From 2041252be8e846d24713832325372d61e8886ac9 Mon Sep 17 00:00:00 2001 From: Peter Palfrader Date: Wed, 16 Mar 2011 21:08:06 +0100 Subject: [PATCH] On the geo-nameservers, do not bind to localhost --- modules/named/templates/named.conf.options.erb | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/modules/named/templates/named.conf.options.erb b/modules/named/templates/named.conf.options.erb index f80122285..4cb466ea2 100644 --- a/modules/named/templates/named.conf.options.erb +++ b/modules/named/templates/named.conf.options.erb @@ -20,7 +20,12 @@ options { directory "/var/cache/bind"; auth-nxdomain no; # conform to RFC1035 +<% if classes.include?("named::geodns") -%> + listen-on { ! 127.0.0.1; any; }; + listen-on-v6 { ! ::1; any; }; +<% else -%> listen-on-v6 { any; }; +<% end -%> allow-transfer { none; }; allow-update { none; }; -- 2.20.1