<html><head></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; "><div>No, that's not correct. You can use TSIG keys to differentiate between views, without using separate interfaces. However, this will not solve the problem -- removing match-recursive-only will solve the problem.</div><div><br></div><div>Regards,</div><div>Chris Buxton</div><div>BlueCat Networks</div><br><div><div>On Dec 21, 2011, at 2:23 AM, Gelo wrote:</div><br class="Apple-interchange-newline"><blockquote type="cite">Hi,<div><br></div><div>Maybe this can help you.</div><div><br></div><div>First you need two network interfaces with diferent ip.</div><div><br></div><div>At the internal view declaration add transfer-source 192.168.11.x; ( has to be different from your public/external)</div>
<div><br></div><div>In the zone statement, you must specify the private IP address of your slaves, at allow-transfer clause</div><div><br></div><div>I hope you worth something.</div><div><br></div><div><br></div><div>regards.</div>
<div>Gelo</div><div><br><div class="gmail_quote">2011/12/21 Konstantin V. Krotov <span dir="ltr"><<a href="mailto:kkv@insysnet.ru">kkv@insysnet.ru</a>></span><br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
21.12.2011 13:54, Konstantin V. Krotov пишет:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
Hello, list!<br>
I have split view on my name-servers (master and slave), for internal<br>
and external clients i have zone with similar names, but different content.<br>
Part of config named.conf on master:<br>
<br>
view "internal" {<br>
match-clients { myclients; };<br>
recursion yes;<br>
match-recursive-only yes;<br>
allow-recursion { myclients; };<br>
...<br>
zone "10.168.192.in-addr.arpa" {<br>
type master;<br>
file "10.168.192.in-addr.arpa.db";<br>
allow-transfer {transfer_acl;};<br>
allow-update {none;};<br>
};<br>
...<br>
}<br>
<br>
view "external" {<br>
match-clients { "any"; };<br>
recursion no;<br>
...<br>
[here descriptions of zone]<br>
}<br>
<br>
Well, then i have "match-recursive-only yes" directive in "internal"<br>
view, slave name-server report: "zone<br>
10.168.192.in-addr.arpa/IN/<u></u>internal: refresh: non-authoritative answer<br>
from master xx.xx.136.2#53 (source xx.xx.140.26#0). If<br>
match-recursive-only no, zone transfer to slave all right. There i have<br>
wrong? Thx.<br>
<br><span class="HOEnZb"><font color="#888888">
</font></span></blockquote><span class="HOEnZb"><font color="#888888">
<br>
-- <br>
WBR, Konstantin V. Krotov<br>
CJSs "Information Systems"<br>
mailto: <a href="mailto:kkv@insysnet.ru" target="_blank">kkv@insysnet.ru</a><br>
phone: <a href="tel:%2B7%20%288332%29%2051-35-95" value="+78332513595" target="_blank">+7 (8332) 51-35-95</a><br>
______________________________<u></u>_________________<br>
Please visit <a href="https://lists.isc.org/mailman/listinfo/bind-users" target="_blank">https://lists.isc.org/mailman/<u></u>listinfo/bind-users</a> to unsubscribe from this list<br>
<br>
bind-users mailing list<br>
<a href="mailto:bind-users@lists.isc.org" target="_blank">bind-users@lists.isc.org</a><br>
<a href="https://lists.isc.org/mailman/listinfo/bind-users" target="_blank">https://lists.isc.org/mailman/<u></u>listinfo/bind-users</a></font></span></blockquote></div><br></div>
_______________________________________________<br>Please visit <a href="https://lists.isc.org/mailman/listinfo/bind-users">https://lists.isc.org/mailman/listinfo/bind-users</a> to unsubscribe from this list<br><br>bind-users mailing list<br><a href="mailto:bind-users@lists.isc.org">bind-users@lists.isc.org</a><br>https://lists.isc.org/mailman/listinfo/bind-users</blockquote></div><br></body></html>