Re: [Bind-dlz-testers] How to allow zone transfer?
Brought to you by:
crodster
|
From: Graeme F. <gr...@gr...> - 2006-09-12 08:27:52
|
On 12/09/2006 02:39, Ronald Wiplinger wrote:
> I have now one dns server running with mysql
> How can I allow zone transfer to a dns without mysql?
The clue is in your SQL structure for the DLZ queries:
> {select zone from xfr_table where zone = '%zone%' and client =
> '%client%' limit 1}
Ensure you have a table in your DB called "xfr_table" with columns
"zone" and "client". For the hosts you want to be able to do zone
transfers, do:
INSERT INTO xfr_table VALUES("*","192.168.1.100");
That example will allow 192.168.1.100 to do zone transfers of all zones.
You can tune it as follows (some more examples):
# Allow 192.168.1.0/24 hosts to transfer .com domains:
INSERT INTO xfr_table VALUES(".com","192.168.1.");
# Allow 192.168.1.100 to transfer domain.com:
INSERT INTO xfr_table VALUES("domain.com","192.168.1.100");
...and so on, and so forth. Be careful with your wildcarding - remember
that *, % and so on can mean different things to different backends.
Graeme
|