Tell named 8.2 to not listen on a device?

[Jim Reid]

>>>>> "Satch" == Satch  <satch at concentric.hormel42.net> writes:

    Satch> I'd like to have named stop listening for requests on the
    Satch> untrusted port of my network.  

The BIND name server doesn't listen for requests on any untrusted port
unless you tell it to do that.

    Satch> My goal:  have named listen at 10.1.1.1 and 127.0.0.1 only.
    Satch> Right now it's listening on four sockets.

That's correct. It will have TCP and UDP listeners on port 53 of both
interfaces. If you don't want the name server to listen on a specific
interface, use the listen-on clause in the options{} statement.