Split DNS with BIND 8 with one server?

Mark_Andrews at isc.org Mark_Andrews at isc.org
Wed Jul 3 23:26:13 UTC 2002


> Okay.  In the interim, prior to upgrading to BIND 9.2.1, if one dispenses wit
> h
> a split-DNS configuration and uses only one DNS server which provides name
> resolution for both external, routable hosts as well as internal, non-routabl
> e
> hosts (i.e. in the 10.x.y.z range), is this a breach of protocol?

	Yes and a very big breach.

>  Will doing
> this cause grief for external denizens of the Internet (who shouldn't be tryi
> ng
> to access hostnames in that domain with internal non-routable IPs anyway)?  

	But it will cause problems for everone use the private addresses
	behind NATs.  You wouldn't like it if people started publishing
	RFC 1918 addresses and that resulted in connections being made
	to your machines instead of their machines.

	Mark
--
Mark Andrews, Internet Software Consortium
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742                 INTERNET: Mark.Andrews at isc.org


More information about the bind-users mailing list