allow-query for a zone

Barry Margolin barmar at alum.mit.edu
Tue Jan 17 08:11:00 UTC 2012


In article <mailman.900.1326780825.68562.bind-users at lists.isc.org>,
 Jeff Peng <pyh at staff.dnsbed.com> wrote:

> > Whether you set allow-query to none, or remove the zone statement,
> > clients will get an error when they try to query the zone.
> 
> There is a difference when you develop a web interface for DNS system.
> A user can "pause" the domain from web interface, if we remove the zone 
> and records from BIND files, how will we do if user choose to enable the 
> domain?
> But with allow-query none, only adding a statement we can "pause" the 
> domain for querying, but can re-enable it by removing this statement later.

You don't have to remove the records from the database managed by the 
web interface.  It can still remember that the zone exists, it just 
doesn't put it into the named.conf.

If you're using the named.conf file as the database, I can see your 
point, although you could still do it by commenting out the zone 
statement, with comment markers that the web application recognizes.

-- 
Barry Margolin
Arlington, MA



More information about the bind-users mailing list