diff --git a/bin/named/named.conf.5 b/bin/named/named.conf.5 index 745263b1d8..1be2fcd47d 100644 --- a/bin/named/named.conf.5 +++ b/bin/named/named.conf.5 @@ -12,7 +12,7 @@ .\" OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR .\" PERFORMANCE OF THIS SOFTWARE. .\" -.\" $Id: named.conf.5,v 1.4 2004/10/17 23:57:14 marka Exp $ +.\" $Id: named.conf.5,v 1.5 2004/10/21 02:51:47 marka Exp $ .\" .TH "NAMED.CONF" "5" "Aug 13, 2004" "BIND9" "" .SH NAME @@ -215,6 +215,7 @@ options { ixfr-from-differences \fIixfrdiff\fR; allow-query { \fIaddress_match_element\fR; ... }; + allow-query-cache { \fIaddress_match_element\fR; ... }; allow-transfer { \fIaddress_match_element\fR; ... }; allow-update-forwarding { \fIaddress_match_element\fR; ... }; @@ -341,6 +342,7 @@ view \fIstring\fR \fIoptional_class\fR { ixfr-from-differences \fIixfrdiff\fR; allow-query { \fIaddress_match_element\fR; ... }; + allow-query-cache { \fIaddress_match_element\fR; ... }; allow-transfer { \fIaddress_match_element\fR; ... }; allow-update-forwarding { \fIaddress_match_element\fR; ... }; diff --git a/bin/named/named.conf.html b/bin/named/named.conf.html index a72c1ccf10..b6b445f064 100644 --- a/bin/named/named.conf.html +++ b/bin/named/named.conf.html @@ -14,7 +14,7 @@ - PERFORMANCE OF THIS SOFTWARE. --> - + address_match_element; ... };
+ allow-query-cache { address_match_element; ... };
allow-transfer { 

VIEW

address_match_element; ... };
+ allow-query-cache { address_match_element; ... };
allow-transfer { 

ZONE

FILES

SEE ALSO

options { directory "/etc/namedb"; // Working directory + allow-query-cache { none; }; // Do not allow access to cache allow-query { any; }; // This is the default recursion no; // Do not provide recursive service }; diff --git a/doc/arm/Bv9ARM.ch04.html b/doc/arm/Bv9ARM.ch04.html index 9e736487c4..bbe600b89e 100644 --- a/doc/arm/Bv9ARM.ch04.html +++ b/doc/arm/Bv9ARM.ch04.html @@ -668,7 +668,8 @@ options { ... ... allow-transfer { none; }; // sample allow-transfer (no one) - allow-query { internals; externals; }; // restrict query access + allow-query { any; }; // default query access + allow-query-cache { internals; externals; }; // restrict cache access allow-recursion { internals; externals; }; // restrict recursion ... ... @@ -677,7 +678,6 @@ options { zone "site1.example.com" { // sample slave zone type master; file "m/site1.foo.com"; - allow-query { any; }; allow-transfer { internals; externals; }; }; @@ -685,7 +685,6 @@ zone "site2.example.com" { type slave; file "s/site2.foo.com"; masters { another_bastion_host_maybe; }; - allow-query { any; }; allow-transfer { internals; externals; } };
6.3. Zone File
allow-query, allow-query-cache, +allow-transfer, blackhole all -use address match lists this. Similarly, the listen-on option will cause -the server to not accept queries on any of the machine's addresses -which do not match the list.

all use address match lists. +Similarly, the listen-on option will cause the server to not accept +queries on any of the machine's addresses which do not match the +list.

Because of the first-match aspect of the algorithm, an element that defines a subset of another element in the list should come @@ -768,7 +772,7 @@ CLASS="sect2" >

6.1.2. Comment Syntax

6.1.2.1. Syntax

6.1.2.2. Definition and Usage

6.2.1. acl

6.2.3. controls

6.2.5. include

6.2.6. include

6.2.7. key

6.2.8. key

6.2.9. logging

6.2.10. logging

6.2.10.1. The channel

6.2.11. lwres

6.2.12. lwres

6.2.13. masters

6.2.14. masters

6.2.15. options] [ allow-query-cache { address_match_list }; ] + [ allow-transfer { address_match_list

6.2.16.2. Forwarding

6.2.16.3. Dual-stack Servers

options allow-query statement. If -not specified, the default is to allow queries from all hosts.

statement. +allow-query-cache may also be specified and will +overrides access to the cache. +If not specified, the default is to allow queries from all hosts.

allow-query-cache

Specifies which hosts are allowed to get answers +from the cache. If not set allow-query applies. +

The recommended way to set query access to the cache is now via +allow-query-cache rather than allow-query. +Inheritance from allow-query has been retained for +backwards compatability. +

Note: If allow-query-cache is set at the options +level and not set in the view it will still override a +allow-query set at the view level. +

6.2.16.5. Interfaces

6.2.16.6. Query Address

6.2.16.8. Bad UDP Port Lists

6.2.16.9. Operating System Resource Limits

6.2.16.10. Server Resource Limits

6.2.16.11. Periodic Task Intervals

6.2.19. trusted-keys

6.2.20. trusted-keys

6.2.22. view

6.2.24. zone

6.2.24.1. Zone Types

6.2.24.2. Class

6.2.24.3. Zone Options

6.3. Zone File

6.3.1.1. Resource Records

6.3.1.2. Textual expression of RRs

6.3.2. Discussion of MX Records

6.3.4. Inverse Mapping in IPv4

6.3.5. Other Zone File Directives

6.3.5.1. The $ORIGIN

6.3.5.2. The $INCLUDE

6.3.5.3. The $TTL

6.3.6. BIND

7.2. chroot

7.2. chroot

7.2.1. The chroot

7.2.2. Using the setuid

8.1. Common Problems
8.2. Incrementing and Changing the Serial Number
8.3. Where Can I Get Help?

8.1. Common Problems

8.1.1. It's not working; how can I figure out what's wrong?

8.2. Incrementing and Changing the Serial Number

8.3. Where Can I Get Help?

A.1. Acknowledgments

A.1. Acknowledgments

A.1.1. A Brief History of the DNS

Bibliography

Standards

[RFC974] 

[RFC1034] 

[RFC1035] 

[RFC2181] 

[RFC2308] 

[RFC1995] 

[RFC1996] 

[RFC2136] 

[RFC2845] 

Proposed Standards Still Under Development

[RFC1886] 

[RFC2065] 

[RFC2137] 

Other Important RFCs About DNS

[RFC1535] 

[RFC1536] 

[RFC1982] 

Resource Record Types

[RFC1183] 

[RFC1706] 

[RFC2168] 

[RFC1876] 

[RFC2052] 

[RFC2163] 

[RFC2230] 

DNS

[RFC1101] 

[RFC1123] 

[RFC1591] 

[RFC2317] 

DNS

[RFC1537] 

[RFC1912] 

[RFC2010] 

[RFC2219] 

Other DNS

[RFC1464] 

[RFC1713] 

[RFC1794] 

[RFC2240] 

[RFC2345] 

[RFC2352] 

Obsolete and Unimplemented Experimental RRs

[RFC1712] 

A.3.3. Other Documents About BIND

Bibliography

6.1.2. Comment Syntax
6.2.1. acl
6.2.3. controls
6.2.5. include
6.2.6. include
6.2.7. key
6.2.8. key
6.2.9. logging
6.2.10. logging
6.2.11. lwres
6.2.12. lwres
6.2.13. masters
6.2.14. masters
6.2.15. options
6.2.19. trusted-keys
6.2.20. trusted-keys
6.2.22. view
6.2.24. zone
6.3. Zone File
6.3.2. Discussion of MX Records
6.3.4. Inverse Mapping in IPv4
6.3.5. Other Zone File Directives
6.3.6. BIND
7.2. chroot
7.2.1. The chroot
7.2.2. Using the setuid
8.1. Common Problems
8.1.1. It's not working; how can I figure out what's wrong?
8.2. Incrementing and Changing the Serial Number
8.3. Where Can I Get Help?
A.1. Acknowledgments
A.1.1. A Brief History of the DNS
A.3.3. Other Documents About BIND; // obsolete use-ixfr ; version ( | none ); + allow-query-cache { ; ... }; allow-recursion { ; ... }; allow-v6-synthesis { ; ... }; // obsolete sortlist { ; ... }; @@ -230,6 +231,7 @@ view { }; trusted-keys { ; ... }; + allow-query-cache { ; ... }; allow-recursion { ; ... }; allow-v6-synthesis { ; ... }; // obsolete sortlist { ; ... };