Changing DNS cache on home LAN?

Barry Margolin barmar at genuity.net
Wed Nov 14 23:08:44 UTC 2001


In article <9suru3$di8 at pub3.rc.vix.com>,
The Good Doctor <ratboy11- at fast.net> wrote:
>
>OK, I'll admit I'm not real good with any of this yet, but I'm pretty
>sure I have the reverse for 0.168.192 as I have an 192.168.0.rev file in
>/var/named that I added after the problem continued. I do need to check
>and see if it's authoritative though.
> Now, I think you are saying I also need another for forward look-ups
> for 0.168.192?

Probably.  Many applications that perform reverse lookup also perform a
forward lookup, to protect against spoofed reverse DNS (what stops your
reverse DNS from claiming that 192.168.0.10 is www.microsoft.com?).

>
>In article <9su5g8$77e at pub3.rc.vix.com>, "Barry Margolin"
><barmar at genuity.net> wrote:
>
>> You don't want a caching-only server.  You need to make your server
>> authoritative for the 168.192.in-addr.arpa reverse domain and the
>> forward domain that you're putting in these PTR records.  That way it
>> won't need to go out to the Internet to perform lookups of your local
>> addresses and names.
>>
>


-- 
Barry Margolin, barmar at genuity.net
Genuity, Woburn, MA
*** DON'T SEND TECHNICAL QUESTIONS DIRECTLY TO ME, post them to newsgroups.
Please DON'T copy followups to me -- I'll assume it wasn't posted to the group.


More information about the bind-users mailing list