LinuxQuestions.org
Welcome to the most active Linux Forum on the web.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Software
User Name
Password
Linux - Software This forum is for Software issues.
Having a problem installing a new program? Want to know which application is best for the job? Post your question in this forum.

Notices


Reply
  Search this Thread
Old 06-18-2012, 04:13 AM   #1
new_kubunto
LQ Newbie
 
Registered: Jun 2012
Posts: 2

Rep: Reputation: Disabled
DNS BIND 9 view and forward zone problem


Hello I have a BIND 9 on Centos 5 and I'm using view to differenciate dns reply based on source ip. All work fine exept the zone declared as type forward.

here some abstract about the config:

options {
...

recursion no;
listen-on port 53 {
10.x.x.x; };
cleaning-interval 30; # time in MINUTES when all expired records will be deleted (default 60)
listen-on-v6 { none; };
allow-query-cache { "ACL_all"; };
forward only;
forwarders { 10.xx.xx.x; 10.xx.xx.x; };
};



view "common" {
match-clients { "client_common"; };
recursion no;


zone "intranet.kkk.ch" in {
type forward;
forwarders { 145.xx.xx.xx; 193.xx.xx.xx;};
};



and here some logs:


18-Jun-2012 11:08:24.581 client: debug 3: client xx.xx.39.26#3726: UDP request
18-Jun-2012 11:08:24.581 client: debug 5: client xx.xx.39.26#3726: view common: using view 'common'
18-Jun-2012 11:08:24.581 security: debug 3: client xx.xx.39.26#3726: view common: request is not signed
18-Jun-2012 11:08:24.581 security: debug 3: client xx.xx.39.26#3726: view common: recursion not available
18-Jun-2012 11:08:24.581 client: debug 3: client xx.xx.39.26#3726: view common: query
18-Jun-2012 11:08:24.581 security: debug 3: client xx.xx.39.26#3726: view common: query (cache) 'intranet.kkk.ch/A/IN' approved
18-Jun-2012 11:08:24.581 client: debug 3: client xx.xx.39.26#3726: view common: error
18-Jun-2012 11:08:24.581 client: debug 3: client xx.xx.39.26#3726: view common: send
18-Jun-2012 11:08:24.581 client: debug 3: client xx.xx.39.26#3726: view common: sendto
18-Jun-2012 11:08:24.581 client: debug 3: client xx.xx.39.26#3726: view common: senddone
18-Jun-2012 11:08:24.581 client: debug 3: client xx.xx.39.26#3726: view common: next
18-Jun-2012 11:08:24.581 client: debug 3: client xx.xx.39.26#3726: view common: endrequest
18-Jun-2012 11:08:24.581 client: debug 3: client @0x2b7f88f04910: udprecv


Help will be apreciated ...
 
Old 06-18-2012, 11:31 AM   #2
bathory
LQ Guru
 
Registered: Jun 2004
Location: Piraeus
Distribution: Slackware
Posts: 13,163
Blog Entries: 1

Rep: Reputation: 2032Reputation: 2032Reputation: 2032Reputation: 2032Reputation: 2032Reputation: 2032Reputation: 2032Reputation: 2032Reputation: 2032Reputation: 2032Reputation: 2032
Hi,

You should post the whole named.conf, so we can better understand what your views and zones are.
In the meantime, because of:
Quote:
18-Jun-2012 11:08:24.581 security: debug 3: client xx.xx.39.26#3726: view common: recursion not available
replace "recursion no" with:
Code:
allow-recursion {x.x.x.x; y.y.y.y;};
where x.x.x.x, y.y.y.y are your clients IPs and see if it helps

Regards
 
Old 06-19-2012, 01:34 AM   #3
new_kubunto
LQ Newbie
 
Registered: Jun 2012
Posts: 2

Original Poster
Rep: Reputation: Disabled
It seams that recursion is not a problem with

view "common" {
match-clients { "client_common"; };
recursion yes;
....

the issues remain the same
8-Jun-2012 11:08:24.581 client: debug 3: client xx.xx.39.26#3726: view common: error

It seams that dns request is not reconaised on domanin/zone intranet.kkk.ch.
is it possible to increase the log details ?

at the moment is:
logging {
channel named_logging {
file "/var/log/named.log";
severity debug 7 ;
print-time yes;
print-category yes;
print-severity yes;
};
category default { named_logging; };
category queries { named_logging; };
category unmatched { named_logging; };
};
 
Old 06-19-2012, 03:43 AM   #4
bathory
LQ Guru
 
Registered: Jun 2004
Location: Piraeus
Distribution: Slackware
Posts: 13,163
Blog Entries: 1

Rep: Reputation: 2032Reputation: 2032Reputation: 2032Reputation: 2032Reputation: 2032Reputation: 2032Reputation: 2032Reputation: 2032Reputation: 2032Reputation: 2032Reputation: 2032
Quote:
the issues remain the same
8-Jun-2012 11:08:24.581 client: debug 3: client xx.xx.39.26#3726: view common: error
What is the error you get in client?


Quote:
It seams that dns request is not reconaised on domanin/zone intranet.kkk.ch.
is it possible to increase the log details ?
What happens if you remove the forwarders from the global section?
You can increase the severity debug level (up to 11 IIRC), or use "severity dynamic" and use "rndc trace X" to increase debugging to X level

Regards
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Which zone bind dns work either in forward zone are reverse zone sanjay87 Linux - Server 2 06-05-2012 04:21 AM
Bind : Zone forward type without cache junix57 Linux - Server 5 02-14-2012 02:12 AM
[SOLVED] problem with dns forward lookup zone uppalagayatri Linux - Newbie 1 03-09-2011 12:08 AM
BIND forward zone OK, reverse zone NOT OK! n03x3c Linux - Server 2 11-05-2008 10:31 PM
Forward of subdomain zone with BIND 9.2.3 geroq Linux - Networking 0 03-06-2006 07:07 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Software

All times are GMT -5. The time now is 02:47 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration