<html><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /></head><body style='font-size: 10pt'>
<p>On 07/04/2015 17:07, Matus UHLAR - fantomas wrote:</p>
<blockquote type="cite" style="padding: 0 0.4em; border-left: #1010ff 2px solid; margin: 0">
<div class="pre" style="margin: 0; padding: 0; font-family: monospace">On 06.04.15 15:19, Noel Butler wrote:
<blockquote type="cite" style="padding: 0 0.4em; border-left: #1010ff 2px solid; margin: 0">you need an allow-query and ACL, eg:</blockquote>
<br /> No. Don't play with allow-query if it is supposed to be authoritative for<br /> any zones (unless those zones are internal).<br /><br /> If the server is supposed to host any zones visible from the net,<br /> allow-query would make them invisible.</div>
<div class="pre" style="margin: 0; padding: 0; font-family: monospace"> </div>
</blockquote>
<div class="pre" style="margin: 0; padding: 0; font-family: monospace"> </div>
<div class="pre" style="margin: 0; padding: 0; font-family: monospace">Which is why I asked him to include "one zone" in his pasting, since you then need the allow query any inside the zone statements, which works perfectly, its also how I've always done it, and always seen it done, including on the thousands of zones I've maintained that I never wrote.</div>
<div class="pre" style="margin: 0; padding: 0; font-family: monospace"> </div>
<div class="pre" style="margin: 0; padding: 0; font-family: monospace">Been doing it that way for as long as I can recall, so over 20 years? dunno, I stopped counting my age at 21, some decades ago :)</div>
<div class="pre" style="margin: 0; padding: 0; font-family: monospace"> </div>
</body></html>