Cannot get "allow-query-on" to work

Reindl Harald h.reindl at thelounge.net
Wed Jul 2 15:12:49 UTC 2014


Am 02.07.2014 17:08, schrieb Bob Harold:
> I am using Ubuntu 12.04.4, BIND 9.8.1-P1, and just added:
> 
> allow-query-on { 127.0.0.1; };
> 
> To the default /etc/bind/named.conf.options file.
> That should make it only answer queries sent to 127.0.0.1, and not 
> answer queries sent to the server's normal IP.
> But it seems to have no effect

why just listening on a interface you don#t want to
answer from and so accept packets at all?

listen-on              {any;};
listen-on              {127.0.0.1;};
listen-on              {127.0.0.1; 192.168.196.2;};

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 246 bytes
Desc: OpenPGP digital signature
URL: <https://lists.isc.org/pipermail/bind-users/attachments/20140702/c493f696/attachment.bin>


More information about the bind-users mailing list