<div dir="ltr">Hi Elias.<div>I can't say why this might have worked with 9.11 (if it did - I'd be surprised). But you should not/cannot define ACLs like this:</div><div><a href="http://10.60.0.1/23" target="_blank" style="font-family:tahoma,sans-serif">10.60.0.1/23</a><span style="font-family:tahoma,sans-serif">;</span><br></div><div><span style="font-family:tahoma,sans-serif">/23 means consider only the first 23 bits of the available 32 bits of an IPv4 address and ignore the rest (in this context. Please don't someone else shoot me down for other uses of netmasks).</span></div><div><span style="font-family:tahoma,sans-serif"><br></span></div><div><span style="font-family:tahoma,sans-serif">Since the human-readable version of an IPv4 address (in bits) is 8.8.8.8 (no, not THAT 8.8.8.8) a /23 mask means care about the first three octets (24 bits), except the last bit of the third octet (back to 23 bits), and don't care about the fourth octet at all.</span></div><div><span style="font-family:tahoma,sans-serif"><br></span></div><div><span style="font-family:tahoma,sans-serif">So in this case the third octet *must* be an even number (zero is even in this context) and the fourth octet should be zero. Like this:</span></div><div><span style="font-family:tahoma,sans-serif"><a href="http://10.60.0.0/23">10.60.0.0/23</a>;</span></div><div><span style="font-family:tahoma,sans-serif"><br></span></div><div><span style="font-family:tahoma,sans-serif"><a href="http://10.60.2.0/23">10.60.2.0/23</a>; would also be acceptable.</span></div><div><span style="font-family:tahoma,sans-serif"><a href="http://10.60.17.0/23">10.60.17.0/23</a>; would not be acceptable because the third octet is odd, so its low order bit is 1.</span></div><div><span style="font-family:tahoma,sans-serif"><br></span></div><div><span style="font-family:tahoma,sans-serif">I hope that helps.</span></div><div><span style="font-family:tahoma,sans-serif">Greg</span></div><div><span style="font-family:tahoma,sans-serif"><br></span></div><div><span style="font-family:tahoma,sans-serif"><br></span></div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Wed, 24 Aug 2022 at 13:17, Elias Pereira <<a href="mailto:empbilly@gmail.com">empbilly@gmail.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir="ltr"><div class="gmail_default" style="font-family:tahoma,sans-serif">Oh, sorry... :D</div><div class="gmail_default" style="font-family:tahoma,sans-serif"><br></div><div class="gmail_default" style="font-family:tahoma,sans-serif">here it is</div><div class="gmail_default" style="font-family:tahoma,sans-serif"><br></div><div class="gmail_default" style="font-family:tahoma,sans-serif"># cat named.conf.local <br># ACL das redes internas<br># Ultima modificação: 24/08/2022<br><br>acl "internal" {<br> <a href="http://10.60.0.1/23" target="_blank">10.60.0.1/23</a>;<br> <a href="http://10.10.1.1/24" target="_blank">10.10.1.1/24</a>;<br> <a href="http://10.10.2.1/25" target="_blank">10.10.2.1/25</a>;<br> <a href="http://10.10.3.1/25" target="_blank">10.10.3.1/25</a>;<br> <a href="http://10.10.4.1/25" target="_blank">10.10.4.1/25</a>;<br> <a href="http://10.10.5.1/25" target="_blank">10.10.5.1/25</a>;<br> <a href="http://10.51.0.1/23" target="_blank">10.51.0.1/23</a>;<br> <a href="http://10.10.6.1/25" target="_blank">10.10.6.1/25</a>;<br> <a href="http://10.10.7.1/26" target="_blank">10.10.7.1/26</a>;<br> <a href="http://172.20.0.1/26" target="_blank">172.20.0.1/26</a>;<br> <a href="http://10.50.0.1/23" target="_blank">10.50.0.1/23</a>;<br> <a href="http://10.40.0.1/22" target="_blank">10.40.0.1/22</a>;<br> <a href="http://10.56.0.1/22" target="_blank">10.56.0.1/22</a>;<br>};<br></div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Wed, Aug 24, 2022 at 9:14 AM Anand Buddhdev <<a href="mailto:anandb@ripe.net" target="_blank">anandb@ripe.net</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">On 24/08/2022 14:08, Elias Pereira wrote:<br>
<br>
Hi Elias,<br>
<br>
> I upgraded my AD, debian 10 to 11 and bind upgraded to version 9.16.27.<br>
> <br>
> Now I get the address/prefix length mismatch error in name.conf.local.<br>
> <br>
> In my first AD that I have not upgraded yet, it is working correctly with<br>
> the same settings in version 9.11.x.<br>
> <br>
> What is the problem with version 9.16.x?<br>
<br>
We don't know what your named.conf.local looks like, so it's impossible <br>
to help you. Please help yourself by asking a better question, in which <br>
you show your configuration. Then someone can probably spot the error <br>
and provide a helpful answer.<br>
<br>
Regards,<br>
Anand<br>
</blockquote></div><br clear="all"><div><br></div>-- <br><div dir="ltr">Elias Pereira</div>
-- <br>
Visit <a href="https://lists.isc.org/mailman/listinfo/bind-users" rel="noreferrer" target="_blank">https://lists.isc.org/mailman/listinfo/bind-users</a> to unsubscribe from this list<br>
<br>
ISC funds the development of this software with paid support subscriptions. Contact us at <a href="https://www.isc.org/contact/" rel="noreferrer" target="_blank">https://www.isc.org/contact/</a> for more information.<br>
<br>
<br>
bind-users mailing list<br>
<a href="mailto:bind-users@lists.isc.org" target="_blank">bind-users@lists.isc.org</a><br>
<a href="https://lists.isc.org/mailman/listinfo/bind-users" rel="noreferrer" target="_blank">https://lists.isc.org/mailman/listinfo/bind-users</a><br>
</blockquote></div>