BIND8: Using NATed address as NS NOK?

Kevin Darcy kcd at daimlerchrysler.com
Sat Aug 26 01:25:32 UTC 2000


ffaure at bigSPAMGAMOUTAKUSANfoot.com wrote:

> On 25 Aug 2000 15:34:21 -0700, Kevin Darcy <kcd at daimlerchrysler.com>
> wrote:
> >Split DNS should be able to solve this problem. The nameservers would
> >have external addresses in the external DNS, and internal addresses in
> >the internal DNS. Search the archives for split DNS, or see the "DNS and
> >Firewalls" section of the _DNS_and_BIND_ O'Reilly book.
>
> Thx Kevin, that's what I was thinking of doing. In any case, it
> requires two DNS servers:
>
> - If both servers must reside on the customer's premises, one server
> in the private network and one in the DMZ
>
> - If the public DNS can be located at the ISP, then only the private
> DNS resides in the customer's LAN.
>
> I guess we'll go for the former since the servers are already located
> there.

Actually, it only requires 2 server *instances*. Maybe you could run both
instances on the same multihomed machine, as we do, with different instance
listening to different interfaces.

> If only BIND could return a different information depending on the
> source address of the query...

See BIND 9's "views".


- Kevin





More information about the bind-users mailing list