From owner-freebsd-questions  Sun Sep 17 22: 0:53 2000
Delivered-To: freebsd-questions@freebsd.org
Received: from mailhost01.reflexnet.net (mailhost01.reflexnet.net [64.6.192.82])
	by hub.freebsd.org (Postfix) with ESMTP id A56EC37B422
	for <questions@freebsd.org>; Sun, 17 Sep 2000 22:00:51 -0700 (PDT)
Received: from 149.211.6.64.reflexcom.com ([64.6.211.149]) by mailhost01.reflexnet.net  with Microsoft SMTPSVC(5.5.1877.197.19);
	 Sun, 17 Sep 2000 21:59:43 -0700
Received: (from cjc@localhost)
	by 149.211.6.64.reflexcom.com (8.11.0/8.11.0) id e8I50oE01987;
	Sun, 17 Sep 2000 22:00:50 -0700 (PDT)
	(envelope-from cjc)
Date: Sun, 17 Sep 2000 22:00:44 -0700
From: "Crist J . Clark" <cjclark@reflexnet.net>
To: ARCHIVE <archive@in-design.com>
Cc: FreeBSD Questions <questions@FreeBSD.ORG>
Subject: Re: Help with Bind 8.*
Message-ID: <20000917220044.A367@149.211.6.64.reflexcom.com>
Reply-To: cjclark@alum.mit.edu
References: <20000917091624.A42114@wantadilla.lemis.com> <PNENKIKMOHECNEIGAACBKENGDIAA.archive@in-design.com>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
X-Mailer: Mutt 1.0i
In-Reply-To: <PNENKIKMOHECNEIGAACBKENGDIAA.archive@in-design.com>; from archive@in-design.com on Mon, Sep 18, 2000 at 12:35:48AM -0400
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.ORG

On Mon, Sep 18, 2000 at 12:35:48AM -0400, ARCHIVE wrote:
> Hello all;
> 
> 	I noticed that some Bind's do not allow xfers of their zone files. I have
> looked over the named.conf man pages, and am gathering that one has to use
> acl some how. I have the following line in my options section of the
> named.conf:
> 
> acl allow-transfer { xx.xx.xx.xx; };
> 
> This however doesn't make a differance no matter what ip address I use. Am I
> missing something ? Any help is greatly appreciated.

RTFM,

  http://www.isc.org/products/BIND/docs/index.html

For this case, in your zone declaration,

  zone domain_name [ ( in | hs | hesiod | chaos ) ] { 
    type zone_type;
    .
    .
    .
    allow-transfer { address_match_list };
  }

Of course, this only makes sense for 'zone_type's of 'master,'
'slave,' or 'stub.' You can also set a global default.

What you have done is set a name 'allow-transfer' that can be used as
an 'address_match_list' argument.
-- 
Crist J. Clark                           cjclark@alum.mit.edu


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message