Bind, caching and authoritative domains

[Barry Margolin]

In article <bnu7vg$2aka$1 at sf1.isc.org>,
Nigel Jewell <nigel.jewell at pixexcel.co.uk> wrote:
>I have a bind DNS server setup that is authoritative for a number of
>domains aswell as functioning as a caching name server.

It's highly recommended that you use separate servers for the two
functions.  But if that's not feasible...

>I want to be able to configure the server so that is will serve any
>DNS lookup (for those domains that it is authoritative for and those
>that it isn't) for a specific range of IP addresses, but for every
>other IP address only allow lookups for those IPs for which the host
>is authoritative.  I hope that makes sense.

acl "caching-clients" {
 ...
};

options {
  allow-query { caching-clients; };
  ...
};

zone "auth-domain1.com" {
  allow-query { all; };
  ...
};
zone "auth-domain2.com" {
  allow-query { all; };
  ...
};
and so on.

-- 
Barry Margolin, barry.margolin at level3.com
Level(3), Woburn, MA
*** DON'T SEND TECHNICAL QUESTIONS DIRECTLY TO ME, post them to newsgroups.
Please DON'T copy followups to me -- I'll assume it wasn't posted to the group.