problems with slave after upgrade.

[Michael Kjorling]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Running BIND as root doesn't seem like a great idea to me - have you
considered letting it run under its own uid (I have mine running as
named, group named)?

I was getting timeouts as well before I figured out it was the
firewall. You have to allow TCP traffic both originating from and
destined for port 53 for at least whatever machines you want to be
able to do zone transfers with. Does your firewall permit that?

"And it still gives permission denied when updating a zone" - this is
a very vague phrasing. Updating? That is controlled by allow-update{},
so I'd add the IP address of the machine there and see what happens.


Michael Kjörling


On Jun 4 2001 14:38 -0400, Charles Bodley wrote:

> Touch worked thanks again.
>
> Didn't think file ownership mattered since bind is running as root. Changed
> all files and folder to root.root just in case. This is the newest error
> message. No longer denied now timeouts.
>
> Jun  4 14:34:42 ns2 /usr/local/sbin/named[29605]: refresh_callback: zone
> drpill.com/IN: failure for 216.143.228.100#53: timed out
>
> And it still gives permission denied when updating a zone.

- -- 
Michael Kjörling - michael at kjorling.com - PGP: 8A70E33E
"We must be the change we wish to see" (Mahatma Gandhi)

^..^     Support the wolves in Norway -- go to     ^..^
 \/   http://home.no.net/ulvelist/protest_int.htm   \/

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (GNU/Linux)
Comment: For info see http://www.gnupg.org

iD8DBQE7G99IKqN7/Ypw4z4RAmwwAKD7ubIxJI92KHhEIiPOhXDiTi6DQgCgtu1b
JmqSq8NBbJWtKDGuHfb0+Ys=
=gS1i
-----END PGP SIGNATURE-----