Dropping request packets

Barry Margolin barmar at alum.mit.edu
Wed Apr 21 04:20:19 UTC 2004


In article <c64n9k$2re8$1 at sf1.isc.org>,
 Weldon Goree <weldon at weldongoree.com> wrote:

> What BIND configuration do you know of that will prevent, say, someone 
> at 192.168.1.27 from running nslookup using your nameserver?

As has already been mentioned in this thread, "allow-query" and 
"blackhole".

options {
  allow-query { !192.168.1.27; any; };
  ...
};

-- 
Barry Margolin, barmar at alum.mit.edu
Arlington, MA
*** PLEASE post questions in newsgroups, not directly to me ***


More information about the bind-users mailing list