Re: view directive problems

2017-03-24 Thread Mark Andrews
In message <6840767825452847b8eacedebd6d51ad0162bae...@um-exmbx02.comm.ad.roke. co.uk>, "Barrett, Tony" writes: > > We have an external named server (BIND > 9.8.2rc1-RedHat-9.8.2-0.37.rc1.el6_7.6) running on Centos 6. > > This server is authoritative for all the zones hosted on it (I'll call it >

Re: view problem

2016-10-19 Thread Pol Hallen
If there are zones that both sets of clients should see, you have to duplicate them in both views. Overlapping views don't do this automatically. solved thanks your advice cheers! Pol ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users

Re: view problem

2016-10-18 Thread Jay Ford
On Wed, 19 Oct 2016, Mark Andrews wrote: In message , Jay Ford writes: Right. "in-view" can be useful for this, as long as you only need to refer to previously defined views (i.e., it unfortunatley doesn't allow forward references). So put the zone in the first view. Updates, notifies and q

Re: view problem

2016-10-18 Thread Mark Andrews
In message , Jay Ford writes: > On Tue, 18 Oct 2016, Barry Margolin wrote: > > If there are zones that both sets of clients should see, you have to > > duplicate them in both views. Overlapping views don't do this > > automatically. > > Right. "in-view" can be useful for this, as long as you on

Re: view problem

2016-10-18 Thread Jay Ford
On Tue, 18 Oct 2016, Barry Margolin wrote: If there are zones that both sets of clients should see, you have to duplicate them in both views. Overlapping views don't do this automatically. Right. "in-view" can be useful for this, as long as you only need to refer to previously defined views (

Re: view problem

2016-10-18 Thread Barry Margolin
In article , Pol Hallen wrote: > > Please be aware that only one view is visible for any client. > > mhmh... > > how I can solve my problem? > > all clients need to access to my zones but mobile clients (don't have > vpn client) needs to access to all zones exception vpn (but can use FQDN) >

Re: view problem

2016-10-18 Thread Pol Hallen
Please be aware that only one view is visible for any client. mhmh... how I can solve my problem? all clients need to access to my zones but mobile clients (don't have vpn client) needs to access to all zones exception vpn (but can use FQDN) any idea? thanks POl __

RE: view problem

2016-10-18 Thread RAM MOHAN, Hari Ganesh
zone "zone1" { type master; file "/etc/bind/zones/zone1.db"; }; Thanks & Regards, Hari Ganesh Ram Mohan From: Sten Carlsen [mailto:st...@s-carlsen.dk] Sent: Tuesday, October 18, 2016 2:37 PM To: RAM MOHAN, Hari Ganesh Cc: m...@fuckaroun

Re: view problem

2016-10-18 Thread Sten Carlsen
Please be aware that only one view is visible for any client. You have acl1 in both views indicating that you assume a host in acl1 can get info from both views - this is not possible. The list is searched from the top of the file and the first match, only the first, will be the DNS service ava

RE: view problem

2016-10-18 Thread RAM MOHAN, Hari Ganesh
View concept works in order, as you have internal_lan view first, acl1 users are falling to this view and not able to find vpn_zone. You may try swapping order, // vpn view "vpn" { match-clients { acl1; }; zone "vpn_zone" { type master; file "

Re: view

2013-10-04 Thread pch0317
Thanks On 10/03/2013 11:39 PM, Steven Carr wrote: So the reason it's failing is because you don't have a view configured for the zones contained in /etc/bind/named.conf.default- zones. If you implement views then all zones must be added to a view. Edit the /etc/bind/named.conf.default-zones fil

Re: view

2013-10-03 Thread Steven Carr
So the reason it's failing is because you don't have a view configured for the zones contained in /etc/bind/named.conf.default- zones. If you implement views then all zones must be added to a view. Edit the /etc/bind/named.conf.default-zones file and insert in the view statements e.g. view "in

Re: view

2013-10-03 Thread Paweł Ch .
When I copy named.conf.default-zones inside "dmz" view in named.conf.local then named started but is problem with requested other zone than authoritative for this server: Served by: - M.ROOT-SERVERS.NET - A.ROOT-SERVERS.NET . . it is ok? My conf file are: # cat named.conf // This is the primary c

Re: view

2013-10-03 Thread Steven Carr
Please post your full named.conf config file (you can obfuscate any sensitive information). Steve On 3 October 2013 18:53, Paweł Ch. wrote: > Hi list > > I have problem with views in bind9 on debian 6. I configured server like > here https://wiki.debian.org/Bind9 and it works. When i add entry:

Re: View-specific logging

2012-01-05 Thread Florian Weimer
* JINMEI Tatuya / 神明達哉: > At Mon, 02 Jan 2012 09:42:29 +, > Florian Weimer wrote: > >> I would like to switch on query logging for specific views only. Is >> this possible using BIND 9.7 (or any other BIND version, for that >> matter)? > > As far as I know it's not possible with any version

Re: View-specific logging

2012-01-04 Thread JINMEI Tatuya / 神明達哉
At Mon, 02 Jan 2012 09:42:29 +, Florian Weimer wrote: > I would like to switch on query logging for specific views only. Is > this possible using BIND 9.7 (or any other BIND version, for that > matter)? As far as I know it's not possible with any version of BIND 9 (and not only for query lo

Re: view and dynamic zone updated by dhcp

2010-02-17 Thread Jean Chiappini
Could you give me an example of that please. 2010/2/17 Mark Andrews > > In message <9fe68cb21002170541n3938e4f2r2cbc494f798b7...@mail.gmail.com>, > Jean > Chiappini writes: > > Hello, > > > > thank you for your reply, but I don't understand how I could do this in > an > > another way. I need tha

Re: view and dynamic zone updated by dhcp

2010-02-17 Thread Mark Andrews
In message <9fe68cb21002170541n3938e4f2r2cbc494f798b7...@mail.gmail.com>, Jean Chiappini writes: > Hello, > > thank you for your reply, but I don't understand how I could do this in an > another way. I need that all views could reach the dynamic zone... > > Jean transfer the zone between views

Re: view and dynamic zone updated by dhcp

2010-02-17 Thread Jean Chiappini
Hello, thank you for your reply, but I don't understand how I could do this in an another way. I need that all views could reach the dynamic zone... Jean 2010/2/17 Mark Andrews > > My bet is that you are sharing the master file of the zone being updated > between views/zones. Don't do that. >

Re: view and dynamic zone updated by dhcp

2010-02-17 Thread Mark Andrews
My bet is that you are sharing the master file of the zone being updated between views/zones. Don't do that. Mark -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org ___

Re: View selection via TSIG

2009-08-19 Thread Mark Andrews
In message <639ab8f7-0ae1-44f7-828f-f3b87aef2...@tcbug.org>, Josh Paetzel write s: > On Aug 19, 2009, at 6:30 PM, Mark Andrews wrote: > >> > >> Thanks. That worked, and I was quickly able to see what I was doing > >> wrong. My primary nameserver was matching an IP in one of the > >> views. So

Re: View selection via TSIG

2009-08-19 Thread Josh Paetzel
On Aug 19, 2009, at 6:30 PM, Mark Andrews wrote: Thanks. That worked, and I was quickly able to see what I was doing wrong. My primary nameserver was matching an IP in one of the views. So all the notifies were seen by slave as being in that one view. IPs override keys. Acl matches are o

Re: View selection via TSIG

2009-08-19 Thread Mark Andrews
In message <6913b169-0b0e-42e0-bc30-92d188036...@tcbug.org>, Josh Paetzel write s: > > On Aug 19, 2009, at 11:07 AM, Kirk wrote: > > > > >> logging { > >>channel my_log { > >>file "/var/log/bind/named.log" versions 3 size 5m; > >>severity warning; > >>

Re: View selection via TSIG

2009-08-19 Thread Josh Paetzel
On Aug 19, 2009, at 11:07 AM, Kirk wrote: logging { channel my_log { file "/var/log/bind/named.log" versions 3 size 5m; severity warning; print-time yes; print-severity yes; print-category yes; };

Re: View selection via TSIG

2009-08-19 Thread Josh Paetzel
On Aug 18, 2009, at 12:32 AM, Josh Paetzel wrote: On Aug 17, 2009, at 11:08 PM, Mark Andrews wrote: In message <96123fb1-1f2e-493c-bbb8-24a86a1dd...@tcbug.org>, Josh Paetzel write s: On Aug 16, 2009, at 12:26 AM, Mark Andrews wrote: In message <5ea10b89-4650-4f82-a41d-cb511ce2a...@t

Re: View selection via TSIG

2009-08-17 Thread Josh Paetzel
On Aug 17, 2009, at 11:08 PM, Mark Andrews wrote: In message <96123fb1-1f2e-493c-bbb8-24a86a1dd...@tcbug.org>, Josh Paetzel write s: On Aug 16, 2009, at 12:26 AM, Mark Andrews wrote: In message <5ea10b89-4650-4f82-a41d-cb511ce2a...@tcbug.org>, Josh Paetzel write s: I've googled a bit a

Re: View selection via TSIG

2009-08-17 Thread Mark Andrews
In message <96123fb1-1f2e-493c-bbb8-24a86a1dd...@tcbug.org>, Josh Paetzel write s: > > On Aug 16, 2009, at 12:26 AM, Mark Andrews wrote: > > > > > In message <5ea10b89-4650-4f82-a41d-cb511ce2a...@tcbug.org>, Josh > > Paetzel write > > s: > >> I've googled a bit and been unable to find the solu

Re: View selection via TSIG

2009-08-17 Thread Josh Paetzel
On Aug 16, 2009, at 12:26 AM, Mark Andrews wrote: In message <5ea10b89-4650-4f82-a41d-cb511ce2a...@tcbug.org>, Josh Paetzel write s: I've googled a bit and been unable to find the solution that I need. I have a master nameserver that has 4 views configured. I have a slave for this that i

Re: View selection via TSIG

2009-08-15 Thread Mark Andrews
In message <5ea10b89-4650-4f82-a41d-cb511ce2a...@tcbug.org>, Josh Paetzel write s: > I've googled a bit and been unable to find the solution that I need. > > I have a master nameserver that has 4 views configured. I have a > slave for this that is currently using 4 IPs to slave the views. Thi

Re: view based for particular zone only

2008-12-05 Thread Serge Fonville
At https://www.isc.org/software/bind/documentation/arm95#view_statement_grammar you can see that you can specify the clients that get a certain view Hope this helps. Regards, Serge Fonville On Fri, Dec 5, 2008 at 10:35 AM, Nabin Limbu <[EMAIL PROTECTED]> wrote: > Hi, > > I would like to enabl