view problem

[RAM MOHAN, Hari Ganesh]

View concept works in order, as you have internal_lan view first, acl1 users are falling to this view and not able to find vpn_zone.

You may try swapping order,

// vpn
view "vpn" {
         match-clients { acl1; };

         zone "vpn_zone" {
                 type master;
                 file "/etc/bind/zones/vpn.db";
         };

};

// zone1
view "internal_lan" {
         match-clients { acl1; acl2; };
         include "/etc/bind/named.conf.default-zones";

         zone "zone1" {
                 type master;
                 file "/etc/bind/zones/zone1.db";
         };

Thanks & Regards,

Hari Ganesh Ram Mohan


-----Original Message-----
From: bind-users [mailto:bind-users-bounces at lists.isc.org] On Behalf Of Pol Hallen
Sent: Tuesday, October 18, 2016 1:21 PM
To: bind-users at lists.isc.org
Subject: view problem

Hi all :-)

I've two zones: zone1 is an internal zone and another zone: vpn.

I need that acl1 can "see" internal vpn zone, the problem is that acl1 "see" vpn zone as external zone because this zone is a FQDN, while should see vpn as vpn.db.

192.168.1.0/24 are clients with also openvpn clients, while
192.168.2.0/24 are not vpn clients.

sorry but I can't simplify :-/

acl1 {192.168.1.0/24; };
acl2 {192.168.2.0/24; };

// zone1
view "internal_lan" {
         match-clients { acl1; acl2; };
         include "/etc/bind/named.conf.default-zones";

         zone "zone1" {
                 type master;
                 file "/etc/bind/zones/zone1.db";
         };

// vpn
view "vpn" {
         match-clients { acl1; };

         zone "vpn_zone" {
                 type master;
                 file "/etc/bind/zones/vpn.db";
         };

};


Pol
_______________________________________________
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list

bind-users mailing list
bind-users at lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users