Bind a widle - nedochazi k update zony

Petr Hvězda konference na unistav.cz
Středa Listopad 26 12:37:35 CET 2008


Ano, to je ta druha mozna, co jsem zkousel, jenze tam nefunguje update na
widle (sekundar). Tady to je:

options {
        directory "/var/named";
        dump-file "/var/named/data/cache_dump.db";
        statistics-file "/var/named/data/named_stats.txt";
        allow-recursion { localhost; in_unistav; unistav; };
        forwarders { xxx };
        notify yes;
        interface-interval 1;
};
include "/etc/rndc.key";

acl in_unistav { 192.168.0.0/16; };
acl unistav { xxx };

view "trusted" {
match-clients { 127.0.0.1/8; 192.168.0.0/24; }; // our network
recursion yes;
zone "unistav.cz" {
    type master;
    file "master/internal.db.unistav.cz";
    allow-update { none; };
    allow-transfer { any; };
    allow-query { any; };
};
};

view "badguys" {
match-clients { any; }; // all ohther hosts
recursion yes;
zone "unistav.cz" {
    type master;
    file "master/db.unistav.cz";
    allow-update { none; };
    allow-transfer { any; };
    allow-query { any; };
};
};

view "localhost" {
zone "localhost" {
    type master;
    file "master/localhost";
    allow-update { none; };
    allow-transfer { any; };
};
};

view "0.0.127.in-addr.arpa" {
zone "0.0.127.in-addr.arpa" {
    type master;
    file "master/127.0.0";
    allow-update { none; };
    allow-transfer { any; };
};
};

view "." {
zone "." {
    type hint;
    file "master/named.root";
};
};

view "in.unistav.cz" {
zone "in.unistav.cz" {
    type master;
    file "master/db.in.unistav.cz";
    allow-update   { none; };
    allow-transfer { localhost; in_unistav; unistav; };
    allow-query    { localhost; in_unistav; unistav; };
};
};

view "0.168.192.in-addr.arpa" {
zone "0.168.192.in-addr.arpa" {
    type master;
    file "master/db.rev.192.168.0";
    allow-update   { none; };
    allow-transfer { localhost; in_unistav; unistav; };
    allow-query    { localhost; in_unistav; unistav; };
};
};

view "1.168.192.in-addr.arpa" {
zone "1.168.192.in-addr.arpa" {
    type master;
    file "master/db.rev.192.168.1";
    allow-update   { none; };
    allow-transfer { localhost; in_unistav; unistav; };
    allow-query    { localhost; in_unistav; unistav; };
};
};

view "2.168.192.in-addr.arpa" {
zone "2.168.192.in-addr.arpa" {
    type master;
    file "master/db.rev.192.168.2";
    allow-update   { none; };
    allow-transfer { localhost; in_unistav; unistav; };
    allow-query    { localhost; in_unistav; unistav; };
};
};

view "6.168.192.in-addr.arpa" {
zone "6.168.192.in-addr.arpa" {
    type master;
    file "master/db.rev.192.168.6";
    allow-update   { none; };
    allow-transfer { localhost; in_unistav; unistav; };
    allow-query    { localhost; in_unistav; unistav; };

};
};

view "8.168.192.in-addr.arpa" {
zone "8.168.192.in-addr.arpa" {
    type master;
    file "master/db.rev.192.168.8";
    allow-update   { none; };
    allow-transfer { localhost; in_unistav; unistav; };
    allow-query    { localhost; in_unistav; unistav; };

};
};

--
Petr Hvezda


> Vše pod view a na výběr správného view je třeba použít to match-clients,
> jak jsem posílal před chvílí.
>
> M.




Další informace o konferenci Linux