Forum Discussion
Caio_178191
Nimbostratus
Aug 17, 2015GTM issue - connection refused
Hi.
I'm working with GTM v11.5.2 HF1. I'm having a strange problem that I would like to know your coments about it.
The topology is:
Workstation->GTM->Link Controler->DNS Server (Autho...
Caio_178191
Nimbostratus
Aug 20, 2015Problem solved.
You must put an ACL in named configuration.
Here we have a default Named Configuration in GTM with recursive deactivated.
Code
restrict rndc access to local machines
use the key in the default place: /config/rndc.key
controls {
inet 127.0.0.1 port 953 allow {
127.0.0.1;
};
};
logging {
channel logfile {
syslog daemon;
severity error;
print-category yes;
print-severity yes;
print-time yes;
};
category default {
logfile;
};
category config {
logfile;
};
category notify {
logfile;
};
};
options {
listen-on port 53 {
127.0.0.1;
"zrd-acl-000-000";
};
listen-on-v6 port 53 {
::1;
};
recursion no;
directory "/config/namedb";
allow-transfer {
localhost;
};
check-names master warn;
check-integrity yes;
max-journal-size 1M;
version "none";
};
acl "zrd-acl-000-000" {
127.10.0.0;
};
CodeTo activate the recursion, we should change the "no" to "yes" in the line "recursion no". But besides that, we need to add an acl. So, our code will be:
Code
restrict rndc access to local machines
use the key in the default place: /config/rndc.key
controls {
inet 127.0.0.1 port 953 allow {
127.0.0.1;
};
};
logging {
channel logfile {
syslog daemon;
severity error;
print-category yes;
print-severity yes;
print-time yes;
};
category default {
logfile;
};
category config {
logfile;
};
category notify {
logfile;
};
};
options {
listen-on port 53 {
127.0.0.1;
"zrd-acl-000-000";
};
listen-on-v6 port 53 {
::1;
};
recursion yes;
directory "/config/namedb";
allow-transfer {
localhost;
};
check-names master warn;
check-integrity yes;
max-journal-size 1M;
version "none";
allow-recursion {
internal;
};
};
acl "zrd-acl-000-000" {
127.10.0.0;
};
acl "internal" {
0.0.0.0/0;
};
CodeAfter this configuration, the system starts to accept recursive querys.
Help guide the future of your DevCentral Community!
What tools do you use to collaborate? (1min - anonymous)Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects