topic Re: problem with zone transfer on slave in Operating System - Linux

problem with zone transfer on slave

K.C. Chan — Tue, 14 May 2002 20:53:38 GMT

I am getting this error on my slave dns in regards to zone transfer: " isc_file_settime(named.domain): permission denied" Does any one know what is this? Thanks.

Re: problem with zone transfer on slave

U.SivaKumar_2 — Wed, 15 May 2002 03:32:22 GMT

hi,
please give more details.
what is the primary DNS OS ?.
which is the BIND you are using in both the
servers ?.
Have u set any acl lists( access control list) in the primary DNS server ?.

regards,
U.SivaKumar

Re: problem with zone transfer on slave

Bill Thorsteinson — Wed, 15 May 2002 12:57:03 GMT

You need an ACL for your
internal or secondary servers
like this. List your
secondaries or use a mask.

acl internal {
127.0.0.1;
192.168.1.1/24;
};

Add the following grant to
your zone definitions.

allow-transfer { internal; };

Re: problem with zone transfer on slave

K.C. Chan — Wed, 15 May 2002 13:27:53 GMT

All, sorry for bothering you guys; it's a stupid mistake I make, it turns out to be file permission problem.

Bill, nice to know you can control zone transfer. I assumed this is done on the Primary DNS, correct? Thanks.

Re: problem with zone transfer on slave

Bill Thorsteinson — Thu, 16 May 2002 15:20:03 GMT

Zone files need to be
restricted on both the primary
and slaves. Both are
authorative servers for the
zone, and have the full
zone.

Restricting zone transfers
prevents giving away a
list of all your servers.