problem with bind9, view and nsupdate

Mark Andrews Mark_Andrews at isc.org
Wed Aug 3 21:45:59 UTC 2005


	Read the BIND 9.3.x FAQ on how to do views with TSIGs.
	Sign your updates and send them to both/all views.

	Mark

> This would be a solution I guess would work.
> I was otherwise trying to point out what the problem was/is, I don't 
> have the solution. There are a number of threads with the same problem 
> but different entry angles. None of them have found a solution yet.
> 
> Ronan Flood wrote:
> 
> >On Tue, 02 Aug 2005 13:42:37 +0200, Michael Dosser <mic at strg.at> wrote:
> >
> >  
> >
> >>view "internal" {
> >>         match-clients { "internal"; };
> >>         recursion yes;
> >>         include "named.local";
> >>         include "named.internal";
> >>         include "named.master";
> >>         include "/path/to/nsupdate/managed/named.primary.conf";
> >>         include "/path/to/nsupdate/managed/named.secondary.conf";
> >>};
> >>
> >>view "customers" {
> >>         match-clients { "customers"; };
> >>         recursion yes;
> >>         include "named.local";
> >>         include "named.internal";
> >>         include "named.master";
> >>         include "/path/to/nsupdate/managed/named.primary.conf";
> >>         include "/path/to/nsupdate/managed/named.secondary.conf";
> >>};
> >>
> >>view "external" {
> >>         match-clients { "any"; };
> >>         recursion no;
> >>         include "named.local";
> >>         include "named.internal";
> >>         include "named.master";
> >>         include "/path/to/nsupdate/managed/named.primary.conf";
> >>         include "/path/to/nsupdate/managed/named.secondary.conf";
> >>};
> >>    
> >>
> >
> >It looks from that like the only difference between your views
> >is "recursion yes" or "recursion no" -- is that correct?
> >
> >If so you would appear to be better off having
> >
> >  allow-recursion { "internal", "customers" };
> >
> >or whatever as appropriate in the global options and not using
> >views ...
> >
> >  
> >
> 
> -- 
> Best regards
> 
> Sten Carlsen
> 
> Let HIM who has an empty INBOX send the first mail.
> 
> 
> 
> 
--
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742                 INTERNET: Mark_Andrews at isc.org



More information about the bind-users mailing list