Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I'm trying to get a split horizon dns server working on our network. bind9 starts up fine but when I point to the other servers resolf.conf to it I get these access denied messages. (For security reasons I have changed our website name to OURWEBSITE)

root@server:~# host zenoss
Host zenoss not found: 5(REFUSED)
root@server:~# host google.com
Host google.com.OURWEBSITE.com not found: 5(REFUSED)

and here is our named.conf

include "/etc/bind/named.conf.options";
include "/etc/bind/named.conf.local";
// include "/etc/bind/named.conf.default-zones";

acl internal {
   192.168.168.0/25;
   localhost;
};

//
// Lan zone recursion is the default
//
view "internal-view" {
  match-clients { internal; };
  zone "." IN {
    type hint;
    file "/etc/bind/db.root";
  };
  zone "internal.OURWEBSITE.com " IN {
    type master;
    file "/etc/bind/zones/lan.master.OURWEBSITE.com";
    allow-transfer { key TRANSFER; };
  };
};
//
// external zone w/o recursion
//
view "external-view" {
  match-clients { any; };
  recursion no;
  zone "OURWEBSITE.com " IN {
    type master;
    file "/etc/bind/zones/internet.master.OURWEBSITE.com";
    allow-transfer { key TRANSFER; };
  };
};
share|improve this question
up vote 1 down vote accepted

Add an allow-recursion { internal; }; to your internal view, as { localnets; localhost; }; is the default.

Oh, and is there other config in named.conf.options? That should be included, too.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.