From owner-freebsd-questions@FreeBSD.ORG Fri May 19 13:02:22 2006 Return-Path: X-Original-To: freebsd-questions@freebsd.org Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 59DB116A58F for ; Fri, 19 May 2006 13:02:22 +0000 (UTC) (envelope-from greenwood.andy@gmail.com) Received: from ug-out-1314.google.com (ug-out-1314.google.com [66.249.92.169]) by mx1.FreeBSD.org (Postfix) with ESMTP id 0CEFC43D83 for ; Fri, 19 May 2006 13:02:03 +0000 (GMT) (envelope-from greenwood.andy@gmail.com) Received: by ug-out-1314.google.com with SMTP id m3so738119uge for ; Fri, 19 May 2006 06:01:20 -0700 (PDT) DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=beta; d=gmail.com; h=received:message-id:date:from:to:subject:cc:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references; b=UpBYgFAOX/f8VCAWFdb5YAVKcsQnJlRumv3ZXL95ihcvojkTpA+1yiDxE+9IaP1Fe67KeQAdAZq0Gtr28Ak3NQSpp5E9trRx7L1cFLMpcJyKQW1nZLohSXWm+R7AuPq+05M8qF4Xr1F6F32Fp/uYjrAyd9GQcLDhHZ4LF389Clg= Received: by 10.67.100.12 with SMTP id c12mr1426148ugm; Fri, 19 May 2006 06:01:20 -0700 (PDT) Received: by 10.66.251.9 with HTTP; Fri, 19 May 2006 06:01:20 -0700 (PDT) Message-ID: <3ee9ca710605190601n3fb52c91m6c8423d1bba2156a@mail.gmail.com> Date: Fri, 19 May 2006 09:01:20 -0400 From: "Andy Greenwood" To: Fremlins In-Reply-To: <446DC00A.4030905@gmail.com> MIME-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: quoted-printable Content-Disposition: inline References: <3ee9ca710605190532p33836b63y3f6a8639052d64b8@mail.gmail.com> <446DC00A.4030905@gmail.com> Cc: FreeBSD Questions Subject: Re: named always binds to "*" X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 19 May 2006 13:02:22 -0000 that didn't do it. I meant to include this with my first post, but forgot to. I just now noticed that it's udp6, not udp4, so I'm recompiling with --disable-ipv6 [root@behemoth ~]$ sockstat | grep "\*:[0-9]" bind named 89293 23 udp6 *:58084 *:* On 5/19/06, Fremlins wrote: > Andy Greenwood wrote: > > I'm trying to set up my first jail, and I've got the below named.conf. > > However, even with the query-source line below, it always binds to the > > wildcard address! Anyone seen this behavior before and what can I do > > to fix it? > > Yes, add the following under options: > > listen-on port 53 { 192.168.1.1; }; > > > // Specify the subnets we're going to serve > > acl homenet { 192.168.0.0/16; } ; > > options { > > directory "/etc/namedb"; > > allow-query { homenet; }; > > listen-on { 192.168.1.1; }; > > query-source address 192.168.1.1; > > }; > > Frem. >