[Pdns-users] multiple ip address for domainmetadata ALLOW-2136-FROM

[Posner, Sebastian]

Thomas Mieslinger wrote: 

> the documentation is not clear about how to allow more than one ip or
> range in the ALLOW-2136-FROM domainmetadata.
> 
> Are multiple ALLOW-2136-FROM domainmetadata Records honored for a
> domain_id? Or should I space separate the allowed IPs in one record?

Quoting https://doc.powerdns.com/html/rfc2136-domainmetadata.html :

"ALLOW-2136-FROM

    This setting has the same function as described in the configuration options (See Section 1, "Configuration options"). Only one item is allowed per row, but multiple rows can be added. An example:

    sql> select id from domains where name='powerdnssec.org';
    5
    sql> insert into domainmetadata(domain_id, kind, content) values(5, 'ALLOW-2136-FROM','10.0.0.0/8');
    sql> insert into domainmetadata(domain_id, kind, content) values(5, 'ALLOW-2136-FROM','192.168.1.2/32');
                  

    This will allow 10.0.0.0/8 and 192.168.1.2/32 to send RFC2136 update messages for the powerdnssec.org domain."

How is this not clear? Rarely have I seen something this clear in PowerDNS documentation ;)

Mit freundlichen Grüßen,

Sebastian
--
Sebastian Posner
Unix-Systemspezialist
"Es hat einmal einer gesagt, das geht nicht. Dann kam einer, der wusste das nicht und hat es einfach gemacht"