<div dir="ltr"><pre class="gmail-code gmail-highlight" lang="plaintext" style="color:rgb(0,0,0)"><span id="gmail-LC1" class="gmail-line" lang="plaintext">25-Nov-2022 23:30:32.924 running on Linux x86_64 3.10.0-1127.el7.x86_64 #1 SMP Tue Mar 31 23:36:51 UTC 2020</span>
<span id="gmail-LC2" class="gmail-line" lang="plaintext">25-Nov-2022 23:30:32.924 built with  '--prefix=/usr/local/bind-9.18.9' '--enable-largefile' '--enable-epoll' '--enable-full-report' '--disable-doh' '--enable-dnsrps-dl' '--enable-dnsrps'</span>
<span id="gmail-LC3" class="gmail-line" lang="plaintext">25-Nov-2022 23:30:32.924 running as: named -c named.conf -fg</span>
<span id="gmail-LC4" class="gmail-line" lang="plaintext">25-Nov-2022 23:30:32.924 compiled by GCC 4.8.5 20150623 (Red Hat 4.8.5-39)</span>
<span id="gmail-LC5" class="gmail-line" lang="plaintext">25-Nov-2022 23:30:32.924 compiled with OpenSSL version: OpenSSL 1.0.2k-fips  26 Jan 2017</span>
<span id="gmail-LC6" class="gmail-line" lang="plaintext">25-Nov-2022 23:30:32.924 linked to OpenSSL version: OpenSSL 1.0.2k-fips  26 Jan 2017</span>
<span id="gmail-LC7" class="gmail-line" lang="plaintext">25-Nov-2022 23:30:32.924 compiled with zlib version: 1.2.7</span>
<span id="gmail-LC8" class="gmail-line" lang="plaintext">25-Nov-2022 23:30:32.924 linked to zlib version: 1.2.7</span>
<span id="gmail-LC9" class="gmail-line" lang="plaintext">25-Nov-2022 23:30:32.924 ----------------------------------------------------</span>
<span id="gmail-LC10" class="gmail-line" lang="plaintext">25-Nov-2022 23:30:32.924 BIND 9 is maintained by Internet Systems Consortium,</span>
<span id="gmail-LC11" class="gmail-line" lang="plaintext">25-Nov-2022 23:30:32.924 Inc. (ISC), a non-profit 501(c)(3) public-benefit</span>
<span id="gmail-LC12" class="gmail-line" lang="plaintext">25-Nov-2022 23:30:32.924 corporation.  Support and training for BIND 9 are</span>
<span id="gmail-LC13" class="gmail-line" lang="plaintext">25-Nov-2022 23:30:32.924 available at <a href="https://www.isc.org/support">https://www.isc.org/support</a></span>
</pre><pre class="gmail-code gmail-highlight" lang="plaintext" style="color:rgb(0,0,0)"><span class="gmail-line" lang="plaintext"><br></span></pre><pre class="gmail-code gmail-highlight" lang="plaintext" style="color:rgb(0,0,0)"><span class="gmail-line" lang="plaintext"><br></span></pre><pre class="gmail-code gmail-highlight" lang="plaintext" style="color:rgb(0,0,0)"><span class="gmail-line" lang="plaintext"><pre class="gmail-code gmail-highlight" lang="plaintext"><span id="gmail-LC1" class="gmail-line" lang="plaintext"># cat named.conf</span>
<span id="gmail-LC2" class="gmail-line" lang="plaintext">... ...</span>
<span id="gmail-LC3" class="gmail-line" lang="plaintext">... ...</span>
<span id="gmail-LC4" class="gmail-line" lang="plaintext">options {</span>
<span id="gmail-LC5" class="gmail-line" lang="plaintext">    listen-on    port 353 { any; };</span>
<span id="gmail-LC6" class="gmail-line" lang="plaintext">    listen-on-v6 port 353 { any; };</span>
<span id="gmail-LC7" class="gmail-line" lang="plaintext">    directory       "/root/edns/named";</span>
<span id="gmail-LC9" class="gmail-line" lang="plaintext">    allow-query     {</span><span id="gmail-LC10" class="gmail-line" lang="plaintext">   any;    </span><span id="gmail-LC11" class="gmail-line" lang="plaintext">};</span>
<span id="gmail-LC12" class="gmail-line" lang="plaintext">    allow-recursion {</span><span id="gmail-LC13" class="gmail-line" lang="plaintext">  any;   </span><span id="gmail-LC14" class="gmail-line" lang="plaintext"> };</span>
<span id="gmail-LC15" class="gmail-line" lang="plaintext"></span>
<span id="gmail-LC16" class="gmail-line" lang="plaintext">    empty-zones-enable no;</span>
<span id="gmail-LC17" class="gmail-line" lang="plaintext"></span>
<span id="gmail-LC18" class="gmail-line" lang="plaintext">    pid-file "/root/edns/named/run/named.pid";</span>
<span id="gmail-LC19" class="gmail-line" lang="plaintext"></span>
<span id="gmail-LC20" class="gmail-line" lang="plaintext">};</span>
<span id="gmail-LC21" class="gmail-line" lang="plaintext"></span>
<span id="gmail-LC22" class="gmail-line" lang="plaintext">view "aaa" {</span>
<span id="gmail-LC23" class="gmail-line" lang="plaintext">    match-clients {    </span><span id="gmail-LC24" class="gmail-line" lang="plaintext"><a href="http://10.105.0.0/16">10.105.0.0/16</a>;   </span><span id="gmail-LC25" class="gmail-line" lang="plaintext">};</span>
<span id="gmail-LC26" class="gmail-line" lang="plaintext">    zone "<a href="http://abc.com">abc.com</a>" {</span>
<span id="gmail-LC27" class="gmail-line" lang="plaintext">        type master;</span>
<span id="gmail-LC28" class="gmail-line" lang="plaintext">        file "aaa/<a href="http://abc.com">abc.com</a>";</span>
<span id="gmail-LC29" class="gmail-line" lang="plaintext">    };</span>
<span id="gmail-LC30" class="gmail-line" lang="plaintext">};</span>
<span id="gmail-LC31" class="gmail-line" lang="plaintext"></span>
<span id="gmail-LC32" class="gmail-line" lang="plaintext">view "bbb" {</span>
<span id="gmail-LC33" class="gmail-line" lang="plaintext">    match-clients { </span><span id="gmail-LC34" class="gmail-line" lang="plaintext"><a href="http://10.106.0.0/26">10.106.0.0/26</a>;  </span><span id="gmail-LC35" class="gmail-line" lang="plaintext"> };</span>
<span id="gmail-LC36" class="gmail-line" lang="plaintext">    zone "<a href="http://abc.com">abc.com</a>" {</span>
<span id="gmail-LC37" class="gmail-line" lang="plaintext">        type master;</span>
<span id="gmail-LC38" class="gmail-line" lang="plaintext">        file "bbb/<a href="http://abc.com">abc.com</a>";</span>
<span id="gmail-LC39" class="gmail-line" lang="plaintext">    };</span>
<span id="gmail-LC40" class="gmail-line" lang="plaintext">};</span>
<span id="gmail-LC41" class="gmail-line" lang="plaintext"></span>
<span id="gmail-LC42" class="gmail-line" lang="plaintext">view "idc-default" {</span>
<span id="gmail-LC43" class="gmail-line" lang="plaintext">    match-clients {  </span><span id="gmail-LC44" class="gmail-line" lang="plaintext">any;  </span><span id="gmail-LC45" class="gmail-line" lang="plaintext">};</span>
<span id="gmail-LC46" class="gmail-line" lang="plaintext">    zone "<a href="http://abc.com">abc.com</a>" {</span>
<span id="gmail-LC47" class="gmail-line" lang="plaintext">        type master;</span>
<span id="gmail-LC48" class="gmail-line" lang="plaintext">        file "any/<a href="http://abc.com">abc.com</a>";</span>
<span id="gmail-LC49" class="gmail-line" lang="plaintext">    };</span>
<span id="gmail-LC50" class="gmail-line" lang="plaintext">};</span>
<span id="gmail-LC51" class="gmail-line" lang="plaintext"></span>
<span id="gmail-LC52" class="gmail-line" lang="plaintext"># cat named/aaa/<a href="http://abc.com">abc.com</a></span>
<span id="gmail-LC53" class="gmail-line" lang="plaintext">... ...</span>
<span id="gmail-LC54" class="gmail-line" lang="plaintext">www 600 IN TXT aaa</span>
<span id="gmail-LC55" class="gmail-line" lang="plaintext"></span>
<span id="gmail-LC56" class="gmail-line" lang="plaintext"># cat named/bbb/<a href="http://abc.com">abc.com</a></span>
<span id="gmail-LC57" class="gmail-line" lang="plaintext">www 600 IN TXT bbb</span>
<span id="gmail-LC58" class="gmail-line" lang="plaintext"></span>
<span id="gmail-LC59" class="gmail-line" lang="plaintext"># cat named/ccc/<a href="http://abc.com">abc.com</a></span>
<span id="gmail-LC60" class="gmail-line" lang="plaintext">www 600 IN TXT ccc</span>
</pre><pre class="gmail-code gmail-highlight" lang="plaintext"><span class="gmail-line" lang="plaintext"><br></span></pre><pre class="gmail-code gmail-highlight" lang="plaintext"><span class="gmail-line" lang="plaintext"><pre class="gmail-code gmail-highlight" lang="plaintext"><span id="gmail-LC1" class="gmail-line" lang="plaintext"># dig @<a href="http://127.0.0.1">127.0.0.1</a> -p 353 <a href="http://txt.abc.com">txt.abc.com</a> txt +subnet=10.105.2.2</span>
<span id="gmail-LC2" class="gmail-line" lang="plaintext"></span>
<span id="gmail-LC3" class="gmail-line" lang="plaintext">; <<>> DiG 9.18.9 <<>> @<a href="http://127.0.0.1">127.0.0.1</a> -p 353 <a href="http://txt.abc.com">txt.abc.com</a> txt +subnet=10.105.2.2</span>
<span id="gmail-LC4" class="gmail-line" lang="plaintext">; (1 server found)</span>
<span id="gmail-LC5" class="gmail-line" lang="plaintext">;; global options: +cmd</span>
<span id="gmail-LC6" class="gmail-line" lang="plaintext">;; Got answer:</span>
<span id="gmail-LC7" class="gmail-line" lang="plaintext">;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 7948</span>
<span id="gmail-LC8" class="gmail-line" lang="plaintext">;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1</span>
<span id="gmail-LC9" class="gmail-line" lang="plaintext"></span>
<span id="gmail-LC10" class="gmail-line" lang="plaintext">;; OPT PSEUDOSECTION:</span>
<span id="gmail-LC11" class="gmail-line" lang="plaintext">; EDNS: version: 0, flags:; udp: 1232</span>
<span id="gmail-LC12" class="gmail-line" lang="plaintext">; COOKIE: 075abe1b7a9c177a010000006380ded9dc3ca0fc1bae43d4 (good)</span>
<span id="gmail-LC13" class="gmail-line" lang="plaintext">; CLIENT-SUBNET: <a href="http://10.105.2.2/32/0">10.105.2.2/32/0</a></span>
<span id="gmail-LC14" class="gmail-line" lang="plaintext">;; QUESTION SECTION:</span>
<span id="gmail-LC15" class="gmail-line" lang="plaintext">;<a href="http://txt.abc.com">txt.abc.com</a>.                      IN      TXT</span>
<span id="gmail-LC16" class="gmail-line" lang="plaintext"></span>
<span id="gmail-LC17" class="gmail-line" lang="plaintext">;; ANSWER SECTION:</span>
<span id="gmail-LC18" class="gmail-line" lang="plaintext"><a href="http://txt.abc.com">txt.abc.com</a>.               600     IN      TXT     "any"</span>
<span id="gmail-LC19" class="gmail-line" lang="plaintext"></span>
<span id="gmail-LC20" class="gmail-line" lang="plaintext">;; Query time: 1 msec</span>
<span id="gmail-LC21" class="gmail-line" lang="plaintext">;; SERVER: 127.0.0.1#353(127.0.0.1) (UDP)</span>
<span id="gmail-LC22" class="gmail-line" lang="plaintext">;; WHEN: Fri Nov 25 23:27:21 CST 2022</span>
<span id="gmail-LC23" class="gmail-line" lang="plaintext">;; MSG SIZE  rcvd: 99</span>
<span id="gmail-LC24" class="gmail-line" lang="plaintext"></span>
</pre><p dir="auto" style="white-space:normal">I expect +subnet=10.105.2.2, return<span class="gmail-Apple-converted-space"> </span><strong>aaa</strong>, but returned any</p><div class="gmail-gl-relative gmail-markdown-code-block gmail-js-markdown-code" style="white-space:normal"><pre class="gmail-code gmail-highlight gmail-js-syntax-highlight gmail-language-plaintext gmail-white" lang="plaintext" id="gmail-code-7"><code><span id="gmail-LC1" class="gmail-line" lang="plaintext"># dig @<a href="http://127.0.0.1">127.0.0.1</a> -p 353 <a href="http://txt.abc.com">txt.abc.com</a> txt +subnet=10.105.2.2</span>
<span id="gmail-LC2" class="gmail-line" lang="plaintext">any</span></code></pre></div><p dir="auto" style="white-space:normal">I expect +subnet=10.106.3.3, return<span class="gmail-Apple-converted-space"> </span><strong>bbb</strong>, but returned any</p><div class="gmail-gl-relative gmail-markdown-code-block gmail-js-markdown-code" style="white-space:normal"><pre class="gmail-code gmail-highlight gmail-js-syntax-highlight gmail-language-plaintext gmail-white" lang="plaintext" id="gmail-code-8"><code><span id="gmail-LC1" class="gmail-line" lang="plaintext"># dig @<a href="http://127.0.0.1">127.0.0.1</a> -p 353 <a href="http://txt.abc.com">txt.abc.com</a> txt +subnet=10.106.3.3</span>
<span id="gmail-LC2" class="gmail-line" lang="plaintext">any</span></code></pre><pre class="gmail-code gmail-highlight gmail-js-syntax-highlight gmail-language-plaintext gmail-white" lang="plaintext" id="gmail-code-8"><code><span class="gmail-line" lang="plaintext"><br></span></code></pre></div><p dir="auto" style="white-space:normal">How do I change named.conf?</p><h3 dir="auto" style="white-space:normal"><a id="gmail-user-content-links-references" class="gmail-anchor" aria-hidden="true"></a></h3></span></pre></span></pre></div>