transfers from primary to secondary

[Kevin Darcy]

"Bartosz M. Krajnik" wrote:

> I have secondary (dns2) and primary (dns1) named.
> I'm trying set iptables rules (for transfers).
>
> Every questions go from my users to port 53 UDP.
> So server sends responses from 1024: UDP.
>
> But transfers go in TCP.
> How asks secondary and how responses primary (ports and protocols)?
>
> Does directive "transfer-source * port 53;" will go on 9.2.1 ?
>
> I can't force named 9.2.1 to transfer zones how I want (not default).

You should be able to use the same rules for UDP and TCP and zone
transfers should work without changing any of the named.conf defaults.
The client (slave) sends queries and zone transfer requests from port
number 1024 or above to port 53; the server (master) sends query
responses and zone transfers, from port 53 to the client's port (>1023).
Doesn't that work?


- Kevin