Can't transfer two zones using two IP addresses

Barry Margolin barmar at alum.mit.edu
Thu Sep 2 01:29:39 UTC 2010


In article <mailman.487.1283316491.15649.bind-users at lists.isc.org>,
 Mike Ragusa <mragusa at gmail.com> wrote:

> What does your ifconfig -a output look like? Are you sure the External AXFR
> queries are coming form 192.168.2.12?

He said he checked with tcpdump and it showed the correct source 
addresses.

My guess was the answer, he forgot about match-clients.

> 
> On Wed, Sep 1, 2010 at 12:38 AM, Scott Simpson
> <Scott.Simpson at computer.org>wrote:
> 
> > I'm trying to transfer my two zones "internal" and "external" from master
> > to
> > slave using two IP addresses and it isn't working.
> >
> > On my master I have:
> >
> > view "internal" {
> >    allow-transfer { 192.168.2.1; };
> > ...
> > view "external" {
> >    allow-transfer { 192.168.2.12; };
> > ...
> >
> > My slave has two IP addresses 192.168.2.1 and 192.168.2.12 (I used a
> > secondary
> > IP address on the card). On the slave I have
> >
> > view "internal" {
> >    transfer-source 192.168.2.1;
> > ...
> > view "external" {
> >    transfer-source 192.168.2.12;
> > ...
> >
> > When I try to transfer the domain "external", I get a permission denied on
> > the
> > master. I know that the slave is using the correct transfer-source IP
> > address
> > because I did a tcpdump and it shows the correct address for the two
> > transfers.
> >
> > Interestingly, if I switch the "internal" and "external" stanzas on the
> > master, I get "external" only and not "internal". What gives? Thanks.
> >        Scott
> >
> > _______________________________________________
> > bind-users mailing list
> > bind-users at lists.isc.org
> > https://lists.isc.org/mailman/listinfo/bind-users
> >

-- 
Barry Margolin, barmar at alum.mit.edu
Arlington, MA
*** PLEASE don't copy me on replies, I'll read them in the group ***



More information about the bind-users mailing list