How to stop the rewrite of bind configuration?

Discussion in 'ISPConfig 3 Priority Support' started by MaxT, Oct 15, 2017.

  1. MaxT

    MaxT Active Member HowtoForge Supporter

    I have found the /etc/bin/named.conf.options has been rewritten. This has caused problems with the email by several days, until somebody complained about email problems.

    My file is this:
    Code:
    include "/etc/bind/rndc.key";
    
    controls {
        inet 127.0.0.1 allow { localhost; } keys { "rndc-key"; };
    };
    
    acl "trusted" {
    1.1.1.1;
    2.2.2.2;
    127.0.0.1;
    };
    
    options {
        directory "/var/cache/bind";
    
        //query-source address * port 53;
        //query-source    port 53;
    
        empty-zones-enable no;
    
        //dnssec-validation auto;
        //auth-nxdomain no;    # conform to RFC1035
    
        listen-on { trusted; };
        listen-on port 53 { trusted; };
    
        version "unknown";
    
        allow-notify { trusted; };
        allow-transfer { trusted; };
        allow-query { any; };
        allow-recursion { trusted; };
        allow-query-cache { trusted; };
    
    
    };
    
    logging {
    
        channel default_file {
            file "/var/log/named.log" versions 3 size 5m;
            //severity dynamic;
            print-time yes;
        };
    
    
    };
    
    and I have found this new file:
    Code:
    options {
      directory "/var/cache/bind";
    
      // If there is a firewall between you and nameservers you want
      // to talk to, you may need to fix the firewall to allow multiple
      // ports to talk.  See http://www.kb.cert.org/vuls/id/800113
    
      // If your ISP provided one or more IP addresses for stable
      // nameservers, you probably want to use them as forwarders.
      // Uncomment the following block, and insert the addresses replacing
      // the all-0's placeholder.
    
      // forwarders {
      //  0.0.0.0;
      // };
    
      //========================================================================
      // If BIND logs error messages about the root key being expired,
      // you will need to update your keys.  See https://www.isc.org/bind-keys
      //========================================================================
      dnssec-enable yes;
      dnssec-validation yes;
      dnssec-lookaside auto;
    
      auth-nxdomain no;  # conform to RFC1035
      listen-on-v6 { any; };
    };
    
    Is there some option to import my file into ISPC to be adopted and preserved ?.
    On the contrary, Where can I include these parameters of named.conf.options inside ISPC?. I cannot find a place
     
  2. till

    till Super Moderator Staff Member ISPConfig Developer

    Copy the named.conf.options.master file from install/tpl/ folder of the ispconfig tar.gz file to the folder /usr/local/ispconfig/server/conf-custom/install/ and implement your custom config in that file.
     
    MaxT likes this.
  3. MaxT

    MaxT Active Member HowtoForge Supporter

    thanks! :)
     

Share This Page