the dns server itself. It also works for domains that it has authority over. I also have it set up to be a caching

Re: BIND Refusing to Resolve for External Hosts

2010-06-29 Thread Bogdan Webb
uhm here's my named.conf (it's a bit lightwight) but it works... // $FreeBSD: src/etc/namedb/named.conf,v 1.26.2.2.4.1 2009/04/15 03:14:26 kensmith Exp $ options { directory/etc/namedb/namedwritable; //made dir writable to bind user pid-file/var/run/named/pid; dump-file