mysterious allow-query {0.0.0.0/0;}; in named.conf

[tls]

I have ZS setup and running. But I am having issues with the DNS options. I want to restrict the DNS with these lines:

recursion yes;
allow-query {172.16.0.0/12; };

But when I add them to the DNS options dialog I get an error.

/tmp/named.conf:13: 'allow-query' redefined near 'allow-query'

Inspection of the /tmp/named.conf file shows the following:

^M

recursion yes;^M

allow-query { 172.16.0.0/12; };^M

^M

allow-query { 0.0.0.0/0; };

version none;

The error is the second allow-query line. But my options files in the active profile /DB/_DB.003/var/register/system/dns/Options shows only these line: (there are some linebreaks you might not be able to see but they show up as ^M in the file under vi.

recursion yes;

allow-query { 172.16.0.0/12; };

The named.conf in the same profile does not have the allow-query line. Attempts to remove it in various places have failed, so I know I have some option set someplace that forces the allow-query line to be added but I am unable to find what option I have turned on/off to remove it.

So can anyone tell me how to remove the extra allow-query line?

Thanks for any hints.

ty

[Author]

Posts