From: Peter Palfrader <peter@palfrader.org>
Date: Wed, 16 Mar 2011 20:08:06 +0000 (+0100)
Subject: On the geo-nameservers, do not bind to localhost
X-Git-Url: https://git.donarmstrong.com/?a=commitdiff_plain;h=2041252be8e846d24713832325372d61e8886ac9;p=dsa-puppet.git

On the geo-nameservers, do not bind to localhost
---

diff --git a/modules/named/templates/named.conf.options.erb b/modules/named/templates/named.conf.options.erb
index f8012228..4cb466ea 100644
--- a/modules/named/templates/named.conf.options.erb
+++ b/modules/named/templates/named.conf.options.erb
@@ -20,7 +20,12 @@ options {
 	directory "/var/cache/bind";
 
 	auth-nxdomain no;    # conform to RFC1035
+<% if classes.include?("named::geodns") -%>
+	listen-on { ! 127.0.0.1; any; };
+	listen-on-v6 { ! ::1; any; };
+<% else -%>
 	listen-on-v6 { any; };
+<% end -%>
 
 	allow-transfer { none; };
 	allow-update { none; };