Re: [webmin-l] Open DNS Servers - Recursive Lookups

[webmin <we...@em...>]

On 3/30/06 6:27 PM, "Jamie Cameron" <jca...@we...> wrote:

> On 30/Mar/2006 18:16 webmin wrote ..
>> I am using Webmin 1.260 (with the StressFree Tiger Theme
>> Version 1.75, which I love) to manage amongst other things BIND version
>> 9.2.2 on Mac OS X 10.4.5.
>> 
>> I have used the "Edit Config File" feature of the BIND module to set the
>> Options of the named.conf file to allow recursion on only those address
>> spaces that need access the name server, denying all other addresses.
>> 
>> There is a third-party name server that I am doing tertiary service on
>> also
>> controlled with Webmin.  I do not have access to "Edit Config File" on
>> my
>> Webmin user on that box.  My question is can I configure recursion for
>> my
>> domains on any other Webmin panel?  Shouldn't there be a "Recursion" icon?
> 
> Perhaps that is an older version of Webmin that didn't include the
> Edit Config File icon? If so, you might want to upgrade.

I should have clarified - on 2 of the 3 servers (both running Webmin 1.260),
I am the Webmin admin, and on those I have access to the Edit Config File
icon.  On the 3rd server (running Webmin 1.230), I am just a Webmin user
without access to the Edit Config File icon, but with access to pretty much
everything else in BIND.  I am asking them to upgrade it.

In any event, my point is that there does not seem to be a page/icon in the
BIND module to allow separate management of recursive queries, without
having to resort to manual editing of the named.conf file.

> Actually, Webmin should include a proper page for easily setting up allowed
> servers for recursive queries.

I agree.  Can we put that on the wish list?

> What exactly were you putting into the
> options section when you did the manual editing?

I entered:

        allow-recursion {
                207.177.51.16/28;
                209.152.96.0/25;
                139.142.123.66;
                69.66.28.176;
                !any;
                };

...in the "Options" section of the named.conf file, just before
"forwarders".

It would be wonderful if Webmin supported BIND pages to fully harden BIND as
outlined on:

http://www.cymru.com/Documents/secure-bind-template.html

Thanks for such an awesome piece of software.

> 
>  - Jamie
> 
> 
> -------------------------------------------------------
> This SF.Net email is sponsored by xPML, a groundbreaking scripting language
> that extends applications into web and mobile media. Attend the live webcast
> and join the prime developer group breaking into this new coding territory!
> http://sel.as-us.falkag.net/sel?cmd=lnk&kid=110944&bid=241720&dat=121642
> -
> Forwarded by the Webmin mailing list at web...@li...
> To remove yourself from this list, go to
> http://lists.sourceforge.net/lists/listinfo/webadmin-list