Sachchidanand Upadhyay via bind-users
2021-04-13 12:40:31 UTC
Hi,
I am using bind's geoip feature, created one ACL to allow country IN. I am not getting logs of a failed query if the client IP is other than than country IN.
Rest all is working fine, getting logs of successful queries. Below find the config details:
BIND 9.16.13 (Stable Release) <id:072e758>
running on Linux x86_64 3.10.0-1160.24.1.el7.x86_64 #1 SMP Thu Apr 8 19:51:47 UTC 2021
built by make with '--prefix=/usr' '--sysconfdir=/etc' '--localstatedir=/var' '--mandir=/usr/share/man' '--with-libtool=/usr/lib64' '--disable-static' '--with-maxminddb'
compiled by GCC 4.8.5 20150623 (Red Hat 4.8.5-44)
compiled with OpenSSL version: OpenSSL 1.0.2k-fips 26 Jan 2017
linked to OpenSSL version: OpenSSL 1.0.2k-fips 26 Jan 2017
compiled with libuv version: 1.41.0
linked to libuv version: 1.41.0
compiled with zlib version: 1.2.7
linked to zlib version: 1.2.7
linked to maxminddb version: 1.2.0
threads support is enabled
default paths:
named configuration: /etc/named.conf
rndc configuration: /etc/rndc.conf
DNSSEC root key: /etc/bind.keys
nsupdate session key: /var/run/named/session.key
named PID file: /var/run/named/named.pid
named lock file: /var/run/named/named.lock
geoip-directory: /usr/share/GeoIP
acl "test" {
geoip country IN;
};
options {
geoip-directory "path to geo db";
view "local" {
match-clients { test; };
recursion yes;
channel queries {
file "/var/log/queries";
print-time yes;
print-category yes;
print-severity yes;
};
category queries {
queries;
};
channel security {
file "/var/log/security";
print-time yes;
print-category yes;
print-severity yes;
};
category security {
queries;
};
channel query-errors {
file "/var/log/query-errors";
print-time yes;
print-category yes;
print-severity yes;
};
category query-errors {
query-errors;
};
BR,
Sachchidanand
I am using bind's geoip feature, created one ACL to allow country IN. I am not getting logs of a failed query if the client IP is other than than country IN.
Rest all is working fine, getting logs of successful queries. Below find the config details:
BIND 9.16.13 (Stable Release) <id:072e758>
running on Linux x86_64 3.10.0-1160.24.1.el7.x86_64 #1 SMP Thu Apr 8 19:51:47 UTC 2021
built by make with '--prefix=/usr' '--sysconfdir=/etc' '--localstatedir=/var' '--mandir=/usr/share/man' '--with-libtool=/usr/lib64' '--disable-static' '--with-maxminddb'
compiled by GCC 4.8.5 20150623 (Red Hat 4.8.5-44)
compiled with OpenSSL version: OpenSSL 1.0.2k-fips 26 Jan 2017
linked to OpenSSL version: OpenSSL 1.0.2k-fips 26 Jan 2017
compiled with libuv version: 1.41.0
linked to libuv version: 1.41.0
compiled with zlib version: 1.2.7
linked to zlib version: 1.2.7
linked to maxminddb version: 1.2.0
threads support is enabled
default paths:
named configuration: /etc/named.conf
rndc configuration: /etc/rndc.conf
DNSSEC root key: /etc/bind.keys
nsupdate session key: /var/run/named/session.key
named PID file: /var/run/named/named.pid
named lock file: /var/run/named/named.lock
geoip-directory: /usr/share/GeoIP
acl "test" {
geoip country IN;
};
options {
geoip-directory "path to geo db";
view "local" {
match-clients { test; };
recursion yes;
channel queries {
file "/var/log/queries";
print-time yes;
print-category yes;
print-severity yes;
};
category queries {
queries;
};
channel security {
file "/var/log/security";
print-time yes;
print-category yes;
print-severity yes;
};
category security {
queries;
};
channel query-errors {
file "/var/log/query-errors";
print-time yes;
print-category yes;
print-severity yes;
};
category query-errors {
query-errors;
};
BR,
Sachchidanand