From owner-freebsd-stable@FreeBSD.ORG Thu Jul 17 03:52:00 2008 Return-Path: Delivered-To: stable@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 14B75106566C for ; Thu, 17 Jul 2008 03:52:00 +0000 (UTC) (envelope-from eugen@kuzbass.ru) Received: from www.svzserv.kemerovo.su (www.svzserv.kemerovo.su [213.184.65.80]) by mx1.freebsd.org (Postfix) with ESMTP id 6BAC38FC14 for ; Thu, 17 Jul 2008 03:51:58 +0000 (UTC) (envelope-from eugen@kuzbass.ru) Received: from www.svzserv.kemerovo.su (eugen@localhost [127.0.0.1]) by www.svzserv.kemerovo.su (8.13.8/8.13.8) with ESMTP id m6H3puqb083520; Thu, 17 Jul 2008 11:51:56 +0800 (KRAST) (envelope-from eugen@www.svzserv.kemerovo.su) Received: (from eugen@localhost) by www.svzserv.kemerovo.su (8.13.8/8.13.8/Submit) id m6H3ptoX083519; Thu, 17 Jul 2008 11:51:55 +0800 (KRAST) (envelope-from eugen) Date: Thu, 17 Jul 2008 11:51:55 +0800 From: Eugene Grosbein To: Matthew Seaman Message-ID: <20080717035155.GA81536@svzserv.kemerovo.su> References: <20080716162042.GA27666@svzserv.kemerovo.su> <487E312E.9090307@infracaninophile.co.uk> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <487E312E.9090307@infracaninophile.co.uk> User-Agent: Mutt/1.4.2.3i Cc: stable@freebsd.org Subject: Re: named.conf: query-source address X-BeenThere: freebsd-stable@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Production branch of FreeBSD source code List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 17 Jul 2008 03:52:00 -0000 On Wed, Jul 16, 2008 at 06:34:38PM +0100, Matthew Seaman wrote: > The 'query-source' options don't have to be specified: the system > will just choose some appropriate address according to the state of > the routing table. 'query-source' to set the source /IP/ is really > only useful in some specific server configurations with several alias > addresses any of which could be used. That's pretty rare really. Isn't this common to have multiple aliases at an interface? Sometimes only one of them should be used for all DNS traffic. > query-source is only ever used by recursive or stub resolvers -- > instances of named that will go out and make queries on the net on your > behalf. Authoritative servers really don't need it. Sometimes one needs to bind named to distinct IP address for all data it sends to the net on its own, not as answers to queries only. There is nothing wrong in using 'query-source' without 'port' option, I mean. Eugene Grosbein