dynamic dns updates from cisco router dhcp

Dan Letkeman danletkeman at gmail.com
Wed Jun 17 02:37:22 UTC 2009


Hello,

I have setup dynamic dns updates from a cisco router which is handing
out dhcp addresses.  In the debug's i'm getting messages that say
REFUSED and SERVFAIL when trying to do a dynamic update.

I'm unsure as to where the problem lies, but I think it might have to
do with the security on the BIND server.  I have added the networks to
the zone via the allow-update option.  But whatever I try I still get
the REFUSED error on the router.

Here is my config:

acl ecs {
	172.16.56.0/21;
	};
acl home {
	192.168.75.229;
	};
acl slaves {
	172.16.200.151;
	192.168.75.115;
	};

options {
	directory "/etc";
	pid-file "/var/run/named/named.pid";
	forwarders {
		142.161.130.155;
		142.161.2.155;
		};
	notify yes;
	allow-recursion {
		172.16.0.0/16;
		192.168.75.0/24;
		};
	query-source address 172.16.200.150;

	sortlist {
		   { 192.168.75/24;
		     { 172.16.88/21; };
                   };
                   { 172.16.56/21;
                     { 172.16.56/21; };
                   };
	         };

};

zone "16.172.in-addr.arpa" {
	type master;
	file "/var/named/172.16.rev";
	notify yes;
	also-notify {
		172.16.200.151;
		172.16.56.250;
		};
	};
zone "tech.net" {
	type master;
	file "/var/named/tech.net.hosts";
	notify yes;
	also-notify {
		172.16.200.151;
		172.16.56.250;
		};
	};
zone "me.net" {
	type master;
	file "/var/named/me.net.hosts";
	also-notify {
		172.16.200.151;
		192.168.75.115;
		};
	notify yes;
	};
zone "." {
	type hint;
	file "/var/named/root.db";
	};
zone "168.192.in-addr.arpa" {
	type master;
	file "/var/named/192.168.rev";
	};
zone "ecs.net" {
	type master;
	file "/var/named/ecs.net.hosts";
	};
zone "me.com" {
	type master;
	file "/var/named/me.com.hosts";
	};
zone "dan.net" {
	type master;
	file "/var/named/dan.net.hosts";
	allow-update {
		192.168.75.1;
		172.16.56.111;
		192.168.75.31;
		};
	};
controls {
	};


The zone i'm trying to send dynamic updates to is the last one.

Thanks,
Dan.



More information about the bind-users mailing list