From owner-FreeBSD-net-jp@jp.freebsd.org  Sun Apr 23 03:33:45 2000
Received: (from daemon@localhost)
	by castle.jp.freebsd.org (8.9.3+3.2W/8.7.3) id DAA12650;
	Sun, 23 Apr 2000 03:33:45 +0900 (JST)
	(envelope-from owner-FreeBSD-net-jp@jp.FreeBSD.org)
Received: from Demone.Azzurri.ORG (odn-d159.cablenet.ne.jp [210.254.29.159])
	by castle.jp.freebsd.org (8.9.3+3.2W/8.7.3) with ESMTP id DAA12626
	for <FreeBSD-net-jp@jp.freebsd.org>; Sun, 23 Apr 2000 03:33:38 +0900 (JST)
	(envelope-from tdoi@Azzurri.ORG)
Received: from localhost (Demone.Azzurri.ORG [210.254.29.159])
	by Demone.Azzurri.ORG (8.9.3/3.7Wpl2:TDoi_4.4BSD) with ESMTP id DAA04401
	for <FreeBSD-net-jp@jp.freebsd.org>; Sun, 23 Apr 2000 03:32:34 +0900 (JST)
To: FreeBSD-net-jp@jp.freebsd.org
From: Toshiaki Doi <tdoi@Azzurri.ORG>
X-Mailer: Mew version 1.94.1 on Emacs 20.6 / Mule 4.0 (HANANOEN)
Mime-Version: 1.0
Content-Type: Text/Plain; charset=iso-2022-jp
Content-Transfer-Encoding: 7bit
Message-Id: <20000423033234J.tdoi@Azzurri.ORG>
Date: Sun, 23 Apr 2000 03:32:34 +0900
X-Dispatcher: imput version 20000228(IM140)
Lines: 106
Reply-To: FreeBSD-net-jp@jp.freebsd.org
Precedence: list
X-Distribute: distribute version 2.1 (Alpha) patchlevel 24e+000315
X-Sequence: FreeBSD-net-jp 2464
Subject: [FreeBSD-net-jp 2464] Err/TO errors being (named)
Errors-To: owner-FreeBSD-net-jp@jp.freebsd.org
Sender: owner-FreeBSD-net-jp@jp.freebsd.org
X-Originator: tdoi@Azzurri.ORG


$BEZ0f$H?=$7$^$9!#(B

$B%M!<%`%5!<%P$N%W%i%$%^%j$r<u$1;}$D(BFreeBSD 3.4-stable$B$J%5!<%P$X!V(BIPFW+NATD$B!W(B
$B$rAH$_9~$_$^$7$?$i!"%;%+%s%@%j$r<u$1;}$D%M!<%`%5!<%P$h$j!"0J2<$NMM$J(B
$B%a%C%;!<%8$,=PNO$5$l!"%(%i!<$N1F6A5Z$SBP=hJ}K!$,$o$+$j$^$;$s!#(B
$B$I$3$+(B53$BHV0J30$N%]!<%H$r6u$1$J$/$F$O$$$1$J$$$N$G$7$g$&$+!)(B
$B$A$J$_$K!"!V(BIPFW+NATD$B!W$rAH$_9~$`A0$^$G$O!"FC$K%(%i!<$O=P$F$$$^$;$s$G$7$?!#(B

$B%;%+%s%@%j%M!<%`%5!<%P$N(B/var/log/messages$B$h$j(B
Apr 23 01:54:42 ghost named[271]: Err/TO getting serial# for "Azzurri.ORG"

$B0J2<$K3F<o@_DjFbMF$r<($7$^$9!#(B

$B%W%i%$%^%jB&(B
$B!1!1!1!1!1!1(B
xl0: 210.254.29.159 $B30B&(B
ed1: 192.168.1.254  $BFbB&(B

rc.conf$B$h$j!V(BIPFW+NATD$B!W$N@_DjItJ,$rH4?h(B
firewall_enable="YES"
firewall_script="/etc/rc.firewall"
firewall_type="simple"
firewall_quiet="NO"
natd_program="/sbin/natd"
natd_enable="YES"
natd_interface="xl0"
natd_flags="-dynamic yes"

Demone# ipfw list
00100 divert 8668 ip from any to any via xl0
00200 allow ip from any to any via lo0
00300 deny ip from any to 127.0.0.0/8
00400 deny ip from 192.168.1.0/24 to any in recv xl0
00500 deny ip from 210.254.29.0/24 to any in recv ed1
00600 deny ip from 192.168.0.0/16 to any via xl0
00700 deny ip from any to 192.168.0.0/16 via xl0
00800 deny ip from 172.16.0.0/12 to any via xl0
00900 deny ip from any to 172.16.0.0/12 via xl0
01000 deny ip from 10.0.0.0/8 to any via xl0
01100 deny ip from any to 10.0.0.0/8 via xl0
01200 allow ip from any to any via ed1
01300 allow tcp from any to any established
01400 allow tcp from any to 210.254.29.159 22 setup
01500 allow tcp from any to 210.254.29.159 25 setup
01600 allow tcp from any to 210.254.29.159 53 setup
01700 deny log logamount 10 tcp from any to any in recv xl0 setup
01800 allow tcp from any to any setup
01900 allow udp from any 53 to 210.254.29.159
02000 allow udp from 210.254.29.159 to any 53
02100 allow udp from any 1024 to 210.254.29.159
02200 allow udp from 210.254.29.159 to any 1024
02300 allow udp from any 123 to 210.254.29.159
02400 allow udp from 210.254.29.159 to any 123
65535 deny ip from any to any

bind$B$N%P!<%8%g%s$O!"%W%i%$%^%j5Z$S%;%+%s%@%j$H$b$K(B 8.2.2-P5

Demone# cat named.conf
options {
        directory "/var/namedb";
        query-source address * port 53;
};
zone "." {
        type hint;
        file "named.root";
};
zone "0.0.127.in-addr.arpa" {
        type master;
        file "rev/localhost.rev";
};
zone "Azzurri.ORG" {
        type master;
        file "zone/Azzurri.ORG";
};

Demone# cat /var/namedb/zone/Azzurri.ORG
Azzurri.ORG.    IN      SOA     Demone.Azzurri.ORG. root.Demone.Azzurri.ORG.  (
                                20000416        ; Serial
                                3600    ; Refresh
                                900     ; Retry
                                3600000 ; Expire
                                3600 )  ; Minimum
Azzurri.ORG.    IN      NS      Demone.Azzurri.ORG.
Azzurri.ORG.    IN      NS      ghost.domain.com. <- $B%I%a%$%sL>$O!"JQ$($F$^$9(B
Azzurri.ORG.    IN      MX      10      Demone.Azzurri.ORG.
localhost               IN      A       127.0.0.1
Demone.Azzurri.ORG.     IN      A       210.254.29.159
www.Azzurri.ORG.        IN      CNAME   Demone.Azzurri.ORG.

$B%;%+%s%@%jB&(B
$B!1!1!1!1!1!1(B
named.conf$B$h$j0lItH4?h(B
zone "Azzurri.ORG" {
        type slave;
        file "slave/Azzurri.ORG";
        masters { 210.254.29.159;}; 
        allow-update { none; }; 
        allow-transfer { any; }; 
        allow-query { any; }; 

$B0J>e$G$9!#59$7$/$*4j$$$7$^$9!#(B

---
#! T o s h i a k i    D o i   <tdoi@Azzurri.ORG>
#  PGP Key fingerprint = 8AEF 53D9 651E D3ED  8E62 4F31 4A86 A0A4
