rndc -> wrong number of zones

squid proxy squidcache7 at gmail.com
Mon Feb 23 12:09:28 UTC 2009


thx,
but what I cannot understand is:

I have 2 internal DNS server:

Master BIND 9.3.4-P1.1 (debian Etch)
SLAVE BIND BIND 9.5.1-P1 (debian Lenny)

they have the same number of zones, on both server is

recursion yes

and both have the same file zones.rfc1918 with the same zones.

whay at master rndc shows 22 number of zones and at slave 35 ?




On Mon, Feb 23, 2009 at 7:28 AM, Gregory Hicks <ghicks at hicks-net.net> wrote:
>
>> Date: Mon, 23 Feb 2009 03:52:08 +0100
>> Subject: rndc -> wrong number of zones
>> From: squid proxy <squidcache7 at gmail.com>
>> To: bind-users at lists.isc.org
>>
>> I've bind9 installed under Lenny.
>>
>> rndc status shows 35 zones, but I have only 21 zones in
>> /etc/bind/named.conf.local.
>
>> So...?  Where DO the number of zones I'm serving come from?
>
>        Named has added a number of zones to the trusted view.
>        They wern't added to the external view as recursion is
>        disabled in it.
>
> static const struct {
>        const char      *zone;
>        isc_boolean_t   rfc1918;
> } empty_zones[] = {
> #ifdef notyet
>        /* RFC 1918 */
>        { "10.IN-ADDR.ARPA", ISC_TRUE },
>        { "16.172.IN-ADDR.ARPA", ISC_TRUE },
>        { "17.172.IN-ADDR.ARPA", ISC_TRUE },
>        { "18.172.IN-ADDR.ARPA", ISC_TRUE },
>        { "19.172.IN-ADDR.ARPA", ISC_TRUE },
>        { "20.172.IN-ADDR.ARPA", ISC_TRUE },
>        { "21.172.IN-ADDR.ARPA", ISC_TRUE },
>        { "22.172.IN-ADDR.ARPA", ISC_TRUE },
>        { "23.172.IN-ADDR.ARPA", ISC_TRUE },
>        { "24.172.IN-ADDR.ARPA", ISC_TRUE },
>        { "25.172.IN-ADDR.ARPA", ISC_TRUE },
>        { "26.172.IN-ADDR.ARPA", ISC_TRUE },
>        { "27.172.IN-ADDR.ARPA", ISC_TRUE },
>        { "28.172.IN-ADDR.ARPA", ISC_TRUE },
>        { "29.172.IN-ADDR.ARPA", ISC_TRUE },
>        { "30.172.IN-ADDR.ARPA", ISC_TRUE },
>        { "31.172.IN-ADDR.ARPA", ISC_TRUE },
>        { "168.192.IN-ADDR.ARPA", ISC_TRUE },
> #endif
>
>        /* RFC 3330 */
>        { "0.IN-ADDR.ARPA", ISC_FALSE },        /* THIS NETWORK */
>        { "127.IN-ADDR.ARPA", ISC_FALSE },      /* LOOPBACK */
>        { "254.169.IN-ADDR.ARPA", ISC_FALSE },  /* LINK LOCAL */
>        { "2.0.192.IN-ADDR.ARPA", ISC_FALSE },  /* TEST NET */
>        { "255.255.255.255.IN-ADDR.ARPA", ISC_FALSE },  /* BROADCAST */
>
>        /* Local IPv6 Unicast Addresses */
>        {
> "0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.IP6.AR
> PA", ISC_FALSE },
>        {
> "1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.IP6.AR
> PA", ISC_FALSE },
>        /* LOCALLY ASSIGNED LOCAL ADDRES S SCOPE */
>        { "D.F.IP6.ARPA", ISC_FALSE },
>        { "8.E.F.IP6.ARPA", ISC_FALSE },        /* LINK LOCAL */
>        { "9.E.F.IP6.ARPA", ISC_FALSE },        /* LINK LOCAL */
>        { "A.E.F.IP6.ARPA", ISC_FALSE },        /* LINK LOCAL */
>        { "B.E.F.IP6.ARPA", ISC_FALSE },        /* LINK LOCAL */
>
>        { NULL, ISC_FALSE }
> };
>
>>
>> # rndc status
>> version: 9.5.1-P1
>> number of zones: 35
>> debug level: 0
>> xfers running: 1
>> xfers deferred: 0
>> soa queries in progress: 1
>> query logging is OFF
>> recursive clients: 0/0/1000
>> tcp clients: 0/100
>> server is up and running
>>
>> in /etc/bind/named.conf I have just 5 default zones.
>> where else read rndc zones?
>>
>> kind regards
>> Piotr
>> _______________________________________________
>> bind-users mailing list
>> bind-users at lists.isc.org
>> https://lists.isc.org/mailman/listinfo/bind-users
>
> ---------------------------------------------------------------------
> Gregory Hicks                           | Principal Systems Engineer
>                                        | Direct:   408.569.7928
>
> People sleep peaceably in their beds at night only because rough men
> stand ready to do violence on their behalf -- George Orwell
>
> The price of freedom is eternal vigilance.  -- Thomas Jefferson
>
> "The best we can hope for concerning the people at large is that they
> be properly armed." --Alexander Hamilton
>
>



More information about the bind-users mailing list