configuring DNS not to answer queries except local domains (or not to forward certain queries)
masaki akashi
m.akashi at rdc.west.ntt.co.jp
Fri Nov 14 01:30:50 UTC 2003
Well, I forgot to put local zone.
but still it doesn't work, do you see any problem, mark?
On Fri, 14 Nov 2003 02:27:56 +1100
Mark_Andrews at isc.org wrote:
>
> > Hi all
> >
> > Does anyone know how to setup the BIND9 not to answer queries
> > except local domains.
my /etc/named.conf is like:
Acl localnet {
10.60.XX.16/28;
127.0.0.1;
};
options {
directory "/var/named";
allow-transfer { localnet; };
allow-query { localnet; };
};
view "watch" {
match-clients { any; };
allow-query { any; };
zone "local" {
type master;
file "localhost.zone";
};
zone "0.0.127.in-addr.arpa" {
type master;
file "localhost.rev";
};
zone "XX.60.10.in-addr.arpa" {
type master;
file "XX.60.10.in-addr.arpa";
};
zone "hogehoge.TLD" {
type master;
file "hogehoge.TLD";
};
zone "com" {
type forward;
forwarders {};
};
}
> >
> > I understand, I should write "recursion no", but this time
> > I need recursion.
> >
> > Does anyone have a clue? or pointer_
> >
> > Thanks in advance.
> >
> > --
> > masaki akashi
>
> You don't have any "local" zones in this config.
> --
> Mark Andrews, Internet Software Consortium
> 1 Seymour St., Dundas Valley, NSW 2117, Australia
> PHONE: +61 2 9871 4742 INTERNET: Mark.Andrews at isc.org
>
--
NTT西日本 研究開発センタ
第2開発担当 プラットフォーム第2技術担当
明石 勝希
m.akashi at rdc.west.ntt.co.jp
06-6465-2534
More information about the bind-users
mailing list