maxminddb support in 9.16

Denis mixair at gmail.com
Thu May 21 07:38:41 UTC 2020


Hi,
I'm struggling go get geo access-lists working with actual libmaxminddb
support but can't do it right. Bind is compiled with the following options:

named -V
BIND 9.16.3 (Stable Release) <id:5ea41c1>
running on Linux x86_64 5.6.3-1.el7.elrepo.x86_64 #1 SMP Wed Apr 8 07:13:05
EDT 2020
built by make with defaults
compiled by GCC 4.8.5 20150623 (Red Hat 4.8.5-39)
compiled with OpenSSL version: OpenSSL 1.0.2k-fips  26 Jan 2017
linked to OpenSSL version: OpenSSL 1.0.2k-fips  26 Jan 2017
compiled with libxml2 version: 2.9.1
linked to libxml2 version: 20901
compiled with json-c version: 0.11
linked to json-c version: 0.11
compiled with zlib version: 1.2.7
linked to zlib version: 1.2.7
*linked to maxminddb version: 1.2.0*
threads support is enabled

default paths:
  named configuration:  /usr/local/etc/named.conf
  rndc configuration:   /usr/local/etc/rndc.conf
  DNSSEC root key:      /usr/local/etc/bind.keys
  nsupdate session key: /usr/local/var/run/named/session.key
  named PID file:       /usr/local/var/run/named/named.pid
  named lock file:      /usr/local/var/run/named/named.lock
  *geoip-directory:      /usr/share/GeoIP*

The geoip-directory contains Geolite2 databases:
ls /usr/share/GeoIP
GeoLite2-ASN.mmdb  GeoLite2-City.mmdb  GeoLite2-Country.mmdb

But when I try to generate acls the same way it was done with legacy
Maxmind databases:
acl us {
      geoip country us;
}

I'm getting "no GeoIP database installed which can answer queries of type
'country'".
The documentation now shows that  "BIND 9.16 supports v2 of the API but
these instructions have not been updated accordingly"
Can you share the instructions that should be used now?

Thank you,
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.isc.org/pipermail/bind-users/attachments/20200521/faca7ae1/attachment.htm>


More information about the bind-users mailing list