Static IP resolving in BIND 8.x

Michael Kjorling michael at kjorling.com
Wed Feb 6 13:32:37 UTC 2002


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

No. I asked this a while back as well, with regards to RFC 2317-style
delegation, and was told that there is no way to do such a thing. And
frankly that makes sense. If the server's authorative data says that
there is no such data or no such name in the DNS, then why should it
go off and start asking others? The consequences of that would simply
be insane. Think about the load it would place on the root servers.

That said, there are a few ways you can get the same effect. For
example, you can set each name you want to be authorative for up as an
individual zone. Or, better yet, use a different zone name in the
first place. Just remember to make your other DNS servers (if any)
aware of this so they don't follow the standard delegation chain from
the root servers downwards and end up with a NXDOMAIN response.


Michael Kjörling


On Feb 6 2002 12:46 +0100, Oliver Neumann wrote:

> So now foo.foobar.com will be resolved to 100.100.100.100 ... that's clear.
> But now imagine there is also an www.foobar.com and this domain should be
> resolved via ROOT-DNS-Server. Can I set up the system that way, that every
> *.foobar.com subdomain which cannot be resolved within my zone-file, will be
> tried via root-servers?
>
> Oliver Neumann

- -- 
Michael Kjörling  --  Programmer/Network administrator  ^..^
Internet: michael at kjorling.com -- FidoNet: 2:204/254.4   \/
PGP: 95f1 074d 336d f8f0 f297 6a5b 2aa3 7bfd 8a70 e33e

``And indeed people sometimes speak of man's "bestial" cruelty, but
this is very unfair and insulting to the beasts: a beast can never be
so cruel as a man, so ingeniously, so artistically cruel.''
(Ivan Karamazov, in Dostoyevsky's 'The Brothers Karamazov')

*** Thinking about sending me spam? Take a close look at
*** http://michael.kjorling.com/spam/ before doing so.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (GNU/Linux)
Comment: Public key is at http://michael.kjorling.com/contact/pgp.html

iD8DBQE8YTB4KqN7/Ypw4z4RAgkMAKD5PTHl+Iq4JNbygasFlHk6pw040ACgxa2U
B6NqjxYPxrc32PfIXPAQGJo=
=5LAN
-----END PGP SIGNATURE-----




More information about the bind-users mailing list