allow-query and version.bind

Ronan Flood ronan at noc.ulcc.ac.uk
Wed Oct 13 14:04:33 UTC 2004


On Sun, 10 Oct 2004 10:00:56 GMT, "Marco d'Itri" <md at Linux.IT> wrote:

> I restrict access to my server:
> 
> options {
>   directory "/var/cache/bind";
> 
>   allow-query { friends; };
>   allow-recursion { friends; };
> ....
> }
> 
> zone "bofh.it" {
>   type master;
>   allow-query { any; };
> ....
> }
> 
> But now access to the bind chaos pseudo-zone is not allowed:
> 
> $host -c chaos -t txt VERSION.BIND ns.bofh.it
> VERSION.BIND TXT record in class CH query refused
> $
> 
> How can I work around this? I do not want to restrict access to it.

Create an actual zone for version.bind. (or bind.) with an
"allow-query { any; }" on it?

-- 
                      Ronan Flood <R.Flood at noc.ulcc.ac.uk>
                        working for but not speaking for
             Network Services, University of London Computer Centre
     (which means: don't bother ULCC if I've said something you don't like)


More information about the bind-users mailing list