<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<style type="text/css" style="display:none;"><!-- P {margin-top:0;margin-bottom:0;} --></style>
</head>
<body dir="ltr">
<div id="divtagdefaultwrapper" style="font-size:12pt;color:#000000;background-color:#FFFFFF;font-family:Calibri,Arial,Helvetica,sans-serif;">
<p>Hi,</p>
<p><br>
</p>
<p>Thanks for your help. But is it possible to do it without additional IP address? I thought that I am not really bad with BIND but as soon as I started using views, I'm going nowhere
<img alt="😊" class="EmojiInsert" style="vertical-align: bottom;" src="cid:fe4be097-951b-42f3-987a-0be021dbef80"><br>
</p>
<p><br>
</p>
<p>I found related links:<br>
</p>
<ul dir="" class="" style="">
<li>​<a href="https://kb.isc.org/article/AA-00851/0/Understanding-views-in-BIND-9-by-example.html" title="https://kb.isc.org/article/AA-00851/0/Understanding-views-in-BIND-9-by-example.html
Ctrl+Click or tap to follow the link" id="LPlnk186918">https://kb.isc.org/article/AA-00851/0/Understanding-views-in-BIND-9-by-example.html</a> (I
believe my scenario would be example 3 or 4)<br>
</li><li><a href="https://kb.isc.org/article/AA-00723/0">https://kb.isc.org/article/AA-00723/0</a> (Because I really want to use TSIG)<br>
</li></ul>
<div>Do I have to use a tarball from ISC to do this? Debian's BIND has a version of 9.9.5 so version-wise, it looks alright to me. Thanks again.<br>
</div>
<div><br>
</div>
<div>Eoin<br>
<br>
</div>
<br>
<div style="color: rgb(0, 0, 0);">
<hr tabindex="-1" style="display:inline-block; width:98%">
<div id="divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" color="#000000" style="font-size:11pt"><b>From:</b> Lightner, Jeffrey <JLightner@dsservices.com><br>
<b>Sent:</b> Friday, 8 December 2017 11:38 PM<br>
<b>To:</b> Lightner, Jeffrey; Eoin Kim; bind-users@lists.isc.org<br>
<b>Subject:</b> RE: [Question] zone transfer issue with multiple views</font>
<div> </div>
</div>
<div>
<div style="">
<p style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;">
<span style="color:#1F497D">Sorry that 10.0.9.9 should be 10.9.9.9 – i.e. notify-source and transfer-source are the same IP within the same view.</span></p>
<p style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;">
<span style="color:#1F497D"> </span></p>
<p style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;">
<span style="color:#1F497D"> </span></p>
<div>
<p style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;">
<b><span style="font-size:10.0pt; font-family:"Tahoma","sans-serif"">From:</span></b><span style="font-size:10.0pt; font-family:"Tahoma","sans-serif""> bind-users [mailto:bind-users-bounces@lists.isc.org]
<b>On Behalf Of </b>Lightner, Jeffrey<br>
<b>Sent:</b> Friday, December 08, 2017 8:34 AM<br>
<b>To:</b> Eoin Kim; bind-users@lists.isc.org<br>
<b>Subject:</b> RE: [Question] zone transfer issue with multiple views<br>
<br>
</span><span style="color:#1F497D">When we did it here we setup separate notify-source and transfer-source within the views on both the master and the slave.</span></p>
<p style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;">
<span style="color:#1F497D">view "internal" {</span></p>
<p style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;">
<span style="color:#1F497D">match-clients { internaldns; };</span></p>
<p style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;">
<span style="color:#1F497D">notify-source 10.9.9.8.;</span></p>
<p style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;">
<span style="color:#1F497D">transfer-source 10.9.9.8;</span></p>
<p style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;">
<span style="color:#1F497D">allow-transfer { dnsservers; };</span></p>
<p style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;">
<span style="color:#1F497D">…then our zones for internal view</span></p>
<p style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;">
<span style="color:#1F497D">Internaldns acl is one that we specify servers inside our network.<br>
dnsserrvers acl is one that specifies the primary internal facing IP of the master and the slave<br>
<br>
view "external" {</span></p>
<p style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;">
<span style="color:#1F497D">match-clients { any; };</span></p>
<p style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;">
<span style="color:#1F497D">notify-source 10.9.9.9;</span></p>
<p style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;">
<span style="color:#1F497D">transfer-source 10.0.9.9;</span></p>
<p style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;">
<span style="color:#1F497D">allow-transfer { dswadnsalias; };<br>
…then our zones for external view</span></p>
<p style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;">
<span style="color:#1F497D">any allows external locations to query us (we have recursion turned off)<br>
dswadnsalias acl is one that specifies the alias IPs on the same NIC as the internal facing IP of the master and the slave<br>
<br>
The IPs above would be on the master – you’d have separate IPs (but the same ACLs) on the slave.</span></p>
<p style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;">
<span style="color:#1F497D"> </span></p>
<p style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;">
<span style="color:#1F497D">You can create an alias IP on your primary NIC so for example here we have:<br>
eth1 = 10.9.9.8</span></p>
<p style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;">
<span style="color:#1F497D">eth1:1 = 10.0.9.9</span></p>
<p style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;">
<span style="color:#1F497D">(In our config eth0 is the one we use for external facing traffic – eth1 is used for internal including zone transfers)</span></p>
<p style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;">
<span style="color:#1F497D"> </span></p>
<p style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;">
<span lang="EN-AU"> </span></p>
</div>
</div>
</div>
</div>
</div>
</body>
</html>