thoughts for a fake domain

Maximo Ramos maximo at violadores.org
Wed Mar 28 14:16:32 UTC 2001


Hi!

Thanks for your kind and quickly reply!

On Wed, Mar 28, 2001 at 05:12:34PM +0200, Roy Arends wrote:
> If you want to be sure that you choose an unused domain, try being your
> own tld. A config example for bar could be:
> 
> zone "bar" {
>         type master;
>         file "db/bar";
> 	allow-query { local_net; }
> };

I can figure out the contents of db/oficina.org but how about the db/bar
file? How would it look like?

Thanks!

> zone "oficina.bar" {
> 	type master;
> 	file "db/oficina.bar";
> 	allow-query { local_net; }
> };
> 
> The things you have to consider:
> 
> 1) make sure you use a non existent tld
> 2) make sure only locals/internals can query this nameservers zone.
> 
> Don't ever choose an existent tld. Not only can your internal machines not
> find the "real-world" domain, but what is much worse is, your machine
> might leak info to the outside world.
> 
> Regards,
> 
> Roy Arends
> Nominum
> 

-- 
----------------------------------------------------
Maximo Ramos


More information about the bind-users mailing list