allow-query question

[Kevin Darcy]

Seems to me like it should work. So clients in the 172.16/16 range are able
to reverse-lookup their own addresses, even after you reload the nameserver
with that definition? You might want to turn on debugging.


- Kevin

David Meagher (LMI) wrote:

> hi,
> i've just joined this list (and searched the archives for this problem).
> i have got a problem with an acl. when i try to block access to a specific
> db file using an acl it doesn't work.
> when i include allow-query in options it works and all access is denied.
> but when i try to apply it to a specific zone, it doesn't work.
> /var/adm/messages doesn't list any problems.
>
> thanks
> david meagher
>
> details:
> running bind 8.2.2p5
> running solaris 2.6 on a sparc workstation, fresh install
> zone details:
>
> zone "16.172.in-addr.arpa" in {
>         type master;
>         file "db.internal";
>         allow-query { 172.16/16; };
> };