mixed private/external IPs

[Francis A. Vidal]

-----BEGIN PGP SIGNED MESSAGE-----

hi all,

i tried to make bind8 resolve the proper IP addresses based on the source
using the options `sortlist' and `rrset-order'. it works fine with the
internal workstations but has problems with external hosts' resolving.

the external name resolving doesn't work quite well -- it still gives the
internal IP addresses of some servers. for example, proxy.usls.edu is
defined with three IP addresses: 2 internal IPs and one external.

proxy           IN      A       1.2.3.4     # external
                IN      A       192.168.1.3 # internal
                IN      A       192.168.2.2 # internal


the /etc/named.conf entries are as follows:

acl lib-network {
    192.168.1/24;
};

acl ofc-network {
    192.168.2/24;
};

acl usls-network {
    1.2.3.4/28;
};

options {

    sortlist {
        { lib-network;
            { lib-network; }; };
        { ofc-network;
            { ofc-network; }; };
        { usls-network; };
    };

    rrset-order {
        class IN type A name "usls.edu" order fixed;
        order cyclic;
    };
};

what could be another solution to this setup? thanks!

- -- 
francis vidal	university of st. la salle, bacolod city, philippines
. . . . . . .	PGP key available via e-mail / subject: get PGP key
u s l s N E T	tel nos. (+63.34).433.3526 / fax (+63.34).434.0415

-----BEGIN PGP SIGNATURE-----
Version: 2.6.3ia
Charset: noconv
Comment: Requires PGP version 2.6 or later.

iQCVAwUBOC937BHlkpsNrjEFAQGEWwP+Jy1zdor1P4TEd3n0Qr+ZSEfriJx6pWiI
yvYvFbwJN5llumPiHSVZf9OyecRTjSj19WYv7LFZwvH889bSSN5OQc55Kevo2WQI
r2xpT3KLfbG1F+rfsu5O3jODjABqR2CZX18Oy4o9WzdWAt4pERxYr1XRb/oKSW0C
g+vE5fQ/tqM=
=/JKZ
-----END PGP SIGNATURE-----