Wrong IP Lookup

Norman Zhang norman.zhang at rd.arkonnetworks.com
Thu Nov 25 19:28:37 UTC 2004


> It's called split horizon dns.
> 
> BIND calls this "views".  Google around a bit and you'll find a ton of
> examples on this.

I googled for views option in BIND, but it seems the feature does not 
quite work my setup. My

db.mydomain.com file has 2 A entries

dc1.mydomain.com A 192.168.11.21
                  A 192.168.22.21

Views seem to restrict certain subnets to view certain db files, but not 
to a level of queries. I would like to able to just resolve 
192.168.11.21 for dc1.mydomain.com for subnet 192.168.11.0/24. And 
likewise for 192.168.22.21. Am I wrong? I've also appended my named.conf 
below. Would someone please give me a few pointers?

>>I have BIND setup to take DDNS from a multihomed box. DDNS are enabled
>>on both NICs. For example,
>>
>>dc1.mydomain.com 192.168.11.21 192.168.22.21
>>
>>However, the wrong IP may sometimes be resolved for the wrong subnet. Is
>>there a way I can restrict hosts in 192.168.22.0/24 subnet to resolve to
>>192.168.22.21 only? And likewise for subnet 192.168.11.0/24?

Regards,
Norman

options {
   directory "/var/named";
   forwarders { 207.34.136.1; 204.174.64.1; 204.174.65.1; };
   pid-file "/var/run/named/named.pid";
};

key "rndc-key" {
   algorithm hmac-md5;
   secret "xxx";
};

controls {
   inet 127.0.0.1 allow { any; } keys { "rndc-key"; };
};

zone "." {
   type hint;
   file "db.cache";
};

zone "0.0.127.in-addr.arpa" {
   type master;
   file "db.127.0.0";
};

zone "hq.arkonnetworks.com" {
   type master;
   file "db.hq.arkonnetworks.com";
   allow-update { 192.168.11.0/24; 192.168.22.0/24; };
};

zone "arkonnetworks.com" {
   type slave;
   file "db.arkonnetworks.com";
   masters { 207.34.136.1; };
};

zone "0-31.136.34.207.in-addr.arpa" {
   type slave;
   file "db.207.34.136.0";
   masters { 207.34.136.1; };
};

zone "22.168.192.in-addr.arpa" {
   type master;
   file "db.192.168.22.0";
   allow-update { 192.168.22.0/24; };
};

zone "11.168.192.in-addr.arpa" {
   type master;
   file "db.192.168.11.0";
   allow-update { 192.168.11.0/24; };
};

zone "_msdcs.hq.arkonnetworks.com" {
   type master;
   file "db._msdcs.hq.arkonnetworks.com";
   allow-update { 192.168.11.0/24; 192.168.22.0/24; };
};

zone "_sites.hq.arkonnetworks.com" {
   type master;
   file "db._sites.hq.arkonnetworks.com";
   allow-update { 192.168.11.0/24; 192.168.22.0/24; };
};

zone "_tcp.hq.arkonnetworks.com" {
   type master;
   file "db._tcp.hq.arkonnetworks.com";
   allow-update { 192.168.11.0/24; 192.168.22.0/24; };
};

zone "_udp.hq.arkonnetworks.com" {
   type master;
   file "db._udp.hq.arkonnetworks.com";
   allow-update { 192.168.11.0/24; 192.168.22.0/24; };
};




More information about the bind-users mailing list