Wildcard on whole DNS
Mark Andrews
Mark_Andrews at isc.org
Mon Oct 9 03:26:17 UTC 2006
> > Hey All,
> >
> > This might sound like a silly question. but here goes.
> >
> > I want to setup a DNS server which when queried for ANY domain, will
> > respond with a specific IP address.
> >
> > This is so that customers who are overdue get a website explaining
> > why they are not able to reach the internet. Their IP's are changed (and
> > DNS) and they can't go anywhere except in our local network.
> >
> > .Skeeve
>
> Why don't you just intercept all their HTTP traffic and
> block everything else. Mark all the returned pages as
> not cachable.
>
> This is less likely to break automated traffic.
>
> Otherwise:
>
> . 0 SOA . . 0 0 0 0 0
> . 0 NS .
> *. 0 A 1.2.3.4
> *. 0 AAAA 2002::1
>
> and *only* have a http server on the addresses. You won't
> want to be accused of intecepting email, etc.
You will also, almost certainly, want to enable minimal responses.
You could also add address records for the root.
options {
minimal-responses yes;
empty-zones-enable no; // 9.4 onwards
};
zone "." {
type master;
file "overdue";
};
overdue:
. 0 SOA . . 0 0 0 0 0
. 0 NS .
. 0 A 1.2.3.4
. 0 AAAA 2002::1
*. 0 A 1.2.3.4
*. 0 AAAA 2002::1
> > _______________________________________________________
> > Skeeve Stevens, RHCE Email: skeeve at skeeve.org
> > Website: www.skeeve.org - Telephone: (0414) 753 383
> > skype://skeeve
> > Address: P.O Box 1035, Epping, NSW, 1710, Australia
> >
> > eIntellego - skeeve at eintellego.net - www.eintellego.net
> > _______________________________________________________
> > I'm a groove licked love child king of the verse
> > Si vis pacem, para bellum
> >
> >
> >
> >
> >
> >
> --
> ISC Training! October 16-20, 2006, in the San Francisco Bay Area,
> covering topics from DNS to DHCP. Email training at isc.org.
> --
> Mark Andrews, ISC
> 1 Seymour St., Dundas Valley, NSW 2117, Australia
> PHONE: +61 2 9871 4742 INTERNET: Mark_Andrews at isc.org
>
>
--
ISC Training! October 16-20, 2006, in the San Francisco Bay Area,
covering topics from DNS to DHCP. Email training at isc.org.
--
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742 INTERNET: Mark_Andrews at isc.org
More information about the bind-users
mailing list