David M. Dowdle wrote:
I suspect your secondary has the IP address of 192.168.1.101 ? your
match statement blocks it, as the FIRST match stops procssing, and the
first match is the !192.168.0.0/22, prohibiting queries. Move the
permit before the deny in this case. (the general case is put more
specific info before less specific)
In the external zone file I moved the allow-query statement like so:
zone "2.178.81.in-addr.arpa" {
type slave;
file "/var/named/81.178.2.rev";
masters { 192.168.1.100; };
allow-notify { 192.168.1.100; };
allow-query { any; 192.168.1.100; !192.168.0.0/22; };
};
for both master and slave servers, however it still doesn't seem to want
to transfer.... :-(
_______________________________________________
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users