query-source address * port 53 not support in BIND9.2.0???

[Ho_5]

Hi all,

We want to upgrade our DNS from HP-UX BIND 8.2.5 to 9.2.0, but when I read the HP BIND 9.2.0 Release note, it says:

Known Problems
The following are the known problems in BIND 9.2.0:
- Use of wildcard address "*" in "query-source address * port 53;" may not work as expected. Instead of the wildcard address "*", you need to use an explicit source IP address.

We use --> query-source address * port 53; in out /etc/named.conf

Can somebody of you confirm me that this is still the problem.
Do we really need to define the source IP-Address?? But that will be a problem, because we use "forward" in our configuration to communicate with other DNS's in the world. So it means we have to put "ALL" neighbours DNS IP-addresses in steads of *???

Please let me know.

Regards,

John

[U.SivaKumar_2]

Hi,

There is no problem. query-source decides the source IP address and port of a DNS query to other name servers from this server.

So if HP BIND does not support wildcard. Simply put the External Interface's ( which is connected to internet ) IP address in query-source address statement and restart the named.

For example. If you have a DNS caching server with two interface cards , one connected to private network say , having ip address 10.0.0.1 and other card connected to public network having ip address xxx.xxx.xxx.xxx.

Then , put

query-source address xxx.xxx.xxx.xxx port 53;

and restart the named daemon. your setup should work without problems.

regards,

U.SivaKumar.

[Ho_5]

Hi U.SivaKumar,

thanks of your anwser.
But we use 2 interfaces, one for the connection with the outside world (public IP-Address) and one for the connection with the internal Root DNS server--> Namesurfer (private IP-Address). If we define one we will loose the connection with the another one..so any solution??

//john

[U.SivaKumar_2]

Hi,

Can you try this.

query-source address 0.0.0.0 port 53;

If it does not work. Try wildcard itself and see whether it works.

Otherwise you have get the BIND compiled.

regards,

U.SivaKumar