BIND 9.2 Question

[Bill Hineline]

I have just put BIND 9.2 on one of my servers to prepare for a DNS migration to HP-UX. I have experience with bind but nothing recent. Has there been some sort of security enhancement to prevent bind from answering any lookups by default? Is there some ACL that must be in place to allow lookups?

[Geoff Wild]

Yes, with the "allow-query" option.

Either in the Global options or on a per zone basis.


options {
allow-query { address_match_list; };
};

IE:

options {
allow-query { 192.168.2/24; 192.168.3/24; };
};

See the Bind9 Admistration Manual for more info:

http://www.nominum.com/content/documents/bind9arm.pdf

Rgds...Geoff