zone xfer problems with split DNS

Barry Margolin barmar at genuity.net
Tue Apr 23 14:36:50 UTC 2002


In article <aa2gh4$os9 at pub3.rc.vix.com>,
deviatethenorm <burn at variate.net> wrote:
>below is the relavent portions of my named.conf on ns2, whats wrong? i
>seriously cant see it.

You need to use a different "transfer-source" option in the two views, so
that the source addresses of the transfers match the corresponding views on
the master server.  Otherwise, how do you expect the master to know which
version of the domain it should return?

>------------------------------------------------------
>// named.conf @ ns1.domain.com
>// secret must be the same as in /etc/rndc.conf
>key "key" {
>        algorithm       hmac-md5;
>        secret
>"c3Ryb25nIGVub3VnaCBmb3IgYSBtYW4gYnV0IG1hZGUgZm9yIGEgd29tYW4K";
>};
>
>controls {
>    inet 127.0.0.1 allow { any; } keys { "key"; };
>};
>
>options {
>	directory "/var/named";
>	pid-file "/var/run/named/named.pid";
>       // query-source address * port 53;
>};
>
>logging {
>	category lame-servers{ null; };
>};
>
>// ***Internal DNS Setup***
>
>view "internal" {
>   match-clients { 10.13.100.0/24; 10.13.150.0/24; };
>   recursion yes;
>     zone "domain.com" {
>             type slave;
>	     file "forward/named.internal";
>	     masters {10.13.150.188; };
>	     allow-transfer { none; };
>};
>
>// ***External DNS Setup***
>
>view "external" {
>   match-clients { any; };
>   recursion no;
>   zone "domain.com" {
>           type slave;
>	   file "forward/named.fhlb-of";
>	   masters {10.13.150.188; };
>	   allow-transfer { none; };
>   };
>};
>


-- 
Barry Margolin, barmar at genuity.net
Genuity, Woburn, MA
*** DON'T SEND TECHNICAL QUESTIONS DIRECTLY TO ME, post them to newsgroups.
Please DON'T copy followups to me -- I'll assume it wasn't posted to the group.


More information about the bind-users mailing list