Controls Statement question

[Loyd, Sarah]

Hi Mark,
	  Your complete controls section could look something like:-

controls {
	inet ip-address port port# allow {address-match-list; key...};
	unix permission owner group;	
}; 

If you want access only through the unix domain socket which it sounds like
remove the line beginning "inet" if it is present and make sure the
permissions mode for the other line is set correctly

e.g.

controls {
		unix 0600 0 0;
}; 

would allow local access for root only.

Regards Sarah

-----Original Message-----
From: Cinense, Mark [mailto:macinen at sandia.gov]
Sent: 24 April 2001 14:26
To: 'Bind-Users-Group'
Subject: Controls Statement question



Can someone tell me if I do not use a controls statement in my conf file,
does that mean using ndc remotely on BIND823 will not work.  I do not want
to be able to run ndc remotely, only locally.

thanks...

Mark