Forum Debian Users Gang

COMMAND   PID USER   FD   TYPE DEVICE SIZE/OFF NODE NAME
named   12821 bind   20u  IPv4 332159      0t0  TCP localhost.localdomain:domain (LISTEN)
named   12821 bind   21u  IPv4 332161      0t0  TCP ns3145061.lx.waw.pl:domain (LISTEN)
named   12821 bind  512u  IPv4 332158      0t0  UDP localhost.localdomain:domain 
named   12821 bind  513u  IPv4 332158      0t0  UDP localhost.localdomain:domain 
named   12821 bind  514u  IPv4 332158      0t0  UDP localhost.localdomain:domain 
named   12821 bind  515u  IPv4 332158      0t0  UDP localhost.localdomain:domain 
named   12821 bind  516u  IPv4 332158      0t0  UDP localhost.localdomain:domain 
named   12821 bind  517u  IPv4 332158      0t0  UDP localhost.localdomain:domain 
named   12821 bind  518u  IPv4 332158      0t0  UDP localhost.localdomain:domain 
named   12821 bind  519u  IPv4 332158      0t0  UDP localhost.localdomain:domain 
named   12821 bind  520u  IPv4 332160      0t0  UDP ns3145061.lx.waw.pl:domain 
named   12821 bind  521u  IPv4 332160      0t0  UDP ns3145061.lx.waw.pl:domain 
named   12821 bind  522u  IPv4 332160      0t0  UDP ns3145061.lx.waw.pl:domain 
named   12821 bind  523u  IPv4 332160      0t0  UDP ns3145061.lx.waw.pl:domain 
named   12821 bind  524u  IPv4 332160      0t0  UDP ns3145061.lx.waw.pl:domain 
named   12821 bind  525u  IPv4 332160      0t0  UDP ns3145061.lx.waw.pl:domain 
named   12821 bind  526u  IPv4 332160      0t0  UDP ns3145061.lx.waw.pl:domain 
named   12821 bind  527u  IPv4 332160      0t0  UDP ns3145061.lx.waw.pl:domain

tcp        0      0 87.98.XX.XX:53        0.0.0.0:*               LISTEN      12821/named     
tcp        0      0 127.0.0.1:53            0.0.0.0:*               LISTEN      12821/named     
tcp        0      0 127.0.0.1:953           0.0.0.0:*               LISTEN      12821/named

acl internals { 127.0.0.0/8; 85.128.128.10; 85.128.129.10; };

include "/etc/bind/named.conf.options";

include "/etc/bind/ns-lx-waw-pl_rndc-key";

controls {
        inet 127.0.0.1 port 953 allow { 127.0.0.1; 87.98.219.200;};
};

zone "." {
        type hint;
        file "/etc/bind/db.root";
};


include "/etc/bind/named.conf.local";

include "/etc/bind/named.conf.default-zones";

options {
        directory "/var/cache/bind";

        // Exchange port between DNS servers
        query-source address * port *;

        // Transmit requests to 192.168.1.1 if
        // this server doesn't know how to resolve them
        //forward only;
        forwarders { 
        85.128.128.10; 
        85.128.129.10;
        185.36.168.115; 
    };
        forward first;
    transfers-in 150;
        auth-nxdomain no;    # conform to RFC1035

        // Listen on local interfaces only(IPV4)
        listen-on-v6 { none; };
        listen-on { any; };

        // Do not transfer the zone information to the secondary DNS
        allow-transfer { 127.0.0.1; 87.98.219.200; };

        // Accept requests for internal network only
        allow-query { any; };

        // Allow recursive queries to the local hosts
        allow-recursion { 127.0.0.1; internals; };
    allow-query-cache { internals; };
        // Do not make public version of BIND
        version none;
};

// Manage the file logs
include "/etc/bind/named.conf.log";

// Domain Management example.com
// ------------------------------
//  - The server is defined as the master on the domain.
//  - There are no forwarders for this domain.
//  - Entries in the domain can be added dynamically 
//    with the key ns-example-com_rndc-key
zone "lx.waw.pl" {
        type master;
        file "/var/lib/bind/db.lx.waw.pl";
        //forwarders {};
        // If we do not comment the ''forwarders'' "empty" clients of the local subnet in my case don't have access to the upstream DNS ?
        allow-update { 127.0.0.1; key ns-lx-waw-pl_rndc-key; };
        //allow-update { key rndc-key; };
        //confusion between the file name to import (ns-example-com_rndc-key) and the key label (rndc-key) ?
};
zone "200.219.98.87.in-addr.arpa" {
        type master;
        file "/var/lib/bind/db.lx.waw.pl.inv";
        //see comment below (zone "lx.waw.pl")
        //forwarders {};
    notify no;
        allow-update { key ns-lx-waw-pl_rndc-key; };
        //allow-update { key rndc-key; };
};

// Consider adding the 1918 zones here, if they are not used in your
// organization
include "/etc/bind/zones.rfc1918";