Inverse ACLs / split domains on the same server

Mark_Andrews at isc.org Mark_Andrews at isc.org
Wed Sep 22 23:44:18 UTC 1999


> > On a related note, is it possible to have 'reverse' ACLs, e.g. 'allow
> >everything BUT 192.168.0.0/16'?
> 
> Yes:
> 
> allow-query { !192.168.0.0/16; };
> 
	You need an "any;" at the end because there is a implict "!any;"
	at the end of every acl.

		allow-query { !192.168.0.0/16; any; };

	Mark
--
Mark Andrews, Internet Software Consortium
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742                 INTERNET: marka at isc.org


More information about the bind-users mailing list