Isolating a local bind server

Dan Long danblong at hotmail.com
Thu Jul 29 01:55:38 UTC 2004


I am running Bind 9.2.3 as my domain name server for my local network.  I am connected to the Internet through a DHCP DSL connection to my network.  I have a domain name that I have hosted by a hosting service on the Internet.  I am trying to create an intranet at home on my local network and want to have my dns server only for my local network.  However, when I start Bind, it communicates with name servers on the Internet.  I want to stop this.  I want no communication between my local Bind and anybody on the Internet.  Is this possible?
I have tried several things myself with limited luck.  I tried:
    named.conf
  acl internal { 172.0.0.1; 192.168.1.0/24; };

  acl outsidedns { 4.2.2.4; 4.2.2.5; 4.2.2.6; };

  acl bogus-net1 { 0.0.0.0/8; 1.0.0.0/8; 2.0.0.0/8; 192.0.2.0/24; 224.0.0.0/3; 10.0.0.0/8; 172.16.0.0/16; };

  acl bogus-net2 { 0.0.0.0/3; 16.0.0.0/3; 64.0.0.0/3; 96.0.0.0/3; 128.0.0.0/3; 160.0.0.0/3; };

  acl bogus-net3 { 208.0.0.0/4; 200.0.0.0/5; 196.0.0.0/6; 194.0.0.0/7; 193.0.0.0/8; };

  include "/etc/rndc.key";

  controls {

  inet * allow { localhost; } keys { rndckey; };

  };

  options {

  directory "/var/named";

  listen-on { 172.0.0.1; 192.168.1.10; };

  allow-query { internal; };

  allow-transfer { none; };

  allow-recursion { internal; };

  notify no;

  blackhole { bogus-net1; bogus-net2; bogus-net3; };

  };

where the blackhole command is supposed to stop communication with anybody in the acl list.

I tried replacing the blackhole with:

  acl bogus-net { !192.168.1.0/24; any; };

This was even less successful.

My hint zone is:

  zone "." in {

      type hint;

      file "named.ca";

  };

So I tried commenting out all entries in the file "named.ca".  This did not work either.

No matter what I try, there is some communication going on with outside DNS servers.

Can anybody tell me if this is possible and if so, how to do it.

Thank you,

Dan Long



More information about the bind-users mailing list