Rehashing split views et al in bind 9.1

Glenn Bell glennb at mitre.org
Wed Feb 14 23:31:16 UTC 2001


I included my whole view in a single file as follows.

// Bind 9.x named.conf
options {
    directory "/etc/named";
    forwarders { <IP_ADDR>; };
    dump-file "/var/tmp/name_dump.db";
    statistics-file "/var/tmp/named.stats";
    pid-file "named.pid";
    auth-nxdomain no;
    provide-ixfr yes;
    transfer-format one-answer;
    transfers-in 30;
    transfers-out 30;
    transfers-per-ns 5;
};

// Server Specific Information is stored in a seperate file
include "servers.inc";

// The actual views are managed in seperate files
include "external.inc";
include "internal.inc";

<EOF>

// external.inc
view "external" {
    match-clients {
        <IP_ADDR>;
    };

    zone "." {
        type hint;
        file "named.root";
    };

    zone "mitre.org" {
        type master;
        file "external/mitre.org";
        also-notify {
            <IP_ADDR>;
        };
    };

    zone "83.129.in-addr.arpa" {
        type master;
        file "external/129.83.rev";
        also-notify {
            <IP_ADDR>;
        };
    };
};

<EOF>

I am running this configuration on a Sun E250 running Solaris 2.6.  It
has been running without incident since the upgrade.

Hope this helps.

-Glenn

Cott Lang wrote:
> 
> So I guess the conclusion of this thread is that include doesn't work in
> views...
> 
> Any possibility it'll ever work in views?
> 
> ----- Original Message -----
> From: "Mark Chesterfield" <mark at ennu.com.au>
> Newsgroups: comp.protocols.dns.bind
> To: <comp-protocols-dns-bind at moderators.isc.org>
> Sent: Sunday, February 11, 2001 5:22 PM
> Subject: Re: Rehashing split views et al in bind 9.1
> 
> > I too am having this problem. I tried quoting the filename, tried
> upgrading
> > to 9.1.1.rc1 but to no avail.
> >
> > Any chance of posting a sanitised config set that works ?
> >
> > "Glenn Bell" <glennb at mitre.org> wrote in message
> > news:961p04$m8p at pub3.rc.vix.com...
> > > I had the same problem.  Quote the file names.
> > >
> > > include "externals.inc"
> > >
> > > This solved the problem for me.
> > >
> > > -Glenn
> > >
> > > Cott Lang wrote:
> > > >
> > > > >>of external domains in both the internal and external view. However,
> > > > include
> > > > >>doesn't appear to work within a view?!  This seems rather
> unbelievable
> > to
> > > > >>me - am I doing something wrong?
> > > > >
> > > > >Not my experience. $include (not #include, of course), seems to work
> > fine
> > > > >here. The zone files referenced in my named.conf contain only one
> > > > >$include line for the external view, and two $include lines for the
> > > > >internal view. All the rest is in the included files.
> > > >
> > > > I'm talking about using include (no, not #include :)) in the actual
> > > > named.conf file, not in the zone files... I see the advantage in using
> > > > $include in the zone files, but that doesn't seem to help my situation
> > of
> > > > having hundreds of zones, most of which need to be fed to internal &
> > > > external users - unless there's a conditional zone include I could use
> > only
> > > > on my two domains that I need different.  I assume one can't define
> the
> > same
> > > > zone twice with different allow-query strings... :)
> > > >
> > > > i.e.
> > > >
> > > > view "internal" {
> > > >   zone "myinternalzone" {
> > > >     blah;
> > > >   }
> > > >
> > > >   include externals.inc;    // includes my 100+ zones
> > > > }
> > > >
> > > > view "external" {
> > > >   match-clients { any; };
> > > >   include externals.inc;    // includes my 100+ zones
> > > > }
> > > >
> > > > I get a parsing error on any include lines inside a zone. If I moved
> it
> > > > outside a zone, it works fine.
> > > >
> > > > I should add the problem with using forwarding is that internal
> clients
> > > > (including DNS servers) can't go outside the firewall using NAT and
> make
> > a
> > > > connection to a public IP on the same firewall....
> >
> >
> >
> >
> >



More information about the bind-users mailing list