Не могу понять, где я что-то упустил...
X.X.X.X - primary ns
Y.Y.Y.Y - secondary ns
Y.Y.Y.Y также является сервером локальной сети, но не обрабатывает запросы "внешних" зон.
$ cat /etc/bind/named.conf
include "/etc/bind/named.conf.options";
logging {
category lame-servers { null; };
category cname { null; };
};
$ cat /etc/bind/named.conf.options
acl "xfer" {
X.X.X.X/32;
};
acl "trusted" {
192.168.0.1/24;
192.168.1.1/24;
Y.Y.Y.Y/32;
X.X.X.X/32;
localhost;
};
acl "bogon" {
0.0.0.0/8;
1.0.0.0/8;
2.0.0.0/8;
5.0.0.0/8;
7.0.0.0/8;
10.0.0.0/8;
23.0.0.0/8;
27.0.0.0/8;
31.0.0.0/8;
36.0.0.0/8;
37.0.0.0/8;
39.0.0.0/8;
42.0.0.0/8;
49.0.0.0/8;
50.0.0.0/8;
92.0.0.0/8;
93.0.0.0/8;
94.0.0.0/8;
95.0.0.0/8;
100.0.0.0/8;
101.0.0.0/8;
102.0.0.0/8;
103.0.0.0/8;
104.0.0.0/8;
105.0.0.0/8;
106.0.0.0/8;
107.0.0.0/8;
108.0.0.0/8;
109.0.0.0/8;
110.0.0.0/8;
111.0.0.0/8;
112.0.0.0/8;
113.0.0.0/8;
114.0.0.0/8;
115.0.0.0/8;
169.254.0.0/16;
172.16.0.0/12;
173.0.0.0/8;
174.0.0.0/8;
175.0.0.0/8;
176.0.0.0/8;
177.0.0.0/8;
178.0.0.0/8;
179.0.0.0/8;
180.0.0.0/8;
181.0.0.0/8;
182.0.0.0/8;
183.0.0.0/8;
184.0.0.0/8;
185.0.0.0/8;
186.0.0.0/8;
187.0.0.0/8;
192.0.2.0/24;
197.0.0.0/8;
223.0.0.0/8;
224.0.0.0/3;
};
options {
directory "/var/cache/bind";
fetch-glue no;
notify no;
transfer-format many-answers;
max-transfer-time-in 60;
interface-interval 0;
allow-transfer {
xfer;
};
allow-query {
trusted;
};
listen-on {
127.0.0.1;
192.168.0.1;
192.168.1.1;
Y.Y.Y.Y;
};
blackhole {
bogon;
};
};
view "internal-in" in {
match-clients { trusted; };
recursion yes;
additional-from-auth yes;
additional-from-cache yes;
zone "." {
type hint;
file "/etc/bind/db.root";
};
zone "localhost" {
type master;
file "/etc/bind/db.local";
allow-query {
any;
};
allow-transfer {
none;
};
};
zone "127.in-addr.arpa" {
type master;
file "/etc/bind/db.127";
allow-query {
any;
};
allow-transfer {
none;
};
};
zone "0.in-addr.arpa" {
type master;
file "/etc/bind/db.0";
allow-query {
any;
};
allow-transfer {
none;
};
};
zone "255.in-addr.arpa" {
type master;
file "/etc/bind/db.255";
allow-query {
any;
};
allow-transfer {
none;
};
};
};
view "external-in" in {
match-clients { any; };
recursion no;
additional-from-auth no;
additional-from-cache no;
zone "." {
type hint;
file "/etc/bind/db.root";
};
zone "d-fens.org.ua" IN {
type slave;
masters {
X.X.X.X;
};
file "d-fens.org.ua.zone";
allow-query {
any;
};
};
};
view "external-chaos" chaos {
match-clients { any; };
recursion no;
zone "." {
type hint;
file "/dev/null";
};
zone "bind" {
type master;
file "/etc/bind/db.bind";
allow-query {
trusted;
};
allow-transfer {
none;
};
};
};
Т.е. по запросу на d-fens.org.ua все хорошо, а по иным доменам сервер не отвечает для машин локальной сети.
Jul 19 14:57:17 brain named[14532]: denied query from [192.168.0.3].2882 for "www.designet.ru" A/IN
Any ideas?
P.S. Ubuntu 6.10, 2.6.17-11-server, bind 8.4.6-1.