BIND 9.4.1-P1 allow-recursion and allow-query-cache


Prior to the release of BIND 9.4.1-P1, the default action of "allow-recursion" and "allow-query-cache" was to permit the query. The P1 patch to BIND 9.4.1 caused two changes in this behavior:
If not explicitly set, the ACLs for "allow-query-cache" and "allow-recursion" were set to "localnets; localhost;".
If either "allow-query-cache" or "allow-recursion" was set, the other would be set the same value.

При обновлении внести в конфиг:

acl "trusted" {
     192.168.0.0/16;
     10.153.154.0/24;
     localhost;
     localnets;
 };
 
 options {

User tags

bind hotplug glusterfs 3Ware puppet lts arch mount taskset DRBD radeon Adaptec flash grub tin gdb tzdata /etc/network/interfaces rtsp php scsi shellshock oprofile etch MODx tun ps mdadm CPAN quagga kernel vrrpd LSI Salt sftp storage ulimit dhclient fido7 bug encrypt limit_conn qemu debian dhcp raid bash security erase cpu parallel apache git CentOS exim java slab route keyboard pacemaker fio wget firefox PXE dstat leap second KVM HTTPS lxc equalizer sublime build Areca ddos wordpress RT X forwarding noop exim4 regex backup freedos proxy cpanm SpamAssassin APU performance mysql xen backtrace perl vlan iptables ha top in-addr.arpa mariadb chroot virt-install iSCSI dns glxinfo soa cache arp newgrp iowait vim tar opcontrol swap ip iops chromium profiling lstat bonding ipmitool netfilter drupal conntrack docker video perlbrew elliptics opreport routing openvpn vtysh ardour raid5 debootstrap alien tftp sysfs core dump qcow2 PTR sysctl.conf pam squeeze .htaccess cpu usage nginx numa sysresccd AMD jackd tiger find StorMan xhost docker-compose mkfs arping dpkg alsa ansible xargs lubuntu bacula shorewall search pvmove bridge bscan zRam usb cgroups rpm gtk rsync LVM su HDFS fail2ban ssh sysctl OpenSSL sg youtube virtualbox ipmi gre SSD SuperMicro rkhunter tool xfs groups source OpenStack munin nvidia cfq hdparm asoundrc dovecot sysrq cluster virsh language initrd rtl8723be gpg boot MegaRAID NFS SYN apt pulseaudio ubuntu nfs4 iostat vrrp replication lenny idmapd htop graylog2 deb Swift corosync centos 7