Bug 76707

Summary: Bind 9 - query-source bug?
Product: Base System Reporter: Adam Minowski <adam.minowski>
Component: i386Assignee: Doug Barton <dougb>
Status: Closed FIXED    
Severity: Affects Only Me    
Priority: Normal    
Version: 5.3-RELEASE   
Hardware: Any   
OS: Any   

Description Adam Minowski 2005-01-26 12:20:21 UTC
I have FreeBSD runing as a router for network traffic, and also mailrelay. I have two network interfaces, one xl0: ip 10.233.2.10, and another one xll: ip 10.233.108.10 with aliases .2 .3 .4 at the end of address. Everything was working fine, until I've done system upgrade and start using bind9. Query-source in bind directive is not working properly. I have such config of dns regarding options:
options {
        directory       "/etc/namedb";
        pid-file        "/var/run/named/pid";
        dump-file       "/var/dump/named_dump.db";
        statistics-file "/var/stats/named.stats";
        listen-on       port 53 { 10.233.108.3; 10.233.108.4; 127.0.0.1; };
        query-source    address 10.233.108.4 ;
        transfer-source 10.233.108.4 ;
        notify-source 10.233.108.4;
};
When my dns querries another dns on xl1 side then it uses 10.233.108.4 address as required, but if another dns is on xl0 side then query comes from ip of xl0 interface!!
Comment 1 Volker Stolz freebsd_committer freebsd_triage 2005-03-09 18:08:41 UTC
Responsible Changed
From-To: freebsd-i386->dougb

Over to maintainer
Comment 2 Doug Barton freebsd_committer freebsd_triage 2005-03-13 10:55:25 UTC
State Changed
From-To: open->feedback


I just upgraded the port to 9.3.1, it would be very useful if you could 
install that version (in /usr/local is fine) and give it a try. I will be 
updating the base soon, and it would help if I knew what I was facing. 

You can easily get the port version to start instead of the base by adding 
the following lines to /etc/rc.conf[.local]: 

named_program="/usr/local/sbin/named" 
named_flags="-u bind -c /etc/namedb/named.conf" 

Also, please read the documentation on the relevant options in 
/usr/share/doc/bind9/arm thoroughly to rule out the possibility 
of pilot error. 

Thanks, 

Doug
Comment 3 Doug Barton freebsd_committer freebsd_triage 2005-03-23 08:29:58 UTC
State Changed
From-To: feedback->closed


Feedback timeout.  

It may be more useful to pursue this further on 
bind-users@isc.org if necessary.  

Good luck, 

Doug
Comment 4 bzeeb 2005-09-24 15:22:36 UTC
In case this is still worth noting:
Might be that you are running into compat8 code. I had a
similar problem with transfer-source that the 2nd soa_query
did not use the configured IP. Turning of
	use-alt-transfer-source no;
seems to help there.
Comment 5 Adam Minowski 2005-09-26 14:44:27 UTC
It seems that you're right. I've deleted "use-alt-transfer-cource" from
config and now everything is ok.
Thanks

--
Adam Minowski




|---------+---------------------------->
|         |           "Bjoern A. Zeeb" |
|         |           <bzeeb@zabbadoz.n|
|         |           et>              |
|         |                            |
|         |           2005-09-24 16:22 |
|         |                            |
|---------+---------------------------->
  >--------------------------------------------------------------------------------------------------------------------------------------------|
  |                                                                                                                                            |
  |       To:       bug-followup@FreeBSD.org, adam.minowski@t-systems.com.pl                                                                   |
  |       cc:                                                                                                                                  |
  |       Subject:  Re: i386/76707 : Bind 9 - query-source bug?                                                                                |
  >--------------------------------------------------------------------------------------------------------------------------------------------|




In case this is still worth noting:
Might be that you are running into compat8 code. I had a
similar problem with transfer-source that the 2nd soa_query
did not use the configured IP. Turning of
             use-alt-transfer-source no;
seems to help there.