Disable response to specific query in BIND

Sonorix jckim at kidc.net
Tue Jun 22 01:32:44 UTC 2004


Is allow-query directive suitable in zone definition?

Jun 22 10:29:54 cns01 named[14423]: 'allow-query' option for
non-{master,slave,stub} zone 'aaa.com'
Jun 22 10:29:54 cns01 named[14423]: zone 'aaa.com' did not validate,
skipping
Jun 22 10:29:54 cns01 named[14423]: AF_INET6: address family not
supported
Jun 22 10:29:54 cns01 named[14423]: Forwarding source address is
[0.0.0.0].32779
Jun 22 10:29:54 cns01 named[14423]: Ready to answer queries.

Barry Margolin <barmar at alum.mit.edu> wrote in message news:<cb77mk$1vrj$1 at sf1.isc.org>...
> In article <cb74kh$1ofo$1 at sf1.isc.org>, jckim at kidc.net (Sonorix) wrote:
> 
> > Hi..
> > 
> > I'm trying to find a way to restrict response to specific domain query.
> > 
> > for example,
> > For the query about some hosts in "aaa.com",
> > I don't want to make recursive lookup for that domain, only
> > want to disconnect that requests or something like that.
> > 
> > Which is the best way?
> > 
> > For workaround, I made a zone file that have only loopback addresses for
> > all hosts and load it for some domains to get above goals.
> 
> zone "aaa.com" {
>   type forward;
>   forwarders { <any address>; };
>   allow-query { none; };
> };


More information about the bind-users mailing list