Reverse DNS for non-maas RFC1918 zones fails inside maas
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
MAAS |
Fix Released
|
High
|
Björn Tillenius | ||
2.9 |
Won't Fix
|
High
|
Björn Tillenius |
Bug Description
I have a maas instance that owns 172.23.4.0/24.
I also have non-maas machines on 172.21.0.0/24 (etc.).
The version of bind in the current version of maas (currently on the latest 2.9 snap, but this has been like this for awhile) maps rfc1918 zones like 0.21.172.
This can be fixed with something like this:
--- /var/snap/
+++ /var/snap/
@@ -11,6 +11,7 @@
session-
auth-nxdomain no;
listen-on-v6 { any; };
+ empty-zones-enable no;
include "/var/snap/
};
Can we get this patch upstream so automatic snap updates won't revert it? Blocking reverse lookups of RFC 1918 zones in maas, which is almost certainly forwarding to another internal DNS server (which can block these zones if appropriate) doesn't seem useful, and breaks some configs.
Related branches
- Björn Tillenius: Approve
-
Diff: 34 lines (+2/-3)2 files modifiedsrc/provisioningserver/dns/tests/test_actions.py (+1/-2)
src/provisioningserver/templates/dns/named.conf.options.inside.maas.template (+1/-1)
- Alberto Donato: Approve
- MAAS Lander: Pending (unittests) requested
-
Diff: 34 lines (+2/-3)2 files modifiedsrc/provisioningserver/dns/tests/test_actions.py (+1/-2)
src/provisioningserver/templates/dns/named.conf.options.inside.maas.template (+1/-1)
description: | updated |
Changed in maas: | |
milestone: | none → 2.10-beta1 |
status: | In Progress → Fix Committed |
Changed in maas: | |
status: | Fix Committed → Fix Released |
Is there anything else I can do to facilitate this going upstream?
Every time maas updates itself, I get DNS failures in my environment and have to go reapply this patch.