topic Re: BIND 9.2 Question in Operating System - HP-UX

BIND 9.2 Question

Bill Hineline — Tue, 30 Nov 2004 14:26:08 GMT

I have just put BIND 9.2 on one of my servers to prepare for a DNS migration to HP-UX. I have experience with bind but nothing recent. Has there been some sort of security enhancement to prevent bind from answering any lookups by default? Is there some ACL that must be in place to allow lookups?

Re: BIND 9.2 Question

Geoff Wild — Tue, 30 Nov 2004 15:28:12 GMT

Yes, with the "allow-query" option.

Either in the Global options or on a per zone basis.

options {
allow-query { address_match_list; };
};

IE:

options {
allow-query { 192.168.2/24; 192.168.3/24; };
};

See the Bind9 Admistration Manual for more info:

http://www.nominum.com/content/documents/bind9arm.pdf

Rgds...Geoff