Problem binding named to listen on only 1 specific port

[Mark.Andrews at nominum.com]

> Ok..... I run named on linux server (RH 6.2  kernel 2.2.18) with 2 NICs.
> I configured named, via named.conf, to only listen on 1 port... but when i
> scan my machine, both ports, i see domain service running on both the
> servers IPs...
> 
> 

	Well named has to listen for answers to queries it makes.
	You have told named to use port 53 to do this, by default
	it uses a port assigned by the kernel.  Named won't answer
	queries directed at the other interfaces.

	Mark

> ------------------------snipit of named.conf -------------------
> 
> 
> options {
>         directory "/var/named";
>         auth-nxdomain no;
>         query-source port 53;
>         listen-on port 53 { 192.168.0.5; };      // only ip to bind named to
> specified here..... the rest of the conf is zone defs
> 
> forward first;
> 
> -------------------------------- eos --------
> 
> no here is the netstat dump after i restarted the server   and I only need
> named to bind on nameserverNIC
> 
> 
> ---------------------snipit------------------------
> tcp         0       0 serverNIC1:domain 	     	*:*
> LISTEN      
> tcp         0       0 *:smtp                  			*:*
> LISTEN      
> tcp         0       0 *:telnet                			*:*
> LISTEN      
> tcp         0       0 *:ftp                  			*:*
> LISTEN      
> udp        0      0 *:domain                		*:*
> 
> udp        0      0 serverNIC1:domain	      	*:*
> 
> raw        0      0 *:icmp                  			*:*
> 7           
> raw        0      0 *:tcp                  			*:*
> 7           
> 
> -------------------eos-------------------
> 
> Now if I scan both IPs , serverNIC1 and serverNIC2
> 
> open port 53 (domain) shows up on both IPs.......    Is there some way to
> disable this that i'm not seeing?  I'm new at this so forgive me if the
> answer is so very obvious but i'm not seeing it.
> 
> 
> Thanks for any help
> 
> 
> 
> 
> 
> -- Binary/unsupported file stripped by Listar --
> -- Type: application/ms-tnef
> -- File: winmail.dat
> 
> 
> 
--
Mark Andrews, Nominum Inc.
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742                 INTERNET: Mark.Andrews at nominum.com