Re: Trying to define an "in-view" zone without success

2015-01-20 Thread Tony Finch
Alain Fontaine wrote: > > Thank you for your help, and for your patience in dealing with my bad > reading of your first suggestion. No problem, glad you got it working! Tony. -- f.anthony.n.finchhttp://dotat.at/ Viking: Southeasterly 5 to 7, perhaps gale 8 later. Moderate or rough, occasion

Re: Trying to define an "in-view" zone without success

2015-01-20 Thread Alain Fontaine
Le 20 janv. 2015 à 10:21, Tony Finch a écrit : > Alain Fontaine wrote: >> Le 19 janv. 2015 à 16:33, Tony Finch a écrit : >> >>> Does it work if you set allow-query { any; }; in the testzone.net clause >>> in the interne view? >> >> From the ARM: >> >> A zone statement which uses the in-view op

Re: reject invalid dns queries

2015-01-20 Thread Matus UHLAR - fantomas
On 20.01.15 10:53, Daniel Dawalibi wrote: Allow-query is only allowed for specified IP defined in the allow-query statement. so, how exactly do errors in log look like? Maybe you need to disallow queries at firewall level... On 19.01.15 16:14, Daniel Dawalibi wrote: Invalid DNS queries : non

Re: Trying to define an "in-view" zone without success

2015-01-20 Thread Tony Finch
Alain Fontaine wrote: > Le 19 janv. 2015 à 16:33, Tony Finch a écrit : > > > Does it work if you set allow-query { any; }; in the testzone.net clause > > in the interne view? > > From the ARM: > > A zone statement which uses the in-view option may not use any other > options with the exception of

RE: reject invalid dns queries

2015-01-20 Thread Daniel Dawalibi
Hello Allow-query is only allowed for specified IP defined in the allow-query statement. Regards Daniel -Original Message- From: bind-users-boun...@lists.isc.org [mailto:bind-users-boun...@lists.isc.org] On Behalf Of Matus UHLAR - fantomas Sent: Monday, January 19, 2015 5:21 PM To: bin

Re: Trying to define an "in-view" zone without success

2015-01-20 Thread Alain Fontaine
Le 19 janv. 2015 à 16:33, Tony Finch a écrit : > Does it work if you set allow-query { any; }; in the testzone.net clause > in the interne view? > > My guess is that the zone is inheriting the allow-query acl from its > parent view, and keeping that acl when it is shared by the externe view. >Fr

AW: also-notify with multiple occurrences of same IP address

2015-01-20 Thread Stefan.Lasche
Hi Graham, > Has anybody on-list got a clever(er?) trick? I suppose that 9.10 with > in-view might make the problem go away. Instead of notifying all views at once you could just create a "notification chain", where a view only notifies one other view: view_1 notifies view_2.