Re: on to letsencrypt

[Jack Craig <jack.craig.aptos@xxxxxxxxx>]

On Tue, Apr 20, 2021 at 4:30 AM Ed Greshko <ed.greshko@xxxxxxxxxxx> wrote:

On 20/04/2021 18:09, Jack Craig wrote:
> attached named.conf

Well a quick look and it doesn't seem too bad.  First a couple of questions.

1.  Why did you use "acl" statements and then not refer to them?

This file has been the side of a lot of work in progress

tons of work not a lot of progress

one of the earlier iterations i thought to use acl's

2.  Did you mean this?

          /* allow-recursion { 10.0.0.0/24; };
         allow-recursion { any; };
          */

Resulting in that being ignored.

Same as number one 

Could you modify the listen lines to....

//        listen-on port 53       { 127.0.0.1; 10.0.0.1; 108.220.213.121; };
//        listen-on-v6 port 53    { any; };

This means "any" for both

Then stop/start the service and do

netstat -nap | grep named

 before

netstat -nap | grep named

tcp        0      0 127.0.0.1:53            0.0.0.0:*               LISTEN      1090819/named      
tcp        0      0 127.0.0.1:953           0.0.0.0:*               LISTEN      1090819/named      
udp        0      0 127.0.0.1:53            0.0.0.0:*                           1090819/named      
unix  2      [ ]         DGRAM                    3212045  1090819/named        
unix  2      [ ]         STREAM     CONNECTED     3212051  1090819/named


after

nap | grep named

tcp        0      0 127.0.0.1:53            0.0.0.0:*               LISTEN      1258277/named      
tcp        0      0 127.0.0.1:953           0.0.0.0:*               LISTEN      1258277/named      
udp        0      0 127.0.0.1:53            0.0.0.0:*                           1258277/named      
unix  3      [ ]         STREAM     CONNECTED     3645705  1258277/named        
unix  2      [ ]         DGRAM                    3645697  1258277/named        

>
> registrar =  network solutions
> where they reference  => ns3.attdns.com <http://ns3.attdns.com> & ws.llinuxlighthouse.com <http://ws.llinuxlighthouse.com>

--
Remind me to ignore comments which aren't germane to the thread.

_______________________________________________
users mailing list -- users@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe send an email to users-leave@xxxxxxxxxxxxxxxxxxxxxxx
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/users@xxxxxxxxxxxxxxxxxxxxxxx
Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure

_______________________________________________
users mailing list -- users@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe send an email to users-leave@xxxxxxxxxxxxxxxxxxxxxxx
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/users@xxxxxxxxxxxxxxxxxxxxxxx
Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure