Question on query-source, transfer-source, notify-source

Mark Andrews marka at isc.org
Fri Aug 6 15:13:49 UTC 2010


In message <20100804184239.4EE3B479F9 at britaine.cis.anl.gov>, Barry Finkel write
s:
> Another question about query-source:
> 
> Is there a difference between
> 
>      query-source address 1.2.3.4;
> and
>      query-source 1.2.3.4;

No.
 
> My reading of the ARM simplies that the two are the same, but I may
> be getting different results.  I am not sure.  Two of my colleagues
> ran a test last week that seemed to imply a difference, but I was not
> around to see exactly what tests they ran.  This is BIND 9.7.1-P2.
> 
> I have looked at querylogs on a server with one DNS address and one
> non-DNS address.  I have tried both formats of "query-source" above;
> I see no difference.  What I do see is this - an SOA query via the
> DNS address followed by an IXFR via the DNS address.  This IXFR is
> REFUSED because this is a test server, and the master server (not under
> my control) does not allow zone transfers from this test address.
> Then I see an SOA query and an AXFR query, both on the DNS address.
> This AXFR is also REFUSED.  Then I see an SOA query and an IXFR query
> via the non-DNS address!  I have not looked at the code to see what
> BIND might be doing in sending a DNS packet via the non-DNS address.
> The BIND config on this machine has
> 
>      transfer-source 1.2.3.4 port 53;
> 
> so it should not be sending an IXFR or AXFR request via the non-DNS
> address.

See alt-transfer-source and use-alt-transfer-source.

> An addendum to my recent postings about two machines each with three
> addresses.  The only reason I need all three addresses on each machine
> is that I have published all six addresses, and these addresses are
> configured in all of the machines on the three Class-B subnets that
> my DNS server manages.  I do not want to have all of the system
> administrators change their machine DNS server IP addresses.
> ----------------------------------------------------------------------
> Barry S. Finkel
> Computing and Information Systems Division
> Argonne National Laboratory          Phone:    +1 (630) 252-7277
> 9700 South Cass Avenue               Facsimile:+1 (630) 252-4601
> Building 240, Room 5.B.8             Internet: BSFinkel at anl.gov
> Argonne, IL   60439-4828             IBMMAIL:  I1004994
> 
> _______________________________________________
> bind-users mailing list
> bind-users at lists.isc.org
> https://lists.isc.org/mailman/listinfo/bind-users
-- 
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742                 INTERNET: marka at isc.org



More information about the bind-users mailing list