Hi, I have a bind server I now use as a caching. In allowing my work desktop to access i found that it was being refused using allow-query, but if i add it to recursion it works, have i mis-understood the use of allow-query? The Bind Admin Manual seems to say what I thought use it to allow those to query your server.
acl "trust" { localhost; localnets; 192.168.0.0/24; 202.149.56.199; }; options { directory "/var/named/zones"; allow-query { trust; }; allow-query-cache { trust; }; allow-transfer { none; }; allow-recursion { admin; }; listen-on { any; }; transfer-format many-answers; interface-interval 0; }; Now this works well for LAN, but 202.149.. can not get answer, If I change ACL admin to trust it works (only difference between them is 202 IP is not in admin) So this I ask, does mean allow-query is useless now days? Or is this only of any use if my server is also authoritative ? Do I even need query since recursive decides who can query my server? thanking you _______________________________________________ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users