From owner-freebsd-questions Tue Sep 16 19:29:20 1997 Return-Path: Received: (from root@localhost) by hub.freebsd.org (8.8.7/8.8.7) id TAA06114 for questions-outgoing; Tue, 16 Sep 1997 19:29:20 -0700 (PDT) Received: from counterintelligence.ml.org (mdean.vip.best.com [206.86.94.101]) by hub.freebsd.org (8.8.7/8.8.7) with ESMTP id TAA06104 for ; Tue, 16 Sep 1997 19:29:17 -0700 (PDT) Received: from localhost (jamil@localhost) by counterintelligence.ml.org (8.8.7/8.8.5) with SMTP id TAA00583; Tue, 16 Sep 1997 19:27:39 -0700 (PDT) Date: Tue, 16 Sep 1997 19:27:39 -0700 (PDT) From: "Jamil J. Weatherbee" To: Greg Lehey cc: questions@FreeBSD.ORG Subject: Re: NAMESERVER Setup Problems In-Reply-To: <19970917093031.65249@lemis.com> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-questions@FreeBSD.ORG X-Loop: FreeBSD.org Precedence: bulk I am setting up a secondary nameserver for my domain (acroal.com) the secondary name server is on a sco machine, but that is immaterial. The problem is that under freebsd (which runs the primary nameserver for my domain i get a "Query refused message when attempting to list the whole domain (get the zone file)" example: % nslookup - 209.76.130.130 Default Server: shellx.acroal.com Address: 209.76.130.130 > ls acroal.com [shellx.acroal.com] *** Can't list domain acroal.com: Query refused that is the problem -- how do I allow a query at least for the secondary servers On Wed, 17 Sep 1997, Greg Lehey wrote: > On Tue, Sep 16, 1997 at 01:32:46PM -0700, Jamil J. Weatherbee wrote: > > > > I think this is an access control default for the freebsd nameserver > > because named in other oses doesn't default to disallowing (ls -d in > > nslookup) i set up a secondary which points to my primary and I believe > > this is the reason the secondary cannot transfer the zone file from the > > primary freebsd machine. How do i make it so zone file transfers are > > allowed. I looked at the freebsd named man page and it briefly mentions > > the 'xfrnets' directive i tried to use that but it did not seem to have an > > effect perhaps I am doing it wrong. Thanks for any help you can provide. > > I don't understand what you're doing. Could you give a coherent > example, please? > > Greg >