is there a also-allow-transfer
Sten Carlsen
stenc at s-carlsen.dk
Thu Dec 13 09:35:22 UTC 2012
On 13/12/12 10:09, Feng He wrote:
> Thanks.
>
> So how to handle the case described as below?
>
> We already have the also-notify{} section in the global options{} block.
>
> But for a special zone, just want to include another IP to also-notify
> besides the global IPs.
>
>
>
>
> 于 2012-12-13 17:00, Sten Carlsen 写道:
>> On 13/12/12 9:46, Feng He wrote:
>>> Hello Mark,
>>>
>>> My named.conf looks as:
>>>
>>> acl "NAMESVR" { 74.81.81.82; };
>> NAMESVR is an acl, it could look like {74.81.0.0/16} or {any}
>>
>> Essentially it is a kind of bitmask, not a list of IPs.
>>> options {
>>> directory "/var/cache/bind";
>>> recursion no;
>>> version "unknown";
>>> allow-transfer { NAMESVR; };
>>> also-notify { NAMESVR; };
>> All notifys must have a list of IPs, if the acl was any, you would have
>> to notify the full internet. The mechanism is designed to accept only a
>> list of IPs. It can not accept an acl.
also-notify{ 74.81.81.82;}
>>> allow-update { 127.0.0.1; };
>>> };
>>>
>>>
>>> # zone begins
>>> zone "test.com" {
>>> type master;
>>> file "/var/cache/bind/test.com.db";
>>> allow-transfer { NAMESVR; 74.81.81.81; };
also-notify { 74.81.81.82; 74.81.81.81; };
>>> };
>>>
>>>
>>> When I run named-checkconf I got the error:
>>>
>>> # named-checkconf
>>> /etc/bind/named.conf:8: expected IP address near 'NAMESVR'
>>>
>>> Please help. Thanks.
>>>
>>>
>>>
>>>
>>> 于 2012-12-13 15:23, Mark Andrews 写道:
>>>> In message<50C9818E.2060303 at nsbeta.info>, Feng He writes:
>>>>> Hello,
>>>>>
>>>>> I have the allow-transfer{} section in the global options{} block.
>>>>>
>>>>> But for a special zone, I want to include another IP to allow transfer
>>>>> besides the global IPs.
>>>>>
>>>>> Is there a also-allow-transfer option in BIND?
>>>>> If not how to control this?
>>>> acl xxx { };
>>>>
>>>> options {
>>>> allow-transfer { xxx; };
>>>> };
>>>>
>>>> zone "yyy" {
>>>> allow-transfer { xxx; extra; };
>>>> };
>>>>
>>>>> Thanks.
--
Best regards
Sten Carlsen
No improvements come from shouting:
"MALE BOVINE MANURE!!!"
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.isc.org/pipermail/bind-users/attachments/20121213/5dadc630/attachment.html>
More information about the bind-users
mailing list