Allow local netblocks to access bind as well as known hosts

[chef.git] / cookbooks / bind / templates / default / named.options.erb

diff --git a/cookbooks/bind/templates/default/named.options.erb b/cookbooks/bind/templates/default/named.options.erb
index f9cebbc10affb7e7c99fffa92e7de366e40b57c5..2ec4094dc8bb65d12e3b0924fff3af9c65872a24 100644 (file)
--- a/cookbooks/bind/templates/default/named.options.erb
+++ b/cookbooks/bind/templates/default/named.options.erb
@@ -2,11 +2,17 @@
 
 acl "osm" {
        127.0.0.1/32;
+<% node.interfaces(:family => :inet).each do |interface| -%>
+        <%= interface[:network] %>/<%= interface[:prefix] %>;
+<% end -%>
 <% @ipv4_clients.sort.each do |address| -%>
        <%= address %>/32;
 <% end -%>
 
        ::1/128;
+<% node.interfaces(:family => :inet6).each do |interface| -%>
+        <%= interface[:network] %>/<%= interface[:prefix] %>;
+<% end -%>
 <% @ipv6_clients.sort.each do |address| -%>
        <%= address %>/128;
 <% end -%>