BIND 9.4.1-P1 allow-recursion and allow-query-cache


Prior to the release of BIND 9.4.1-P1, the default action of "allow-recursion" and "allow-query-cache" was to permit the query. The P1 patch to BIND 9.4.1 caused two changes in this behavior:
If not explicitly set, the ACLs for "allow-query-cache" and "allow-recursion" were set to "localnets; localhost;".
If either "allow-query-cache" or "allow-recursion" was set, the other would be set the same value.

При обновлении внести в конфиг:

acl "trusted" {
     192.168.0.0/16;
     10.153.154.0/24;
     localhost;
     localnets;
 };
 
 options {

User tags

core dump apache perlbrew lubuntu asoundrc raid5 slab routing ipmi su bash deb mkfs iops rkhunter scsi qemu CentOS opreport freedos dovecot glusterfs docker-compose ubuntu ps LVM initrd StorMan tar .htaccess tun jackd java ssh nvidia lts ip video /etc/network/interfaces boot bscan X forwarding in-addr.arpa RT 3Ware parallel ansible storage HDFS pulseaudio OpenStack cpu usage xen rsync KVM elliptics xfs AMD fio cgroups sysresccd alsa opcontrol ddos NFS rpm lxc sg search SSD equalizer shellshock puppet HTTPS virtualbox bind wordpress source bug LSI cpu xargs vim debootstrap virsh idmapd rtsp etch sysctl.conf glxinfo iptables OpenSSL backtrace hdparm fail2ban tool nfs4 vtysh cache APU youtube vlan vrrp mysql gdb ulimit chromium arch squeeze netfilter tin ha gpg security erase performance replication profiling bacula sysrq exim4 dpkg regex sftp iowait shorewall Adaptec iSCSI usb taskset firefox chroot sublime gre htop corosync swap kernel wget rtl8723be noop nginx pacemaker iostat arp quagga leap second Swift cpanm perl xhost conntrack arping Salt tftp mariadb PTR dhclient apt mount graylog2 sysfs MODx dhcp git SuperMicro docker proxy debian backup cfq cluster tiger ipmitool exim radeon keyboard munin alien grub hotplug DRBD php MegaRAID openvpn SpamAssassin CPAN SYN build pam bridge language ardour pvmove zRam route encrypt limit_conn lstat oprofile groups lenny gtk PXE numa raid soa sysctl centos 7 dns top dstat virt-install vrrpd Areca drupal mdadm find flash qcow2 tzdata fido7 newgrp bonding