Take the 2-minute tour ×
Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

I'm trying to get a split horizon dns server working on our network. bind9 starts up fine but when I point to the other servers resolf.conf to it I get these access denied messages. (For security reasons I have changed our website name to OURWEBSITE)

root@server:~# host zenoss
Host zenoss not found: 5(REFUSED)
root@server:~# host google.com
Host google.com.OURWEBSITE.com not found: 5(REFUSED)

and here is our named.conf

include "/etc/bind/named.conf.options";
include "/etc/bind/named.conf.local";
// include "/etc/bind/named.conf.default-zones";

acl internal {
   192.168.168.0/25;
   localhost;
};

//
// Lan zone recursion is the default
//
view "internal-view" {
  match-clients { internal; };
  zone "." IN {
    type hint;
    file "/etc/bind/db.root";
  };
  zone "internal.OURWEBSITE.com " IN {
    type master;
    file "/etc/bind/zones/lan.master.OURWEBSITE.com";
    allow-transfer { key TRANSFER; };
  };
};
//
// external zone w/o recursion
//
view "external-view" {
  match-clients { any; };
  recursion no;
  zone "OURWEBSITE.com " IN {
    type master;
    file "/etc/bind/zones/internet.master.OURWEBSITE.com";
    allow-transfer { key TRANSFER; };
  };
};
share|improve this question

1 Answer 1

up vote 1 down vote accepted

Add an allow-recursion { internal; }; to your internal view, as { localnets; localhost; }; is the default.

Oh, and is there other config in named.conf.options? That should be included, too.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.