In message <4cf7396b.3050...@pnyet.web.id>, "David S." writes:
> Hi Mark,
>
> Yes, bind work fine without allow-query statement in view.
> Here is my named.conf and view:
>
> options {
> allow-query { "trusted"; };
> };
>
> view "mynetwork" in {
> match-clients {"trusted"; };
> recursion yes;
> allow-transfer { "xfer"; };
> additional-from-auth yes;
> additional-from-cache yes;
>
> view "internet" in {
> match-clients { any; };
> recursion no;
> allow-transfer { "xfer"; };
> additional-from-auth no;
> additional-from-cache no;
>
> Do you mean "allow-query" statement necessary need on view?
You have allow-query set in options which sets the default
for all the views. Effectively you have
view "internet" in {
match-clients { any; };
allow-query { trusted; };
which is not what you intend. Just remove allow-query from options
as it is not needed.
Mark
--
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org
_______________________________________________
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users
