bind9 / rndc questions

[William H. Magill]

On Jan 5, 2011, at 11:09 AM, Daniel J. Luke wrote:

> On Jan 4, 2011, at 7:16 PM, William H. Magill wrote:
>> 
>> include "/opt/local/etc/rndc.key";
>> 
>> // ------------------------------------------------------------------------                                                                                                  
>> // Only allow localhost access from rndc                                                                                                                                     
>> // ------------------------------------------------------------------------                                                                                                  
>> 	inet 127.0.0.1 port 953
>> 	allow { 127.0.0.1; } keys { "rndc-key"; };
> 
> the example rndc-confgen prints when you don't use '-a' looks like yours except without using the 'include' (but including the contents from rndc.conf in the named.conf, you could try that...

Ok... thank you!

I got rid of the include AND the "keys { "rndc-key"; };" part of  "allow { 127.0.0.1; } keys { "rndc-key"; };"

and now it works.

Now I just have to figure out what rndc "does" and how to use it rationally.
It seems to be one of those tools which exists and "everybody knows how to use it." 




T.T.F.N.
William H. Magill
# iMac6,1 Core 2 Duo [2.16GHz - 3 GB 667] OS X 10.6.5
# MacBook Pro4.1 Core 2 Duo [2.5GHz - 4GB 667] OS X 10.6.5
# Mac mini Core Duo [1.66 Ghz - 2 GB 667]OS X 10.6.5
# Flat-panel iMac (2.1) [800MHz - Super Drive - 768 Meg] OS X 10.4.11 
# PWS433a [Alpha 21164 Rev 7.2 (EV56)- 64 Meg] Tru64 5.1a 
# XP1000 [Alpha 21264-3 (EV6) - 256 meg] FreeBSD 5.3
# XP1000 [Alpha 21264-A (EV6-7) - 256 meg] FreeBSD 5.3
magill at mcgillsociety.org
magill at me.com
whmagill at gmail.com