acl's on host

[Barry Margolin]

In article <Pine.LNX.4.10.10004071748320.29761-100000 at vector.band-x.net>,
Simon Taylor  <simon at band-x.net> wrote:
>Hi,
>
>Is it possible, using the acl feature in named.conf, to block lookups on
>specific hosts in a domain instead of blocking the whole domain?
>
>e.g : allow all lookups in crap.com except for private1.crap.com and
>private2.crap.com etc.

You can delegate those as separate zones:

zone "private1.crap.com" {
  type master;
  file "db.private1";
  allow-query { privateclients; };
};
zone "private2.crap.com" {
  type master;
  file "db.private2";
  allow-query { privateclients; };
};

-- 
Barry Margolin, barmar at genuity.net
Genuity, Burlington, MA
*** DON'T SEND TECHNICAL QUESTIONS DIRECTLY TO ME, post them to newsgroups.
Please DON'T copy followups to me -- I'll assume it wasn't posted to the group.