blocking resolving for 10.X.X.X addresses
Jim Reid
jim at rfc1035.com
Fri Oct 25 14:05:31 UTC 2002
>>>>> "Steve" == Steve Foster <fosters at uk.psi.com> writes:
Steve> we have found customers trying to resolv 10.X.X.X addresses
Steve> ( or any other private addresses), i want to block these so
Steve> they just get a "refused" or hostname etc.. not found...
Configure your name server to be authoritative for the reverse zones
for these private address ranges. And leave the zones empty, ideally
with a very large TTL for negative caching.
More information about the bind-users
mailing list