Migrating 8.x.x BIND to 9.0.1

[Mark.Andrews at nominum.com]

> 
> I never did get an answer to this, plus after experimentation to see if I 
> was close, I see that while I might be, I can't divine the rest of the 
> pertinent information, so I'll ask again, and hopefully, more intelligently.
> 
> At 05:08 PM 12/18/2000 -0800, Robert Gahl wrote:
> 
> > > > The named.conf (in /etc) for 'bind' looks like:
> > > >
> > > > zone "bind" chaos {
> > > >          type master;
> > > >          file "primary/bind";
> > > >          allow-query {
> > > >                  trusted;
> > > >          };
> > > >          allow-transfer {
> > > >                  none;
> > > >          };
> > > > };
> >
> >In the view statement for chaos, would this look like:
> >
> >view "chaos" chaos {
> >          allow-query {
> >                  trusted;
> >          };
> >          allow-transfer {
> >                  none;
> >          }
> >};
> 
> What I "know" so far is that the above is incorrect. According to the 
> "doc/misc/options" file, the view statement requires:
> 
> view "view_name" [ ( in | hs | hesiod | chaos ) ] {
>          match-clients { address_match_list };
>          // Bunch of optional stuff
> };

view "in" in {
	match-clients { any; };

	zone "." {
		type hint;
		...
	}

	zone "0.0.127.in-addr.arpa" {
		type master;
		...
	};

	zone "netflame.cc" {
		...
	};
}

view "chaos" chaos {
	match-clients { any; };

	zone "bind" chaos {
		....
	}
}
> 
> What I haven't got a clue on is how to set up the match-clients statement. 
> The Bind (3rd edition) doesn't have the correct syntax discussing the 
> match-clients directive, and I can't find an example of how it should be used
> .
> 
> Does anyone know how to implement this?
> 
> Here are my other questions:
> 
> >and if so, do I then just drop the equivalent statements in the zone
> >definition? And, for the "in" view, this would govern all items so defined.
> >
> >And, lastly, is the default definition "in". That is, I have the following
> >in named.conf:
> >
> >zone "0.0.127.in-addr.arpa" {
> >          type master;
> >          file "zone.127.0.0";
> >          ...
> >          //
> >};
> >
> >and
> >
> >zone "netflame.cc" {
> >          type slave;
> >          file "secondary/zone.netflame.cc";
> >          masters {
> >                  64.210.184.134;         // ns1.netflame.cc
> >          };
> >          ...
> >          //
> >};
> >
> >Are these "in" classes by default? Do I need to explicitly define them?
> 
> Thanks for your time.
> 
> 
> ===
> Bob Gahl Bicycle (Ryan Vanguard) Mobile ||     @
>      ARPA/Internet: bgahl at bawcsa.org     ||  !_ \
>     URL: http://www.bawcsa.org/bgahl/    ||  (*)-~--+--(*)
> "Sahn joong moe low ful how jee yah ching wong" - "When the
> mountain has no tigers, the monkey will also declare himself
> king." Chinese Proverb
> 
> 
> 
--
Mark Andrews, Nominum Inc.
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742                 INTERNET: Mark.Andrews at nominum.com