Answering only for "own" zones

[Brad Knowles]

At 3:45 AM +0200 6/20/01, Torsten Mueller wrote:

>  Is it possible to setup bind to only answer for the "own"
>  zones i created ?

	Yup.  Best way to do this is to set up separate 
authoritative-only and recursive/caching-only servers.  The 
authoritative-only servers are the only ones referenced externally in 
your registrations, and the recursive/caching-only servers are not 
authoritative for anything, and refuse queries from any external 
sources.

>  Is it also possible to setup bind in a way, that for the
>  local net, bind acts like a
>  "standard" dns server (with the right answers) and for the
>  rest of the internet as described
>  above ?

	You could do this with the BIND 9 mechanism of "views", but this 
makes the nameserver configuration more complex.  It's a lot easier 
to simply set up completely separate nameserver instances, and keep 
the jobs split onto totaly independent machines.

>  My intention is to use such a setup with bind 9 latest rc.

	Using 9.1.2-REL or the latest release candidate for 9.1.3 would 
be recommended.

-- 
Brad Knowles, <brad.knowles at skynet.be>

/*        efdtt.c  Author:  Charles M. Hannum <root at ihack.net>          */
/*       Represented as 1045 digit prime number by Phil Carmody         */
/*     Prime as DNS cname chain by Roy Arends and Walter Belgers        */
/*                                                                      */
/*     Usage is:  cat title-key scrambled.vob | efdtt >clear.vob        */
/*   where title-key = "153 2 8 105 225" or other similar 5-byte key    */

dig decss.friet.org|perl -ne'if(/^x/){s/[x.]//g;print pack(H124,$_)}'