> Hi,
>
> I've got a very strange problem ! I defined an INTERNAL and an EXTERNAL
> BIND-server (Debian 9.2.1-2.woody.1). I start the servers through the
> /etc/init.d/bind9-script.
>
> When I run ONLY the internal named, I get responses for digs to mydomain.com
> AND to www.google.com (for instance).
>
> When I run BOTH the INTERNAL and EXTERNAL named together, I get the
> following results (from a machine with IP 192.168.0.100):
> - dig @192.168.0.21 www.mydomain.com => OK
> - dig @192.168.0.21 www.google.com => OK
> - dig @192.168.0.20 www.mydomain.com => OK
> - dig @192.168.0.20 www.google.com => NOT OK !! => connection timed out; no
> servers could be reached ?????
Your query-sources are identical. Only one instance can bind
to the port. The other instance would have logged a error.
> Here under are my named-conf-files of both servers.
>
> Kind regards,
>
> Gorik Vanderreken
>
> named.conf from INTERNAL server:
> options {
> auth-nxdomain no;
> directory "/var/cache/bind";
> pid-file "/var/run/namedint.pid";
> listen-on port 53 { 192.168.0.20; };
> allow-query { any; };
> allow-recursion { any; };
> query-source address * port 53;
> listen-on-v6 { none; };
> };
> zone "mydomain.com" {
> type master;
> notify yes;
> allow-transfer { 192.168.0.0/24; 127.0.0.1; };
> file "/etc/bind/db.int.mydomain.com";
> };
>
> named.conf from EXTERNAL server:
> options {
> auth-nxdomain no;
> directory "/var/cache/bind";
> pid-file "/var/run/namedext.pid";
> listen-on port 53 { 192.168.0.21; };
> allow-query { any; };
> allow-recursion { any; };
Do you really want recursion on your external instance?
> query-source address * port 53;
> listen-on-v6 { none; };
> };
> zone "mydomain.com" {
> type master;
> notify yes;
> allow-transfer { 192.168.0.0/24; 127.0.0.1; };
> file "/etc/bind/db.ext.mydomain.com";
> };
options {
directory "/var/cache/bind";
listen-on port 53 { 192.168.0.21; 192.168.0.20; };
query-source address * port 53;
auth-nxdomain no;
listen-on-v6 { none; }; // default
};
view "external" {
match-destinations { 192.168.0.21; };
allow-query { any; }; // default
recursion no;
zone "mydomain.com" {
type master;
notify yes; // default
allow-transfer { 192.168.0.0/24; 127.0.0.1; };
file "/etc/bind/db.ext.mydomain.com";
};
};
view "internal" {
match-destinations { 192.168.0.20; };
allow-query { any; }; // default
allow-recursion { any; }; // default
zone "mydomain.com" {
type master;
notify yes; // default
allow-transfer { 192.168.0.0/24; 127.0.0.1; };
file "/etc/bind/db.int.mydomain.com";
};
};
--
Mark Andrews, Internet Software Consortium
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742 INTERNET: Mark.Andrews@xxxxxxx
|
