<html><head><meta http-equiv="content-type" content="text/html; charset=utf-8"></head><body dir="auto">Hi,<div><br></div><div>there’s really nice documentation for BIND 9, and it’s even online and have a section on the “port”: <a href="https://bind9.readthedocs.io/en/v9_18_9/reference.html#namedconf-statement-port">https://bind9.readthedocs.io/en/v9_18_9/reference.html#namedconf-statement-port</a><br><br>Also don’t limit the outgoing ports to a single number - that’s a bad security practice, you should be using the full range if possible.<br><br>Ondrej<br><div dir="ltr"><div>--</div>Ondřej Surý — ISC (He/Him)<div><br></div><div>My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours.</div></div><div dir="ltr"><br><blockquote type="cite">On 16. 12. 2022, at 7:26, Vikas Sharma <er.sharmavikas@gmail.com> wrote:<br><br></blockquote></div><blockquote type="cite"><div dir="ltr"><div dir="ltr">Hi Team,<br> <br>we have following configuration in my named.conf<br>where i named process on primary DNS is listening on port 15010.<br>whereas secondary DNS is running on port 53.<br>All Notification to secondary DNS is forwarded on destination port 53 from primary DNS. <br> <br>Now when i add tag port 15010 in options clause on primary DNS, then i see some notification message being forwarded to secondary DNS to dest port 15010. these messages are in addition to notification to secondary DNS with dest port 53.<div>changing port value form 15010 to 20598 sends notification to secondary DSN on dest port 20598 in addition to notification to secondary on port 53.<br> <br>i have a firewall on secondary DNS which is rejecting all packets on port 15010/20598.<br>i see that all my data is populated on secondary DNS without any problem due to notifications to secondary DNS on port 53.<br> <br>query is why named is sending notification to secondary DNS on port 15010/20598 when regular notification is also going to secondary DNS on port 53.<br> <br> <br>acl theAllServers {<br> thePrimary;<br> theSecondary;<br> localhost;<br>};<br> <br>options {<br> directory "/var/opt/named";<br> pid-file "/var/opt/run/named.pid";<br> allow-transfer { theAllServers; };<br> allow-query { any; };<br> zone-statistics no;<br> notify yes;<br> max-cache-size 14297m;<br> max-journal-size 1048576;<br> port 15010; #=> used 20598 as well instead of 15010;<br> listen-on port 15010 { 127.0.0.1; };<br> also-notify {<br> 10.1.2.4 port 53;<br> 10.1.2.5 port 53;<br> };<br>};<br></div><div><br></div><div>Best Regards,</div><div>Vikas Sharma</div></div>
<span>-- </span><br><span>Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list</span><br><span></span><br><span>ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information.</span><br><span></span><br><span></span><br><span>bind-users mailing list</span><br><span>bind-users@lists.isc.org</span><br><span>https://lists.isc.org/mailman/listinfo/bind-users</span><br></div></blockquote></div></body></html>