Penguin

Differences between version 15 and predecessor to the previous major change of NamedNotes.

Other diffs: Previous Revision, Previous Author, or view the Annotated Edit History

Newer page: version 15 Last edited on Friday, July 9, 2004 11:41:34 am by GlennRamsey Revert
Older page: version 13 Last edited on Wednesday, February 11, 2004 4:54:29 pm by DrewBroadley Revert
@@ -77,4 +77,23 @@
  
 You can find more details about the patch at the URL below. 
  http://www.isc.org/products/BIND/delegation-only.html 
 ---- 
+I've written a [script|WLUG:/archive/validate_zones] to check for obvious mistakes in zone files (forgotten a "." or forgotten to update the serial).  
+----  
+  
+In named.conf in Debian woody there is this comment:  
+  
+options {  
+ directory "/var/cache/bind";  
+  
+ // If there is a firewall between you and nameservers you want  
+ // to talk to, you might need to uncomment the query-source  
+ // directive below. Previous versions of BIND always asked  
+ // questions using port 53, but BIND 8.1 and later use an unprivileged  
+ // port by default.  
+  
+ //query-source address * port 53;  
+...  
+}  
+  
+I found that when using the standard ipmasq scripts ( in /usr/share/doc/ipmasq/examples/stronger ) to create a firewall then, despite what the comment says that uncommenting that line caused dns lookups to stop working, ie the firewall blocked them from going out.