Forum Discussion
Creating a view in F5 GUI and creating zones under it
When I create my own view manually in the GUI and create a zone (zone type:MASTER) under it, gets created successfully. No error.
Then when I click on the zone name that I created above, I get the following error:
General error:01150b21:3: RCODE returned from query:'REFUSED'.
When I create a zone under the existing view "external" and after creating successfully click on the zone name, I am not getting any error.
Please advise.
Thanks
- jquinones82_469NimbostratusReceived the same error. Any clue to what that is?
- jquinones82_469NimbostratusReceived the same error. Any clue to what that is?
- chamindak_11539Nimbostratus
I'm seeing the same behavior, is this a bug?
- chamindak_11539Nimbostratus
I'm on 11.3 HF8..
- bhs_114985Historic F5 Account
double-check your ACL's for the newly created view in your named.conf file (accessible from the gui). You should see an entry similar to this: acl internal { 192.168.1.0/24; localhost; };
- chamindak_11539Nimbostratus
Definitely do have the configuration in the named.conf. The problem is it is still allowing resolution for the domain from subnets outside the allowed 172.16.201.0/24. Wonder if this to do with the auto created zrd acl?
And the F5 cannot load the records list in gui, due to the mentioned error..
view "Internal" { match-clients { 172.16.201.0/24; "zrd-acl-000-001"; }; zone "ck.internal." { type master; file "db.Internal.ck.internal."; allow-update { localhost; }; }; };
acl "zrd-acl-000-001" { 127.10.0.1; };
- bhs_114985Historic F5 Account
Under your allow-query, try allowing 127.10.0.0/24; <---- Zone Runner Permit ACL
- chamindak_11539Nimbostratus
Thanks, but not much luck : match-clients { 172.16.201.0/24; 127.10.0.0/24;
"zrd-acl-000-001";"zrd-acl-000-002";
};
It's as if the ACL part of bind is not being read.. and the gui still refuses to load zones under the "Internal" view..hmm.
- chamindak_11539Nimbostratus
I've just put a "." in from of everything to stop the auto formatting on the text box..:) .match-clients { . 172.16.201.0/24; . 127.10.0.0/24; . "zrd-acl-000-001"; . "zrd-acl-000-002"; .};
- bhs_114985Historic F5 Account
is it working now? are you restarting named after making changes?
Recent Discussions
Related Content
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com