Issue Using Wildcards for Subdimain Redirecing

Ondřej Surý ondrej at isc.org
Thu Feb 17 18:07:30 UTC 2022


You can’t do that with standard DNS software. It would be possible to write custom software that would do exactly this. It’s possible that dnsdist proxy might be able to do this kind of matching.

Also using “example.com” and being vague doesn’t help people that might want to help you. Perhaps if you start using real domain and describing what you need to achieve instead of how you want to do that would be a good start. Step back and describe why are you doing things like this.

Ondrej
--
Ondřej Surý — ISC (He/Him)

My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours.

> On 17. 2. 2022, at 18:52, muhanad at plciq.com wrote:
> 
> Hi
> 
> I understood that, now, I have another issue. The main domain the is used in the zone ( zone "example.com" ) don't resolve to anything and I want it to be resolved from 8.8.8.8, while the sub-domains still resolve from my DNS as specified in the zone record file.
> 
> Muhanad Abdullah
> 
> 
> -----Original Message-----
> From: tale <d.lawrence at salesforce.com> 
> Sent: Thursday, February 17, 2022 8:47 PM
> To: muhanad <muhanad at plciq.com>
> Cc: bind-users <bind-users at lists.isc.org>
> Subject: Re: Issue Using Wildcards for Subdimain Redirecing
> 
>> On Thu, Feb 17, 2022 at 3:34 AM muhanad <muhanad at plciq.com> wrote:
>> I have a main domain ( aa.example.com) with hunderds of subdomains ( bb.aa.example.com). I made a wildcard record to forward all subdomains (bb.) to a list of addresses in  round-robin fashion. The problem I am fscing is the wildcard is forwarding anything towards the the IP ( example , "cc.bb." which is not a vaild subdomain). How can I limit that so it will only forwards ( bb.aa.example.com) and drops any invalid subdomains ( cc.bb.aa.example.com ).
>> 
>> Note: aa, bb, and cc being any arbitary value.
> 
> With a standard BIND zone, you can't.  Wildcards match multiple labels.  That goes to the earliest days of the DNS, https://www.rfc-editor.org/rfc/rfc1034#section-4.3.3.
> 
> You'd need a specialized handler to do this.
> --
> tale
> 
> -- 
> Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list
> 
> ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information.
> 
> 
> bind-users mailing list
> bind-users at lists.isc.org
> https://lists.isc.org/mailman/listinfo/bind-users


More information about the bind-users mailing list