[Q] BIND secondary on RedHat 7.1

[Kevin Darcy]

What addresses do these "other machines" have? You're configured (the
allow-query clause) to only allow queries from 192.168.1/24 and 127.0.0/24.

BTW, you shouldn't be specifying "forward first" unless you have full Internet
connectivity and your forwarders answer queries faster on average than your
nameserver can resolve them itself.


- Kevin

pawprint at NOSPAM.neo.rr.com wrote:

> I have a RedHat 7.1 server set up and am trying to configure BIND to be a
> secondary DNS server for my internal domain while also forwarding queries for
> outside servers to my ISPs name servers. If I use nslookup on the
> RedHat server everything appears to be working fine, but the server does not
> answer queries from other machines.  Named is starting up fine, appears to be
> working fine from the server console, it just doesn't answer queries from
> other machines.
>
> My primary nameserver is ISHMAEL at 192.168.1.2
> The RedHat secondary is STARBUCK at 192.168.1.3 (this is the one that won't
> answer queries).
> The internal domain is savonarola.com
>
> my named.conf and resolv.conf files are below
>
> ## named.conf - configuration for bind
> #
> # Generated automatically by bindconf, alchemist et al.
>
> options {
>         directory "/var/named/";
>         forward first;
>         forwarders {65.24.0.167; 65.24.0.166;};
>         fetch-glue no;
>         recursion no;
>         allow-query { 192.168.1/24; 127.0.0/24; };
>         allow-transfer { 192.168.1.2; };
>         transfer-format many-answers;
> };
>
> zone  "." {
>         type hint;
>         file  "named.ca";
> };
>
> zone  "0.0.127.in-addr.arpa" {
>         type master;
>         file  "0.0.127.in-addr.arpa.zone";
> };
>
> zone  "localhost" {
>         type master;
>         file  "localhost.zone";
> };
>
> zone  "savonarola.com" {
>         type slave;
>         file  "savonarola.com.zone";
>         masters { 192.168.1.2; };
> };
>
> zone "192.168.1.in-addr.arpa" in {
>         type slave
>         file "db.192.168.1";
>         masters { 192.168.1.2; };
> };
>
> this is the resolv.conf file
>
> search savonarola.com neo.rr.com rr.com
> nameserver 192.168.1.2
> nameserver 65.24.0.166
> nameserver 65.24.0.167