configuring DNS not to answer queries except local domains (or not to forward certain queries)

masaki akashi m.akashi at rdc.west.ntt.co.jp
Fri Nov 14 01:30:50 UTC 2003


Well, I forgot to put local zone.
but still it doesn't work, do you see any problem, mark?


On Fri, 14 Nov 2003 02:27:56 +1100
Mark_Andrews at isc.org wrote:

> 
> > Hi all
> > 
> > Does anyone know how to setup the BIND9 not to answer queries 
> >  except local domains.

 my /etc/named.conf is like:
 
  Acl localnet {
         10.60.XX.16/28;
         127.0.0.1;
 };

 options {
         directory "/var/named";
         allow-transfer { localnet; };
         allow-query { localnet; };
 };
 
 view "watch" {
         match-clients { any; };
         allow-query { any; };
        zone "local" {
                type master;
                file "localhost.zone";
        };

        zone "0.0.127.in-addr.arpa" {
                type master;
                file "localhost.rev";
        };

        zone "XX.60.10.in-addr.arpa" {
                type master;
                file "XX.60.10.in-addr.arpa";
        };

        zone "hogehoge.TLD" {
                type master;
                file "hogehoge.TLD";
        };
         zone "com" {
            type forward;
            forwarders {};
         };
 }
> > 
> > I understand, I should write "recursion no", but this time
> > I need recursion.
> > 
> > Does anyone have a clue? or pointer_
> > 
> > Thanks in advance.
> > 
> > -- 
> > masaki akashi
> 
> 	You don't have any "local" zones in this config.
> --
> Mark Andrews, Internet Software Consortium
> 1 Seymour St., Dundas Valley, NSW 2117, Australia
> PHONE: +61 2 9871 4742                 INTERNET: Mark.Andrews at isc.org
> 

-- 
NTT西日本 研究開発センタ
第2開発担当 プラットフォーム第2技術担当
明石 勝希
m.akashi at rdc.west.ntt.co.jp
06-6465-2534



More information about the bind-users mailing list