Problem with f7 bind-9.4.2 chrooted

vasi dan vasi_dan_07 at yahoo.com
Thu Sep 27 17:09:11 UTC 2007


This is not the case. The slave zones are corectly writen and the server is ok for direct connected addresses.
The problem apears on addresses behind a router (just a simple routing process and no firewall and even with or without snat).

Many thanks Charles, but I need more help or I will bi forced to install a Centos5 one.
V. Dan
.


----- Original Message ----

From: Charles Curley <charlescurley at charlescurley.com>

To: For users of Fedora <fedora-list at redhat.com>

Sent: Thursday, September 27, 2007 7:36:32 PM

Subject: Re: Problem with f7 bind-9.4.2 chrooted



On Thu, Sep 27, 2007 at 08:25:19AM -0700, vasi dan wrote:

>    Hi all,

>    I installed a new F7 server and a chrooted named server (bind-9.4.2). I

>    get many "query (cache) ... DENIED", especially for addresses behind

>    another router. No firewall to block access.

>    FC6 (fully updated) was just fine and this bug I thought it was fixed

>    by now.





Please turn off the HTML in email. Thanks



The problem may be that named.conf has file assignments to directories

owned by root, where it cannot create them. Make sure that if named

has to write to them (including create them), they point to one of the

data directories, e.g.:



options {

    directory "/var/named";

    dump-file "/var/named/data/cache_dump.db";

    statistics-file "/var/named/data/named_stats.txt";



This is especially important for slaves, which get zone transfers from

the master(s):



options {

    directory "/var/named/slaves";

    dump-file "/var/named/data/cache_dump.db";

    statistics-file "/var/named/data/named_stats.txt";





Note that these point to the chrooted diretories, so they are actually

below /var/named/chroot.



-- 



Charles Curley                  /"\    ASCII Ribbon Campaign

Looking for fine software       \ /    Respect for open standards

and/or writing?                  X     No HTML/RTF in email

http://www.charlescurley.com    / \    No M$ Word docs in email



Key fingerprint = CE5C 6645 A45A 64E4 94C0  809C FFF6 4C48 4ECD DFDB













      ____________________________________________________________________________________
Check out the hottest 2008 models today at Yahoo! Autos.
http://autos.yahoo.com/new_cars.html




More information about the users mailing list