Dotaz: bind9 pouze na localnetu

[Heřmi]

ahoj doufam ze me nebudete kamenovat ale mam problem nainstaloval jsem si bind ve vnitrni siti jede to jeste cely 78.156.132.0/24 dns je 4ka ale z jine site ne prochazel jsem konfiguraci a na nic jsem neprisel bylo by moznost se s nekym spojit a pomoci icq to nejak zkusit dat dohromady ze bych jsem pak dal vysledek na forko tady jsou conf.. // This is the primary configuration file for the BIND DNS server named. // // Please read /usr/share/doc/bind9/README.Debian.gz for information on the // structure of BIND configuration files in Debian, *BEFORE* you customize // this configuration file. // // If you are just adding zones, please do that in /etc/bind/named.conf.local

include "/etc/bind/named.conf.options";

// prime the server with knowledge of the root servers zone "." { type hint; file "/etc/bind/db.root"; };

// be authoritative for the localhost forward and reverse zones, and for // broadcast zones as per RFC 1912

zone "localhost" { type master; file "/etc/bind/db.local"; };

zone "127.in-addr.arpa" { type master; file "/etc/bind/db.127"; };

zone "0.in-addr.arpa" { type master; file "/etc/bind/db.0"; };

zone "255.in-addr.arpa" { type master; file "/etc/bind/db.255"; }; include "/etc/bind/named.conf.local";

zone "hexnet.cz" { type master; file "/etc/bind/hexnet.cz"; };

zone "132.156.78.in-addr.arpa" { type master; file "/etc/bind/hexnet.cz.rev"; }; // // Do any local configuration here //

// Consider adding the 1918 zones here, if they are not used in your // organization //include "/etc/bind/zones.rfc1918";

options { directory "/var/cache/bind";

// If there is a firewall between you and nameservers you want // to talk to, you may need to fix the firewall to allow multiple // ports to talk. See http://www.kb.cert.org/vuls/id/800113

// If your ISP provided one or more IP addresses for stable // nameservers, you probably want to use them as forwarders. // Uncomment the following block, and insert the addresses replacing // the all-0's placeholder.

//forwarders { // ; // };

auth-nxdomain no; # conform to RFC1035 listen-on { any; }; dnssec-enable no; dnssec-validation no; };

i

---

---

Odpovědi

[pupu]

Fuj, to se neda cist. Kazdopadne by bylo fajn alespon rict, ceho chces dosahnout. Mit server/resolver pro svoji sit? Nebo nameserver, ktery bude poskytovat udaje o tvoji domene do celeho sveta?

[Heřmi]

Ahoj, to je vcelku novinka bindu, defaultne povoluje dotazy jen z lokalni site, dopl do konfigurace /etc/bind/named.conf.options

 allow-recursion { any; };
 allow-query { any; };
 allow-query-cache { any; };

pripadne to uprav.