Re: bind9 prevents external access
On Thu, 22 Mar 2007, Justin Hartman wrote:
Correction - /var/log/daemon.log does show an error relating to bind:
Mar 22 06:16:46 justinhartman lwresd[2413]: starting BIND 9.3.4
Mar 22 06:16:46 justinhartman lwresd[2413]: found 1 CPU, using 1 worker
Mar 22 06:16:46 justinhartman lwresd[2413]: none:0: open:
/etc/bind/lwresd.conf: file not found
Mar 22 06:16:46 justinhartman lwresd[2413]: loading configuration from
'/etc/resolv.conf'
Mar 22 06:16:46 justinhartman lwresd[2413]: none:0: open:
/etc/bind/rndc.key: permission denied
Mar 22 06:16:46 justinhartman lwresd[2413]: couldn't add command
channel 127.0.0.1#953: permission denied
Mar 22 06:16:46 justinhartman lwresd[2413]: none:0: open:
/etc/bind/rndc.key: permission denied
Mar 22 06:16:46 justinhartman lwresd[2413]: couldn't add command
channel ::1#953: permission denied
Mar 22 06:16:46 justinhartman lwresd[2413]: lwres listening on 127.0.0.1#921
Mar 22 06:16:46 justinhartman lwresd[2413]: running
--
Regards
Justin Hartman
PGP Key ID: 102CC123
hm, well thats for lwresd, not bind. you should see something like:
Mar 21 21:32:10 proto named[21083]: starting BIND 9.3.2-P1 -u bind
Mar 21 21:32:10 proto named[21083]: found 1 CPU, using 1 worker thread
Mar 21 21:32:10 proto named[21083]: loading configuration from
'/etc/bind/named.conf'
Mar 21 21:32:10 proto named[21083]: no IPv6 interfaces found
Mar 21 21:32:10 proto named[21083]: listening on IPv4 interface lo,
127.0.0.1#53
Mar 21 21:32:10 proto named[21083]: listening on IPv4 interface eth0,
1.2.3.4#53
Mar 21 21:32:10 proto named[21083]: listening on IPv4 interface eth1,
192.168.1.10#53
Mar 21 21:32:10 proto named[21083]: command channel listening on
127.0.0.1#953
Mar 21 21:32:10 proto named[21083]: zone 0.in-addr.arpa/IN: loaded serial
1
Mar 21 21:32:10 proto named[21083]: zone 127.in-addr.arpa/IN: loaded
serial 1
Mar 21 21:32:10 proto named[21083]: zone 1.168.192.in-addr.arpa/IN: loaded
serial 5
Mar 21 21:32:10 proto named[21083]: zone 255.in-addr.arpa/IN: loaded
serial 1
Mar 21 21:32:10 proto named[21083]: zone example.com/IN: loaded serial
2006020205
but, anyway lwresd is just a lookup daemon, if you are running bind, you
could just remove lwresd, just for simplicity sakes
---
Human beings were created by water to transport it uphill.
Reply to: