ACL Problem w/named.conf

AlbyVA · #1 September 15th, 2012, 01:02

In the example below is my zone setup in named.conf. When I have the
ACL's set with allow-query and allow-transfer to (internals/externals)
all my queries and zone transfers fail. When I change it to (any) everything
works.

Do you see anything wrong with my ACL setup? I'm using BIND 9.8

Code:

acl internals { 192.168.1.0/24; };
acl externals { 216.218.128.0/17; };

zone "XXXXX.org" {
        type master;
        file "/etc/namedb/master/XXXXX.org";
        allow-query { internals; externals; };
        allow-transfer { internals; externals; };
};

chatwizrd · #2 September 15th, 2012, 04:44

Do you see any errors in /var/log/messages

http://www.zytrax.com/books/dns/ch7/acl.html

AlbyVA · #3 September 16th, 2012, 01:14

Quote:

Originally Posted by chatwizrd

Do you see any errors in /var/log/messages

http://www.zytrax.com/books/dns/ch7/acl.html

Thank You. That link gave me the tip I was missing.
I just had my setup with the wrong format. Using this format resolved my issue.

Code:


acl allow {
        216.218.128.0/17;
};

zone "XXXXX.org" {
        type master;
        file "/etc/namedb/master/XXXXX.org";
        allow-query { localnets; allow; };
        allow-transfer { localnets; allow; };

Thread Tools
Show Printable Version Email this Page
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
[Solved] BIND 9 named.conf delegation problem	ObiektywNy	Web & Network Services	1	June 18th, 2012 17:23
where is the "listen-on { 192.249.249/24; }; };" line in named.conf file	baronobeefdip	Web & Network Services	19	July 5th, 2011 19:21
[Solved] Cannot start named also cannot find named.conf	Amanat	Web & Network Services	11	March 9th, 2010 17:19
Does FreeBSD's named.conf run without using "rndc"?	aurora72	Web & Network Services	2	January 22nd, 2010 11:53
named problem	cruzler	Web & Network Services	6	July 29th, 2009 05:55