unapproved update from - unapproved AXFR from

Wilhelm Grundner grundner at debis.at
Mon May 15 09:03:00 UTC 2000


hi Mark,

thanx for your help.

i never had any problems understanding 'unapproved AXFR from'.

what i still dont know is the difference between 'update' and
'zone-transfer' - and i also wouldn't know how to create an 
'acl' for 'updates' or is 'update' an ordinary query and 
therefor regulated by the option 'allow-query'?.


wilhelm
_____________________________________________________________
On 12 May 2000 Mark.Andrews at nominum.com wrote:

> 
> > 
> > hi,
> > 
> > i'm a little confused.
> > 
> > why doesn't my 'acl' work for the line: 'unapproved update from'
> > where is the difference?
> 
> 	Because updates are not transfers.  You are adjusting the wrong acl.
> 	Update acls have an implicit deny all if not specified.  The rest of
> 	the acls have an implicit allow all if not specified.
> 
> 	As for the "unapproved AXFR from", Barry answered that one.
> 
> 	Mark
> > 
> > 
> > May 12 09:08:50 ns3 named[5836]: unapproved update from [212.31.64.124].1099 
> > for 64.31.212.in-addr.arpa
> > May 12 09:14:57 ns3 named[5836]: unapproved AXFR from [200.28.56.130].2619 fo
> > r "hera.co.at" (acl)
> > 
> > 
> > i couldn't find any info from 'www.isc.org'.
> > 
> > my config looks like this:
> > --------------------------
> > 
> > acl transfer {
> >         193.171.255.2;
> > };   
> > 
> > allow-transfer { transfer ; };
> > 
> > 
> > 
> > any help would be greatly appreciated - thanx
> > wilhelm
> > ____________________________________________________________
> > Wilhelm Grundner          Email: wilhelm.grundner at debis.at
> > debis Systemhaus EDVg     Web:   http://www.debis.at
> > Hofmuehlgasse 3-5         Phone: 0043 1 59903 4390
> > A-1060 Vienna, Austria    Fax:   0043 1 59903 4399
> > ____________________________________________________________
> > 
> > 
> --
> Mark Andrews, Nominum Inc.
> 1 Seymour St., Dundas Valley, NSW 2117, Australia
> PHONE: +61 2 9871 4742                 INTERNET: Mark.Andrews at nominum.com
> 
> 
> 
> 
> 




More information about the bind-users mailing list