<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=UTF-8">
</head>
<body>
<p>I'm setting ECS in dnsdist in hopes of using it in an ACL to
choose a view. The views are working well, and the ECS is read by
bind9 (see log below), but I can't seem to find a syntax for
adding an ecs entry into an acl. Here is what I've tried:</p>
<p>acl "filtered" {<br>
192.168.0.90;<br>
192.168.0.91;<br>
192.168.0.92;<br>
192.168.0.93;<br>
<b> ecs 192.168.99.0/24;</b><br>
};</p>
<p>view filtered-view {<br>
match-clients { filtered; };<br>
{...}<br>
</p>
<p>When I try to start bind with this config, I get the following
error:<br>
/etc/bind/named.conf.local:6: missing ';' before '192.168.99.0'<br>
</p>
<p>Everything works as it should if I remove the ecs entry from the
acl.</p>
<p>I can see the ECS is being set by dnsdist when I enable query
logging:<br>
client @0x7f21840117e8 192.168.0.1#43466 (elastic.mcguire.local):
view filtered-view: query: elastic.mcguire.local IN A +E(0)
(192.168.0.5) <b>[ECS 192.168.99.0/24/0]</b></p>
<p>From the docs<b>:</b></p>
<p>"An ACL containing an element of the form ecs prefix will match
if a request arrives in containing an ECS option encoding an
address within that prefix. If the request has no ECS option, then
"ecs" elements are simply ignored. Addresses in ACLs that are not
prefixed with "ecs" are matched only against the source address."<b><br>
</b></p>
<p>I am running bind9 version 9.16.15.</p>
<p>Regards,<br>
</p>
<div class="moz-signature">
<table style="width: 550px;" cellspacing="0" cellpadding="0"
border="0">
<tbody>
<tr>
<td style="padding-right: 0px; vertical-align:middle">
<table cellspacing="0" cellpadding="0" border="0">
<tbody>
<tr>
<td style="font-family: 'Georgia'; font-size: 11pt;
color: #333333;"> <span style="font-weight:
bold;">Ryan McGuire</span> </td>
</tr>
<tr>
<td style="font-family: 'Georgia'; font-size: 10pt;">
<span style="color: #333333; font-size: 10pt;
font-family: Georgia">p. <a
href="tel:260.202.0500" style="color: #156022">260.202.0500</a></span>
<span style="color: #333333; font-size: 10pt;
font-family: Georgia">m. <a
href="tel:978.501.3620" style="color: #156022">978.501.3620</a></span>
<span style="color: #333333; font-size: 10pt;
font-family: Georgia">f. <a
href="tel:978.501.3620" style="color: #156022">260.202.0420</a></span>
</td>
</tr>
<tr>
<td style="font-family: 'Georgia'; font-size: 10pt;">
<span style="color: #333333; font-size: 10pt;
font-family: Georgia">w. <a
href="https://libretechconsulting.com"
style="color: #156022">www.libretechconsulting.com</a>
</span> </td>
</tr>
</tbody>
</table>
</td>
<td style="vertical-align: middle; text-align: left;"
valign="middle"> <a
href="https://libretechconsulting.com"><img
id="TemplateLogo" data-class="external"
src="https://www.libretechconsulting.com/images/ltc_logo_00.jpg"
alt="Libre Tech Consulting" style="display: block"></a>
</td>
</tr>
</tbody>
</table>
</div>
</body>
</html>