Re: BIND Refusing to Resolve for External Hosts

2010-07-05 Thread Ian Smith
In freebsd-questions Digest, Vol 317, Issue 13, Message: 14 On Sat, 3 Jul 2010 14:20:01 -0700 Chris Maness wrote: > Ok, it is working for the local net now, but it is no longer working > as an authoritative server for my zones. > > Here is the current config: > > // $FreeBSD: src/etc/name

Re: BIND Refusing to Resolve for External Hosts

2010-07-03 Thread Matthew Seaman
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 03/07/2010 22:29:46, Chris Maness wrote: > Ahhh, I see I need to add: > > allow-query { any; }; > > to my authoritative zones. > > Thanks it all works now. Great. > p.s. So was this a change in the default behavior of BIND over the > years? B

Re: BIND Refusing to Resolve for External Hosts

2010-07-03 Thread Chris Maness
Ahhh, I see I need to add: allow-query { any; }; to my authoritative zones. Thanks it all works now. Chris Maness p.s. So was this a change in the default behavior of BIND over the years? Because I don't think my named.conf has been changed, and this used to work for any hosts.

Re: BIND Refusing to Resolve for External Hosts

2010-07-03 Thread Chris Maness
Ok, it is working for the local net now, but it is no longer working as an authoritative server for my zones. Here is the current config: // $FreeBSD: src/etc/namedb/named.conf,v 1.26.2.2.2.1 2008/11/25 02:59:29 kensmith Exp $ // // Refer to the named.conf(5) and named(8) man pages, and the docum

Re: BIND Refusing to Resolve for External Hosts

2010-07-03 Thread Chris Maness
On Sat, Jul 3, 2010 at 12:52 PM, Matthew Seaman wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > On 03/07/2010 20:28:27, Chris Maness wrote: >> Including the line: >> >> acl public-nets { 127.0.0.1; ::1; } >                                     ^ > You need a semi-colon here __|

Re: BIND Refusing to Resolve for External Hosts

2010-07-03 Thread Matthew Seaman
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 03/07/2010 20:28:27, Chris Maness wrote: > Including the line: > > acl public-nets { 127.0.0.1; ::1; } ^ You need a semi-colon here __| > for testing resulted in a failure to launch with the following e

Re: BIND Refusing to Resolve for External Hosts

2010-07-03 Thread Chris Maness
On Thu, Jul 1, 2010 at 7:33 AM, Matthew Seaman wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > On 01/07/2010 15:05:37, Chris Maness wrote: >> Can a sub block of IP address space be used, and if so, what is the >> wild card? > > Yes.  You can use lists of IPs or address-and-mask in BIN

Re: BIND Refusing to Resolve for External Hosts

2010-07-01 Thread Matthew Seaman
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 01/07/2010 15:05:37, Chris Maness wrote: > Can a sub block of IP address space be used, and if so, what is the > wild card? Yes. You can use lists of IPs or address-and-mask in BIND ACLs. See: http://www.isc.org/files/arm96.html#address_match_li

Re: BIND Refusing to Resolve for External Hosts

2010-07-01 Thread Chris Maness
Can a sub block of IP address space be used, and if so, what is the wild card? Chris On Wed, Jun 30, 2010 at 7:34 AM, Chris Maness wrote: > On Wed, Jun 30, 2010 at 1:49 AM, krad wrote: >> >> >> On 29 June 2010 07:20, Chris Maness wrote: >>> >>> My named server used to resolve for external host

Re: BIND Refusing to Resolve for External Hosts

2010-07-01 Thread krad
On 30 June 2010 15:34, Chris Maness wrote: > On Wed, Jun 30, 2010 at 1:49 AM, krad wrote: > > > > > > On 29 June 2010 07:20, Chris Maness wrote: > >> > >> My named server used to resolve for external hosts. Recently I have > >> noticed that it no longer resolves names for resolvers not on the

Re: BIND Refusing to Resolve for External Hosts

2010-06-30 Thread Chris Maness
On Wed, Jun 30, 2010 at 1:49 AM, krad wrote: > > > On 29 June 2010 07:20, Chris Maness wrote: >> >> My named server used to resolve for external hosts.  Recently I have >> noticed that it no longer resolves names for resolvers not on the >> local host.  It works just fine for dig on the dns serve

Re: BIND Refusing to Resolve for External Hosts

2010-06-30 Thread krad
On 29 June 2010 07:20, Chris Maness wrote: > My named server used to resolve for external hosts. Recently I have > noticed that it no longer resolves names for resolvers not on the > local host. It works just fine for dig on the dns server itself. It > also works for domains that it has author

Re: BIND Refusing to Resolve for External Hosts

2010-06-29 Thread Bogdan Webb
uhm here's my named.conf (it's a bit lightwight) but it works... // $FreeBSD: src/etc/namedb/named.conf,v 1.26.2.2.4.1 2009/04/15 03:14:26 > kensmith Exp $ > options { > directory"/etc/namedb/namedwritable"; //made dir writable to bind > user > pid-file"/var/run/named/pid"; > d

BIND Refusing to Resolve for External Hosts

2010-06-28 Thread Chris Maness
My named server used to resolve for external hosts. Recently I have noticed that it no longer resolves names for resolvers not on the local host. It works just fine for dig on the dns server itself. It also works for domains that it has authority over. I also have it set up to be a caching serv