blocking resolving for 10.X.X.X addresses

Jim Reid jim at rfc1035.com
Fri Oct 25 14:05:31 UTC 2002


>>>>> "Steve" == Steve Foster <fosters at uk.psi.com> writes:

    Steve> we have found customers trying to resolv 10.X.X.X addresses
    Steve> ( or any other private addresses), i want to block these so
    Steve> they just get a "refused" or hostname etc.. not found...

Configure your name server to be authoritative for the reverse zones
for these private address ranges. And leave the zones empty, ideally
with a very large TTL for negative caching.


More information about the bind-users mailing list