<html><head><meta http-equiv="content-type" content="text/html; charset=utf-8"></head><body style="overflow-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;">It seems like you might also need "match-destinations" to be defined, at least that is how i interpret this: <a href="https://bind9.readthedocs.io/en/v9_18_9/reference.html#namedconf-statement-match-destinations">https://bind9.readthedocs.io/en/v9_18_9/reference.html#namedconf-statement-match-destinations</a><div><br></div><div><div><br><blockquote type="cite"><div>On Dec 13, 2022, at 5:47 AM, 徐娅 <xuya2011@gmail.com> wrote:</div><br class="Apple-interchange-newline"><div><div dir="ltr"><pre class="gmail-code gmail-highlight" lang="plaintext" style=""><span id="gmail-LC1" class="gmail-line" lang="plaintext">25-Nov-2022 23:30:32.924 running on Linux x86_64 3.10.0-1127.el7.x86_64 #1 SMP Tue Mar 31 23:36:51 UTC 2020</span>
<span id="gmail-LC2" class="gmail-line" lang="plaintext">25-Nov-2022 23:30:32.924 built with '--prefix=/usr/local/bind-9.18.9' '--enable-largefile' '--enable-epoll' '--enable-full-report' '--disable-doh' '--enable-dnsrps-dl' '--enable-dnsrps'</span>
<span id="gmail-LC3" class="gmail-line" lang="plaintext">25-Nov-2022 23:30:32.924 running as: named -c named.conf -fg</span>
<span id="gmail-LC4" class="gmail-line" lang="plaintext">25-Nov-2022 23:30:32.924 compiled by GCC 4.8.5 20150623 (Red Hat 4.8.5-39)</span>
<span id="gmail-LC5" class="gmail-line" lang="plaintext">25-Nov-2022 23:30:32.924 compiled with OpenSSL version: OpenSSL 1.0.2k-fips 26 Jan 2017</span>
<span id="gmail-LC6" class="gmail-line" lang="plaintext">25-Nov-2022 23:30:32.924 linked to OpenSSL version: OpenSSL 1.0.2k-fips 26 Jan 2017</span>
<span id="gmail-LC7" class="gmail-line" lang="plaintext">25-Nov-2022 23:30:32.924 compiled with zlib version: 1.2.7</span>
<span id="gmail-LC8" class="gmail-line" lang="plaintext">25-Nov-2022 23:30:32.924 linked to zlib version: 1.2.7</span>
<span id="gmail-LC9" class="gmail-line" lang="plaintext">25-Nov-2022 23:30:32.924 ----------------------------------------------------</span>
<span id="gmail-LC10" class="gmail-line" lang="plaintext">25-Nov-2022 23:30:32.924 BIND 9 is maintained by Internet Systems Consortium,</span>
<span id="gmail-LC11" class="gmail-line" lang="plaintext">25-Nov-2022 23:30:32.924 Inc. (ISC), a non-profit 501(c)(3) public-benefit</span>
<span id="gmail-LC12" class="gmail-line" lang="plaintext">25-Nov-2022 23:30:32.924 corporation. Support and training for BIND 9 are</span>
<span id="gmail-LC13" class="gmail-line" lang="plaintext">25-Nov-2022 23:30:32.924 available at <a href="https://www.isc.org/support">https://www.isc.org/support</a></span>
</pre><pre class="gmail-code gmail-highlight" lang="plaintext" style=""><span class="gmail-line" lang="plaintext"><br></span></pre><pre class="gmail-code gmail-highlight" lang="plaintext" style=""><span class="gmail-line" lang="plaintext"><br></span></pre><pre class="gmail-code gmail-highlight" lang="plaintext" style=""><span class="gmail-line" lang="plaintext"><pre class="gmail-code gmail-highlight" lang="plaintext"><span id="gmail-LC1" class="gmail-line" lang="plaintext"># cat named.conf</span>
<span id="gmail-LC2" class="gmail-line" lang="plaintext">... ...</span>
<span id="gmail-LC3" class="gmail-line" lang="plaintext">... ...</span>
<span id="gmail-LC4" class="gmail-line" lang="plaintext">options {</span>
<span id="gmail-LC5" class="gmail-line" lang="plaintext"> listen-on port 353 { any; };</span>
<span id="gmail-LC6" class="gmail-line" lang="plaintext"> listen-on-v6 port 353 { any; };</span>
<span id="gmail-LC7" class="gmail-line" lang="plaintext"> directory "/root/edns/named";</span>
<span id="gmail-LC9" class="gmail-line" lang="plaintext"> allow-query {</span><span id="gmail-LC10" class="gmail-line" lang="plaintext"> any; </span><span id="gmail-LC11" class="gmail-line" lang="plaintext">};</span>
<span id="gmail-LC12" class="gmail-line" lang="plaintext"> allow-recursion {</span><span id="gmail-LC13" class="gmail-line" lang="plaintext"> any; </span><span id="gmail-LC14" class="gmail-line" lang="plaintext"> };</span>
<span id="gmail-LC15" class="gmail-line" lang="plaintext"></span>
<span id="gmail-LC16" class="gmail-line" lang="plaintext"> empty-zones-enable no;</span>
<span id="gmail-LC17" class="gmail-line" lang="plaintext"></span>
<span id="gmail-LC18" class="gmail-line" lang="plaintext"> pid-file "/root/edns/named/run/named.pid";</span>
<span id="gmail-LC19" class="gmail-line" lang="plaintext"></span>
<span id="gmail-LC20" class="gmail-line" lang="plaintext">};</span>
<span id="gmail-LC21" class="gmail-line" lang="plaintext"></span>
<span id="gmail-LC22" class="gmail-line" lang="plaintext">view "aaa" {</span>
<span id="gmail-LC23" class="gmail-line" lang="plaintext"> match-clients { </span><span id="gmail-LC24" class="gmail-line" lang="plaintext"><a href="http://10.105.0.0/16">10.105.0.0/16</a>; </span><span id="gmail-LC25" class="gmail-line" lang="plaintext">};</span>
<span id="gmail-LC26" class="gmail-line" lang="plaintext"> zone "<a href="http://abc.com/">abc.com</a>" {</span>
<span id="gmail-LC27" class="gmail-line" lang="plaintext"> type master;</span>
<span id="gmail-LC28" class="gmail-line" lang="plaintext"> file "aaa/<a href="http://abc.com/">abc.com</a>";</span>
<span id="gmail-LC29" class="gmail-line" lang="plaintext"> };</span>
<span id="gmail-LC30" class="gmail-line" lang="plaintext">};</span>
<span id="gmail-LC31" class="gmail-line" lang="plaintext"></span>
<span id="gmail-LC32" class="gmail-line" lang="plaintext">view "bbb" {</span>
<span id="gmail-LC33" class="gmail-line" lang="plaintext"> match-clients { </span><span id="gmail-LC34" class="gmail-line" lang="plaintext"><a href="http://10.106.0.0/26">10.106.0.0/26</a>; </span><span id="gmail-LC35" class="gmail-line" lang="plaintext"> };</span>
<span id="gmail-LC36" class="gmail-line" lang="plaintext"> zone "<a href="http://abc.com/">abc.com</a>" {</span>
<span id="gmail-LC37" class="gmail-line" lang="plaintext"> type master;</span>
<span id="gmail-LC38" class="gmail-line" lang="plaintext"> file "bbb/<a href="http://abc.com/">abc.com</a>";</span>
<span id="gmail-LC39" class="gmail-line" lang="plaintext"> };</span>
<span id="gmail-LC40" class="gmail-line" lang="plaintext">};</span>
<span id="gmail-LC41" class="gmail-line" lang="plaintext"></span>
<span id="gmail-LC42" class="gmail-line" lang="plaintext">view "idc-default" {</span>
<span id="gmail-LC43" class="gmail-line" lang="plaintext"> match-clients { </span><span id="gmail-LC44" class="gmail-line" lang="plaintext">any; </span><span id="gmail-LC45" class="gmail-line" lang="plaintext">};</span>
<span id="gmail-LC46" class="gmail-line" lang="plaintext"> zone "<a href="http://abc.com/">abc.com</a>" {</span>
<span id="gmail-LC47" class="gmail-line" lang="plaintext"> type master;</span>
<span id="gmail-LC48" class="gmail-line" lang="plaintext"> file "any/<a href="http://abc.com/">abc.com</a>";</span>
<span id="gmail-LC49" class="gmail-line" lang="plaintext"> };</span>
<span id="gmail-LC50" class="gmail-line" lang="plaintext">};</span>
<span id="gmail-LC51" class="gmail-line" lang="plaintext"></span>
<span id="gmail-LC52" class="gmail-line" lang="plaintext"># cat named/aaa/<a href="http://abc.com/">abc.com</a></span>
<span id="gmail-LC53" class="gmail-line" lang="plaintext">... ...</span>
<span id="gmail-LC54" class="gmail-line" lang="plaintext">www 600 IN TXT aaa</span>
<span id="gmail-LC55" class="gmail-line" lang="plaintext"></span>
<span id="gmail-LC56" class="gmail-line" lang="plaintext"># cat named/bbb/<a href="http://abc.com/">abc.com</a></span>
<span id="gmail-LC57" class="gmail-line" lang="plaintext">www 600 IN TXT bbb</span>
<span id="gmail-LC58" class="gmail-line" lang="plaintext"></span>
<span id="gmail-LC59" class="gmail-line" lang="plaintext"># cat named/ccc/<a href="http://abc.com/">abc.com</a></span>
<span id="gmail-LC60" class="gmail-line" lang="plaintext">www 600 IN TXT ccc</span>
</pre><pre class="gmail-code gmail-highlight" lang="plaintext"><span class="gmail-line" lang="plaintext"><br></span></pre><pre class="gmail-code gmail-highlight" lang="plaintext"><span class="gmail-line" lang="plaintext"><pre class="gmail-code gmail-highlight" lang="plaintext"><span id="gmail-LC1" class="gmail-line" lang="plaintext"># dig @<a href="http://127.0.0.1/">127.0.0.1</a> -p 353 <a href="http://txt.abc.com/">txt.abc.com</a> txt +subnet=10.105.2.2</span>
<span id="gmail-LC2" class="gmail-line" lang="plaintext"></span>
<span id="gmail-LC3" class="gmail-line" lang="plaintext">; <<>> DiG 9.18.9 <<>> @<a href="http://127.0.0.1/">127.0.0.1</a> -p 353 <a href="http://txt.abc.com/">txt.abc.com</a> txt +subnet=10.105.2.2</span>
<span id="gmail-LC4" class="gmail-line" lang="plaintext">; (1 server found)</span>
<span id="gmail-LC5" class="gmail-line" lang="plaintext">;; global options: +cmd</span>
<span id="gmail-LC6" class="gmail-line" lang="plaintext">;; Got answer:</span>
<span id="gmail-LC7" class="gmail-line" lang="plaintext">;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 7948</span>
<span id="gmail-LC8" class="gmail-line" lang="plaintext">;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1</span>
<span id="gmail-LC9" class="gmail-line" lang="plaintext"></span>
<span id="gmail-LC10" class="gmail-line" lang="plaintext">;; OPT PSEUDOSECTION:</span>
<span id="gmail-LC11" class="gmail-line" lang="plaintext">; EDNS: version: 0, flags:; udp: 1232</span>
<span id="gmail-LC12" class="gmail-line" lang="plaintext">; COOKIE: 075abe1b7a9c177a010000006380ded9dc3ca0fc1bae43d4 (good)</span>
<span id="gmail-LC13" class="gmail-line" lang="plaintext">; CLIENT-SUBNET: <a href="http://10.105.2.2/32/0">10.105.2.2/32/0</a></span>
<span id="gmail-LC14" class="gmail-line" lang="plaintext">;; QUESTION SECTION:</span>
<span id="gmail-LC15" class="gmail-line" lang="plaintext">;<a href="http://txt.abc.com/">txt.abc.com</a>. IN TXT</span>
<span id="gmail-LC16" class="gmail-line" lang="plaintext"></span>
<span id="gmail-LC17" class="gmail-line" lang="plaintext">;; ANSWER SECTION:</span>
<span id="gmail-LC18" class="gmail-line" lang="plaintext"><a href="http://txt.abc.com/">txt.abc.com</a>. 600 IN TXT "any"</span>
<span id="gmail-LC19" class="gmail-line" lang="plaintext"></span>
<span id="gmail-LC20" class="gmail-line" lang="plaintext">;; Query time: 1 msec</span>
<span id="gmail-LC21" class="gmail-line" lang="plaintext">;; SERVER: 127.0.0.1#353(127.0.0.1) (UDP)</span>
<span id="gmail-LC22" class="gmail-line" lang="plaintext">;; WHEN: Fri Nov 25 23:27:21 CST 2022</span>
<span id="gmail-LC23" class="gmail-line" lang="plaintext">;; MSG SIZE rcvd: 99</span>
<span id="gmail-LC24" class="gmail-line" lang="plaintext"></span>
</pre><p dir="auto" style="white-space:normal">I expect +subnet=10.105.2.2, return<span class="gmail-Apple-converted-space"> </span><strong>aaa</strong>, but returned any</p><div class="gmail-gl-relative gmail-markdown-code-block gmail-js-markdown-code" style="white-space:normal"><pre class="gmail-code gmail-highlight gmail-js-syntax-highlight gmail-language-plaintext gmail-white" lang="plaintext" id="gmail-code-7"><code><span id="gmail-LC1" class="gmail-line" lang="plaintext"># dig @<a href="http://127.0.0.1/">127.0.0.1</a> -p 353 <a href="http://txt.abc.com/">txt.abc.com</a> txt +subnet=10.105.2.2</span>
<span id="gmail-LC2" class="gmail-line" lang="plaintext">any</span></code></pre></div><p dir="auto" style="white-space:normal">I expect +subnet=10.106.3.3, return<span class="gmail-Apple-converted-space"> </span><strong>bbb</strong>, but returned any</p><div class="gmail-gl-relative gmail-markdown-code-block gmail-js-markdown-code" style="white-space:normal"><pre class="gmail-code gmail-highlight gmail-js-syntax-highlight gmail-language-plaintext gmail-white" lang="plaintext" id="gmail-code-8"><code><span id="gmail-LC1" class="gmail-line" lang="plaintext"># dig @<a href="http://127.0.0.1/">127.0.0.1</a> -p 353 <a href="http://txt.abc.com/">txt.abc.com</a> txt +subnet=10.106.3.3</span>
<span id="gmail-LC2" class="gmail-line" lang="plaintext">any</span></code></pre><pre class="gmail-code gmail-highlight gmail-js-syntax-highlight gmail-language-plaintext gmail-white" lang="plaintext" id="gmail-code-8"><code><span class="gmail-line" lang="plaintext"><br></span></code></pre></div><p dir="auto" style="white-space:normal">How do I change named.conf?</p><h3 dir="auto" style="white-space:normal"><a id="gmail-user-content-links-references" class="gmail-anchor" aria-hidden="true"></a></h3></span></pre></span></pre></div>
-- <br>Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list<br><br>ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information.<br><br><br>bind-users mailing list<br>bind-users@lists.isc.org<br>https://lists.isc.org/mailman/listinfo/bind-users<br></div></blockquote></div><br></div></body></html>