query (cache) 'xxxxxxxxxxxx/A/IN' denied

Riccardo Castellani ric.castellani at alice.it
Tue Feb 9 19:02:49 UTC 2010


I migrated from Bind 9.2 to 9.5.1 version but there was not his problem! 
This option was not present in mi prevoius configuration and it works fine.
What do you think ?

----- Original Message ----- 
From: "Todd Snyder" <tsnyder at rim.com>
To: "Riccardo Castellani" <ric.castellani at alice.it>; 
<bind-users at lists.isc.org>
Sent: Tuesday, February 09, 2010 7:18 PM
Subject: RE: query (cache) 'xxxxxxxxxxxx/A/IN' denied


checkout "allow-query-cache"

-----Original Message-----
From: bind-users-bounces+tsnyder=rim.com at lists.isc.org
[mailto:bind-users-bounces+tsnyder=rim.com at lists.isc.org] On Behalf Of
Riccardo Castellani
Sent: Tuesday, February 09, 2010 1:06 PM
To: bind-users at lists.isc.org
Subject: query (cache) 'xxxxxxxxxxxx/A/IN' denied

I'm using Debian Sarge with Bind 9.5.1 for my DNS server and I'd like
understanding because my Fedora Core 3 client (machine A) is not able to

solve domains when it queries to this DNS server.
I can see this error on named.log of DNS server:

security: client A.B.C.D#yyyy : query (cache) 'xxxxxxxxxxxx/A/IN' denied

"allow-query" option contains machine A
"allow-recursion" option doesn't contain machine A

I'd like machine A could resolve only domains which DNS server has in
cache
! It has not to do resursive queries !
If record is in cache, server gives answer otherwise it gives nxdomain !


_______________________________________________
bind-users mailing list
bind-users at lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users

---------------------------------------------------------------------
This transmission (including any attachments) may contain confidential 
information, privileged material (including material protected by the 
solicitor-client or other applicable privileges), or constitute non-public 
information. Any use of this information by anyone other than the intended 
recipient is prohibited. If you have received this transmission in error, 
please immediately reply to the sender and delete this information from your 
system. Use, dissemination, distribution, or reproduction of this 
transmission by unintended recipients is not authorized and may be unlawful. 




More information about the bind-users mailing list