Puzzling scenario involving views

This is a discussion on Puzzling scenario involving views within the Bind Users forums, part of the DNS and Related Forums category; Hello list, I have a bind9 serving the domain example.com, with a secondary backup dns (secondary.com) at a ...


Go Back   Usenet Forums > DNS and Related Forums > Bind Users

FAQ Members List Calendar Search Today's Posts Mark Forums Read
  #1 (permalink)  
Old 08-17-2004
Peter Rabbitson
 
Posts: n/a
Default Puzzling scenario involving views

Hello list,
I have a bind9 serving the domain example.com, with a secondary backup dns
(secondary.com) at a remote location. I wanted to achieve redundancy of
both domains provided to each other (example.com has secondary.com as
2nd NS, and vice versa), and at the same time I wanted to define internal
and external views in example.com for internal network naming purposes. I
got it working fairly quick with the example below, however here is my
problem: members of the insiders acl would not receive an AA answer when
inquiring about secondary.com. I was thinking that views are not terminating
and "insiders" would see both the internal and external view at the same
time. If however this is not the case - how do I place secondary.com in
both views without breaking AXFRs? Can I specify a slave zone reference to
the same zone file and then explicitly allow-notify { none; }; in the
internal slave zone statement? Or is there another approach that I can not
think of?

acl "insiders" {
192.168.0.0/24;
127.0.0.1;
};

acl "secondary" {
xxx.xxx.xxx.xxx;
};

view "internal" {
match-clients { insiders; };

zone "." {
type hint;
file "db.root";
};

zone "example.com" {
type master;
file "example-int.com";
allow-query { insiders; };
};

zone "0.168.192.in-addr.arpa" {
type master;
file "example-int.rev";
allow-query { insiders; };
};
};

view "external" {
match-clients { any; };

zone "." {
type hint;
file "db.root";
};

zone "example.com" {
type master;
file "example-ext.com";
allow-transfer { secondary; };
};

zone "secondary.com" {
type slave;
file "slave.secondary.com";
masters { xxx.xxx.xxx.xxx; };
};

zone "com" { type delegation-only; };
zone "net" { type delegation-only; };

};


Thanks

Peter



Reply With Quote
Reply
Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are Off
[IMG] code is Off
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On



All times are GMT +1. The time now is 10:47 PM.


Powered by vBulletin® Version 3.7.3
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO 3.0.0