Authoritative and caching
Danjel Jungersen
danjel at jungersen.dk
Wed Feb 19 09:58:14 UTC 2025
Hi.
I have a primary and a secondary set up on debian 12.
They both seem to work.
They are authoratative for my own domain that is used to redirect local
traffic to local servers.
There are no (inbound) contact from the outside to bind.
I then have a postfix server, where I need to run a local caching
bind-instance.
I have added my 2 main bind-boxes as forwarders on my postfix box.
If I have the 2 main bind-boxes as resolvers, everything works.
But if I change /etc/resolv.conf to 127.0.0.1 something happens
If I do a dig or ping from my postfixbox to something that the 2 main
bind-boxes are authoratative for, it doesn't work.
External domains like postfix.org work perfectly.
Postfix box setup:
******
acl "trusted" {
127.0.0.1/32;
localhost;
};
and options section:
recursion yes;
allow-query { trusted; };
listen-on { 127.0.0.1; };
allow-transfer { none; };
forwarders {
192.168.20.10;
192.168.20.11;
};
forward only;
dnssec-validation auto;
*******
Any clues?
Or any hints of where to look for answers?
Best regards
Danjel
PS: Please forgive me for (possibly) asking stupid questions, bind is
rather new to me.
More information about the bind-users
mailing list