Re: [cobalt-developers] DNS GUI Bug

[Barry Titmarsh <barry@xxxxxxxxxxxxxx>]

At 09:16 17/10/01 +0100, you wrote:
> At 03:26 15/10/01 -0400, you wrote:
> > > This can be the reason why my raq3i and raq4r are accepting
> > > xfer zone transfers to IP`s i don`t now or have listed in the allow 
> > list. I
> > > have asked many times on user-list and cobalt about this. Why the servers
> > > deny some and allow others to get xfer zone transfers when non of them are


Okay I have found the fix. It more the way its used.

when you make the list of ip addresses in the GUI "server settings"  "zone 
transfer access"

ensure you do not have a <crlf> return after the last entry

eg:
192.168.1.1
192.168.2.2
192.168.3.3_  <<< ensure the cursor is at the end of line and not on the next
_ << line. here when you submit the changes.

seems a CRLF is parsed as a blank IP address  hence the < ;> gets added to 
the end of the allow list before the last };

works now for me.

Barry


> > > in my network or listed as trusted..
> > >
> > > Another thing this bug is proberly nown to some hackers, becuse my servers
> > > has been hacked 3 times, every time there is a lot of Xfer transfers 
> > towards
> > > servers i dont now..
> > >
>
> Yes good answer..  Been doing DNS since bind version 3.0
> Just think that cobalt things should work as designed.  There is a bug and 
> its because there is an extra " ;" being added to named.conf every time 
> you use the dns GUI. It needs to be fixed.
>
> And Yes this is why it refuses zone-xfers !!!
> If you vi /etc/named.conf and remove the " ;"  in line 3  and dont touch 
> the GUT it all works fine.
> Just need to fix it every time you make changes to the DNS using the GUI
>
>
> Barry
>
> > Don't use the GUI.
> > DNS is not that difficult.
> > Make an entry in named.conf
> > copy some pri.zone file to pri.newdomain file.
> > edit the file.
> > and do an 'ndc restart'
> >
> > Gerald
> >
> >
> >
> > _______________________________________________
> > cobalt-developers mailing list
> > cobalt-developers@xxxxxxxxxxxxxxx
> > http://list.cobalt.com/mailman/listinfo/cobalt-developers
>
> _______________________________________________
> cobalt-developers mailing list
> cobalt-developers@xxxxxxxxxxxxxxx
> http://list.cobalt.com/mailman/listinfo/cobalt-developers