dns that will return a single ip

Kevin Darcy kcd at daimlerchrysler.com
Thu Jul 12 15:46:07 UTC 2001


cynthia raymond wrote:

> We want to setup a dns server that will direct users to a static web
> page regardless of what url they enter in their browser. The static web
> page will allow them to download a vpn client that they can use to
> access the network.
>
> We're trying to lockout anyone using a wireless NIC from surfing the web
> unless thye're coming in through the vpn client.
>
> any ideas?

  Yeah, my first idea is that DNS is a lousy access-control mechanism.
Anybody can bypass it by using IP addresses in URLs or just running their
own DNS server.

Having said that, you could set up a special, private DNS with a wildcard A
record in its root zone. That would accomplish what you want for those who
_want_ to be spoofed.


- Kevin




More information about the bind-users mailing list