Non Authoritative Zone when using particular View w/ BIND
I recently set up two nameservers, of course, master (ns1) and slave (ns2). My servers are 192.168.168.16 and .17 and they're both running BIND9. Everything worked fine, zone transfers were working, queries, etc. I went to implement views as I have some domains that will need to be queried from the internet, but I'd also like to address my internal machines and only have them respond to internal queries. I threw in a generic "lr" domain to represent my internal machines and of course have my 192.168.168 network for PTR records which should also be internal, then I set the default zones, 0, 127, and 255 up for internal view only. Here's the config:
Code:
acl internal { Code:
Jun 5 13:44:25 ns2 named[26887]: zone external/IN/public: refresh: non-authoritative answer from master 192.168.168.16#53 (source 0.0.0.0#0) If I take the external zone and put it in the internal view, it transfers fine as well. It seems that only zones in the public view will not transfer. Here's the config of the slave: Code:
acl internal { |
Hello,
I think this will solve your problem: Code:
view "nameservers" { This way your secondary name server will see all zones. You had a problem because based on the IP address of the secondary nameserver, the view would be "internal" and your "external" zone is not defined there. Hope this will solve the problem. Regards, Firas |
All times are GMT -5. The time now is 05:22 PM. |