ACL is mandatory option in BIND? Please read this post with patience :-)

anishkumarv · 07-31-2011, 11:50 AM

Hi all,

Thanks in Advance.

Can any one guide me what is the main purpose of ACL and View option in bind, and i don't understand what is the main usage of ACL, because we configured Primary and Secondary Server, in that which network i need to mention in ACL??

for example this is my secondary server ip 192.168.1.4 do i need to specify this ip in ACL with mask.

And for configure TSIG, Time synchronization is mandatory that means for both the primary and secondary server we need to run the same time zone.??

i read some of the documentation , but still i didn't understand what is the main purpose of ACL. is this the additional security for DNS??

Lot of questions in my mind searching answers for that, i hope i will
get from here.

micxz · 08-01-2011, 08:53 PM

quote form the first page in google:
"The 'acl' clause allows fine-grained control over what hosts or users may perform what operations on the name server."

you may want something like:

Code:

 acl "allowips" {
  192.168.1.4/24;
};

zone "example.com" {
  type slave;
  file "slave.example.com";
  allow-notify {"allowips";}; 
};

to allow your subnet (c class in this example) to notify.