About root zones

Barry Margolin barmar at alum.mit.edu
Tue Jan 3 17:52:27 UTC 2012


In article <mailman.668.1325603242.68562.bind-users at lists.isc.org>,
 Lyle Giese <lyle at lcrcomputer.net> wrote:

> For instance, I want to attach to the server using VNC or SSH for 
> maintanence.  By default, they want to do do a reverse lookup of your ip 
> address before allowing access.  Now you wait for that query to time out 
> before you can do your work.  That's just a PITA.

Of course you wouldn't block DNS queries at the network level, that 
messes up everything else running on the machine.

He apparently just wants to ensure that nothing gets into the BIND cache 
of an authoritative-only server -- it should truly be 
authoritative-only.  If other servers on the machine need to do lookups, 
it will use a caching server for this.

-- 
Barry Margolin
Arlington, MA



More information about the bind-users mailing list