From Newsgroup: comp.protocols.dns.bind
--000000000000687ae205a62ddb3b
Content-Type: text/plain; charset="UTF-8"
Thank you so much, a silly mistake as it always happens - I was injecting
the wrong binary via the systemd-unit.
Everything's fine now.
By "documentation" I meant the ISC's article -
https://kb.isc.org/docs/aa-01149
On Thu, May 21, 2020 at 10:01 PM Evan Hunt <
each@isc.org> wrote:
On Thu, May 21, 2020 at 10:38:41AM +0300, Denis wrote:
But when I try to generate acls the same way it was done with legacy Maxmind databases:
acl us {
geoip country us;
}
I'm getting "no GeoIP database installed which can answer queries of type 'country'".
Can you check whether the "geoip2" system test is passing?
- build BIND
- cd bin/tests/system
- sudo sh ifconfig.sh up
- sh run.sh geoip2
If the system test (which uses its own built-in database files) passes,
then I would guess the systemwide GeoIP database files either aren't where named is looking for them, or are not readable.
If you check the named log, within the first few lines after the server starts up there should be something like this:
21-May-2020 11:56:34.303 looking for GeoIP2 databases in '/usr/share/GeoIP' 21-May-2020 11:56:34.303 opened GeoIP2 database '/usr/share/GeoIP/GeoLite2-Country.mmdb'
21-May-2020 11:56:34.307 opened GeoIP2 database '/usr/share/GeoIP/GeoLite2-City.mmdb'
21-May-2020 11:56:34.307 opened GeoIP2 database '/usr/share/GeoIP/GeoLite2-ASN.mmdb'
The documentation now shows that "BIND 9.16 supports v2 of the API but these instructions have not been updated accordingly"
Can you share the instructions that should be used now?
Which documentation says that? I don't remember it from the BIND doc...
Setting up ACLs should be largely unchanged, with the exception that a
couple of very infrequently used keywords like "areacode" and "netspeed" became unavailable in the new API, and three-letter country codes are
now obsolete. "Country" is definitely still supported, and since you used "us" rather than "usa" in your example, it should've worked.
--
Evan Hunt -- each@isc.org
Internet Systems Consortium, Inc.
--000000000000687ae205a62ddb3b
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
<div dir=3D"ltr">Thank you so much, a silly mistake as it always happens - =
I was injecting the wrong binary via the systemd-unit.<div>Everything's=
fine now.<br><div><br></div><div>By "documentation" I meant the = ISC's article -=C2=A0<a href=3D"
https://kb.isc.org/docs/aa-01149">https= ://kb.isc.org/docs/aa-01149</a></div></div><div><br></div></div><br><div cl= ass=3D"gmail_quote"><div dir=3D"ltr" class=3D"gmail_attr">On Thu, May 21, 2= 020 at 10:01 PM Evan Hunt <<a href=3D"mailto:
each@isc.org">
each@isc.org<= /a>> wrote:<br></div><blockquote class=3D"gmail_quote" style=3D"margin:0=
px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">O=
n Thu, May 21, 2020 at 10:38:41AM +0300, Denis wrote:<br>
> But when I try to generate acls the same way it was done with legacy<b=
> Maxmind databases:<br>
> acl us {<br>
>=C2=A0 =C2=A0 =C2=A0 =C2=A0geoip country us;<br>
> }<br>
> <br>
> I'm getting "no GeoIP database installed which can answer que= ries of type<br>
> 'country'".<br>
Can you check whether the "geoip2" system test is passing?<br>
- build BIND<br>
- cd bin/tests/system<br>
- sudo sh ifconfig.sh up<br>
- sh run.sh geoip2<br>
If the system test (which uses its own built-in database files) passes,<br> then I would guess the systemwide GeoIP database files either aren't wh= ere<br>
named is looking for them, or are not readable.<br>
If you check the named log, within the first few lines after the server<br> starts up there should be something like this:<br>
21-May-2020 11:56:34.303 looking for GeoIP2 databases in '/usr/share/Ge= oIP'<br>
21-May-2020 11:56:34.303 opened GeoIP2 database '/usr/share/GeoIP/GeoLi= te2-Country.mmdb'<br>
21-May-2020 11:56:34.307 opened GeoIP2 database '/usr/share/GeoIP/GeoLi= te2-City.mmdb'<br>
21-May-2020 11:56:34.307 opened GeoIP2 database '/usr/share/GeoIP/GeoLi= te2-ASN.mmdb'<br>
> The documentation now shows that=C2=A0 "BIND 9.16 supports v2 of = the API but<br>
> these instructions have not been updated accordingly"<br>
> Can you share the instructions that should be used now?<br>
Which documentation says that? I don't remember it from the BIND doc...=
Setting up ACLs should be largely unchanged, with the exception that a<br> couple of very infrequently used keywords like "areacode" and &qu= ot;netspeed"<br>
became unavailable in the new API, and three-letter country codes are<br>
now obsolete. "Country" is definitely still supported, and since = you used<br>
"us" rather than "usa" in your example, it should'v=
e worked.<br>
-- <br>
Evan Hunt -- <a href=3D"mailto:
each@isc.org" target=3D"_blank">
each@isc.org= </a><br>
Internet Systems Consortium, Inc.<br>
</blockquote></div>
--000000000000687ae205a62ddb3b--
--- Synchronet 3.18a-Linux NewsLink 1.113