diff options
| author | TobTobXX <git@tobtobxx.net> | 2024-08-19 16:07:59 +0200 |
|---|---|---|
| committer | TobTobXX <git@tobtobxx.net> | 2024-11-20 10:47:06 +0100 |
| commit | 26fbd1adbe13cbe7205a16e8c0eca9ba99139642 (patch) | |
| tree | d69bd97c437ae18314434f24cf469ffb044cf8a8 /pkgs/development/python-modules/rangehttpserver | |
| parent | f17c1d575af7d0d791dc3adbb29c4c85c5ea916c (diff) | |
nixos/bind: Fix cacheNetworks option
services.bind.cacheNetworks should only apply to recursive queryies, as
per the option documentation:
> Note that this is for recursive queries – all networks are allowed to
> query zones configured with the zones option by default [...].
This would correspond to the `allow-query-cache` option in named.conf,
as per the BIND docs[1]:
> Specifies which hosts (an IP address list) can access this server’s
> cache and thus effectively controls recursion.
And not `allow-query`, which restricts all requests (including requests
where the server has authority) [2]:
> Specifies which hosts (an IP address list) are allowed to send queries
> to this resolver.
> [...]
> Note:
> `allow-query-cache` is used to specify access to the cache.
[1]: https://bind9.readthedocs.io/en/v9.20.0/reference.html#namedconf-statement-allow-query-cache
[2]: https://bind9.readthedocs.io/en/v9.20.0/reference.html#namedconf-statement-allow-query
Diffstat (limited to 'pkgs/development/python-modules/rangehttpserver')
0 files changed, 0 insertions, 0 deletions
